last executing test programs: 2.820257936s ago: executing program 2 (id=1906): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000180)="06ff03076844268cbe9e14f043054ee0ff", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d40)={&(0x7f0000002c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x30, 0x61, 0x30, 0x0, 0x5f, 0x5f, 0x30]}}, 0x0, 0x39, 0x0, 0x1, 0x6}, 0x28) r2 = socket$kcm(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000640)=@o_path={&(0x7f0000000380)='./file0\x00', r1, 0x4000, r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, &(0x7f0000000300)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x72, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xfffffe4d, 0x1, {0x0, '\x00', 0x298c, 0x2, 0x0, 0x401}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3c000001}, 0x0) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)="92", 0x1}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x120) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x4, &(0x7f0000000000), 0x4) sendmsg$inet(r2, 0x0, 0xc011) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xe, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xffffffffffffff91, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa0, 0x2, 0x0, 0xfff8, 0xd}, {0x0, 0x3, 0x7, 0x8, 0xfffb, 0x9}, 0x3, 0x41, 0xb0b}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004841}, 0x8000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, 0x0, 0x25, 0x10, @val=@iter={&(0x7f0000000000), 0x10}}, 0x20) 2.707566708s ago: executing program 1 (id=1908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xd) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000740)="122b543708ffd9d08e82d326ae091977e4723610468d37a9da1ab146d05f74ef", 0x20}, {&(0x7f0000000840)="d0ded428afc719", 0x7}], 0x2}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f020048f0d8e54d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a0101000000000000000007000000090002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 2.44698999s ago: executing program 1 (id=1912): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000180)="06ff03076844268cbe9e14f043054ee0ff", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d40)={&(0x7f0000002c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x30, 0x61, 0x30, 0x0, 0x5f, 0x5f, 0x30]}}, 0x0, 0x39, 0x0, 0x1, 0x6}, 0x28) r2 = socket$kcm(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000640)=@o_path={&(0x7f0000000380)='./file0\x00', r1, 0x4000, r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, &(0x7f0000000300)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x72, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xfffffe4d, 0x1, {0x0, '\x00', 0x298c, 0x2, 0x0, 0x401}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3c000001}, 0x0) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)="92", 0x1}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x120) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x4, &(0x7f0000000000), 0x4) sendmsg$inet(r2, 0x0, 0xc011) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xe, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xffffffffffffff91, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa0, 0x2, 0x0, 0xfff8, 0xd}, {0x0, 0x3, 0x7, 0x8, 0xfffb, 0x9}, 0x3, 0x41, 0xb0b}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004841}, 0x8000) 2.244745678s ago: executing program 3 (id=1915): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r1, 0x21) close(r0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018f6ffffff0000003b0000cc1c000000020000000e9036037200000f020000004977003ad9ed06a0e3589a9cc5737261eee40000100000000f0200000017600000cbc5c0a0f4"], 0x0, 0x36, 0x0, 0x1}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffffffff}]}) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107447, &(0x7f0000000180)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0x9) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010400050001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef80"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 2.076918441s ago: executing program 0 (id=1918): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, 0x0, 0x20000010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r3 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)}, 0x0) 2.045080381s ago: executing program 3 (id=1920): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000180)="06ff03076844268cbe9e14f043054ee0ff", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d40)={&(0x7f0000002c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x30, 0x61, 0x30, 0x0, 0x5f, 0x5f, 0x30]}}, 0x0, 0x39, 0x0, 0x1, 0x6}, 0x28) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000001040)={0x1c, 0x38, 0xc01, 0x70bd2a, 0x25dfdbfc, {0x9}, [@nested={0x8, 0x4, 0x0, 0x1, [@generic="0485c9b2"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x80d0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000640)=@o_path={&(0x7f0000000380)='./file0\x00', r1, 0x4000, r0}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xfffffe4d, 0x1, {0x0, '\x00', 0x298c, 0x2, 0x0, 0x401}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3c000001}, 0x0) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)="92", 0x1}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x120) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x6, 0x4, &(0x7f0000000000), 0x4) sendmsg$inet(r2, 0x0, 0xc011) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, 0x0, 0x25, 0x10, @val=@iter={&(0x7f0000000000), 0x10}}, 0x20) 1.944404737s ago: executing program 0 (id=1921): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0x7}, 0xa38, 0x0, 0x0, 0x0, 0x5, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) 1.891180568s ago: executing program 2 (id=1922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xd) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000740)="122b543708ffd9d08e82d326ae091977e4723610468d37a9da1ab146d05f74ef", 0x20}, {&(0x7f0000000840)="d0ded428afc719", 0x7}], 0x2}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f020048f0d8e54d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a0101000000000000000007000000090002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 1.529653451s ago: executing program 2 (id=1923): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x7, 0x80, 0x4, 0x6, 0xd, 0x9, 0x0, 0x8, 0x68a00, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x3}, 0x113000, 0x3, 0x9, 0x0, 0xe, 0x3, 0x2, 0x0, 0x16000, 0x0, 0x8}, r0, 0x6, r1, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x140f, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0xc0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) close(r4) 1.487250704s ago: executing program 1 (id=1924): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, 0x0, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0x7}, 0xa38, 0x0, 0x0, 0x0, 0x5, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) 1.457280956s ago: executing program 0 (id=1925): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r1, 0x21) close(r0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018f6ffffff0000003b0000cc1c000000020000000e9036037200000f020000004977003ad9ed06a0e3589a9cc5737261eee40000100000000f0200000017600000cbc5c0a0f4"], 0x0, 0x36, 0x0, 0x1}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffffffff}]}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107447, &(0x7f0000000180)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010400050001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef80"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 1.358412088s ago: executing program 0 (id=1927): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x2, 0x2, 0x9, 0x3, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x120, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket(0x840000000002, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003c00)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, 0x0, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1650}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.241614018s ago: executing program 2 (id=1928): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r1, 0x21) close(r0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018f6ffffff0000003b0000cc1c000000020000000e9036037200000f020000004977003ad9ed06a0e3589a9cc5737261eee40000100000000f0200000017600000cbc5c0a0f4"], 0x0, 0x36, 0x0, 0x1}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffffffff}]}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107447, &(0x7f0000000180)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010400050001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef80"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 1.132058109s ago: executing program 3 (id=1929): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x2, 0x2, 0x9, 0x3, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x120, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket(0x840000000002, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003c00)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, 0x0, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1650}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.109481703s ago: executing program 1 (id=1930): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r1, 0x21) close(r0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018f6ffffff0000003b0000cc1c000000020000000e9036037200000f020000004977003ad9ed06a0e3589a9cc5737261eee40000100000000f0200000017600000cbc5c0a0f4"], 0x0, 0x36, 0x0, 0x1}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffffffff}]}) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107447, &(0x7f0000000180)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0x9) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010400050001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef80"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 1.007935754s ago: executing program 2 (id=1932): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000180)="06ff03076844268cbe9e14f043054ee0ff", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d40)={&(0x7f0000002c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x30, 0x61, 0x30, 0x0, 0x5f, 0x5f, 0x30]}}, 0x0, 0x39, 0x0, 0x1, 0x6}, 0x28) r2 = socket$kcm(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000640)=@o_path={&(0x7f0000000380)='./file0\x00', r1, 0x4000, r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, &(0x7f0000000300)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x72, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xfffffe4d, 0x1, {0x0, '\x00', 0x298c, 0x2, 0x0, 0x401}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3c000001}, 0x0) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)="92", 0x1}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x120) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x4, &(0x7f0000000000), 0x4) sendmsg$inet(r2, 0x0, 0xc011) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xe, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xffffffffffffff91, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa0, 0x2, 0x0, 0xfff8, 0xd}, {0x0, 0x3, 0x7, 0x8, 0xfffb, 0x9}, 0x3, 0x41, 0xb0b}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004841}, 0x8000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, 0x0, 0x25, 0x10, @val=@iter={&(0x7f0000000000), 0x10}}, 0x20) 1.002145787s ago: executing program 0 (id=1933): socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x240000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000440)={'bond_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000003a00000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) 862.113944ms ago: executing program 1 (id=1935): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0x7}, 0xa38, 0x0, 0x0, 0x0, 0x5, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) 843.802256ms ago: executing program 0 (id=1936): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000180)="06ff03076844268cbe9e14f043054ee0ff", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d40)={&(0x7f0000002c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x30, 0x61, 0x30, 0x0, 0x5f, 0x5f, 0x30]}}, 0x0, 0x39, 0x0, 0x1, 0x6}, 0x28) r2 = socket$kcm(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000640)=@o_path={&(0x7f0000000380)='./file0\x00', r1, 0x4000, r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, &(0x7f0000000300)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x72, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xfffffe4d, 0x1, {0x0, '\x00', 0x298c, 0x2, 0x0, 0x401}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3c000001}, 0x0) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)="92", 0x1}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x120) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x4, &(0x7f0000000000), 0x4) sendmsg$inet(r2, 0x0, 0xc011) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xe, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xffffffffffffff91, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa0, 0x2, 0x0, 0xfff8, 0xd}, {0x0, 0x3, 0x7, 0x8, 0xfffb, 0x9}, 0x3, 0x41, 0xb0b}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004841}, 0x8000) 654.553095ms ago: executing program 4 (id=1938): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x7, 0x80, 0x4, 0x6, 0xd, 0x9, 0x0, 0x8, 0x68a00, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x3}, 0x113000, 0x3, 0x9, 0x0, 0xe, 0x3, 0x2, 0x0, 0x16000, 0x0, 0x8}, r0, 0x6, r1, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x140f, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0xc0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)}, 0x0) close(r4) 629.047978ms ago: executing program 1 (id=1939): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000180)="06ff03076844268cbe9e14f043054ee0ff", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d40)={&(0x7f0000002c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x30, 0x61, 0x30, 0x0, 0x5f, 0x5f, 0x30]}}, 0x0, 0x39, 0x0, 0x1, 0x6}, 0x28) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000001040)={0x1c, 0x38, 0xc01, 0x70bd2a, 0x25dfdbfc, {0x9}, [@nested={0x8, 0x4, 0x0, 0x1, [@generic="0485c9b2"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x80d0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, &(0x7f0000000300)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x72, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xfffffe4d, 0x1, {0x0, '\x00', 0x298c, 0x2, 0x0, 0x401}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3c000001}, 0x0) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)="92", 0x1}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x120) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x4, &(0x7f0000000000), 0x4) sendmsg$inet(r1, 0x0, 0xc011) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, 0x0, 0x25, 0x10, @val=@iter={&(0x7f0000000000), 0x10}}, 0x20) 517.691693ms ago: executing program 4 (id=1940): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, 0x0, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0x7}, 0xa38, 0x0, 0x0, 0x0, 0x5, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) 398.061041ms ago: executing program 4 (id=1941): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r1, 0x21) close(r0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018f6ffffff0000003b0000cc1c000000020000000e9036037200000f020000004977003ad9ed06a0e3589a9cc5737261eee40000100000000f0200000017600000cbc5c0a0f4"], 0x0, 0x36, 0x0, 0x1}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107447, &(0x7f0000000180)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0x9) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010400050001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef80"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 296.06094ms ago: executing program 4 (id=1942): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r1, 0x21) close(r0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018f6ffffff0000003b0000cc1c000000020000000e9036037200000f020000004977003ad9ed06a0e3589a9cc5737261eee40000100000000f0200000017600000cbc5c0a0f4"], 0x0, 0x36, 0x0, 0x1}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffffffff}]}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107447, &(0x7f0000000180)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010400050001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef80"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 245.771186ms ago: executing program 4 (id=1943): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x2, 0x2, 0x9, 0x3, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x120, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket(0x840000000002, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003c00)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1650}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 204.315629ms ago: executing program 3 (id=1944): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, 0x0, 0x20000010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r3 = openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)}, 0x0) 162.069122ms ago: executing program 3 (id=1945): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r1, 0x21) close(r0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018f6ffffff0000003b0000cc1c000000020000000e9036037200000f020000004977003ad9ed06a0e3589a9cc5737261eee40000100000000f0200000017600000cbc5c0a0f4"], 0x0, 0x36, 0x0, 0x1}, 0x28) close(0xffffffffffffffff) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffffffff}]}) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010400050001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef80"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 107.083547ms ago: executing program 4 (id=1946): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="ad64a37eaf160814930ab7dbf350596fa9a49c51"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc80, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x5}, 0x0, 0x2, 0xfffffffe, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x40405) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @random="c24f7b36aec9"}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000840) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002400)=""/4073, 0xfe9}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 80.597914ms ago: executing program 2 (id=1947): r0 = socket$kcm(0x2, 0x2, 0x73) recvmsg$kcm(r0, &(0x7f0000001f00)={0x0, 0x34, 0x0}, 0x40000040) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x80) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x4a046) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x2, 0x80, 0x5e, 0x8, 0xc, 0x8, 0x0, 0x8, 0x50018, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x1008, 0x6, 0x10, 0x7, 0x101, 0x401, 0xacf, 0x0, 0x9, 0x0, 0x8}) 0s ago: executing program 3 (id=1948): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, 0x0, 0x0) sendmsg$unix(r0, 0x0, 0x4800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r2, 0x22, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0xfffffe51) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) kernel console output (not intermixed with test programs): : hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.223073][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.229774][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.243919][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.247887][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.259543][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.260725][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.266911][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.273688][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.281357][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.298187][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.310924][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.871168][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 67.926108][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 67.946242][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 67.997326][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 68.152452][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.159720][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.166891][ T5834] bridge_slave_0: entered allmulticast mode [ 68.173937][ T5834] bridge_slave_0: entered promiscuous mode [ 68.202339][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.209535][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.216790][ T5834] bridge_slave_1: entered allmulticast mode [ 68.224176][ T5834] bridge_slave_1: entered promiscuous mode [ 68.243725][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 68.317989][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.325162][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.332842][ T5826] bridge_slave_0: entered allmulticast mode [ 68.339782][ T5826] bridge_slave_0: entered promiscuous mode [ 68.354380][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.361556][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.368814][ T5827] bridge_slave_0: entered allmulticast mode [ 68.375689][ T5827] bridge_slave_0: entered promiscuous mode [ 68.385302][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.402840][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.410347][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.417998][ T5826] bridge_slave_1: entered allmulticast mode [ 68.424834][ T5826] bridge_slave_1: entered promiscuous mode [ 68.439451][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.446570][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.453746][ T5827] bridge_slave_1: entered allmulticast mode [ 68.460780][ T5827] bridge_slave_1: entered promiscuous mode [ 68.469657][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.490554][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.497821][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.504922][ T5828] bridge_slave_0: entered allmulticast mode [ 68.511918][ T5828] bridge_slave_0: entered promiscuous mode [ 68.550286][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.557731][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.564953][ T5828] bridge_slave_1: entered allmulticast mode [ 68.571933][ T5828] bridge_slave_1: entered promiscuous mode [ 68.600593][ T5834] team0: Port device team_slave_0 added [ 68.616177][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.632562][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.643648][ T5834] team0: Port device team_slave_1 added [ 68.671782][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.692371][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.713996][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.751416][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.758398][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.784635][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.798091][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.814781][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.822254][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.829646][ T5825] bridge_slave_0: entered allmulticast mode [ 68.836500][ T5825] bridge_slave_0: entered promiscuous mode [ 68.854890][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.861849][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.887905][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.909277][ T5826] team0: Port device team_slave_0 added [ 68.915480][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.922733][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.929943][ T5825] bridge_slave_1: entered allmulticast mode [ 68.936808][ T5825] bridge_slave_1: entered promiscuous mode [ 68.945303][ T5827] team0: Port device team_slave_0 added [ 68.968056][ T5826] team0: Port device team_slave_1 added [ 68.983385][ T5827] team0: Port device team_slave_1 added [ 69.004074][ T5828] team0: Port device team_slave_0 added [ 69.027990][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.046969][ T5828] team0: Port device team_slave_1 added [ 69.082237][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.091848][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.099462][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.125681][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.145232][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.152452][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.178497][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.208282][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.215281][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.241949][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.253521][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.260761][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.287025][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.298512][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.305462][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.331782][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.342703][ T5837] Bluetooth: hci2: command tx timeout [ 69.342819][ T5829] Bluetooth: hci0: command tx timeout [ 69.348651][ T5842] Bluetooth: hci1: command tx timeout [ 69.360121][ T5832] Bluetooth: hci3: command tx timeout [ 69.369229][ T5834] hsr_slave_0: entered promiscuous mode [ 69.375447][ T5834] hsr_slave_1: entered promiscuous mode [ 69.396705][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.403892][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.429870][ T5842] Bluetooth: hci4: command tx timeout [ 69.430223][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.455479][ T5825] team0: Port device team_slave_0 added [ 69.463688][ T5825] team0: Port device team_slave_1 added [ 69.549516][ T5828] hsr_slave_0: entered promiscuous mode [ 69.555631][ T5828] hsr_slave_1: entered promiscuous mode [ 69.561809][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 69.567890][ T5828] Cannot create hsr debugfs directory [ 69.574837][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.581942][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.607863][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.629289][ T5826] hsr_slave_0: entered promiscuous mode [ 69.635390][ T5826] hsr_slave_1: entered promiscuous mode [ 69.641807][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 69.647759][ T5826] Cannot create hsr debugfs directory [ 69.667681][ T5827] hsr_slave_0: entered promiscuous mode [ 69.673772][ T5827] hsr_slave_1: entered promiscuous mode [ 69.680023][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 69.685740][ T5827] Cannot create hsr debugfs directory [ 69.691944][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.699143][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.725131][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.916050][ T5825] hsr_slave_0: entered promiscuous mode [ 69.922584][ T5825] hsr_slave_1: entered promiscuous mode [ 69.928940][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 69.934676][ T5825] Cannot create hsr debugfs directory [ 70.271670][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.282960][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.290841][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.300989][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.317453][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.326887][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.342055][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.351289][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.422178][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.433845][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.442302][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.452352][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.461761][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.472558][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.490620][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.500250][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.566078][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.575339][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.583146][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.592107][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.599947][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.608707][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.616281][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.626487][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.691051][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.726306][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.735726][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.744788][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.754411][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.762442][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.771450][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.792270][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.801245][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.849190][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.890104][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.897536][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.919476][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.929239][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.937011][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.946805][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.963793][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.972464][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.981658][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.988752][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.005413][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.014270][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.070117][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.146601][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.162539][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.192864][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.199977][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.214054][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.221158][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.248779][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.262748][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.271318][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.299828][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.306972][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.323865][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.346866][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.366579][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.373758][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.394719][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.418601][ T5832] Bluetooth: hci1: command tx timeout [ 71.418620][ T5829] Bluetooth: hci3: command tx timeout [ 71.424021][ T5837] Bluetooth: hci2: command tx timeout [ 71.424279][ T5842] Bluetooth: hci0: command tx timeout [ 71.445828][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.452927][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.473612][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.480827][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.497473][ T5842] Bluetooth: hci4: command tx timeout [ 71.517043][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.533707][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.549095][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.556174][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.585428][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.592583][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.762514][ T5834] veth0_vlan: entered promiscuous mode [ 71.810223][ T5834] veth1_vlan: entered promiscuous mode [ 71.940753][ T5834] veth0_macvtap: entered promiscuous mode [ 71.992094][ T5834] veth1_macvtap: entered promiscuous mode [ 72.046032][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.095761][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.122569][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.152764][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.165098][ T3484] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.188864][ T3484] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.198603][ T3484] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.223149][ T3484] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.264850][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.285871][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.416520][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.429176][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.450487][ T5828] veth0_vlan: entered promiscuous mode [ 72.491533][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.499953][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.504004][ T5825] veth0_vlan: entered promiscuous mode [ 72.533777][ T5828] veth1_vlan: entered promiscuous mode [ 72.546434][ T5827] veth0_vlan: entered promiscuous mode [ 72.555618][ T5825] veth1_vlan: entered promiscuous mode [ 72.602047][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.609738][ T5827] veth1_vlan: entered promiscuous mode [ 72.710565][ T5826] veth0_vlan: entered promiscuous mode [ 72.726368][ T5828] veth0_macvtap: entered promiscuous mode [ 72.740107][ T5825] veth0_macvtap: entered promiscuous mode [ 72.760872][ T5825] veth1_macvtap: entered promiscuous mode [ 72.773908][ T5828] veth1_macvtap: entered promiscuous mode [ 72.797264][ T5827] veth0_macvtap: entered promiscuous mode [ 72.809568][ T5826] veth1_vlan: entered promiscuous mode [ 72.853412][ T5827] veth1_macvtap: entered promiscuous mode [ 72.866748][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.888174][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.912110][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.926943][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.941681][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.969926][ T3484] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.979396][ T3484] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.005887][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.035837][ T3484] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.045405][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.060842][ T150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.073389][ T5826] veth0_macvtap: entered promiscuous mode [ 73.095033][ T150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.113895][ T150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.162755][ T5826] veth1_macvtap: entered promiscuous mode [ 73.177158][ T150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.187774][ T150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.207938][ T150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.249060][ T150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.260900][ T150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.298016][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.309185][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.331536][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.372425][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.417086][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.417116][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.430613][ T5945] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.8'. [ 73.473210][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.484230][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.499808][ T5832] Bluetooth: hci1: command tx timeout [ 73.500001][ T5829] Bluetooth: hci2: command tx timeout [ 73.505273][ T5842] Bluetooth: hci0: command tx timeout [ 73.511110][ T5842] Bluetooth: hci3: command tx timeout [ 73.525400][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.534551][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.561831][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.572007][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.580275][ T5829] Bluetooth: hci4: command tx timeout [ 73.609713][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.619022][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.634612][ T5947] netlink: 'syz.3.9': attribute type 10 has an invalid length. [ 73.663099][ T5947] team0: Port device syz_tun added [ 73.694307][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.720312][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.861172][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.901044][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.055946][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.081956][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.094952][ T5949] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 74.216002][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.235770][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.254679][ T5962] openvswitch: netlink: Flow actions attr not present in new flow. [ 74.310168][ T5962] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3'. [ 74.607547][ T5969] ======================================================= [ 74.607547][ T5969] WARNING: The mand mount option has been deprecated and [ 74.607547][ T5969] and is ignored by this kernel. Remove the mand [ 74.607547][ T5969] option from the mount to silence this warning. [ 74.607547][ T5969] ======================================================= [ 74.752018][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 74.762011][ T5975] warning: `syz.1.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.797704][ T5966] Zero length message leads to an empty skb [ 75.157617][ T5988] netlink: 'syz.3.17': attribute type 10 has an invalid length. [ 75.271844][ T5988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.372195][ T5988] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 75.426739][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.514203][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.601797][ T5842] Bluetooth: hci3: command tx timeout [ 75.607379][ T5832] Bluetooth: hci0: command tx timeout [ 75.612800][ T5837] Bluetooth: hci1: command tx timeout [ 75.618716][ T5829] Bluetooth: hci2: command tx timeout [ 75.657932][ T5829] Bluetooth: hci4: command tx timeout [ 75.716215][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.768226][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.838374][ T5991] bond0: (slave batadv0): Releasing backup interface [ 76.000815][ T6002] netlink: 'syz.1.21': attribute type 2 has an invalid length. [ 76.029569][ T6002] netlink: 14 bytes leftover after parsing attributes in process `syz.1.21'. [ 77.223915][ T6034] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 78.098264][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 79.191764][ T6061] netlink: 'syz.0.38': attribute type 29 has an invalid length. [ 79.215332][ T6070] netlink: 'syz.0.38': attribute type 29 has an invalid length. [ 80.129564][ T6095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.286274][ T6099] netlink: 'syz.1.49': attribute type 16 has an invalid length. [ 80.321303][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'. [ 80.863575][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.878533][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.191471][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.205350][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.405650][ T6121] netlink: 3 bytes leftover after parsing attributes in process `syz.4.56'. [ 81.406153][ T1326] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.458997][ T1326] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.474538][ T1326] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.486320][ T1326] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.022916][ T6140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.851637][ T6153] syz.2.64 uses obsolete (PF_INET,SOCK_PACKET) [ 83.093564][ T6157] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 83.418851][ T5829] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5 [ 84.091016][ T6164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.68'. [ 84.809452][ T6178] netlink: 188 bytes leftover after parsing attributes in process `syz.3.73'. [ 84.945286][ T6182] netlink: 'syz.0.74': attribute type 10 has an invalid length. [ 85.014047][ T6182] netlink: 40 bytes leftover after parsing attributes in process `syz.0.74'. [ 85.136123][ T6182] veth0_vlan: entered allmulticast mode [ 85.210432][ T6182] bridge0: port 3(veth0_vlan) entered blocking state [ 85.250358][ T6182] bridge0: port 3(veth0_vlan) entered disabled state [ 85.399662][ T6182] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 85.719596][ T6196] netlink: 128 bytes leftover after parsing attributes in process `syz.2.78'. [ 85.737676][ T6196] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 86.188090][ T6202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.282540][ T6205] netlink: 76 bytes leftover after parsing attributes in process `syz.1.82'. [ 86.763700][ T124] cfg80211: failed to load regulatory.db [ 87.280292][ T6224] netlink: 'syz.1.86': attribute type 1 has an invalid length. [ 87.297740][ T6224] netlink: 'syz.1.86': attribute type 2 has an invalid length. [ 87.733580][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'. [ 88.720784][ T6214] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 89.441620][ T6231] lo: entered promiscuous mode [ 90.215336][ T6252] netlink: 'syz.1.95': attribute type 10 has an invalid length. [ 90.235178][ T6252] netlink: 152 bytes leftover after parsing attributes in process `syz.1.95'. [ 90.570724][ T6262] ªªªªª»: renamed from caif0 [ 91.829048][ T6266] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 91.868278][ T6266] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 91.926365][ T6266] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 91.951031][ T6266] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 91.971915][ T6266] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 93.592082][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'. [ 94.541311][ T6339] netlink: 'syz.2.120': attribute type 2 has an invalid length. [ 94.565301][ T6339] netlink: 'syz.2.120': attribute type 8 has an invalid length. [ 94.603061][ T6339] netlink: 132 bytes leftover after parsing attributes in process `syz.2.120'. [ 94.749328][ T6348] netlink: 56 bytes leftover after parsing attributes in process `syz.3.124'. [ 94.974293][ T5829] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 95.173578][ T6356] netlink: 'syz.2.126': attribute type 16 has an invalid length. [ 96.031620][ T6359] 2žÿ: renamed from team_slave_1 (while UP) [ 96.063547][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 96.094579][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 96.127864][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.135762][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.286397][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.300678][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.509562][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.526616][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.542501][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.567190][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.981074][ T6386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.991530][ T6387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.029506][ T6387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.140723][ T6425] netlink: 'syz.1.148': attribute type 21 has an invalid length. [ 98.152838][ T6425] netlink: 156 bytes leftover after parsing attributes in process `syz.1.148'. [ 98.182616][ T6424] netlink: 'syz.4.147': attribute type 2 has an invalid length. [ 98.193298][ T6424] tipc: Started in network mode [ 98.206665][ T6424] tipc: Node identity 8, cluster identity 4711 [ 98.219841][ T6424] tipc: Node number set to 8 [ 98.386088][ T6425] netlink: 10 bytes leftover after parsing attributes in process `syz.1.148'. [ 103.023886][ T6490] netlink: 'syz.0.168': attribute type 6 has an invalid length. [ 103.059576][ T6490] netlink: 360 bytes leftover after parsing attributes in process `syz.0.168'. [ 103.364112][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.172'. [ 104.159042][ T6504] netlink: 'syz.1.173': attribute type 10 has an invalid length. [ 104.317790][ T6504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.354511][ T6508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.468606][ T6504] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 105.706442][ T6527] netlink: 'syz.2.181': attribute type 39 has an invalid length. [ 106.041201][ T6532] netlink: 'syz.0.183': attribute type 2 has an invalid length. [ 106.097832][ T6532] netlink: 'syz.0.183': attribute type 8 has an invalid length. [ 106.117686][ T6532] netlink: 132 bytes leftover after parsing attributes in process `syz.0.183'. [ 106.133261][ T6534] netlink: 4975 bytes leftover after parsing attributes in process `syz.4.182'. [ 106.170103][ T6534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.300328][ T6540] netlink: 'syz.3.185': attribute type 2 has an invalid length. [ 106.552668][ T6551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.845369][ T6552] netlink: 'syz.0.197': attribute type 3 has an invalid length. [ 108.004934][ T6577] netlink: 'syz.0.195': attribute type 6 has an invalid length. [ 108.068034][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 108.213462][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.196'. [ 108.503758][ T6590] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 108.535262][ T6590] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 108.645374][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.202'. [ 108.851427][ T6600] netlink: 'syz.0.202': attribute type 1 has an invalid length. [ 108.862818][ T6600] netlink: 36 bytes leftover after parsing attributes in process `syz.0.202'. [ 108.874140][ T6600] netlink: 'syz.0.202': attribute type 1 has an invalid length. [ 108.882775][ T6600] netlink: 'syz.0.202': attribute type 8 has an invalid length. [ 108.891190][ T6600] netlink: 58 bytes leftover after parsing attributes in process `syz.0.202'. [ 108.906398][ T6604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.268329][ T6613] veth0_macvtap: left promiscuous mode [ 109.678586][ T6636] netlink: zone id is out of range [ 109.685702][ T6636] netlink: zone id is out of range [ 109.691568][ T6636] netlink: zone id is out of range [ 109.696752][ T6636] netlink: zone id is out of range [ 109.741754][ T6636] netlink: set zone limit has 4 unknown bytes [ 109.955746][ T6638] syz.3.212: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 110.030614][ T6638] CPU: 0 UID: 0 PID: 6638 Comm: syz.3.212 Not tainted syzkaller #0 PREEMPT(full) [ 110.030641][ T6638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 110.030661][ T6638] Call Trace: [ 110.030676][ T6638] [ 110.030687][ T6638] dump_stack_lvl+0xe8/0x150 [ 110.030746][ T6638] warn_alloc+0x249/0x340 [ 110.030810][ T6638] ? __pfx_warn_alloc+0x10/0x10 [ 110.030884][ T6638] ? kasan_save_track+0x4f/0x80 [ 110.030908][ T6638] ? kasan_save_track+0x3e/0x80 [ 110.030929][ T6638] ? __kasan_kmalloc+0x93/0xb0 [ 110.030953][ T6638] ? __kmalloc_cache_noprof+0x31c/0x660 [ 110.030977][ T6638] ? xskq_create+0x56/0x170 [ 110.031005][ T6638] ? xsk_setsockopt+0x603/0x990 [ 110.031026][ T6638] ? do_sock_setsockopt+0x17c/0x1b0 [ 110.031047][ T6638] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 110.031068][ T6638] ? do_syscall_64+0x15f/0xf80 [ 110.031119][ T6638] __vmalloc_node_range_noprof+0x132/0x1750 [ 110.031300][ T6638] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 110.031364][ T6638] ? __kasan_kmalloc+0x93/0xb0 [ 110.031422][ T6638] vmalloc_user_noprof+0xad/0xe0 [ 110.031455][ T6638] ? xskq_create+0xbf/0x170 [ 110.031492][ T6638] xskq_create+0xbf/0x170 [ 110.031543][ T6638] xsk_init_queue+0x8a/0xe0 [ 110.031591][ T6638] xsk_setsockopt+0x603/0x990 [ 110.031637][ T6638] ? __pfx_xsk_setsockopt+0x10/0x10 [ 110.031671][ T6638] ? __pfx_aa_sk_perm+0x10/0x10 [ 110.031722][ T6638] ? __fget_files+0x2a/0x420 [ 110.031741][ T6638] ? aa_sock_opt_perm+0xff/0x1a0 [ 110.031794][ T6638] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 110.031820][ T6638] ? __pfx_xsk_setsockopt+0x10/0x10 [ 110.031857][ T6638] do_sock_setsockopt+0x17c/0x1b0 [ 110.031916][ T6638] __x64_sys_setsockopt+0x13d/0x1b0 [ 110.031958][ T6638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.031991][ T6638] do_syscall_64+0x15f/0xf80 [ 110.032019][ T6638] ? trace_irq_disable+0x3b/0x140 [ 110.032053][ T6638] ? clear_bhb_loop+0x40/0x90 [ 110.032097][ T6638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.032120][ T6638] RIP: 0033:0x7f13f619cdd9 [ 110.032155][ T6638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.032171][ T6638] RSP: 002b:00007f13f7087028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.032192][ T6638] RAX: ffffffffffffffda RBX: 00007f13f6415fa0 RCX: 00007f13f619cdd9 [ 110.032206][ T6638] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 110.032218][ T6638] RBP: 00007f13f6232d69 R08: 0000000000000004 R09: 0000000000000000 [ 110.032229][ T6638] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 110.032241][ T6638] R13: 00007f13f6416038 R14: 00007f13f6415fa0 R15: 00007fffa7f43ae8 [ 110.032342][ T6638] [ 110.267651][ T6638] Mem-Info: [ 110.478709][ T6638] active_anon:5893 inactive_anon:0 isolated_anon:0 [ 110.478709][ T6638] active_file:15108 inactive_file:39945 isolated_file:0 [ 110.478709][ T6638] unevictable:768 dirty:430 writeback:0 [ 110.478709][ T6638] slab_reclaimable:10456 slab_unreclaimable:95054 [ 110.478709][ T6638] mapped:29360 shmem:1359 pagetables:1207 [ 110.478709][ T6638] sec_pagetables:0 bounce:0 [ 110.478709][ T6638] kernel_misc_reclaimable:0 [ 110.478709][ T6638] free:1315511 free_pcp:10968 free_cma:0 [ 110.530744][ T6638] Node 0 active_anon:23672kB inactive_anon:0kB active_file:60432kB inactive_file:159584kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117440kB dirty:1720kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11980kB pagetables:4664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 110.592526][ T6638] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 110.762994][ T6638] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 110.778791][ T6645] netlink: 16390 bytes leftover after parsing attributes in process `syz.4.214'. [ 110.854545][ T6638] lowmem_reserve[]: 0 2491 2491 2491 2491 [ 110.871542][ T6638] Node 0 DMA32 free:1299704kB boost:0kB min:34180kB low:42724kB high:51268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24180kB inactive_anon:0kB active_file:60432kB inactive_file:159584kB unevictable:1536kB writepending:1772kB zspages:0kB present:3129332kB managed:2551076kB mlocked:0kB bounce:0kB free_pcp:41672kB local_pcp:20332kB free_cma:0kB [ 110.941539][ T6638] lowmem_reserve[]: 0 0 0 0 0 [ 110.951999][ T6638] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:596kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 111.087344][ T6638] lowmem_reserve[]: 0 0 0 0 0 [ 111.093143][ T6638] Node 1 Normal free:3946424kB boost:0kB min:55712kB low:69640kB high:83568kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 111.226754][ T6638] lowmem_reserve[]: 0 0 0 0 0 [ 111.244375][ T6638] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 111.340097][ T6638] Node 0 DMA32: 1912*4kB (UME) 942*8kB (UME) 468*16kB (UM) 257*32kB (UME) 168*64kB (UM) 61*128kB (M) 41*256kB (UME) 8*512kB (UM) 2*1024kB (ME) 4*2048kB (UME) 299*4096kB (M) = 1298992kB [ 111.399088][ T6638] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 111.411365][ T6638] Node 1 Normal: 0*4kB 5*8kB (UM) 7*16kB (UM) 11*32kB (UM) 7*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 1*1024kB (M) 2*2048kB (U) 961*4096kB (M) = 3946424kB [ 111.411573][ T6638] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.411591][ T6638] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 111.411607][ T6638] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.411624][ T6638] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 111.411641][ T6638] 56408 total pagecache pages [ 111.411654][ T6638] 0 pages in swap cache [ 111.411664][ T6638] Free swap = 124996kB [ 111.411673][ T6638] Total swap = 124996kB [ 111.411686][ T6638] 2097051 pages RAM [ 111.411695][ T6638] 0 pages HighMem/MovableOnly [ 111.411703][ T6638] 427518 pages reserved [ 111.411712][ T6638] 0 pages cma reserved [ 112.033238][ T6677] netlink: 60 bytes leftover after parsing attributes in process `syz.2.219'. [ 112.056455][ T6679] netlink: 277 bytes leftover after parsing attributes in process `syz.4.220'. [ 112.076731][ T6677] netlink: 60 bytes leftover after parsing attributes in process `syz.2.219'. [ 112.128616][ T6677] netlink: 6 bytes leftover after parsing attributes in process `syz.2.219'. [ 112.162299][ T6677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.336025][ T5495] veth0_macvtap: entered promiscuous mode [ 112.367626][ T6681] netdevsim netdevsim0: Direct firmware load for .net/syz1 failed with error -2 [ 112.379291][ T6681] netdevsim netdevsim0: Falling back to sysfs fallback for: .net/syz1 [ 114.357411][ T5495] veth0_vlan: left promiscuous mode [ 114.473650][ T5495] veth0_vlan: entered promiscuous mode [ 114.630746][ T6742] __nla_validate_parse: 1 callbacks suppressed [ 114.630778][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 114.764804][ T6746] netlink: 'syz.4.238': attribute type 2 has an invalid length. [ 115.133433][ T6769] netlink: 68 bytes leftover after parsing attributes in process `syz.1.243'. [ 115.358392][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.244'. [ 116.152352][ T6790] netlink: 'syz.0.248': attribute type 9 has an invalid length. [ 116.312865][ T6795] netlink: 36 bytes leftover after parsing attributes in process `syz.1.250'. [ 116.348284][ T5829] Bluetooth: hci0: unexpected event 0x18 length: 151 > 23 [ 117.253907][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'. [ 117.390743][ T6827] netlink: 277 bytes leftover after parsing attributes in process `syz.1.260'. [ 117.423601][ T6829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.261'. [ 117.601538][ T6837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.905308][ T5829] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 117.961301][ T6856] netlink: 'syz.4.269': attribute type 4 has an invalid length. [ 118.336760][ T6860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.500099][ T6869] bridge_slave_1: left allmulticast mode [ 118.520192][ T6869] bridge_slave_1: left promiscuous mode [ 118.550691][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.971742][ T6869] bridge_slave_0: left allmulticast mode [ 118.978581][ T6869] bridge_slave_0: left promiscuous mode [ 119.001069][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.217870][ T5829] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 119.430350][ T6873] xfrm0 speed is unknown, defaulting to 1000 [ 119.456489][ T6873] xfrm0 speed is unknown, defaulting to 1000 [ 119.464286][ T6873] xfrm0 speed is unknown, defaulting to 1000 [ 119.705699][ T6891] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 120.099693][ T5882] xfrm0 speed is unknown, defaulting to 1000 [ 120.107784][ T6873] infiniband syz0: set active [ 120.125704][ T6873] infiniband syz0: added xfrm0 [ 120.145940][ T6873] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 120.152896][ T6873] infiniband syz0: Couldn't open port 1 [ 120.172215][ T6873] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 120.191007][ T6873] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 120.213014][ T6873] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 120.332845][ T6873] RDS/IB: syz0: added [ 120.340905][ T6873] smc: adding ib device syz0 with port count 1 [ 120.356002][ T6873] smc: ib device syz0 port 1 has no pnetid [ 120.379649][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 120.402140][ T6873] xfrm0 speed is unknown, defaulting to 1000 [ 120.801452][ T6873] xfrm0 speed is unknown, defaulting to 1000 [ 120.931577][ T6923] netlink: 36 bytes leftover after parsing attributes in process `syz.0.292'. [ 120.964297][ T6923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.292'. [ 121.472478][ T6873] xfrm0 speed is unknown, defaulting to 1000 [ 122.234381][ T6873] xfrm0 speed is unknown, defaulting to 1000 [ 122.928047][ T6873] xfrm0 speed is unknown, defaulting to 1000 [ 123.279832][ T6977] ±ÿ: renamed from lo (while UP) [ 123.578543][ T6987] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.314'. [ 124.063842][ T7005] ref_ctr_offset mismatch. inode: 0x164 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 124.318061][ T7011] netlink: 8498 bytes leftover after parsing attributes in process `syz.1.322'. [ 124.858323][ T7033] netlink: 'syz.2.325': attribute type 4 has an invalid length. [ 124.881468][ T7022] smbdirect: ib_dev[syz1] removed [ 125.170224][ T7042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.331'. [ 129.274251][ T7107] netlink: 17780 bytes leftover after parsing attributes in process `syz.4.347'. [ 129.439839][ T7110] netlink: 'syz.2.349': attribute type 1 has an invalid length. [ 129.473787][ T7110] netlink: 'syz.2.349': attribute type 3 has an invalid length. [ 129.756197][ T7126] netlink: 'syz.2.354': attribute type 10 has an invalid length. [ 129.770824][ T7126] netlink: 55 bytes leftover after parsing attributes in process `syz.2.354'. [ 129.792092][ T7122] netlink: 56 bytes leftover after parsing attributes in process `syz.3.351'. [ 129.892160][ T7133] netlink: 'syz.3.351': attribute type 4 has an invalid length. [ 130.886696][ T7140] openvswitch: netlink: Missing key (keys=1040, expected=10000000) [ 130.933876][ T7142] netlink: 'syz.1.358': attribute type 2 has an invalid length. [ 130.945019][ T7142] netlink: 'syz.1.358': attribute type 8 has an invalid length. [ 130.952912][ T7142] netlink: 132 bytes leftover after parsing attributes in process `syz.1.358'. [ 131.199002][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.361'. [ 131.336288][ T7159] netlink: 840 bytes leftover after parsing attributes in process `syz.1.364'. [ 131.675335][ T7148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.360'. [ 131.782031][ T7148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.360'. [ 131.882216][ T7148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.360'. [ 132.716194][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.726338][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.682979][ T7189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.313198][ T7213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.335784][ T7210] netlink: 'syz.0.373': attribute type 61 has an invalid length. [ 134.434910][ T7214] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 134.449413][ T7214] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 135.467596][ T7245] xfrm0 speed is unknown, defaulting to 1000 [ 135.923345][ T7259] netlink: 36 bytes leftover after parsing attributes in process `syz.1.388'. [ 135.938304][ T7259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.388'. [ 136.131754][ T7264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.159392][ T7267] netlink: 32 bytes leftover after parsing attributes in process `syz.1.391'. [ 136.181721][ T7267] netlink: 32 bytes leftover after parsing attributes in process `syz.1.391'. [ 136.252362][ T7267] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.391'. [ 136.438484][ T7275] netlink: 'syz.1.393': attribute type 6 has an invalid length. [ 136.446744][ T7275] netlink: 3936 bytes leftover after parsing attributes in process `syz.1.393'. [ 136.481656][ T7275] netlink: 'syz.1.393': attribute type 1 has an invalid length. [ 136.849956][ T7284] netlink: 'syz.2.396': attribute type 10 has an invalid length. [ 136.858210][ T7284] netlink: 55 bytes leftover after parsing attributes in process `syz.2.396'. [ 137.057402][ T7284] netlink: 'syz.2.396': attribute type 1 has an invalid length. [ 137.265512][ T7293] netlink: 'syz.0.400': attribute type 10 has an invalid length. [ 137.292829][ T7296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.319099][ T7293] bond0: (slave bond_slave_0): Releasing backup interface [ 137.426869][ T7300] netlink: 'syz.0.403': attribute type 4 has an invalid length. [ 137.475836][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.413'. [ 137.536859][ T7301] openvswitch: netlink: Flow actions attr not present in new flow. [ 137.676533][ T7310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.939031][ T7320] netlink: 'syz.2.409': attribute type 21 has an invalid length. [ 137.955354][ T7320] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.271842][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'. [ 138.407006][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 138.733294][ T7336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.845201][ T7338] hsr_slave_0: left promiscuous mode [ 138.856695][ T7338] hsr_slave_1: left promiscuous mode [ 139.171169][ T7351] netlink: 'syz.0.421': attribute type 14 has an invalid length. [ 139.767180][ T7370] openvswitch: netlink: Flow actions attr not present in new flow. [ 139.838884][ T7369] netlink: 'syz.1.426': attribute type 4 has an invalid length. [ 140.067635][ T7369] .`: renamed from bond0 [ 140.448621][ T7378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.628104][ T7381] netlink: 'syz.2.427': attribute type 1 has an invalid length. [ 140.724156][ T7369] syz.1.426 (7369) used greatest stack depth: 18520 bytes left [ 141.589154][ T7417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.627237][ T7421] __nla_validate_parse: 3 callbacks suppressed [ 141.640811][ T7421] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.445'. [ 141.829736][ T7423] validate_nla: 2 callbacks suppressed [ 141.829770][ T7423] netlink: 'syz.2.446': attribute type 10 has an invalid length. [ 141.857839][ T7423] bond0: (slave bond_slave_0): Releasing backup interface [ 142.100711][ T7427] netlink: 'syz.2.448': attribute type 14 has an invalid length. [ 142.637397][ T7447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.037138][ T7455] netlink: 'syz.4.460': attribute type 14 has an invalid length. [ 143.423422][ T7453] netlink: 'syz.2.458': attribute type 3 has an invalid length. [ 143.598443][ T7439] syz.3.454 (7439) used greatest stack depth: 15752 bytes left [ 144.419092][ T7479] netlink: 'syz.1.465': attribute type 16 has an invalid length. [ 144.484723][ T7479] 8021q: adding VLAN 0 to HW filter on device .` [ 144.494146][ T7479] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.506933][ T7479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.083153][ T7496] netlink: 220 bytes leftover after parsing attributes in process `syz.2.473'. [ 145.099002][ T7498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.166106][ T7498] netlink: 164 bytes leftover after parsing attributes in process `syz.4.474'. [ 145.230726][ T7498] netlink: 36 bytes leftover after parsing attributes in process `syz.4.474'. [ 145.493469][ T7508] netlink: 168 bytes leftover after parsing attributes in process `syz.4.477'. [ 145.548392][ T7508] Driver unsupported XDP return value 0 on prog (id 255) dev N/A, expect packet loss! [ 146.532875][ T5829] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 146.689246][ T7538] netlink: 'syz.3.485': attribute type 12 has an invalid length. [ 146.745693][ T7538] netlink: 132 bytes leftover after parsing attributes in process `syz.3.485'. [ 146.802573][ T7539] netlink: 'syz.4.486': attribute type 3 has an invalid length. [ 146.846153][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'. [ 147.553064][ T7565] netlink: 104 bytes leftover after parsing attributes in process `syz.1.494'. [ 147.714909][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.496'. [ 147.725220][ T7570] openvswitch: netlink: Flow actions attr not present in new flow. [ 147.791673][ T7573] netlink: 'syz.3.496': attribute type 4 has an invalid length. [ 147.805043][ T7573] netlink: 152 bytes leftover after parsing attributes in process `syz.3.496'. [ 148.506665][ T7571] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 148.552332][ T7573] .`: renamed from bond0 (while UP) [ 148.665209][ T7578] openvswitch: netlink: EtherType 0 is less than min 600 [ 148.726570][ T7580] netlink: zone id is out of range [ 148.752890][ T7580] netlink: zone id is out of range [ 149.227410][ T7580] netlink: set zone limit has 4 unknown bytes [ 149.380392][ T7598] netlink: set zone limit has 4 unknown bytes [ 149.433561][ T7598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.505'. [ 149.539786][ T5829] Bluetooth: hci3: unexpected subevent 0x18 length: 150 > 19 [ 149.547454][ T5829] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 150.079230][ T7618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.514'. [ 150.442955][ T7633] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.517'. [ 150.926062][ T7642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.520'. [ 151.213245][ T7655] netlink: 'syz.4.524': attribute type 10 has an invalid length. [ 151.296862][ T7655] netlink: 55 bytes leftover after parsing attributes in process `syz.4.524'. [ 152.464795][ T7678] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 152.481269][ T7678] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 152.493110][ T7674] __nla_validate_parse: 1 callbacks suppressed [ 152.493143][ T7674] netlink: 14 bytes leftover after parsing attributes in process `syz.1.530'. [ 152.720444][ T7674] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.749241][ T7687] netlink: 80 bytes leftover after parsing attributes in process `syz.4.537'. [ 152.796511][ T7674] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.869778][ T7674] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 153.039777][ T7674] .` (unregistering): Released all slaves [ 153.565423][ T7699] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.588883][ T7699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.592031][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 153.598665][ T7699] IPv6: NLM_F_CREATE should be set when creating new route [ 153.604160][ T7704] netlink: 'syz.1.543': attribute type 10 has an invalid length. [ 153.631611][ T7705] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.638941][ T7705] IPv6: NLM_F_CREATE should be set when creating new route [ 153.651346][ T7704] netlink: 55 bytes leftover after parsing attributes in process `syz.1.543'. [ 154.411767][ T7723] netlink: 'syz.0.552': attribute type 10 has an invalid length. [ 154.422446][ T7723] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 154.863279][ T7741] openvswitch: netlink: IP tunnel dst address not specified [ 155.232022][ T7753] delete_channel: no stack [ 155.274653][ T7753] delete_channel: no stack [ 155.669624][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 156.124382][ T7782] netlink: 'syz.1.572': attribute type 21 has an invalid length. [ 156.165619][ T7782] netlink: 164 bytes leftover after parsing attributes in process `syz.1.572'. [ 156.203497][ T7791] netlink: 'syz.3.575': attribute type 21 has an invalid length. [ 156.213687][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.572'. [ 156.228681][ T7791] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.487841][ T7799] nbd: must specify a device to reconfigure [ 156.511081][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 156.892853][ T7809] netlink: 14 bytes leftover after parsing attributes in process `syz.0.579'. [ 157.013451][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 157.045013][ T7809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.155986][ T7809] bond0 (unregistering): Released all slaves [ 157.449823][ T7828] netlink: 'syz.3.585': attribute type 6 has an invalid length. [ 158.359001][ T7854] netlink: 'syz.2.591': attribute type 6 has an invalid length. [ 158.389005][ T7854] netlink: 3936 bytes leftover after parsing attributes in process `syz.2.591'. [ 158.428845][ T7854] netlink: 'syz.2.591': attribute type 1 has an invalid length. [ 158.442576][ T7855] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 158.464138][ T7854] block nbd0: Unsupported socket: should be TCP or UNIX. [ 158.643047][ T7862] netlink: 68 bytes leftover after parsing attributes in process `syz.1.593'. [ 158.736693][ T7862] syz.1.593: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 158.800737][ T7862] CPU: 0 UID: 0 PID: 7862 Comm: syz.1.593 Not tainted syzkaller #0 PREEMPT(full) [ 158.800764][ T7862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 158.800775][ T7862] Call Trace: [ 158.800784][ T7862] [ 158.800791][ T7862] dump_stack_lvl+0xe8/0x150 [ 158.800827][ T7862] warn_alloc+0x249/0x340 [ 158.800849][ T7862] ? stack_trace_save+0xa9/0x100 [ 158.800877][ T7862] ? __pfx_warn_alloc+0x10/0x10 [ 158.800906][ T7862] ? kasan_save_track+0x4f/0x80 [ 158.800924][ T7862] ? kasan_save_track+0x3e/0x80 [ 158.800943][ T7862] ? __kasan_kmalloc+0x93/0xb0 [ 158.800962][ T7862] ? __kmalloc_cache_noprof+0x31c/0x660 [ 158.800982][ T7862] ? xskq_create+0x56/0x170 [ 158.801003][ T7862] ? xsk_setsockopt+0x603/0x990 [ 158.801020][ T7862] ? do_sock_setsockopt+0x17c/0x1b0 [ 158.801039][ T7862] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 158.801057][ T7862] ? do_syscall_64+0x15f/0xf80 [ 158.801084][ T7862] __vmalloc_node_range_noprof+0x132/0x1750 [ 158.801136][ T7862] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 158.801164][ T7862] ? __kasan_kmalloc+0x93/0xb0 [ 158.801192][ T7862] vmalloc_user_noprof+0xad/0xe0 [ 158.801214][ T7862] ? xskq_create+0xbf/0x170 [ 158.801236][ T7862] xskq_create+0xbf/0x170 [ 158.801260][ T7862] xsk_init_queue+0x8a/0xe0 [ 158.801284][ T7862] xsk_setsockopt+0x603/0x990 [ 158.801307][ T7862] ? __pfx_xsk_setsockopt+0x10/0x10 [ 158.801327][ T7862] ? __pfx_aa_sk_perm+0x10/0x10 [ 158.801353][ T7862] ? __fget_files+0x2a/0x420 [ 158.801369][ T7862] ? aa_sock_opt_perm+0xff/0x1a0 [ 158.801405][ T7862] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 158.801427][ T7862] ? __pfx_xsk_setsockopt+0x10/0x10 [ 158.801450][ T7862] do_sock_setsockopt+0x17c/0x1b0 [ 158.801474][ T7862] __x64_sys_setsockopt+0x13d/0x1b0 [ 158.801495][ T7862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.801516][ T7862] do_syscall_64+0x15f/0xf80 [ 158.801542][ T7862] ? clear_bhb_loop+0x40/0x90 [ 158.801566][ T7862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.801585][ T7862] RIP: 0033:0x7fa263f9cdd9 [ 158.801610][ T7862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.801625][ T7862] RSP: 002b:00007fa264efb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 158.801645][ T7862] RAX: ffffffffffffffda RBX: 00007fa264215fa0 RCX: 00007fa263f9cdd9 [ 158.801659][ T7862] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 158.801670][ T7862] RBP: 00007fa264032d69 R08: 0000000000000004 R09: 0000000000000000 [ 158.801681][ T7862] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 158.801692][ T7862] R13: 00007fa264216038 R14: 00007fa264215fa0 R15: 00007fff7fcc4d68 [ 158.801720][ T7862] [ 158.802697][ T7862] Mem-Info: [ 159.116633][ T7862] active_anon:6282 inactive_anon:0 isolated_anon:0 [ 159.116633][ T7862] active_file:17284 inactive_file:39971 isolated_file:0 [ 159.116633][ T7862] unevictable:768 dirty:448 writeback:0 [ 159.116633][ T7862] slab_reclaimable:10775 slab_unreclaimable:102906 [ 159.116633][ T7862] mapped:29469 shmem:1367 pagetables:1352 [ 159.116633][ T7862] sec_pagetables:0 bounce:0 [ 159.116633][ T7862] kernel_misc_reclaimable:0 [ 159.116633][ T7862] free:1303985 free_pcp:9940 free_cma:0 [ 159.164163][ T7862] Node 0 active_anon:25128kB inactive_anon:0kB active_file:69136kB inactive_file:159688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117876kB dirty:1788kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12180kB pagetables:5244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 159.230689][ T7862] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 159.331458][ T7862] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 159.398381][ T7862] lowmem_reserve[]: 0 2491 2491 2491 2491 [ 159.426638][ T7862] Node 0 DMA32 free:1253856kB boost:0kB min:34180kB low:42724kB high:51268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25128kB inactive_anon:0kB active_file:69136kB inactive_file:159688kB unevictable:1536kB writepending:1788kB zspages:0kB present:3129332kB managed:2551076kB mlocked:0kB bounce:0kB free_pcp:40836kB local_pcp:27176kB free_cma:0kB [ 159.542467][ T7862] lowmem_reserve[]: 0 0 0 0 0 [ 159.572592][ T7862] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:596kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 159.637561][ T7862] lowmem_reserve[]: 0 0 0 0 0 [ 159.650362][ T7862] Node 1 Normal free:3946424kB boost:0kB min:55712kB low:69640kB high:83568kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 159.697650][ T7862] lowmem_reserve[]: 0 0 0 0 0 [ 159.703155][ T7862] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 159.717123][ T7862] Node 0 DMA32: 1989*4kB (UME) 1756*8kB (UME) 684*16kB (UME) 299*32kB (UME) 213*64kB (UM) 46*128kB (UME) 21*256kB (UME) 7*512kB (UME) 3*1024kB (ME) 2*2048kB (ME) 287*4096kB (M) = 1253716kB [ 159.737161][ T7862] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 159.750664][ T7862] Node 1 Normal: 0*4kB 5*8kB (UM) 7*16kB (UM) 11*32kB (UM) 7*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 1*1024kB (M) 2*2048kB (U) 961*4096kB (M) = 3946424kB [ 159.783228][ T7862] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 159.793953][ T7862] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 159.804449][ T7862] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 159.830893][ T7862] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 159.842181][ T7862] 58618 total pagecache pages [ 159.847105][ T7862] 0 pages in swap cache [ 159.852182][ T7862] Free swap = 124996kB [ 159.856675][ T7862] Total swap = 124996kB [ 159.861694][ T7862] 2097051 pages RAM [ 159.865699][ T7862] 0 pages HighMem/MovableOnly [ 159.871126][ T7862] 427518 pages reserved [ 159.875473][ T7862] 0 pages cma reserved [ 160.263028][ T29] audit: type=1107 audit(1777076666.306:2): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 160.403359][ T7905] netlink: 32 bytes leftover after parsing attributes in process `syz.1.603'. [ 162.906052][ T7903] caif0: entered promiscuous mode [ 162.911375][ T7903] caif0: entered allmulticast mode [ 162.938090][ T7905] bridge_slave_0 (unregistering): left allmulticast mode [ 162.945369][ T7905] bridge_slave_0 (unregistering): left promiscuous mode [ 162.954494][ T7905] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.804461][ T7929] netlink: 16348 bytes leftover after parsing attributes in process `syz.1.611'. [ 163.887407][ T7929] netlink: zone id is out of range [ 163.906589][ T7929] netlink: zone id is out of range [ 163.961999][ T7929] netlink: set zone limit has 8 unknown bytes [ 164.084305][ T5829] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 164.092822][ T5829] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 164.181876][ T7938] netlink: 5192 bytes leftover after parsing attributes in process `syz.2.614'. [ 164.888620][ T7949] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 164.983558][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.622'. [ 165.494048][ T7974] netlink: 'syz.0.627': attribute type 10 has an invalid length. [ 165.623310][ T7981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.629'. [ 165.656767][ T7981] openvswitch: netlink: Flow actions attr not present in new flow. [ 165.716223][ T7984] netlink: 'syz.4.631': attribute type 21 has an invalid length. [ 165.731025][ T7986] netlink: 5204 bytes leftover after parsing attributes in process `syz.0.632'. [ 166.383113][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.637'. [ 169.315551][ T8010] netlink: 52 bytes leftover after parsing attributes in process `syz.3.639'. [ 169.564110][ T8019] netlink: 'syz.0.641': attribute type 39 has an invalid length. [ 170.023536][ T8025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.645'. [ 170.068232][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.644'. [ 170.128336][ T8027] netlink: 'syz.2.644': attribute type 16 has an invalid length. [ 170.168088][ T8027] netlink: 152 bytes leftover after parsing attributes in process `syz.2.644'. [ 170.258949][ T8028] netlink: 132 bytes leftover after parsing attributes in process `syz.4.646'. [ 170.552961][ T8035] netlink: 300 bytes leftover after parsing attributes in process `syz.2.649'. [ 170.585962][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.648'. [ 170.587232][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.650'. [ 170.665402][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 172.083612][ T8072] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.114452][ T8073] netlink: 'syz.2.660': attribute type 10 has an invalid length. [ 172.472579][ T8072] bridge_slave_0 (unregistering): left allmulticast mode [ 172.524617][ T8072] bridge_slave_0 (unregistering): left promiscuous mode [ 172.618632][ T8072] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.683169][ T8079] netlink: 'syz.3.662': attribute type 10 has an invalid length. [ 172.695517][ T8079] netlink: 55 bytes leftover after parsing attributes in process `syz.3.662'. [ 172.766851][ T8073] team0: Device wg1 is of different type [ 172.947960][ T5829] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 173.216364][ T8092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.710556][ T8109] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 174.188032][ T8126] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 174.494701][ T8135] __nla_validate_parse: 1 callbacks suppressed [ 174.494724][ T8135] netlink: 40 bytes leftover after parsing attributes in process `syz.3.681'. [ 175.689734][ T8171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.686'. [ 175.720609][ T8171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.686'. [ 175.859638][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 175.902991][ T8176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.687'. [ 176.016015][ T8173] netlink: 'syz.4.688': attribute type 1 has an invalid length. [ 176.054265][ T8173] netlink: 512 bytes leftover after parsing attributes in process `syz.4.688'. [ 176.072662][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'. [ 176.103573][ T8188] netlink: 52 bytes leftover after parsing attributes in process `syz.1.687'. [ 176.379491][ T8193] netlink: 12714 bytes leftover after parsing attributes in process `syz.2.693'. [ 176.586948][ T8201] netlink: 'syz.3.696': attribute type 1 has an invalid length. [ 176.597977][ T8197] xfrm0 speed is unknown, defaulting to 1000 [ 176.616177][ T8201] netlink: 212400 bytes leftover after parsing attributes in process `syz.3.696'. [ 178.132691][ T8220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.266859][ T5829] Bluetooth: hci3: unexpected event 0x34 length: 82 > 6 [ 181.803274][ T8234] __nla_validate_parse: 4 callbacks suppressed [ 181.803296][ T8234] netlink: 1 bytes leftover after parsing attributes in process `syz.3.708'. [ 182.082650][ T8249] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.712'. [ 182.413930][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.715'. [ 182.756367][ T8271] netlink: 'syz.4.717': attribute type 10 has an invalid length. [ 182.859859][ T8271] team0: Device wg1 is of different type [ 182.877803][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.718'. [ 182.996769][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 183.467186][ T8294] netlink: 64 bytes leftover after parsing attributes in process `syz.1.724'. [ 183.700182][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.726'. [ 184.655817][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.732'. [ 184.872417][ T8330] netlink: 'syz.1.734': attribute type 39 has an invalid length. [ 185.881317][ T8337] netlink: 'syz.4.738': attribute type 21 has an invalid length. [ 185.911697][ T8337] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.963674][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 186.251547][ T8350] netlink: 'syz.3.741': attribute type 10 has an invalid length. [ 186.416556][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'. [ 186.471507][ T8350] team0: Device wg1 is of different type [ 186.831165][ T8366] netdevsim netdevsim3: Direct firmware load for .net/syz1 failed with error -2 [ 186.844919][ T8366] netdevsim netdevsim3: Falling back to sysfs fallback for: .net/syz1 [ 187.759232][ T8394] __nla_validate_parse: 1 callbacks suppressed [ 187.759251][ T8394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.757'. [ 187.835758][ T8394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.757'. [ 187.855871][ T8396] netlink: 'syz.2.757': attribute type 16 has an invalid length. [ 187.911137][ T8400] netlink: 17780 bytes leftover after parsing attributes in process `syz.4.754'. [ 188.030549][ T8395] delete_channel: no stack [ 188.227867][ T8405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.760'. [ 188.644672][ T8428] netlink: 'syz.2.771': attribute type 10 has an invalid length. [ 188.830915][ T5829] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 189.335541][ T8441] netlink: 'syz.0.776': attribute type 2 has an invalid length. [ 189.344236][ T8441] tipc: Started in network mode [ 189.349899][ T8441] tipc: Node identity 1340008, cluster identity 4711 [ 189.359701][ T8441] tipc: Node number set to 20185096 [ 189.609736][ T8455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.778'. [ 189.629604][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 189.689646][ T8451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.780'. [ 189.860982][ T8466] netlink: 52 bytes leftover after parsing attributes in process `syz.0.780'. [ 190.002887][ T8461] netlink: 132 bytes leftover after parsing attributes in process `syz.2.782'. [ 191.084632][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 191.097431][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 191.097452][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 191.105998][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 191.109612][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 191.118895][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 191.564183][ T8506] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 192.026331][ T8528] netlink: 'syz.0.804': attribute type 29 has an invalid length. [ 192.235836][ T8536] netlink: 'syz.1.807': attribute type 1 has an invalid length. [ 192.880866][ T8548] delete_channel: no stack [ 193.385582][ T8559] __nla_validate_parse: 4 callbacks suppressed [ 193.385616][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.817'. [ 193.471034][ T8544] delete_channel: no stack [ 194.143360][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.151056][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.585617][ T8610] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 194.673706][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.833'. [ 195.162759][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.834'. [ 195.465278][ T8627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.839'. [ 195.888892][ T8648] netlink: 'syz.2.847': attribute type 6 has an invalid length. [ 195.907107][ T8648] netlink: 3936 bytes leftover after parsing attributes in process `syz.2.847'. [ 195.929219][ T8648] netlink: 'syz.2.847': attribute type 1 has an invalid length. [ 196.158269][ T8648] nbd0: detected capacity change from 0 to 339754496 [ 196.275710][ T5832] block nbd0: Receive control failed (result -104) [ 196.456477][ T8658] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.851'. [ 196.457137][ T8662] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 196.805296][ T8675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.857'. [ 196.847751][ T8674] netlink: 300 bytes leftover after parsing attributes in process `syz.4.856'. [ 196.946757][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.856'. [ 197.434779][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.862'. [ 197.460122][ T8685] netlink: 'syz.4.862': attribute type 1 has an invalid length. [ 197.710854][ T8699] delete_channel: no stack [ 198.545634][ T8731] __nla_validate_parse: 1 callbacks suppressed [ 198.545659][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 198.755564][ T8736] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.764576][ T8736] IPv6: NLM_F_REPLACE set, but no existing node found! [ 201.503249][ T8740] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 201.537761][ T5832] Bluetooth: hci1: Malformed LE Event: 0x1b [ 201.781674][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.887'. [ 202.272970][ T8765] netlink: 'syz.0.892': attribute type 10 has an invalid length. [ 202.315428][ T8765] netlink: 40 bytes leftover after parsing attributes in process `syz.0.892'. [ 203.012629][ T8765] batman_adv: batadv0: Adding interface: virt_wifi0 [ 203.027683][ T8765] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.030840][ T8788] netlink: 'syz.4.897': attribute type 16 has an invalid length. [ 203.067418][ T8765] batman_adv: batadv0: Interface activated: virt_wifi0 [ 203.099225][ T8787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.897'. [ 203.112128][ T8787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.897'. [ 203.512473][ T8788] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.520305][ T8788] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.900087][ T8788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.933139][ T8788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.053908][ T8806] netlink: 'syz.2.902': attribute type 1 has an invalid length. [ 204.209360][ T3484] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.239529][ T3484] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.272683][ T3484] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.306795][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.903'. [ 204.325475][ T3484] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.713290][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.918'. [ 206.725765][ T8847] netlink: 104 bytes leftover after parsing attributes in process `syz.0.916'. [ 208.023835][ T8874] netlink: 'syz.3.926': attribute type 10 has an invalid length. [ 208.066972][ T8874] netlink: 40 bytes leftover after parsing attributes in process `syz.3.926'. [ 208.109985][ T8874] team0: entered promiscuous mode [ 208.122475][ T8874] team_slave_0: entered promiscuous mode [ 208.137046][ T8874] team_slave_1: entered promiscuous mode [ 208.158611][ T8874] syz_tun: entered promiscuous mode [ 208.175179][ T8874] team0: entered allmulticast mode [ 208.181950][ T8874] team_slave_0: entered allmulticast mode [ 208.192820][ T8874] team_slave_1: entered allmulticast mode [ 208.199776][ T8874] syz_tun: entered allmulticast mode [ 208.222464][ T8874] bridge0: port 3(team0) entered blocking state [ 208.230193][ T8874] bridge0: port 3(team0) entered disabled state [ 208.264363][ T8886] netlink: 3783 bytes leftover after parsing attributes in process `syz.2.929'. [ 208.306045][ T8874] bridge0: port 3(team0) entered blocking state [ 208.313416][ T8874] bridge0: port 3(team0) entered forwarding state [ 208.497037][ T8890] netlink: 36 bytes leftover after parsing attributes in process `syz.3.932'. [ 208.729152][ T8896] netlink: 300 bytes leftover after parsing attributes in process `syz.1.934'. [ 208.787891][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 208.854835][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 208.916579][ T8899] netlink: 104 bytes leftover after parsing attributes in process `syz.2.936'. [ 209.230301][ T8911] netlink: 'syz.1.940': attribute type 21 has an invalid length. [ 209.266352][ T8911] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.285414][ T8911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.292861][ T8911] IPv6: NLM_F_CREATE should be set when creating new route [ 209.302356][ T8911] IPv6: NLM_F_CREATE should be set when creating new route [ 209.309867][ T8911] IPv6: NLM_F_CREATE should be set when creating new route [ 210.073929][ T8928] netlink: 104 bytes leftover after parsing attributes in process `syz.1.942'. [ 210.589728][ T8944] bridge_slave_1: left allmulticast mode [ 210.607146][ T8944] bridge_slave_1: left promiscuous mode [ 210.616687][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.634254][ T8944] bridge_slave_0: left allmulticast mode [ 210.643169][ T8944] bridge_slave_0: left promiscuous mode [ 210.651819][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.016480][ T8956] netlink: 40 bytes leftover after parsing attributes in process `syz.0.952'. [ 211.303286][ T8965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.955'. [ 213.126998][ T9010] sctp: [Deprecated]: syz.0.959 (pid 9010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.126998][ T9010] Use struct sctp_sack_info instead [ 213.461053][ T5832] Bluetooth: hci2: Malformed LE Event: 0x1d [ 213.632128][ T9020] xfrm0 speed is unknown, defaulting to 1000 [ 213.751080][ T9027] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.965'. [ 213.805312][ T9028] netlink: 'syz.4.967': attribute type 1 has an invalid length. [ 214.357676][ T9046] netlink: 220 bytes leftover after parsing attributes in process `syz.2.970'. [ 214.402686][ T9045] netlink: 156 bytes leftover after parsing attributes in process `syz.1.971'. [ 215.790627][ T9081] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.982'. [ 216.597977][ T9102] netlink: 120 bytes leftover after parsing attributes in process `syz.3.990'. [ 219.728737][ T9124] netlink: 32 bytes leftover after parsing attributes in process `syz.3.994'. [ 219.759906][ T9124] netlink: 32 bytes leftover after parsing attributes in process `syz.3.994'. [ 219.861762][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.997'. [ 220.378137][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1000'. [ 220.704556][ T9155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1005'. [ 221.064559][ T9155] IPv6: NLM_F_CREATE should be specified when creating new route [ 221.401790][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1009'. [ 221.450972][ T9167] netlink: 5192 bytes leftover after parsing attributes in process `syz.3.1009'. [ 221.478193][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1009'. [ 221.554401][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 221.652379][ T9177] netlink: 'syz.3.1013': attribute type 6 has an invalid length. [ 221.887127][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1015'. [ 222.086555][ T9184] nbd: must specify a device to reconfigure [ 222.393546][ T9196] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1020'. [ 222.476917][ T9201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1022'. [ 222.529837][ T9200] nbd: must specify a device to reconfigure [ 222.693575][ T9206] lo speed is unknown, defaulting to 1000 [ 222.729517][ T9206] lo speed is unknown, defaulting to 1000 [ 222.773738][ T9206] lo speed is unknown, defaulting to 1000 [ 222.786596][ T9206] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 222.824843][ T9206] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 222.873988][ T9206] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 222.946672][ T9206] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 223.121400][ T9206] lo speed is unknown, defaulting to 1000 [ 223.211052][ T9206] lo speed is unknown, defaulting to 1000 [ 224.024611][ T9206] lo speed is unknown, defaulting to 1000 [ 224.033219][ T9243] netlink: 'syz.4.1028': attribute type 3 has an invalid length. [ 224.136899][ T9206] lo speed is unknown, defaulting to 1000 [ 224.221917][ T9206] lo speed is unknown, defaulting to 1000 [ 224.464964][ T9257] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1034'. [ 224.671933][ T9264] netlink: 822 bytes leftover after parsing attributes in process `syz.3.1035'. [ 224.797538][ T9271] netlink: 'syz.3.1035': attribute type 10 has an invalid length. [ 224.836786][ T9267] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1037'. [ 224.962177][ T9262] xfrm0 speed is unknown, defaulting to 1000 [ 224.971511][ T9271] ipvlan1: entered promiscuous mode [ 225.036082][ T9271] ipvlan1: entered allmulticast mode [ 225.170958][ T9271] veth0_vlan: entered allmulticast mode [ 225.339586][ T9271] bridge0: port 4(ipvlan1) entered blocking state [ 225.379506][ T9271] bridge0: port 4(ipvlan1) entered disabled state [ 225.386963][ T9277] netlink: 'syz.4.1040': attribute type 3 has an invalid length. [ 225.411624][ T29] audit: type=1107 audit(1777076731.456:3): pid=9276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 225.428408][ T9271] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 225.676025][ T9285] proc: Unknown parameter 'donQ_hash' [ 226.037827][ T9262] lo speed is unknown, defaulting to 1000 [ 226.760277][ T9309] __nla_validate_parse: 4 callbacks suppressed [ 226.760299][ T9309] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1049'. [ 226.791885][ T11] block nbd0: Possible stuck request ffff888027b05080: control (read@0,4096B). Runtime 30 seconds [ 227.133274][ T9307] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1050'. [ 227.144219][ T9307] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1050'. [ 227.161700][ T9300] netlink: 'syz.0.1046': attribute type 9 has an invalid length. [ 228.763135][ T9345] netlink: 'syz.4.1062': attribute type 16 has an invalid length. [ 228.893260][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1065'. [ 228.930097][ T9351] IPv6: NLM_F_CREATE should be specified when creating new route [ 228.962419][ T9349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1065'. [ 229.120309][ T9357] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1065'. [ 229.276265][ T9358] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 229.471885][ T9368] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1069'. [ 229.687644][ T5832] Bluetooth: hci0: Unable to find connection for big 0x00 [ 229.814476][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 229.846623][ T9380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1076'. [ 231.018901][ T9408] netlink: 'syz.1.1085': attribute type 10 has an invalid length. [ 231.049194][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1087'. [ 231.475868][ T9427] netlink: 'syz.1.1091': attribute type 2 has an invalid length. [ 231.521369][ T9427] netlink: 'syz.1.1091': attribute type 2 has an invalid length. [ 232.245792][ T9435] siw: device registration error -23 [ 232.255132][ T9417] xfrm0 speed is unknown, defaulting to 1000 [ 232.406824][ T9440] netlink: 'syz.1.1096': attribute type 2 has an invalid length. [ 232.417532][ T9440] netlink: 'syz.1.1096': attribute type 8 has an invalid length. [ 232.425601][ T9440] __nla_validate_parse: 2 callbacks suppressed [ 232.425619][ T9440] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1096'. [ 232.667687][ T9417] lo speed is unknown, defaulting to 1000 [ 233.005306][ T9461] openvswitch: netlink: IP tunnel dst address not specified [ 233.050205][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1104'. [ 233.092067][ T9463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1104'. [ 233.236737][ T9467] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1104'. [ 233.817066][ T9472] netlink: 'syz.1.1106': attribute type 21 has an invalid length. [ 233.848896][ T9472] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1106'. [ 234.666618][ T9501] netlink: 'syz.1.1115': attribute type 21 has an invalid length. [ 234.695685][ T9497] netlink: 10420 bytes leftover after parsing attributes in process `syz.4.1112'. [ 234.700902][ T9501] netlink: 'syz.1.1115': attribute type 2 has an invalid length. [ 234.737300][ T9501] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1115'. [ 235.304870][ T9517] nbd: must specify a device to reconfigure [ 235.336537][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 235.417373][ T9518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1117'. [ 235.444395][ T9523] siw: device registration error -23 [ 235.503152][ T5832] Bluetooth: hci0: unexpected event 0x36 length: 15 > 7 [ 235.699676][ T5832] Bluetooth: hci4: unexpected event 0x16 length: 15 > 6 [ 235.725173][ T9528] netlink: 'syz.0.1123': attribute type 2 has an invalid length. [ 235.798314][ T9528] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1123'. [ 236.741201][ T9565] netlink: 'syz.0.1136': attribute type 10 has an invalid length. [ 236.816200][ T9569] netlink: 'syz.0.1136': attribute type 10 has an invalid length. [ 236.907616][ T9565] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 237.042650][ T9565] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 237.068001][ T9565] team0: Port device netdevsim0 added [ 237.130066][ T9569] team0: Port device netdevsim0 removed [ 238.385512][ T9612] netlink: 'syz.0.1150': attribute type 13 has an invalid length. [ 238.430814][ T9612] __nla_validate_parse: 3 callbacks suppressed [ 238.430854][ T9612] netlink: 14532 bytes leftover after parsing attributes in process `syz.0.1150'. [ 238.712152][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 238.756588][ T9622] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1153'. [ 238.775247][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1151'. [ 238.805390][ T9622] netlink: 'syz.4.1153': attribute type 10 has an invalid length. [ 238.861684][ T9622] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1153'. [ 239.540661][ T9636] netlink: 'syz.1.1158': attribute type 1 has an invalid length. [ 239.712153][ T9648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1161'. [ 240.008600][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1162'. [ 240.101475][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'. [ 240.103571][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1166'. [ 240.184230][ T9662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1166'. [ 240.464031][ T9660] netlink: 'syz.3.1165': attribute type 62 has an invalid length. [ 240.535246][ T9677] nbd: must specify a device to reconfigure [ 240.778658][ T9677] siw: device registration error -23 [ 241.446700][ T9688] xfrm0 speed is unknown, defaulting to 1000 [ 241.554410][ T9697] netlink: 'syz.0.1177': attribute type 3 has an invalid length. [ 242.315423][ T9688] lo speed is unknown, defaulting to 1000 [ 242.562470][ T9722] netlink: 'syz.3.1181': attribute type 2 has an invalid length. [ 242.791214][ T5832] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 243.747800][ T9741] __nla_validate_parse: 9 callbacks suppressed [ 243.747821][ T9741] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1192'. [ 243.816924][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1202'. [ 244.219983][ T9747] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1195'. [ 244.245468][ T9747] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1195'. [ 244.367850][ T9756] nbd: must specify a device to reconfigure [ 244.482478][ T9756] siw: device registration error -23 [ 244.523428][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 244.561613][ T9759] netlink: 'syz.0.1207': attribute type 10 has an invalid length. [ 244.577717][ T9759] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1207'. [ 244.591872][ T9759] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 244.632551][ T9759] batman_adv: batadv0: Removing interface: virt_wifi0 [ 244.711274][ T9759] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 244.949571][ T9767] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1199'. [ 245.484210][ T9783] syzkaller0: entered promiscuous mode [ 245.501843][ T9783] syzkaller0: entered allmulticast mode [ 245.581183][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1206'. [ 245.608332][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1206'. [ 245.931723][ T9798] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1208'. [ 247.148998][ T9809] netlink: 'syz.2.1215': attribute type 10 has an invalid length. [ 247.179638][ T9812] netlink: 'syz.0.1225': attribute type 21 has an invalid length. [ 247.303818][ T9818] nbd: must specify a device to reconfigure [ 247.554177][ T9818] siw: device registration error -23 [ 248.698649][ T1326] wlan1: Trigger new scan to find an IBSS to join [ 248.792283][ T9861] nbd: must specify a device to reconfigure [ 248.809537][ T9864] __nla_validate_parse: 5 callbacks suppressed [ 248.809570][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'. [ 248.881971][ T9864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1244'. [ 248.906285][ T9868] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1236'. [ 248.958704][ T9868] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1236'. [ 249.019552][ T9870] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1238'. [ 249.049445][ T9874] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1244'. [ 249.353133][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1245'. [ 249.390540][ T9888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1245'. [ 249.517062][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'. [ 249.990086][ T9907] nbd: must specify a device to reconfigure [ 250.309245][ T9916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1253'. [ 250.438966][ T9916] netlink: 'syz.4.1253': attribute type 2 has an invalid length. [ 250.552128][ T9916] netlink: 'syz.4.1253': attribute type 1 has an invalid length. [ 251.422096][ T9945] nbd: must specify a device to reconfigure [ 251.741045][ T137] wlan1: Trigger new scan to find an IBSS to join [ 255.086199][ T1326] wlan1: Creating new IBSS network, BSSID ce:aa:cb:69:70:e1 [ 255.397227][ T9993] __nla_validate_parse: 7 callbacks suppressed [ 255.415694][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1276'. [ 255.425200][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1276'. [ 255.435955][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'. [ 255.460666][ T9997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1279'. [ 255.525476][ T9990] xfrm0 speed is unknown, defaulting to 1000 [ 255.585217][T10003] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1279'. [ 255.596014][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.603171][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.645057][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1281'. [ 255.827630][T10002] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1280'. [ 255.935888][T10009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.172283][T10011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1283'. [ 256.378085][ T9990] lo speed is unknown, defaulting to 1000 [ 256.470817][T10024] netlink: 'syz.1.1286': attribute type 11 has an invalid length. [ 256.590660][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'. [ 256.879906][ T11] block nbd0: Possible stuck request ffff888027b05080: control (read@0,4096B). Runtime 60 seconds [ 257.829566][T10049] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1297'. [ 257.916731][T10048] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 258.164142][T10059] netlink: 'syz.4.1299': attribute type 10 has an invalid length. [ 258.365061][T10056] xfrm0 speed is unknown, defaulting to 1000 [ 259.555042][T10077] netlink: 'syz.0.1306': attribute type 21 has an invalid length. [ 260.180244][T10056] lo speed is unknown, defaulting to 1000 [ 261.458267][T10108] __nla_validate_parse: 8 callbacks suppressed [ 261.458298][T10108] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1310'. [ 261.531589][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1313'. [ 261.553813][T10115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1313'. [ 261.706166][T10120] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1313'. [ 261.940165][T10128] netlink: 'syz.1.1318': attribute type 6 has an invalid length. [ 262.506550][T10136] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1321'. [ 262.749427][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 262.968622][T10145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1323'. [ 263.114617][T10149] netlink: 'syz.3.1325': attribute type 10 has an invalid length. [ 263.125352][T10149] .`: (slave bond_slave_0): Releasing backup interface [ 263.276219][T10152] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 263.568500][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'. [ 263.635454][T10165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1332'. [ 263.680389][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1343'. [ 263.714663][T10168] proc: Unknown parameter 'donQ_hash' [ 263.859318][T10176] netlink: 'syz.0.1334': attribute type 16 has an invalid length. [ 264.556422][T10176] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.088210][T10176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.122734][T10176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.417701][ T5903] lo speed is unknown, defaulting to 1000 [ 265.425261][ T5903] syz2: Port: 1 Link DOWN [ 265.467414][ T1007] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.513827][ T1007] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.544597][ T1007] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.567790][ T3484] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.654879][T10207] netlink: 'syz.2.1346': attribute type 10 has an invalid length. [ 265.737175][T10215] proc: Unknown parameter 'donQ_hash' [ 265.740002][T10207] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 265.794805][T10207] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 266.769310][T10242] netlink: 'syz.4.1358': attribute type 11 has an invalid length. [ 266.806151][T10242] __nla_validate_parse: 10 callbacks suppressed [ 266.806209][T10242] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.1358'. [ 266.863091][T10240] netlink: 'syz.1.1356': attribute type 16 has an invalid length. [ 266.913864][T10243] netlink: 'syz.3.1359': attribute type 10 has an invalid length. [ 267.185788][T10251] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1361'. [ 267.570790][T10243] bridge0: port 3(team0) entered disabled state [ 267.603431][T10243] bridge0: port 3(team0) entered disabled state [ 267.642357][T10243] team_slave_0: left promiscuous mode [ 267.661189][T10243] team_slave_0: left allmulticast mode [ 267.677394][T10243] team0 (unregistering): Port device team_slave_0 removed [ 267.685723][T10243] team_slave_1: left promiscuous mode [ 267.691829][T10243] team_slave_1: left allmulticast mode [ 267.714978][T10243] team0 (unregistering): Port device team_slave_1 removed [ 267.737159][T10243] syz_tun: left promiscuous mode [ 267.749356][T10243] syz_tun: left allmulticast mode [ 267.767631][T10243] team0 (unregistering): Port device syz_tun removed [ 268.423675][T10286] netlink: 'syz.3.1376': attribute type 16 has an invalid length. [ 268.426528][T10288] siw: device registration error -23 [ 268.659435][T10286] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.668529][T10286] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.982248][T10301] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1379'. [ 269.140071][T10306] netlink: 'syz.4.1381': attribute type 10 has an invalid length. [ 269.408230][T10306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 269.534063][T10306] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 269.585842][ T57] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.602967][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 269.635700][ T10] syz0: Port: 1 Link DOWN [ 269.644308][ T57] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.671493][ T57] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.756157][T10322] netlink: 'syz.0.1383': attribute type 1 has an invalid length. [ 269.829034][ T5921] xfrm0 speed is unknown, defaulting to 1000 [ 269.891677][ T57] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.940186][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1387'. [ 270.108789][T10330] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1388'. [ 270.241287][T10333] netlink: 'syz.2.1389': attribute type 1 has an invalid length. [ 270.303625][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1392'. [ 270.575877][T10358] netlink: 'syz.2.1393': attribute type 16 has an invalid length. [ 270.703517][T10356] netlink: 'syz.0.1403': attribute type 1 has an invalid length. [ 271.129111][T10377] netlink: 'syz.0.1398': attribute type 10 has an invalid length. [ 271.129469][T10378] nbd: must specify a device to reconfigure [ 271.188331][T10373] netlink: 'syz.1.1399': attribute type 1 has an invalid length. [ 271.209972][T10376] netlink: 'syz.3.1400': attribute type 1 has an invalid length. [ 271.255063][T10381] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1402'. [ 271.500369][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1407'. [ 271.742524][T10401] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1408'. [ 272.138847][T10414] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1412'. [ 272.378963][T10424] netlink: 'syz.2.1414': attribute type 16 has an invalid length. [ 272.541550][T10432] hsr_slave_1 (unregistering): left promiscuous mode [ 272.563307][T10431] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1416'. [ 273.184744][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1423'. [ 273.962534][T10482] validate_nla: 4 callbacks suppressed [ 273.962572][T10482] netlink: 'syz.0.1430': attribute type 1 has an invalid length. [ 273.999558][T10487] netlink: 'syz.2.1432': attribute type 3 has an invalid length. [ 274.015372][T10486] netlink: 'syz.1.1431': attribute type 16 has an invalid length. [ 274.034081][ T29] audit: type=1107 audit(1777076780.076:4): pid=10485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 274.169270][T10489] netlink: 'syz.4.1433': attribute type 1 has an invalid length. [ 274.351505][T10492] netlink: 'syz.3.1434': attribute type 10 has an invalid length. [ 274.569655][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1439'. [ 274.616152][T10503] nbd: must specify a device to reconfigure [ 274.797822][T10503] siw: device registration error -23 [ 275.199058][T10520] netlink: 'syz.4.1445': attribute type 1 has an invalid length. [ 275.257177][T10523] netlink: 'syz.0.1446': attribute type 3 has an invalid length. [ 275.290618][ T29] audit: type=1107 audit(1777076781.336:5): pid=10522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 275.426366][T10525] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1447'. [ 275.503766][T10533] netlink: 'syz.1.1450': attribute type 16 has an invalid length. [ 275.511148][T10527] netlink: 'syz.4.1448': attribute type 1 has an invalid length. [ 275.761347][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1453'. [ 275.774747][T10536] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1451'. [ 276.550742][T10557] netlink: 'syz.1.1458': attribute type 2 has an invalid length. [ 276.661397][T10561] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 276.938941][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1465'. [ 277.761210][T10589] nbd: must specify a device to reconfigure [ 277.860660][ T29] audit: type=1107 audit(1777076783.906:6): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 278.289147][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1475'. [ 278.700502][T10620] proc: Unknown parameter 'donQ_hash' [ 278.735960][T10620] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1482'. [ 278.740763][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1483'. [ 279.065291][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'. [ 279.090049][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'. [ 279.234786][T10638] validate_nla: 2 callbacks suppressed [ 279.234819][T10638] netlink: 'syz.3.1487': attribute type 3 has an invalid length. [ 279.285634][ T29] audit: type=1107 audit(1777076785.326:7): pid=10637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 279.819530][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 280.083065][T10653] netlink: 10420 bytes leftover after parsing attributes in process `syz.2.1497'. [ 280.641725][T10671] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1498'. [ 280.710610][T10676] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 281.975958][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'. [ 282.095016][T10721] openvswitch: netlink: Flow key attr not present in new flow. [ 282.792024][T10725] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1519'. [ 282.849654][T10733] openvswitch: netlink: Flow key attr not present in new flow. [ 283.448076][T10751] __nla_validate_parse: 2 callbacks suppressed [ 283.450075][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1524'. [ 283.612153][T10759] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1524'. [ 284.330960][T10762] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1531'. [ 284.372302][T10766] xfrm0 speed is unknown, defaulting to 1000 [ 284.383727][T10769] proc: Unknown parameter 'donQ_hash' [ 284.410293][T10767] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1539'. [ 284.431434][T10769] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1529'. [ 284.506667][T10772] netlink: 822 bytes leftover after parsing attributes in process `syz.1.1530'. [ 284.542784][T10771] netlink: 'syz.1.1530': attribute type 10 has an invalid length. [ 284.556855][T10771] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1530'. [ 284.566653][T10771] ipvlan1: entered promiscuous mode [ 284.575913][T10771] ipvlan1: entered allmulticast mode [ 284.602582][T10771] veth0_vlan: entered allmulticast mode [ 284.652586][T10771] bridge0: port 1(ipvlan1) entered blocking state [ 284.691066][T10771] bridge0: port 1(ipvlan1) entered disabled state [ 284.710988][T10771] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 284.759698][T10775] netlink: 'syz.4.1533': attribute type 1 has an invalid length. [ 284.928096][T10766] lo speed is unknown, defaulting to 1000 [ 284.935005][T10776] siw: device registration error -23 [ 285.668124][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1540'. [ 285.669745][T10806] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1542'. [ 285.813237][T10812] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1544'. [ 286.189002][T10820] netlink: 'syz.0.1545': attribute type 2 has an invalid length. [ 286.210391][T10820] netlink: 'syz.0.1545': attribute type 2 has an invalid length. [ 286.277111][T10828] netlink: 'syz.4.1549': attribute type 16 has an invalid length. [ 286.494136][T10826] netlink: 'syz.3.1548': attribute type 1 has an invalid length. [ 286.947823][ T11] block nbd0: Possible stuck request ffff888027b05080: control (read@0,4096B). Runtime 90 seconds [ 287.143087][T10859] netlink: 'syz.0.1558': attribute type 2 has an invalid length. [ 287.665409][T10869] siw: device registration error -23 [ 287.902321][T10876] netlink: 'syz.2.1564': attribute type 1 has an invalid length. [ 289.343660][T10919] __nla_validate_parse: 6 callbacks suppressed [ 289.343694][T10919] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1578'. [ 289.426547][T10926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1581'. [ 289.565874][T10930] netlink: 'syz.3.1582': attribute type 1 has an invalid length. [ 289.577891][T10934] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1581'. [ 289.603780][T10933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1584'. [ 289.776309][T10939] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1584'. [ 289.808921][T10941] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 290.317340][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'. [ 290.353330][T10949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1597'. [ 290.514679][T10957] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1597'. [ 290.700742][T10960] netlink: 'syz.3.1591': attribute type 1 has an invalid length. [ 290.724684][T10967] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1594'. [ 291.070260][T10975] netlink: 'syz.4.1596': attribute type 10 has an invalid length. [ 291.242987][T10981] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1600'. [ 291.745093][T11004] netlink: 'syz.0.1609': attribute type 2 has an invalid length. [ 292.562491][T11037] netlink: 'syz.2.1621': attribute type 1 has an invalid length. [ 293.243759][T11050] nbd: must specify a device to reconfigure [ 293.295681][T11045] netlink: 'syz.4.1626': attribute type 2 has an invalid length. [ 293.305039][T11045] netlink: 'syz.4.1626': attribute type 2 has an invalid length. [ 293.389340][T11052] netlink: 'syz.3.1625': attribute type 21 has an invalid length. [ 293.422258][T11056] siw: device registration error -23 [ 294.412598][T11086] __nla_validate_parse: 17 callbacks suppressed [ 294.412630][T11086] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1637'. [ 294.845211][T11079] xfrm0 speed is unknown, defaulting to 1000 [ 294.899153][T11096] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1641'. [ 295.391300][T11079] lo speed is unknown, defaulting to 1000 [ 295.462487][T11114] netlink: 'syz.4.1647': attribute type 1 has an invalid length. [ 295.691853][T11118] netlink: 'syz.3.1648': attribute type 2 has an invalid length. [ 295.719011][T11118] netlink: 'syz.3.1648': attribute type 2 has an invalid length. [ 296.132748][T11119] netlink: 'syz.1.1658': attribute type 1 has an invalid length. [ 296.423875][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1652'. [ 296.701109][T11142] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1652'. [ 296.792575][T11143] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1653'. [ 297.171075][T11157] netlink: 'syz.2.1660': attribute type 1 has an invalid length. [ 297.364709][T11161] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1663'. [ 297.386562][T11161] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1663'. [ 297.469368][T11163] netlink: 'syz.3.1664': attribute type 1 has an invalid length. [ 297.597526][T11167] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1665'. [ 297.707993][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1668'. [ 297.843470][T11177] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1669'. [ 298.241534][T11195] netlink: 'syz.2.1676': attribute type 1 has an invalid length. [ 298.371538][T11203] netlink: 'syz.3.1679': attribute type 1 has an invalid length. [ 298.853255][T11217] netlink: 'syz.2.1683': attribute type 1 has an invalid length. [ 299.117806][T11233] netlink: 'syz.3.1686': attribute type 25 has an invalid length. [ 299.529835][T11246] __nla_validate_parse: 9 callbacks suppressed [ 299.529874][T11246] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1695'. [ 299.566306][T11248] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1694'. [ 299.589345][T11251] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1695'. [ 299.652239][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1698'. [ 299.798887][T11261] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1698'. [ 300.694578][T11282] validate_nla: 5 callbacks suppressed [ 300.694612][T11282] netlink: 'syz.1.1706': attribute type 1 has an invalid length. [ 300.796139][T11287] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1708'. [ 301.303906][T11298] netlink: 'syz.2.1712': attribute type 1 has an invalid length. [ 301.779243][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1715'. [ 301.809902][T11290] xfrm0 speed is unknown, defaulting to 1000 [ 301.879175][T11310] netlink: 'syz.4.1716': attribute type 1 has an invalid length. [ 301.887717][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 301.951840][T11317] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1715'. [ 302.139740][T11290] lo speed is unknown, defaulting to 1000 [ 302.732412][T11329] netlink: 'syz.4.1721': attribute type 1 has an invalid length. [ 302.762065][T11331] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1722'. [ 302.992254][T11340] netlink: 'syz.4.1725': attribute type 1 has an invalid length. [ 303.360364][T11355] netlink: 'syz.0.1727': attribute type 11 has an invalid length. [ 303.381627][T11351] netlink: 'syz.4.1729': attribute type 1 has an invalid length. [ 304.150667][T11366] netlink: 'syz.2.1742': attribute type 1 has an invalid length. [ 304.464614][T11374] netlink: 'syz.3.1735': attribute type 1 has an invalid length. [ 304.545110][T11380] __nla_validate_parse: 6 callbacks suppressed [ 304.545146][T11380] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1736'. [ 304.575583][T11380] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1736'. [ 304.596155][T11381] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1738'. [ 304.701504][T11384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1739'. [ 304.728380][T11384] netlink: 'syz.3.1739': attribute type 10 has an invalid length. [ 304.818807][T11384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 304.877644][T11384] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 304.964979][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1743'. [ 305.164539][T11396] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 305.290001][T11405] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1748'. [ 305.300661][T11403] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1747'. [ 305.313060][T11405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1748'. [ 305.322732][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1748'. [ 305.632104][T11415] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1752'. [ 306.186706][T11434] validate_nla: 3 callbacks suppressed [ 306.186737][T11434] netlink: 'syz.4.1759': attribute type 10 has an invalid length. [ 306.239689][T11438] netlink: 'syz.4.1759': attribute type 10 has an invalid length. [ 306.289553][T11434] bond0: (slave netdevsim0): Releasing backup interface [ 306.382487][T11434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.425469][T11434] team0: Port device netdevsim0 added [ 306.482342][T11438] team0: Port device netdevsim0 removed [ 306.489885][T11438] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.500495][T11438] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 306.665228][T11452] netlink: 'syz.2.1762': attribute type 1 has an invalid length. [ 307.337430][T11477] netlink: 'syz.3.1770': attribute type 1 has an invalid length. [ 307.631981][T11485] netlink: 'syz.3.1786': attribute type 1 has an invalid length. [ 307.939065][T11489] netlink: 'syz.0.1776': attribute type 1 has an invalid length. [ 308.225586][T11497] netlink: 'syz.2.1777': attribute type 10 has an invalid length. [ 308.282390][T11497] bond0: (slave netdevsim0): Releasing backup interface [ 308.314380][T11503] netlink: 'syz.2.1777': attribute type 10 has an invalid length. [ 308.352842][T11497] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 308.416434][T11497] team0: Port device netdevsim0 added [ 308.448887][T11503] team0: Port device netdevsim0 removed [ 308.464658][T11503] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 308.478639][T11503] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 308.976834][T11518] netlink: 'syz.2.1787': attribute type 1 has an invalid length. [ 309.116704][T11520] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 309.156023][T11520] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 309.495828][T11535] netlink: 'syz.3.1793': attribute type 1 has an invalid length. [ 309.643103][T11543] __nla_validate_parse: 16 callbacks suppressed [ 309.643136][T11543] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1797'. [ 309.668194][T11538] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1795'. [ 309.710006][T11538] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1795'. [ 310.258836][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1799'. [ 310.429072][T11550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1798'. [ 310.522027][T11550] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 310.557085][T11550] team0: Port device netdevsim0 added [ 310.579941][T11556] team0: Port device netdevsim0 removed [ 310.808039][T11565] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1814'. [ 311.530087][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1811'. [ 311.573455][T11590] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1811'. [ 311.695652][T11592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1812'. [ 311.738825][ T150] wlan1: Trigger new scan to find an IBSS to join [ 311.746439][T11597] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1811'. [ 311.973234][T11602] validate_nla: 4 callbacks suppressed [ 311.973254][T11602] netlink: 'syz.4.1815': attribute type 1 has an invalid length. [ 312.348922][T11613] netlink: 'syz.1.1821': attribute type 1 has an invalid length. [ 312.897058][T11629] netlink: 'syz.4.1827': attribute type 1 has an invalid length. [ 312.901880][T11631] netlink: 'syz.1.1828': attribute type 1 has an invalid length. [ 313.140196][T11635] netlink: 'syz.2.1830': attribute type 1 has an invalid length. [ 313.793765][T11665] netlink: 'syz.0.1841': attribute type 1 has an invalid length. [ 313.803029][T11662] netlink: 'syz.4.1840': attribute type 1 has an invalid length. [ 313.819947][T11661] netlink: 'syz.3.1839': attribute type 1 has an invalid length. [ 314.006634][T11669] netlink: 'syz.0.1843': attribute type 1 has an invalid length. [ 314.143017][T11678] netlink: 'syz.3.1846': attribute type 1 has an invalid length. [ 314.729612][ T57] wlan1: Trigger new scan to find an IBSS to join [ 314.855324][T11701] __nla_validate_parse: 10 callbacks suppressed [ 314.855358][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1855'. [ 315.036801][T11709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1857'. [ 315.321460][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1863'. [ 315.453039][T11722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1863'. [ 315.864156][T11733] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1863'. [ 316.295441][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1870'. [ 316.976686][T11776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1881'. [ 317.018330][ T11] block nbd0: Possible stuck request ffff888027b05080: control (read@0,4096B). Runtime 120 seconds [ 317.031669][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.038127][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.096780][T11782] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1881'. [ 317.243723][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1885'. [ 317.425601][T11792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1887'. [ 317.473898][T11794] validate_nla: 9 callbacks suppressed [ 317.474034][T11794] netlink: 'syz.0.1888': attribute type 1 has an invalid length. [ 317.475815][T11796] netlink: 'syz.3.1889': attribute type 1 has an invalid length. [ 317.551414][T11799] netlink: 'syz.0.1890': attribute type 1 has an invalid length. [ 317.602672][T11802] netlink: 'syz.3.1891': attribute type 1 has an invalid length. [ 317.758275][ T57] wlan1: Creating new IBSS network, BSSID 16:eb:ac:61:37:77 [ 318.309582][T11827] netlink: 'syz.0.1900': attribute type 1 has an invalid length. [ 318.410182][T11830] netlink: 'syz.1.1901': attribute type 1 has an invalid length. [ 318.413776][T11832] netlink: 'syz.4.1902': attribute type 1 has an invalid length. [ 319.056176][T11856] netlink: 'syz.4.1911': attribute type 1 has an invalid length. [ 319.096134][T11860] netlink: 'syz.3.1913': attribute type 1 has an invalid length. [ 319.250980][T11865] netlink: 'syz.3.1915': attribute type 1 has an invalid length. [ 320.452492][T11914] __nla_validate_parse: 11 callbacks suppressed [ 320.453076][T11914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1932'. [ 320.573183][T11920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1936'. [ 320.588431][T11922] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1932'. [ 320.702725][T11927] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1936'. [ 320.808700][T11932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1939'. [ 320.831921][T11932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1939'. [ 321.330963][T11949] ------------[ cut here ]------------ [ 321.337935][T11949] !cfg80211_chandef_valid(chandef) [ 321.338018][T11949] WARNING: net/wireless/chan.c:796 at cfg80211_chandef_dfs_required+0xe06/0xec0, CPU#0: syz.4.1946/11949 [ 321.355939][T11949] Modules linked in: [ 321.362005][T11949] CPU: 0 UID: 0 PID: 11949 Comm: syz.4.1946 Not tainted syzkaller #0 PREEMPT(full) [ 321.371547][T11949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 321.381808][T11949] RIP: 0010:cfg80211_chandef_dfs_required+0xe06/0xec0 [ 321.391547][T11949] Code: de e8 ee 9e b5 f6 48 83 fb 3f 0f 87 aa 00 00 00 e8 9f 9a b5 f6 b8 01 00 00 00 89 d9 48 d3 e0 e9 41 f4 ff ff e8 8b 9a b5 f6 90 <0f> 0b 90 b8 ea ff ff ff e9 2e f4 ff ff e8 18 80 a6 00 89 d1 80 e1 [ 321.411470][T11949] RSP: 0018:ffffc90003637700 EFLAGS: 00010283 [ 321.417715][T11949] RAX: ffffffff8b1023c5 RBX: ffff8880585cd7f8 RCX: 0000000000080000 [ 321.425815][T11949] RDX: ffffc900067d3000 RSI: 0000000000000882 RDI: 0000000000000883 [ 321.434172][T11949] RBP: ffffc90003637890 R08: ffffffff82259d1f R09: ffff8880b863f5a8 [ 321.442315][T11949] R10: dffffc0000000000 R11: ffffed100aec854a R12: 0000000000000006 [ 321.450536][T11949] R13: dffffc0000000000 R14: ffffc90003637a00 R15: dffffc0000000000 [ 321.458696][T11949] FS: 00007f72958346c0(0000) GS:ffff888125224000(0000) knlGS:0000000000000000 [ 321.467787][T11949] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.474504][T11949] CR2: 0000001b3121bff8 CR3: 0000000029514000 CR4: 00000000003526f0 [ 321.482663][T11949] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000200000000300 [ 321.490805][T11949] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 321.499702][T11949] Call Trace: [ 321.503158][T11949] [ 321.506241][T11949] ? kvfree_call_rcu+0x9f/0x430 [ 321.511361][T11949] ? ieee80211_free_chanctx+0x2dc/0x390 [ 321.517089][T11949] ? __pfx_ieee80211_free_chanctx+0x10/0x10 [ 321.523201][T11949] ? __pfx_cfg80211_chandef_dfs_required+0x10/0x10 [ 321.529935][T11949] _ieee80211_link_use_channel+0x27a/0x7f0 [ 321.535924][T11949] ? __pfx___ieee80211_link_release_channel+0x10/0x10 [ 321.542918][T11949] ? __pfx__ieee80211_link_use_channel+0x10/0x10 [ 321.549519][T11949] ieee80211_set_monitor_channel+0x692/0x8e0 [ 321.555679][T11949] ? irqentry_exit+0x218/0x730 [ 321.560684][T11949] ? __pfx_ieee80211_set_monitor_channel+0x10/0x10 [ 321.567539][T11949] ? __pfx_ieee80211_set_monitor_channel+0x10/0x10 [ 321.574264][T11949] cfg80211_set_monitor_channel+0x22d/0x5f0 [ 321.580504][T11949] cfg80211_wext_siwfreq+0x713/0x850 [ 321.585959][T11949] ? irqentry_exit+0x218/0x730 [ 321.590938][T11949] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 321.597537][T11949] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 321.603525][T11949] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 321.609529][T11949] ioctl_standard_call+0xcb/0x1b0 [ 321.614749][T11949] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 321.620782][T11949] wext_ioctl_dispatch+0xee/0x410 [ 321.625915][T11949] ? __pfx_ioctl_standard_call+0x10/0x10 [ 321.631841][T11949] wext_handle_ioctl+0x10f/0x1d0 [ 321.636940][T11949] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 321.642594][T11949] ? irqentry_exit+0x218/0x730 [ 321.647533][T11949] ? lockdep_hardirqs_on+0x7a/0x110 [ 321.652846][T11949] ? irqentry_exit+0x218/0x730 [ 321.657947][T11949] ? trace_irq_disable+0x3b/0x140 [ 321.663188][T11949] sock_ioctl+0x159/0x7f0 [ 321.667727][T11949] ? __pfx_sock_ioctl+0x10/0x10 [ 321.672749][T11949] ? security_file_ioctl+0x25a/0x2a0 [ 321.678226][T11949] ? __sanitizer_cov_trace_pc+0x42/0x70 [ 321.683934][T11949] ? __pfx_sock_ioctl+0x10/0x10 [ 321.689050][T11949] __se_sys_ioctl+0xfc/0x170 [ 321.693818][T11949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.700748][T11949] do_syscall_64+0x15f/0xf80 [ 321.705513][T11949] ? clear_bhb_loop+0x40/0x90 [ 321.710431][T11949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.716481][T11949] RIP: 0033:0x7f729499cdd9 [ 321.721082][T11949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.742842][T11949] RSP: 002b:00007f7295834028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.751594][T11949] RAX: ffffffffffffffda RBX: 00007f7294c15fa0 RCX: 00007f729499cdd9 [ 321.759756][T11949] RDX: 00002000000000c0 RSI: 0000000000008b04 RDI: 0000000000000009 [ 321.767897][T11949] RBP: 00007f7294a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 321.775959][T11949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.784122][T11949] R13: 00007f7294c16038 R14: 00007f7294c15fa0 R15: 00007ffd32943958 [ 321.792322][T11949] [ 321.795469][T11949] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 321.802768][T11949] CPU: 0 UID: 0 PID: 11949 Comm: syz.4.1946 Not tainted syzkaller #0 PREEMPT(full) [ 321.812159][T11949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 321.822239][T11949] Call Trace: [ 321.825540][T11949] [ 321.828485][T11949] vpanic+0x56c/0xa60 [ 321.832505][T11949] ? __pfx_vpanic+0x10/0x10 [ 321.837039][T11949] ? irqentry_exit+0x218/0x730 [ 321.841863][T11949] panic+0xc5/0xd0 [ 321.845621][T11949] ? __pfx_panic+0x10/0x10 [ 321.850111][T11949] __warn+0x315/0x4c0 [ 321.854124][T11949] ? cfg80211_chandef_dfs_required+0xe06/0xec0 [ 321.860305][T11949] ? cfg80211_chandef_dfs_required+0xe06/0xec0 [ 321.866496][T11949] __report_bug+0x29a/0x540 [ 321.871044][T11949] ? cfg80211_chandef_dfs_required+0xe06/0xec0 [ 321.877228][T11949] ? __pfx___report_bug+0x10/0x10 [ 321.882279][T11949] ? lockdep_hardirqs_on+0x7a/0x110 [ 321.887512][T11949] ? irqentry_exit+0x218/0x730 [ 321.892309][T11949] ? trace_irq_disable+0x3b/0x140 [ 321.897369][T11949] ? cfg80211_chandef_dfs_required+0xe08/0xec0 [ 321.903550][T11949] ? cfg80211_chandef_dfs_required+0xe06/0xec0 [ 321.909711][T11949] report_bug+0x16a/0x220 [ 321.914039][T11949] ? cfg80211_chandef_dfs_required+0xe06/0xec0 [ 321.920187][T11949] ? cfg80211_chandef_dfs_required+0xe08/0xec0 [ 321.926333][T11949] handle_bug+0x9c/0x200 [ 321.930588][T11949] exc_invalid_op+0x1a/0x50 [ 321.935094][T11949] asm_exc_invalid_op+0x1a/0x20 [ 321.939938][T11949] RIP: 0010:cfg80211_chandef_dfs_required+0xe06/0xec0 [ 321.946698][T11949] Code: de e8 ee 9e b5 f6 48 83 fb 3f 0f 87 aa 00 00 00 e8 9f 9a b5 f6 b8 01 00 00 00 89 d9 48 d3 e0 e9 41 f4 ff ff e8 8b 9a b5 f6 90 <0f> 0b 90 b8 ea ff ff ff e9 2e f4 ff ff e8 18 80 a6 00 89 d1 80 e1 [ 321.966302][T11949] RSP: 0018:ffffc90003637700 EFLAGS: 00010283 [ 321.972372][T11949] RAX: ffffffff8b1023c5 RBX: ffff8880585cd7f8 RCX: 0000000000080000 [ 321.980337][T11949] RDX: ffffc900067d3000 RSI: 0000000000000882 RDI: 0000000000000883 [ 321.988303][T11949] RBP: ffffc90003637890 R08: ffffffff82259d1f R09: ffff8880b863f5a8 [ 321.996271][T11949] R10: dffffc0000000000 R11: ffffed100aec854a R12: 0000000000000006 [ 322.004237][T11949] R13: dffffc0000000000 R14: ffffc90003637a00 R15: dffffc0000000000 [ 322.012217][T11949] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 322.017243][T11949] ? cfg80211_chandef_dfs_required+0xe05/0xec0 [ 322.023402][T11949] ? kvfree_call_rcu+0x9f/0x430 [ 322.028251][T11949] ? ieee80211_free_chanctx+0x2dc/0x390 [ 322.033795][T11949] ? __pfx_ieee80211_free_chanctx+0x10/0x10 [ 322.039705][T11949] ? __pfx_cfg80211_chandef_dfs_required+0x10/0x10 [ 322.046235][T11949] _ieee80211_link_use_channel+0x27a/0x7f0 [ 322.052045][T11949] ? __pfx___ieee80211_link_release_channel+0x10/0x10 [ 322.058806][T11949] ? __pfx__ieee80211_link_use_channel+0x10/0x10 [ 322.065140][T11949] ieee80211_set_monitor_channel+0x692/0x8e0 [ 322.071114][T11949] ? irqentry_exit+0x218/0x730 [ 322.075876][T11949] ? __pfx_ieee80211_set_monitor_channel+0x10/0x10 [ 322.082373][T11949] ? __pfx_ieee80211_set_monitor_channel+0x10/0x10 [ 322.088870][T11949] cfg80211_set_monitor_channel+0x22d/0x5f0 [ 322.094762][T11949] cfg80211_wext_siwfreq+0x713/0x850 [ 322.100047][T11949] ? irqentry_exit+0x218/0x730 [ 322.104813][T11949] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 322.110618][T11949] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 322.116414][T11949] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 322.122215][T11949] ioctl_standard_call+0xcb/0x1b0 [ 322.127239][T11949] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 322.133039][T11949] wext_ioctl_dispatch+0xee/0x410 [ 322.138056][T11949] ? __pfx_ioctl_standard_call+0x10/0x10 [ 322.143683][T11949] wext_handle_ioctl+0x10f/0x1d0 [ 322.148632][T11949] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 322.154118][T11949] ? irqentry_exit+0x218/0x730 [ 322.158896][T11949] ? lockdep_hardirqs_on+0x7a/0x110 [ 322.164092][T11949] ? irqentry_exit+0x218/0x730 [ 322.168848][T11949] ? trace_irq_disable+0x3b/0x140 [ 322.173873][T11949] sock_ioctl+0x159/0x7f0 [ 322.178203][T11949] ? __pfx_sock_ioctl+0x10/0x10 [ 322.183049][T11949] ? security_file_ioctl+0x25a/0x2a0 [ 322.188332][T11949] ? __sanitizer_cov_trace_pc+0x42/0x70 [ 322.193877][T11949] ? __pfx_sock_ioctl+0x10/0x10 [ 322.198723][T11949] __se_sys_ioctl+0xfc/0x170 [ 322.203313][T11949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.209374][T11949] do_syscall_64+0x15f/0xf80 [ 322.213965][T11949] ? clear_bhb_loop+0x40/0x90 [ 322.218637][T11949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.224523][T11949] RIP: 0033:0x7f729499cdd9 [ 322.228931][T11949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.248528][T11949] RSP: 002b:00007f7295834028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.256937][T11949] RAX: ffffffffffffffda RBX: 00007f7294c15fa0 RCX: 00007f729499cdd9 [ 322.264899][T11949] RDX: 00002000000000c0 RSI: 0000000000008b04 RDI: 0000000000000009 [ 322.272871][T11949] RBP: 00007f7294a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 322.280834][T11949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.288797][T11949] R13: 00007f7294c16038 R14: 00007f7294c15fa0 R15: 00007ffd32943958 [ 322.296778][T11949] [ 322.300402][T11949] Kernel Offset: disabled [ 322.304716][T11949] Rebooting in 86400 seconds..