last executing test programs: 1m41.720027133s ago: executing program 1 (id=802): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x10880, 0x0, 0x0, 0x6, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newchain={0x30, 0x1e, 0x1, 0x1000, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x2004c000) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x1004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x4, 0x3, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x400, 0x4, 0x0, 0x1, 0x0, 0x10000000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x18, 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, 0x0, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x28, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x42fbd5dcab7bee29, @perf_bp={0x0, 0xd}, 0x106c48, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0xcfa4) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80182, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x400, 0x0, 0x4, 0x3fe, 0x401, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f0000000900)={&(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{0x0}], 0x1}, 0x10) sendmsg$inet(r7, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r8, 0x0, 0x10000) sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000880)="b27083e84ef35f0c2e1c40beb60c65e655189a3301cc05a8432cccef11a668170772f3006b4a7dd6db4334187b8c612313ce14b3a7b6d39976a2c223ca0b85abbf0e637bb5bc5602c29cc271ada12b555fb91bab37da8047a668dc122a3b3f8ab31a1769919ae4e8d2ca047db4ad6d22086f7ce1bb22", 0x76}, {&(0x7f0000000980)="0b68ad70ec99e6af5d446794aa4a48377583f4d6419cd3afe1a3f0913234da06524d647af60631ee140f3cc021857a4c03ae8a995a594f47692ecb301db76fab7b7ec58882ae73baad53186df61b014eb0ffc02675786c729cbcb3d502e304466a54c820593bb505832dea3cf276ab415cc072d1298bc1cb3227db37097b845d74adfa0b61664606489e258d5f84ba45f4ae7d7e447c1c53008b7f735ff7141e4a066834d77b6c477d1a4cc8e210a34e6ac80507f88029b6e99be92e", 0xbc}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x40080d1) socketpair(0x2, 0x1, 0x100, &(0x7f0000000680)) ioctl$TUNGETVNETLE(r3, 0x8955, 0x0) 1m41.121577358s ago: executing program 1 (id=808): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, 0x0, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) recvmsg$unix(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) 1m40.632907774s ago: executing program 1 (id=813): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x34024, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) fstat(r1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161841, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x40047438, 0x7f7c2739efff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=r3], 0x48) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x6}, 0x82b4, 0x25, 0x0, 0x2, 0x2}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x5, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00002490fa63a2819083d2c0a731c90000000000c956e9"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000440)="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", 0x1d3}], 0x1, 0x0, 0x0, 0x20000800}, 0x4000) socket$kcm(0x2, 0x3, 0x106) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003800)={0x30, 0x0, 0xb, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x805}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040080) 1m40.280308379s ago: executing program 1 (id=816): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x3f, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80440, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) r6 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x55}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x4, 0x16, &(0x7f0000000cc0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000033a400010000000085100000060000002737c0ff000000", @ANYRES32=r0, @ANYBLOB="0000000000000000186200000a00000000000000ff030000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r0, 0x19}, 0x94) fstat(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80800, &(0x7f0000000600)={[{@gid={'gid', 0x3d, r7}}, {@mode={'mode', 0x3d, 0x3}}]}) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x40000120) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)}], 0x1}, 0x48844) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r4, &(0x7f0000000140), &(0x7f00000001c0)=""/5}, 0x20) recvmsg(r2, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x6) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040054}, 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) 1m38.732126175s ago: executing program 1 (id=826): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x98}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40380, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0xb7848, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) 1m34.596300561s ago: executing program 1 (id=836): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100005, 0xca, 0x0, 0x5, 0xff, 0xffffffff, 0x0, 0x0, 0x20000, 0x0, 0xfffffffffffffffc}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000001}, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x4, 0xa}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x6, 0x88, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}, 0x140) socket$kcm(0x10, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 1m19.51557971s ago: executing program 32 (id=836): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100005, 0xca, 0x0, 0x5, 0xff, 0xffffffff, 0x0, 0x0, 0x20000, 0x0, 0xfffffffffffffffc}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000001}, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x4, 0xa}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x6, 0x88, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}, 0x140) socket$kcm(0x10, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 3.191732602s ago: executing program 4 (id=1567): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r1, 0x21) close(r0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018f6ffffff0000003b0000cc1c000000020000000e9036037200000f020000004977003ad9ed06a0e3589a9cc5737261eee40000100000000f0200000017600000cbc5c0a0f4"], 0x0, 0x36, 0x0, 0x1}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffffffff}]}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107447, &(0x7f0000000180)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010400050001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef80"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 3.009303522s ago: executing program 5 (id=1570): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, 0x0, 0x20000010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r3 = openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) 2.983003899s ago: executing program 4 (id=1571): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfae}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffffe}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xdffe, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) close(0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb269}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 2.842720944s ago: executing program 3 (id=1572): r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0) 2.808601006s ago: executing program 5 (id=1573): socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80110, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x5d}, 0x0, 0xca, 0x0, 0x4, 0x3, 0x3ff, 0xfffc, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) gettid() close(0xffffffffffffffff) openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x80) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x11, 0xa, 0x300) 2.526220262s ago: executing program 5 (id=1576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x200400d4) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r3 = getpid() r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x34024, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d000000140000001100"], 0xa8}}, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x4, [@float={0x2, 0x0, 0x0, 0x10, 0x8}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x3}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x3b, 0x0, 0x68, 0x5}, @float={0xb, 0x0, 0x0, 0x10, 0x2}, @enum={0x4, 0x7, 0x0, 0x6, 0x4, [{0xa, 0x101}, {0x8, 0x7}, {0xf, 0x3f4e}, {0x10, 0x1}, {0x5, 0x9}, {0xc, 0x1}, {0x10, 0x94e2}]}]}, {0x0, [0x5f, 0x61]}}, &(0x7f0000000740)=""/200, 0x94, 0xc8, 0x0, 0x80}, 0x28) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0xb6, '\x00', r7, r8, 0x2, 0x5, 0x2}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xff02, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000a00)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800}], &(0x7f0000000a40)='GPL\x00', 0xfff, 0x1c, &(0x7f0000000a80)=""/28, 0x0, 0x4a, '\x00', r7, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000b40)={0x0, 0xc, 0x3e, 0x8}, 0x10, 0x5658, r5, 0x4, &(0x7f0000000b80)=[r9, r9, 0xffffffffffffffff, r9], &(0x7f0000000bc0)=[{0x5, 0x5, 0xd, 0x7}, {0x1, 0x4, 0x5, 0x8}, {0x2, 0x1, 0x7}, {0x3, 0x5, 0x2, 0x2}], 0x10, 0x6}, 0x94) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, 0x0, 0x44054) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r11, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r13 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r13, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000004c0)="9745010000002000010000ac0a3324491fbb00000098894633120b55", 0x1c}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010101}}}], 0x20}, 0x400c804) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.268273989s ago: executing program 4 (id=1578): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x7, 0x80, 0x4, 0x6, 0xd, 0x9, 0x0, 0x8, 0x68a00, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x3}, 0x113000, 0x3, 0x9, 0x0, 0xe, 0x3, 0x2, 0x0, 0x16000, 0x0, 0x8}, r0, 0x6, r1, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x140f, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0xc0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)}, 0x0) close(r4) 2.054898538s ago: executing program 4 (id=1580): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r1, 0x21) close(r0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018f6ffffff0000003b0000cc1c000000020000000e9036037200000f020000004977003ad9ed06a0e3589a9cc5737261eee40000100000000f0200000017600000cbc5c0a0f4"], 0x0, 0x36, 0x0, 0x1}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107447, &(0x7f0000000180)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0x9) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010400050001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef80"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 1.897573351s ago: executing program 5 (id=1581): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000180)="06ff03076844268cbe9e14f043054ee0ff", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d40)={&(0x7f0000002c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x30, 0x61, 0x30, 0x0, 0x5f, 0x5f, 0x30]}}, 0x0, 0x39, 0x0, 0x1, 0x6}, 0x28) r2 = socket$kcm(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000640)=@o_path={&(0x7f0000000380)='./file0\x00', r1, 0x4000, r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, &(0x7f0000000300)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x72, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xfffffe4d, 0x1, {0x0, '\x00', 0x298c, 0x2, 0x0, 0x401}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3c000001}, 0x0) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)="92", 0x1}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x120) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x4, &(0x7f0000000000), 0x4) sendmsg$inet(r2, 0x0, 0xc011) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xe, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xffffffffffffff91, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa0, 0x2, 0x0, 0xfff8, 0xd}, {0x0, 0x3, 0x7, 0x8, 0xfffb, 0x9}, 0x3, 0x41, 0xb0b}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004841}, 0x8000) 1.799911217s ago: executing program 3 (id=1582): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x2, 0x2, 0x9, 0x3, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x120, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket(0x840000000002, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003c00)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1650}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.535945148s ago: executing program 4 (id=1584): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000180)="06ff03076844268cbe9e14f043054ee0ff", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d40)={&(0x7f0000002c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x30, 0x61, 0x30, 0x0, 0x5f, 0x5f, 0x30]}}, 0x0, 0x39, 0x0, 0x1, 0x6}, 0x28) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000001040)={0x1c, 0x38, 0xc01, 0x70bd2a, 0x25dfdbfc, {0x9}, [@nested={0x8, 0x4, 0x0, 0x1, [@generic="0485c9b2"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x80d0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, &(0x7f0000000300)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x72, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xfffffe4d, 0x1, {0x0, '\x00', 0x298c, 0x2, 0x0, 0x401}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3c000001}, 0x0) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)="92", 0x1}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x120) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x4, &(0x7f0000000000), 0x4) sendmsg$inet(r1, 0x0, 0xc011) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, 0x0, 0x25, 0x10, @val=@iter={&(0x7f0000000000), 0x10}}, 0x20) 1.408573714s ago: executing program 2 (id=1587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xd) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000740)="122b543708ffd9d08e82d326ae091977e4723610468d37a9da1ab146d05f74ef", 0x20}, {&(0x7f0000000840)="d0ded428afc719", 0x7}], 0x2}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f020048f0d8e54d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a0101000000000000000007000000090002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 1.362274744s ago: executing program 0 (id=1588): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x7, 0x80, 0x4, 0x6, 0xd, 0x9, 0x0, 0x8, 0x68a00, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x3}, 0x113000, 0x3, 0x9, 0x0, 0xe, 0x3, 0x2, 0x0, 0x16000, 0x0, 0x8}, r0, 0x6, r1, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x140f, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0xc0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)}, 0x0) close(r4) 1.299741425s ago: executing program 2 (id=1589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0xfffd, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_bp={0x0, 0x4}, 0x1306, 0x2, 0x0, 0x2, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r2, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x44810}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.stat\x00', 0x60ff, 0x8cffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xb}, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x4001}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_int(r4, &(0x7f0000010040)='cpuset.memory_migrate\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000010000)={'rose0\x00', 0x112}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) unlink(0x0) ioctl$TUNATTACHFILTER(r5, 0x400454d1, 0x0) 1.233848069s ago: executing program 0 (id=1590): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x7, 0x80, 0x4, 0x6, 0xd, 0x9, 0x0, 0x8, 0x68a00, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x3}, 0x113000, 0x3, 0x9, 0x0, 0xe, 0x3, 0x2, 0x0, 0x16000, 0x0, 0x8}, r0, 0x6, r1, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x140f, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0xc0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)}, 0x0) close(r4) 1.02537625s ago: executing program 0 (id=1591): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = socket$kcm(0xa, 0x1, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r3, 0x0, 0x800) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40040) setsockopt$sock_attach_bpf(r1, 0x29, 0x6, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) 964.379887ms ago: executing program 5 (id=1592): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000180)="06ff03076844268cbe9e14f043054ee0ff", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000001040)={0x1c, 0x38, 0xc01, 0x70bd2a, 0x25dfdbfc, {0x9}, [@nested={0x8, 0x4, 0x0, 0x1, [@generic="0485c9b2"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x80d0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000640)=@o_path={&(0x7f0000000380)='./file0\x00', r1, 0x4000, r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, &(0x7f0000000300)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x72, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xfffffe4d, 0x1, {0x0, '\x00', 0x298c, 0x2, 0x0, 0x401}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3c000001}, 0x0) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)="92", 0x1}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x120) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x6, 0x4, &(0x7f0000000000), 0x4) sendmsg$inet(r2, 0x0, 0xc011) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xe, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xffffffffffffff91, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa0, 0x2, 0x0, 0xfff8, 0xd}, {0x0, 0x3, 0x7, 0x8, 0xfffb, 0x9}, 0x3, 0x41, 0xb0b}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004841}, 0x8000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, 0x0, 0x25, 0x10, @val=@iter={&(0x7f0000000000), 0x10}}, 0x20) 823.285966ms ago: executing program 2 (id=1593): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r1, 0x21) close(r0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffffffff}]}) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107447, &(0x7f0000000180)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010400050001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef80"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 800.263921ms ago: executing program 3 (id=1594): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r1, 0x21) close(r0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018f6ffffff0000003b0000cc1c000000020000000e9036037200000f020000004977003ad9ed06a0e3589a9cc5737261eee40000100000000f0200000017600000cbc5c0a0f4"], 0x0, 0x36, 0x0, 0x1}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffffffff}]}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107447, &(0x7f0000000180)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010400050001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef80"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 775.19668ms ago: executing program 0 (id=1595): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r1, 0x21) close(r0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffffffff}]}) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107447, &(0x7f0000000180)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0x9) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010400050001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef80"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 621.498877ms ago: executing program 3 (id=1596): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r1, 0x21) close(r0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018f6ffffff0000003b0000cc1c000000020000000e9036037200000f020000004977003ad9ed06a0e3589a9cc5737261eee40000100000000f0200000017600000cbc5c0a0f4"], 0x0, 0x36, 0x0, 0x1}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107447, &(0x7f0000000180)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0x9) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010400050001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef80"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 620.550987ms ago: executing program 4 (id=1597): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x2, 0x2, 0x9, 0x3, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x120, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket(0x840000000002, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003c00)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1650}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 535.517715ms ago: executing program 2 (id=1598): r0 = socket$kcm(0x2, 0x2, 0x73) recvmsg$kcm(r0, &(0x7f0000001f00)={0x0, 0x34, 0x0}, 0x40000040) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x80) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x4a046) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x2, 0x80, 0x5e, 0x8, 0xc, 0x8, 0x0, 0x8, 0x50018, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x1008, 0x6, 0x10, 0x7, 0x101, 0x401, 0xacf, 0x0, 0x9, 0x0, 0x8}) 413.898113ms ago: executing program 0 (id=1599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xd) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000740)="122b543708ffd9d08e82d326ae091977e4723610468d37a9da1ab146d05f74ef", 0x20}, {&(0x7f0000000840)="d0ded428afc719", 0x7}], 0x2}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f020048f0d8e54d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a0101000000000000000007000000090002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 319.623872ms ago: executing program 2 (id=1600): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x7, 0x80, 0x4, 0x6, 0xd, 0x9, 0x0, 0x8, 0x68a00, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x3}, 0x113000, 0x3, 0x9, 0x0, 0xe, 0x3, 0x2, 0x0, 0x16000, 0x0, 0x8}, r0, 0x6, r1, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x140f, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0xc0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)}, 0x0) close(r4) 262.517275ms ago: executing program 3 (id=1601): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x7, 0x80, 0x4, 0x6, 0xd, 0x9, 0x0, 0x8, 0x68a00, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x3}, 0x113000, 0x3, 0x9, 0x0, 0xe, 0x3, 0x2, 0x0, 0x16000, 0x0, 0x8}, r0, 0x6, r1, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x140f, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0xc0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1}, 0x0) close(r4) 61.510082ms ago: executing program 0 (id=1602): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000180)="06ff03076844268cbe9e14f043054ee0ff", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d40)={&(0x7f0000002c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x30, 0x61, 0x30, 0x0, 0x5f, 0x5f, 0x30]}}, 0x0, 0x39, 0x0, 0x1, 0x6}, 0x28) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000001040)={0x1c, 0x38, 0xc01, 0x70bd2a, 0x25dfdbfc, {0x9}, [@nested={0x8, 0x4, 0x0, 0x1, [@generic="0485c9b2"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x80d0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000640)=@o_path={&(0x7f0000000380)='./file0\x00', r1, 0x4000, r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, &(0x7f0000000300)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x72, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xfffffe4d, 0x1, {0x0, '\x00', 0x298c, 0x2, 0x0, 0x401}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3c000001}, 0x0) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)="92", 0x1}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x120) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x4, &(0x7f0000000000), 0x4) sendmsg$inet(r2, 0x0, 0xc011) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xe, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xffffffffffffff91, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa0, 0x2, 0x0, 0xfff8, 0xd}, {0x0, 0x3, 0x7, 0x8, 0xfffb, 0x9}, 0x3, 0x41, 0xb0b}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004841}, 0x8000) 53.177487ms ago: executing program 2 (id=1603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0xfffd, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_bp={0x0, 0x4}, 0x1306, 0x2, 0x0, 0x2, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r2, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x44810}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.stat\x00', 0x60ff, 0x8cffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xb}, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x4001}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_int(r4, &(0x7f0000010040)='cpuset.memory_migrate\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000010000)={'rose0\x00', 0x112}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) unlink(0x0) ioctl$TUNATTACHFILTER(r5, 0x400454d1, 0x0) 39.863584ms ago: executing program 3 (id=1604): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x2, 0x2, 0x9, 0x3, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x120, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket(0x840000000002, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003c00)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1650}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 0s ago: executing program 5 (id=1605): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="ad64a37eaf160814930ab7dbf350596fa9a49c51"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc80, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x5}, 0x0, 0x2, 0xfffffffe, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x40405) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @random="c24f7b36aec9"}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000840) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002400)=""/4073, 0xfe9}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts. [ 76.610661][ T5818] cgroup: Unknown subsys name 'net' [ 76.740061][ T5818] cgroup: Unknown subsys name 'cpuset' [ 76.748588][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.344120][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.747684][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.756437][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.765245][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.775591][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.784113][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.867284][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.877294][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.885923][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.898737][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.909651][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.955078][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.965212][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.986260][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.995317][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.002911][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.010843][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.019272][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.027872][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.055020][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.063381][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.095376][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.107515][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.115447][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.125242][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.135603][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.609011][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 81.718742][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 81.776163][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 81.818932][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 81.954367][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.961709][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.968980][ T5830] bridge_slave_0: entered allmulticast mode [ 81.977154][ T5830] bridge_slave_0: entered promiscuous mode [ 82.003001][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 82.021738][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.028963][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.036456][ T5830] bridge_slave_1: entered allmulticast mode [ 82.044209][ T5830] bridge_slave_1: entered promiscuous mode [ 82.118655][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.125927][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.133073][ T5843] bridge_slave_0: entered allmulticast mode [ 82.140429][ T5843] bridge_slave_0: entered promiscuous mode [ 82.189356][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.196861][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.204200][ T5843] bridge_slave_1: entered allmulticast mode [ 82.211756][ T5843] bridge_slave_1: entered promiscuous mode [ 82.233330][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.252600][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.259877][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.267512][ T5835] bridge_slave_0: entered allmulticast mode [ 82.275222][ T5835] bridge_slave_0: entered promiscuous mode [ 82.300606][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.310157][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.317660][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.324930][ T5837] bridge_slave_0: entered allmulticast mode [ 82.332068][ T5837] bridge_slave_0: entered promiscuous mode [ 82.339872][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.347046][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.354181][ T5835] bridge_slave_1: entered allmulticast mode [ 82.362241][ T5835] bridge_slave_1: entered promiscuous mode [ 82.409377][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.416882][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.424043][ T5837] bridge_slave_1: entered allmulticast mode [ 82.431420][ T5837] bridge_slave_1: entered promiscuous mode [ 82.450911][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.472437][ T5830] team0: Port device team_slave_0 added [ 82.502044][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.522486][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.530065][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.537914][ T5839] bridge_slave_0: entered allmulticast mode [ 82.545283][ T5839] bridge_slave_0: entered promiscuous mode [ 82.554131][ T5830] team0: Port device team_slave_1 added [ 82.572488][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.595698][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.602977][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.610315][ T5839] bridge_slave_1: entered allmulticast mode [ 82.617929][ T5839] bridge_slave_1: entered promiscuous mode [ 82.637811][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.649081][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.660126][ T5843] team0: Port device team_slave_0 added [ 82.687774][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.708726][ T5843] team0: Port device team_slave_1 added [ 82.724871][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.731950][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.757949][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.802422][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.812519][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.819914][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.846894][ T5832] Bluetooth: hci0: command tx timeout [ 82.854943][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.880746][ T5835] team0: Port device team_slave_0 added [ 82.899311][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.922390][ T5837] team0: Port device team_slave_0 added [ 82.930800][ T5835] team0: Port device team_slave_1 added [ 82.949215][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.956238][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.982520][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.995389][ T5832] Bluetooth: hci1: command tx timeout [ 83.021939][ T5837] team0: Port device team_slave_1 added [ 83.038411][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.045577][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.072029][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.075086][ T5832] Bluetooth: hci2: command tx timeout [ 83.099366][ T5839] team0: Port device team_slave_0 added [ 83.115697][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.122731][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.148951][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.159848][ T5832] Bluetooth: hci4: command tx timeout [ 83.165747][ T5841] Bluetooth: hci3: command tx timeout [ 83.169514][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.178674][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.205190][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.235282][ T5839] team0: Port device team_slave_1 added [ 83.259172][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.266205][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.292244][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.311277][ T5830] hsr_slave_0: entered promiscuous mode [ 83.317832][ T5830] hsr_slave_1: entered promiscuous mode [ 83.346410][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.353440][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.379504][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.411299][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.418378][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.444367][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.509845][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.516930][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.543074][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.560229][ T5843] hsr_slave_0: entered promiscuous mode [ 83.566621][ T5843] hsr_slave_1: entered promiscuous mode [ 83.572676][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 83.578809][ T5843] Cannot create hsr debugfs directory [ 83.605570][ T5837] hsr_slave_0: entered promiscuous mode [ 83.612104][ T5837] hsr_slave_1: entered promiscuous mode [ 83.618473][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 83.624236][ T5837] Cannot create hsr debugfs directory [ 83.644169][ T5835] hsr_slave_0: entered promiscuous mode [ 83.650529][ T5835] hsr_slave_1: entered promiscuous mode [ 83.656911][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 83.662645][ T5835] Cannot create hsr debugfs directory [ 83.773948][ T5839] hsr_slave_0: entered promiscuous mode [ 83.780302][ T5839] hsr_slave_1: entered promiscuous mode [ 83.786699][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 83.792433][ T5839] Cannot create hsr debugfs directory [ 84.234396][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.252251][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.260753][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.271456][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.279381][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.288778][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.296580][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.307880][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.379458][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.393731][ T5843] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.402541][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.415363][ T5843] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.423423][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.435950][ T5843] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.444322][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.454397][ T5843] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.545858][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.558158][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.566925][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.577002][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.591861][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.601610][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.609753][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.619788][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.719223][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.729188][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.737956][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.748084][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.765529][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.774879][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.782587][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.793488][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.839361][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.915549][ T5841] Bluetooth: hci0: command tx timeout [ 84.926761][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.939897][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.953477][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.961570][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.971108][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.979155][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.989409][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.998132][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.007828][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.036446][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.055044][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.062548][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.074561][ T5841] Bluetooth: hci1: command tx timeout [ 85.090089][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.097204][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.148442][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.155825][ T5841] Bluetooth: hci2: command tx timeout [ 85.200106][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.207284][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.227853][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.234652][ T5841] Bluetooth: hci3: command tx timeout [ 85.234679][ T5832] Bluetooth: hci4: command tx timeout [ 85.263604][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.270731][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.289200][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.349295][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.376975][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.409776][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.417159][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.449989][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.457262][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.479712][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.486990][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.518914][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.526100][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.581707][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.692873][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.721447][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.728644][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.747326][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.769976][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.777141][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.959320][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.987536][ T5830] veth0_vlan: entered promiscuous mode [ 86.041831][ T5830] veth1_vlan: entered promiscuous mode [ 86.150990][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.160532][ T5843] veth0_vlan: entered promiscuous mode [ 86.190712][ T5843] veth1_vlan: entered promiscuous mode [ 86.235929][ T5830] veth0_macvtap: entered promiscuous mode [ 86.270291][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.299003][ T5830] veth1_macvtap: entered promiscuous mode [ 86.366236][ T5835] veth0_vlan: entered promiscuous mode [ 86.372433][ T5843] veth0_macvtap: entered promiscuous mode [ 86.392700][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.408116][ T5843] veth1_macvtap: entered promiscuous mode [ 86.420074][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.430791][ T5835] veth1_vlan: entered promiscuous mode [ 86.453312][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.489784][ T62] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.501477][ T62] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.525034][ T5837] veth0_vlan: entered promiscuous mode [ 86.533504][ T62] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.543401][ T62] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.557374][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.589750][ T5837] veth1_vlan: entered promiscuous mode [ 86.600396][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.626691][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.645003][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.682151][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.692526][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.713570][ T5835] veth0_macvtap: entered promiscuous mode [ 86.771408][ T5835] veth1_macvtap: entered promiscuous mode [ 86.819472][ T5837] veth0_macvtap: entered promiscuous mode [ 86.937240][ T5837] veth1_macvtap: entered promiscuous mode [ 86.958771][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.970516][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.995080][ T5832] Bluetooth: hci0: command tx timeout [ 87.047308][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.072796][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.097047][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.139314][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.155756][ T5832] Bluetooth: hci1: command tx timeout [ 87.179965][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.189456][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.208502][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.234734][ T5832] Bluetooth: hci2: command tx timeout [ 87.260034][ T153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.273843][ T153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.287645][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.313438][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.321617][ T5832] Bluetooth: hci3: command tx timeout [ 87.325939][ T5832] Bluetooth: hci4: command tx timeout [ 87.338820][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.367084][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.370353][ T153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.392373][ T153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.418988][ T62] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.428779][ T62] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.469083][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.499496][ T62] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.588373][ T5839] veth0_vlan: entered promiscuous mode [ 87.708724][ T5839] veth1_vlan: entered promiscuous mode [ 87.772007][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.791023][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.913572][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.933476][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.933674][ T5839] veth0_macvtap: entered promiscuous mode [ 88.046044][ T5839] veth1_macvtap: entered promiscuous mode [ 88.056207][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.080347][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.132570][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.149298][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.158404][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.209221][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.258590][ T153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.279362][ T153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.301823][ T153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.343928][ T153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.671653][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.698340][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 88.701240][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.765655][ T5962] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4'. [ 88.790263][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.799930][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.086117][ T5832] Bluetooth: hci0: command tx timeout [ 89.238957][ T5832] Bluetooth: hci1: command tx timeout [ 89.315621][ T5832] Bluetooth: hci2: command tx timeout [ 89.395370][ T5832] Bluetooth: hci4: command tx timeout [ 89.395879][ T5841] Bluetooth: hci3: command tx timeout [ 89.788979][ T5986] netlink: 'syz.2.12': attribute type 10 has an invalid length. [ 89.836231][ T5986] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12'. [ 91.400212][ T6013] ªªªªª»: renamed from caif0 [ 91.698667][ T6016] netlink: 76 bytes leftover after parsing attributes in process `syz.1.20'. [ 91.895988][ T10] cfg80211: failed to load regulatory.db [ 92.192722][ T6034] netlink: 'syz.1.26': attribute type 2 has an invalid length. [ 92.251303][ T6034] netlink: 'syz.1.26': attribute type 8 has an invalid length. [ 92.299785][ T6034] netlink: 132 bytes leftover after parsing attributes in process `syz.1.26'. [ 93.063396][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 93.408337][ T6052] warning: `syz.0.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.485807][ T6044] netlink: 'syz.4.29': attribute type 10 has an invalid length. [ 93.515496][ T6044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.29'. [ 93.563534][ T6044] veth0_vlan: entered allmulticast mode [ 93.582813][ T6044] bridge0: port 3(veth0_vlan) entered blocking state [ 93.598061][ T6044] bridge0: port 3(veth0_vlan) entered disabled state [ 93.930214][ T6061] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 94.708320][ T6044] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 94.984888][ T6078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.008446][ T6075] netlink: 'syz.0.38': attribute type 39 has an invalid length. [ 95.150475][ T6086] netlink: 'syz.2.41': attribute type 21 has an invalid length. [ 95.168630][ T6086] netlink: 156 bytes leftover after parsing attributes in process `syz.2.41'. [ 95.238743][ T6080] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 95.313549][ T6082] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 95.415396][ T6086] netlink: 10 bytes leftover after parsing attributes in process `syz.2.41'. [ 95.748699][ T6100] netlink: 128 bytes leftover after parsing attributes in process `syz.0.43'. [ 95.793569][ T6100] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 96.449834][ T6123] netlink: 'syz.1.53': attribute type 10 has an invalid length. [ 96.581068][ T6127] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 96.878062][ T6123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.202480][ T6123] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 97.213866][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.226740][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.243662][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.261509][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.313465][ T6126] bond0: (slave batadv0): Releasing backup interface [ 97.619203][ T6135] netlink: 'syz.2.54': attribute type 3 has an invalid length. [ 98.029595][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 98.172828][ T6157] openvswitch: netlink: IP tunnel dst address not specified [ 98.202099][ T6155] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 98.228222][ T6155] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 98.272159][ T6157] Zero length message leads to an empty skb [ 98.842835][ T6169] netlink: 56 bytes leftover after parsing attributes in process `syz.4.68'. [ 99.012751][ T6176] netlink: 'syz.0.69': attribute type 39 has an invalid length. [ 99.182925][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 100.035212][ T6186] veth0_macvtap: left promiscuous mode [ 100.056506][ T6191] netlink: 'syz.0.74': attribute type 21 has an invalid length. [ 100.209901][ T6197] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.76'. [ 100.500632][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 100.517357][ T6191] netlink: 132 bytes leftover after parsing attributes in process `syz.0.74'. [ 100.529016][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 100.542445][ T6191] netlink: 'syz.0.74': attribute type 1 has an invalid length. [ 101.019509][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.83'. [ 101.290078][ T6219] ªªªªª»: renamed from caif0 [ 101.559397][ T6239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.85'. [ 102.010104][ T6253] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 102.050865][ T5496] veth0_macvtap: entered promiscuous mode [ 102.153778][ T6246] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 102.326695][ T6259] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.91'. [ 107.237739][ T5841] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 107.631178][ T5841] Bluetooth: hci2: unexpected event 0x18 length: 151 > 23 [ 107.676749][ T6332] tap0: tun_chr_ioctl cmd 2147767511 [ 107.757508][ T6332] tap0: tun_chr_ioctl cmd 1074025675 [ 107.813685][ T6332] tap0: persist disabled [ 107.844610][ T6336] netlink: 'syz.0.101': attribute type 6 has an invalid length. [ 107.856716][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 108.310603][ T6360] ======================================================= [ 108.310603][ T6360] WARNING: The mand mount option has been deprecated and [ 108.310603][ T6360] and is ignored by this kernel. Remove the mand [ 108.310603][ T6360] option from the mount to silence this warning. [ 108.310603][ T6360] ======================================================= [ 108.405671][ T6356] netlink: 'syz.3.108': attribute type 1 has an invalid length. [ 109.194264][ T6392] netlink: zone id is out of range [ 109.226869][ T6392] netlink: zone id is out of range [ 109.232555][ T6393] netlink: 277 bytes leftover after parsing attributes in process `syz.4.116'. [ 109.250085][ T6392] netlink: zone id is out of range [ 109.276981][ T6392] netlink: zone id is out of range [ 109.415804][ T6384] syzkaller0: entered promiscuous mode [ 109.433934][ T6384] syzkaller0: entered allmulticast mode [ 109.441003][ T6396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.469521][ T6392] netlink: set zone limit has 4 unknown bytes [ 110.982646][ T6417] netlink: 'syz.2.122': attribute type 1 has an invalid length. [ 112.539537][ T6445] netlink: 68 bytes leftover after parsing attributes in process `syz.2.129'. [ 113.486357][ T6457] ref_ctr_offset mismatch. inode: 0x9c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 113.894315][ T6463] netlink: 'syz.3.136': attribute type 6 has an invalid length. [ 113.915993][ T6463] netlink: 360 bytes leftover after parsing attributes in process `syz.3.136'. [ 113.978980][ T6461] netlink: 'syz.2.135': attribute type 1 has an invalid length. [ 115.685025][ T6497] netlink: 'syz.4.144': attribute type 10 has an invalid length. [ 115.750462][ T6497] netlink: 55 bytes leftover after parsing attributes in process `syz.4.144'. [ 115.796714][ T6485] netlink: 'syz.0.140': attribute type 3 has an invalid length. [ 116.059890][ T6493] netlink: 'syz.4.144': attribute type 1 has an invalid length. [ 116.379168][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.149'. [ 116.471127][ T6519] netlink: 'syz.2.149': attribute type 4 has an invalid length. [ 116.518926][ T6514] openvswitch: netlink: Flow actions attr not present in new flow. [ 116.545556][ T6519] netlink: 152 bytes leftover after parsing attributes in process `syz.2.149'. [ 116.569614][ T6520] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 116.614311][ T6519] .`: renamed from bond0 (while UP) [ 117.181102][ T6531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.158'. [ 118.521919][ T6569] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.170'. [ 120.260203][ T6617] netlink: 36 bytes leftover after parsing attributes in process `syz.1.181'. [ 120.338197][ T6613] netlink: 20 bytes leftover after parsing attributes in process `syz.1.181'. [ 122.119306][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 122.147500][ T6663] openvswitch: netlink: Flow actions attr not present in new flow. [ 122.358080][ T6668] netlink: 'syz.4.193': attribute type 4 has an invalid length. [ 122.468784][ T6670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.195'. [ 122.671652][ T5841] Bluetooth: hci0: unexpected event 0x1d length: 15 > 5 [ 122.689846][ T6674] bridge_slave_1: left allmulticast mode [ 122.709599][ T6674] bridge_slave_1: left promiscuous mode [ 122.756921][ T6674] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.922086][ T6683] netlink: 36 bytes leftover after parsing attributes in process `syz.4.200'. [ 122.948743][ T6683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.200'. [ 125.584355][ T6674] bridge_slave_0: left allmulticast mode [ 125.592310][ T6674] bridge_slave_0: left promiscuous mode [ 125.598937][ T6674] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.778501][ T6689] netlink: 'syz.1.202': attribute type 10 has an invalid length. [ 125.823768][ T6689] bond0: (slave bond_slave_0): Releasing backup interface [ 126.337792][ T6710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.867167][ T6732] openvswitch: netlink: Missing key (keys=1040, expected=10000000) [ 127.139053][ T6742] netlink: 'syz.4.218': attribute type 6 has an invalid length. [ 127.176377][ T6742] netlink: 3936 bytes leftover after parsing attributes in process `syz.4.218'. [ 127.212078][ T6742] netlink: 'syz.4.218': attribute type 1 has an invalid length. [ 127.518581][ T6758] netlink: 120 bytes leftover after parsing attributes in process `syz.4.222'. [ 128.674354][ T5841] Bluetooth: hci3: unexpected event 0x3d length: 15 > 14 [ 128.823306][ T6786] netlink: 'syz.0.230': attribute type 4 has an invalid length. [ 129.146189][ T6773] syz.1.226 (6773) used greatest stack depth: 15672 bytes left [ 129.321884][ T6787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.687934][ T6810] netlink: 840 bytes leftover after parsing attributes in process `syz.1.245'. [ 130.152804][ T6821] netlink: 'syz.0.237': attribute type 61 has an invalid length. [ 131.531211][ T6851] netlink: 'syz.4.243': attribute type 10 has an invalid length. [ 131.648433][ T6851] netlink: 55 bytes leftover after parsing attributes in process `syz.4.243'. [ 132.852472][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.863370][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.942336][ T6871] netlink: 'syz.1.247': attribute type 3 has an invalid length. [ 133.039608][ T6889] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.252'. [ 134.500734][ T6918] netlink: 14 bytes leftover after parsing attributes in process `syz.0.261'. [ 134.521423][ T6916] netlink: 'syz.2.260': attribute type 3 has an invalid length. [ 134.572514][ T6918] hsr_slave_0: left promiscuous mode [ 134.638637][ T6918] hsr_slave_1: left promiscuous mode [ 135.537607][ T6937] netlink: 32 bytes leftover after parsing attributes in process `syz.2.267'. [ 135.755891][ T6937] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.267'. [ 136.425738][ T6958] netlink: 220 bytes leftover after parsing attributes in process `syz.1.274'. [ 136.566927][ T6956] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 136.884639][ T6967] netlink: 'syz.3.276': attribute type 10 has an invalid length. [ 136.901557][ T6967] netlink: 140 bytes leftover after parsing attributes in process `syz.3.276'. [ 136.953177][ T6967] netlink: 'syz.3.276': attribute type 2 has an invalid length. [ 136.989106][ T6967] netlink: 20 bytes leftover after parsing attributes in process `syz.3.276'. [ 137.032714][ T6968] netlink: 'syz.3.276': attribute type 10 has an invalid length. [ 137.053412][ T6968] netlink: 140 bytes leftover after parsing attributes in process `syz.3.276'. [ 137.162834][ T6970] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 137.167392][ T6972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.278'. [ 137.179136][ T6970] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 137.934655][ T6993] netlink: 132 bytes leftover after parsing attributes in process `syz.3.285'. [ 137.959082][ T6993] netlink: 'syz.3.285': attribute type 2 has an invalid length. [ 138.041075][ T6998] netlink: 'syz.3.285': attribute type 2 has an invalid length. [ 138.108801][ T6993] !¼Þ: entered promiscuous mode [ 138.128206][ T6998] !¼Þ: left promiscuous mode [ 138.351360][ T7006] netlink: 20 bytes leftover after parsing attributes in process `syz.2.289'. [ 138.482263][ T7009] netlink: 17780 bytes leftover after parsing attributes in process `syz.1.290'. [ 139.005812][ T7020] netlink: 'syz.4.295': attribute type 10 has an invalid length. [ 139.026393][ T7018] netlink: 56 bytes leftover after parsing attributes in process `syz.3.294'. [ 139.063060][ T7020] bond0: (slave bond_slave_0): Releasing backup interface [ 139.376637][ T7026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.297'. [ 139.546513][ T7031] netlink: 14 bytes leftover after parsing attributes in process `syz.2.300'. [ 139.703075][ T7031] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.787182][ T7031] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.840736][ T7031] .` (unregistering): Released all slaves [ 140.979935][ T7045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.022046][ T7050] netlink: 36 bytes leftover after parsing attributes in process `syz.0.306'. [ 141.084995][ T7045] netlink: 164 bytes leftover after parsing attributes in process `syz.3.304'. [ 141.097352][ T7047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.306'. [ 141.117571][ T7045] netlink: 36 bytes leftover after parsing attributes in process `syz.3.304'. [ 141.135645][ T7052] netlink: 'syz.4.307': attribute type 2 has an invalid length. [ 141.561445][ T7052] hmac(sha2: entered promiscuous mode [ 144.480006][ T7090] netlink: 'syz.2.322': attribute type 21 has an invalid length. [ 144.491378][ T7090] IPv6: NLM_F_CREATE should be specified when creating new route [ 144.688829][ T7098] nbd: must specify a device to reconfigure [ 144.697388][ T7092] netlink: 'syz.1.321': attribute type 12 has an invalid length. [ 144.729963][ T7092] netlink: 132 bytes leftover after parsing attributes in process `syz.1.321'. [ 144.771899][ T7100] netlink: 'syz.4.325': attribute type 2 has an invalid length. [ 144.865230][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 145.061450][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.328'. [ 146.520707][ T7147] netlink: 'syz.3.340': attribute type 10 has an invalid length. [ 146.536798][ T7147] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 146.578375][ T7149] openvswitch: netlink: EtherType 0 is less than min 600 [ 146.613523][ T7155] netlink: 104 bytes leftover after parsing attributes in process `syz.2.344'. [ 146.764634][ T5841] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 150.377511][ T7192] netlink: 60 bytes leftover after parsing attributes in process `syz.0.353'. [ 150.442072][ T7192] unsupported nlmsg_type 40 [ 150.478532][ T5841] Bluetooth: hci1: unexpected subevent 0x18 length: 150 > 19 [ 150.486581][ T5841] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 151.081349][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.357'. [ 151.302083][ T7205] netlink: 5204 bytes leftover after parsing attributes in process `syz.3.358'. [ 151.401602][ T7213] netlink: 'syz.0.361': attribute type 21 has an invalid length. [ 151.440965][ T7213] netlink: 164 bytes leftover after parsing attributes in process `syz.0.361'. [ 151.559678][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 151.839656][ T7218] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.862382][ T7218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.871017][ T7218] IPv6: NLM_F_CREATE should be set when creating new route [ 151.926130][ T7228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.933425][ T7228] IPv6: NLM_F_CREATE should be set when creating new route [ 152.102857][ T7229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.365'. [ 152.137936][ T7225] netlink: set zone limit has 4 unknown bytes [ 152.466677][ T7243] netlink: 52 bytes leftover after parsing attributes in process `syz.3.369'. [ 152.616999][ T7252] netlink: 5192 bytes leftover after parsing attributes in process `syz.4.370'. [ 152.704274][ T7231] syzkaller0: entered promiscuous mode [ 152.720238][ T7231] syzkaller0: entered allmulticast mode [ 153.203742][ T7271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.546285][ T7279] netlink: 'syz.2.378': attribute type 1 has an invalid length. [ 155.629188][ T7308] netlink: 'syz.1.386': attribute type 39 has an invalid length. [ 155.675067][ T7306] netlink: 68 bytes leftover after parsing attributes in process `syz.4.389'. [ 155.722464][ T7297] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 155.736290][ T7306] syz.4.389: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 155.785350][ T7306] CPU: 1 UID: 0 PID: 7306 Comm: syz.4.389 Not tainted syzkaller #0 PREEMPT(full) [ 155.785379][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 155.785401][ T7306] Call Trace: [ 155.785417][ T7306] [ 155.785430][ T7306] dump_stack_lvl+0xe8/0x150 [ 155.785489][ T7306] warn_alloc+0x249/0x340 [ 155.785562][ T7306] ? __pfx_warn_alloc+0x10/0x10 [ 155.785638][ T7306] ? kasan_save_track+0x4f/0x80 [ 155.785665][ T7306] ? kasan_save_track+0x3e/0x80 [ 155.785690][ T7306] ? __kasan_kmalloc+0x93/0xb0 [ 155.785717][ T7306] ? __kmalloc_cache_noprof+0x31c/0x660 [ 155.785745][ T7306] ? xskq_create+0x56/0x170 [ 155.785777][ T7306] ? xsk_setsockopt+0x603/0x990 [ 155.785801][ T7306] ? do_sock_setsockopt+0x17c/0x1b0 [ 155.785826][ T7306] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 155.785850][ T7306] ? do_syscall_64+0x15f/0xf80 [ 155.785907][ T7306] __vmalloc_node_range_noprof+0x132/0x1750 [ 155.786114][ T7306] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 155.786197][ T7306] ? __kasan_kmalloc+0x93/0xb0 [ 155.786267][ T7306] vmalloc_user_noprof+0xad/0xe0 [ 155.786309][ T7306] ? xskq_create+0xbf/0x170 [ 155.786352][ T7306] xskq_create+0xbf/0x170 [ 155.786406][ T7306] xsk_init_queue+0x8a/0xe0 [ 155.786461][ T7306] xsk_setsockopt+0x603/0x990 [ 155.786514][ T7306] ? __pfx_xsk_setsockopt+0x10/0x10 [ 155.786551][ T7306] ? __pfx_aa_sk_perm+0x10/0x10 [ 155.786611][ T7306] ? __fget_files+0x2a/0x420 [ 155.786633][ T7306] ? aa_sock_opt_perm+0xff/0x1a0 [ 155.786695][ T7306] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 155.786723][ T7306] ? __pfx_xsk_setsockopt+0x10/0x10 [ 155.786769][ T7306] do_sock_setsockopt+0x17c/0x1b0 [ 155.786830][ T7306] __x64_sys_setsockopt+0x13d/0x1b0 [ 155.786878][ T7306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.786918][ T7306] do_syscall_64+0x15f/0xf80 [ 155.786963][ T7306] ? clear_bhb_loop+0x40/0x90 [ 155.787013][ T7306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.787041][ T7306] RIP: 0033:0x7f04f5b9cdd9 [ 155.787080][ T7306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.787097][ T7306] RSP: 002b:00007f04f6adb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 155.787119][ T7306] RAX: ffffffffffffffda RBX: 00007f04f5e15fa0 RCX: 00007f04f5b9cdd9 [ 155.787135][ T7306] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 155.787146][ T7306] RBP: 00007f04f5c32d69 R08: 0000000000000004 R09: 0000000000000000 [ 155.787159][ T7306] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 155.787184][ T7306] R13: 00007f04f5e16038 R14: 00007f04f5e15fa0 R15: 00007ffe192baeb8 [ 155.787299][ T7306] [ 156.112300][ T7306] Mem-Info: [ 156.159534][ T7306] active_anon:7887 inactive_anon:0 isolated_anon:0 [ 156.159534][ T7306] active_file:16900 inactive_file:39965 isolated_file:0 [ 156.159534][ T7306] unevictable:768 dirty:420 writeback:0 [ 156.159534][ T7306] slab_reclaimable:10386 slab_unreclaimable:98800 [ 156.159534][ T7306] mapped:30429 shmem:3222 pagetables:1209 [ 156.159534][ T7306] sec_pagetables:0 bounce:0 [ 156.159534][ T7306] kernel_misc_reclaimable:0 [ 156.159534][ T7306] free:1303150 free_pcp:20419 free_cma:0 [ 156.233762][ T7306] Node 0 active_anon:29148kB inactive_anon:0kB active_file:67600kB inactive_file:159660kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121716kB dirty:1680kB writeback:0kB shmem:8952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12248kB pagetables:4688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 156.287245][ T7306] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 156.326877][ T7306] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 156.358433][ T7306] lowmem_reserve[]: 0 2491 2491 2491 2491 [ 156.379758][ T7306] Node 0 DMA32 free:1260172kB boost:0kB min:34180kB low:42724kB high:51268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24148kB inactive_anon:0kB active_file:67600kB inactive_file:159660kB unevictable:1536kB writepending:1680kB zspages:0kB present:3129332kB managed:2551076kB mlocked:0kB bounce:0kB free_pcp:80960kB local_pcp:28136kB free_cma:0kB [ 156.429409][ T7306] lowmem_reserve[]: 0 0 0 0 0 [ 156.435975][ T7306] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:596kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 156.487867][ T7306] lowmem_reserve[]: 0 0 0 0 0 [ 156.501337][ T7306] Node 1 Normal free:3945192kB boost:0kB min:55712kB low:69640kB high:83568kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 156.580882][ T7306] lowmem_reserve[]: 0 0 0 0 0 [ 156.609673][ T7306] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 156.643510][ T7306] Node 0 DMA32: 1191*4kB (UME) 1292*8kB (UME) 355*16kB (UME) 231*32kB (UME) 99*64kB (UME) 93*128kB (UM) 19*256kB (UME) 40*512kB (UME) 24*1024kB (UME) 3*2048kB (M) 283*4096kB (M) = 1261644kB [ 156.680962][ T7306] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 156.699365][ T7306] Node 1 Normal: 2*4kB (U) 4*8kB (UM) 6*16kB (UM) 7*32kB (UM) 8*64kB (UM) 5*128kB (UM) 5*256kB (UM) 6*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3945192kB [ 156.769453][ T7306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.797418][ T7306] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.833774][ T7306] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.871132][ T7306] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.885896][ T7323] openvswitch: netlink: IP tunnel dst address not specified [ 156.896447][ T7321] netlink: 'syz.3.392': attribute type 6 has an invalid length. [ 156.912029][ T7306] 58233 total pagecache pages [ 156.934117][ T7306] 0 pages in swap cache [ 156.950347][ T7306] Free swap = 124996kB [ 156.954914][ T7306] Total swap = 124996kB [ 156.972070][ T7306] 2097051 pages RAM [ 156.994492][ T7306] 0 pages HighMem/MovableOnly [ 157.012858][ T7306] 427518 pages reserved [ 157.023647][ T7306] 0 pages cma reserved [ 157.208602][ T7333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.292987][ T7333] netlink: 164 bytes leftover after parsing attributes in process `syz.0.396'. [ 157.327823][ T7333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.396'. [ 157.689659][ T7358] netlink: 40 bytes leftover after parsing attributes in process `syz.3.404'. [ 157.892914][ T7347] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 157.920148][ T7352] netlink: 'syz.2.403': attribute type 10 has an invalid length. [ 157.940702][ T7352] netlink: 55 bytes leftover after parsing attributes in process `syz.2.403'. [ 158.743779][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'. [ 159.088012][ T7397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.159459][ T7401] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.412'. [ 159.203944][ T7397] netlink: 164 bytes leftover after parsing attributes in process `syz.2.413'. [ 159.262005][ T7397] netlink: 36 bytes leftover after parsing attributes in process `syz.2.413'. [ 159.450719][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.417'. [ 159.470404][ T7412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.416985][ T7439] openvswitch: netlink: Flow actions attr not present in new flow. [ 160.724096][ T7449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.806205][ T7451] __nla_validate_parse: 3 callbacks suppressed [ 160.806263][ T7451] netlink: 5204 bytes leftover after parsing attributes in process `syz.4.431'. [ 161.650865][ T7478] netlink: 300 bytes leftover after parsing attributes in process `syz.1.439'. [ 161.669241][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 162.306944][ T7492] netlink: 'syz.0.444': attribute type 21 has an invalid length. [ 162.511509][ T7496] syz.0.445 uses obsolete (PF_INET,SOCK_PACKET) [ 162.799529][ T7504] netlink: 'syz.1.457': attribute type 14 has an invalid length. [ 163.215043][ T7521] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz1' [ 163.235956][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.451'. [ 165.182974][ T7543] netlink: 'syz.2.461': attribute type 14 has an invalid length. [ 165.526131][ T7552] netlink: 36 bytes leftover after parsing attributes in process `syz.4.466'. [ 166.177274][ T7573] netlink: 'syz.0.473': attribute type 14 has an invalid length. [ 166.328850][ T7566] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 166.392578][ T7575] netlink: 'syz.3.474': attribute type 10 has an invalid length. [ 166.649804][ T7575] team0: Device wg1 is of different type [ 166.742964][ T7586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.478'. [ 166.796549][ T7586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.478'. [ 168.212894][ T7611] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.697638][ T7611] bridge_slave_0 (unregistering): left allmulticast mode [ 168.725814][ T7611] bridge_slave_0 (unregistering): left promiscuous mode [ 168.753318][ T7611] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.949780][ T7629] netlink: 132 bytes leftover after parsing attributes in process `syz.1.491'. [ 169.126770][ T7633] netlink: 14 bytes leftover after parsing attributes in process `syz.4.494'. [ 169.198109][ T7638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.268600][ T7633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.278996][ T7638] netlink: 164 bytes leftover after parsing attributes in process `syz.1.495'. [ 169.310553][ T7638] netlink: 36 bytes leftover after parsing attributes in process `syz.1.495'. [ 169.349353][ T7633] bond0 (unregistering): Released all slaves [ 169.515660][ T7640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.527000][ T7640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.560294][ T7640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.587707][ T7640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.119761][ T7662] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.502'. [ 170.553640][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'. [ 170.590851][ T7674] netlink: 44 bytes leftover after parsing attributes in process `syz.2.504'. [ 172.413219][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'. [ 172.564078][ T5841] Bluetooth: hci0: unexpected event 0x3c length: 15 > 7 [ 173.786920][ T7736] netlink: 28 bytes leftover after parsing attributes in process `syz.0.519'. [ 173.807083][ T7736] netlink: 28 bytes leftover after parsing attributes in process `syz.0.519'. [ 173.852557][ T7740] netlink: 'syz.0.519': attribute type 16 has an invalid length. [ 174.067476][ T7740] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.208221][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.220715][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.492625][ T7765] netlink: 'syz.3.523': attribute type 21 has an invalid length. [ 174.512457][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.517765][ T7765] IPv6: NLM_F_CREATE should be specified when creating new route [ 174.549190][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.580181][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.609481][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.960214][ T7787] netlink: 96 bytes leftover after parsing attributes in process `syz.3.527'. [ 175.005499][ T7789] netlink: 52 bytes leftover after parsing attributes in process `syz.1.528'. [ 175.610955][ T5841] Bluetooth: hci3: unexpected event 0x20 length: 15 > 7 [ 176.049760][ T7828] netlink: 'syz.0.540': attribute type 2 has an invalid length. [ 176.095893][ T7828] tipc: Started in network mode [ 176.102626][ T7828] tipc: Node identity 1340008, cluster identity 4711 [ 176.114079][ T7828] tipc: Node number set to 20185096 [ 176.201125][ T7833] netlink: 'syz.1.541': attribute type 10 has an invalid length. [ 176.245808][ T7837] netlink: 'syz.2.542': attribute type 10 has an invalid length. [ 176.333175][ T7833] team0: Device wg1 is of different type [ 176.416416][ T7837] team0 (unregistering): Port device team_slave_0 removed [ 176.472649][ T7837] team0 (unregistering): Port device team_slave_1 removed [ 176.667048][ T5841] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 177.220042][ T7861] netdevsim netdevsim4: Direct firmware load for .net/syz1 failed with error -2 [ 177.240608][ T7861] netdevsim netdevsim4: Falling back to sysfs fallback for: .net/syz1 [ 177.993813][ T7878] netlink: 'syz.3.552': attribute type 1 has an invalid length. [ 178.033385][ T7878] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.552'. [ 180.332574][ T7925] netlink: 'syz.3.554': attribute type 3 has an invalid length. [ 180.379620][ T7924] netlink: 'syz.4.555': attribute type 1 has an invalid length. [ 180.403478][ T7924] netlink: 212400 bytes leftover after parsing attributes in process `syz.4.555'. [ 180.652223][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 180.696331][ T7932] netlink: 64 bytes leftover after parsing attributes in process `syz.1.558'. [ 180.961755][ T7936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.998434][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.562'. [ 181.055659][ T7946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.562'. [ 181.212946][ T7952] netlink: 52 bytes leftover after parsing attributes in process `syz.1.562'. [ 181.230641][ T7950] netlink: 'syz.0.564': attribute type 10 has an invalid length. [ 181.319285][ T7950] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 181.366740][ T7950] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 181.461407][ T7951] netlink: 64 bytes leftover after parsing attributes in process `syz.4.563'. [ 181.662468][ T7967] netlink: 12714 bytes leftover after parsing attributes in process `syz.2.566'. [ 182.560867][ T7977] netlink: 120 bytes leftover after parsing attributes in process `syz.1.568'. [ 183.596981][ T7999] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 183.630369][ T7999] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 183.684206][ T7998] delete_channel: no stack [ 183.873923][ T8008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.578'. [ 184.359075][ T8022] netlink: 12714 bytes leftover after parsing attributes in process `syz.0.582'. [ 184.753328][ T8029] netlink: 'syz.1.585': attribute type 10 has an invalid length. [ 186.460012][ T8062] netlink: 'syz.1.594': attribute type 1 has an invalid length. [ 186.528629][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 187.956177][ T8093] netlink: 'syz.1.603': attribute type 39 has an invalid length. [ 189.003508][ T8115] netlink: 24 bytes leftover after parsing attributes in process `syz.2.608'. [ 189.634717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.686606][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'. [ 190.169678][ T8105] delete_channel: no stack [ 190.628368][ T8145] netlink: 'syz.4.618': attribute type 39 has an invalid length. [ 191.719929][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.622'. [ 191.874662][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.954505][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.626'. [ 192.344249][ T8175] delete_channel: no stack [ 192.624205][ T8182] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 192.813489][ T8189] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 192.939105][ T8194] netlink: 'syz.1.634': attribute type 10 has an invalid length. [ 192.970290][ T8194] netlink: 40 bytes leftover after parsing attributes in process `syz.1.634'. [ 193.063814][ T8194] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 193.338369][ T8208] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.636'. [ 193.874762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.890917][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.640'. [ 194.280829][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.291177][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.668819][ T8236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.093817][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.648'. [ 195.876267][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.160741][ T8273] netlink: 'syz.0.656': attribute type 21 has an invalid length. [ 197.180536][ T8273] IPv6: NLM_F_CREATE should be specified when creating new route [ 197.191519][ T8273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.198917][ T8273] IPv6: NLM_F_CREATE should be set when creating new route [ 197.206528][ T8273] IPv6: NLM_F_CREATE should be set when creating new route [ 197.214020][ T8273] IPv6: NLM_F_CREATE should be set when creating new route [ 197.505969][ T8283] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.660'. [ 197.878799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.874549][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.450191][ T8303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.666'. [ 200.979193][ T8323] netlink: 'syz.3.673': attribute type 4 has an invalid length. [ 201.748361][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 201.874633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.425092][ T8370] netlink: 'syz.2.689': attribute type 10 has an invalid length. [ 203.455697][ T8370] netlink: 40 bytes leftover after parsing attributes in process `syz.2.689'. [ 203.841449][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.695'. [ 203.874633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.921212][ T8387] netlink: 'syz.2.696': attribute type 1 has an invalid length. [ 204.055733][ T8385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.695'. [ 204.082951][ T5841] Bluetooth: hci1: Malformed LE Event: 0x1d [ 204.098888][ T8397] netlink: 52 bytes leftover after parsing attributes in process `syz.3.695'. [ 204.460749][ T8409] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.503069][ T8409] IPv6: NLM_F_REPLACE set, but no existing node found! [ 204.801851][ T8423] netlink: 104 bytes leftover after parsing attributes in process `syz.4.706'. [ 205.158920][ T8435] netlink: 68 bytes leftover after parsing attributes in process `syz.1.714'. [ 205.880085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.235664][ T8453] nbd: must specify a device to reconfigure [ 206.266387][ T8447] netlink: 'syz.2.718': attribute type 1 has an invalid length. [ 206.337711][ T8458] lo speed is unknown, defaulting to 1000 [ 206.353799][ T8458] lo speed is unknown, defaulting to 1000 [ 206.393905][ T8458] lo speed is unknown, defaulting to 1000 [ 206.403570][ T8458] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 206.420296][ T8458] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 206.458127][ T8458] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 206.481074][ T8460] netlink: 36 bytes leftover after parsing attributes in process `syz.0.722'. [ 206.518970][ T8458] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 206.538334][ T8458] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 206.594730][ T8415] Bluetooth: hci0: command 0x0406 tx timeout [ 206.597710][ T8413] Bluetooth: hci4: command 0x0406 tx timeout [ 206.611736][ T8415] Bluetooth: hci2: command 0x0406 tx timeout [ 206.614956][ T8413] Bluetooth: hci3: command 0x0406 tx timeout [ 206.622072][ T8411] Bluetooth: hci1: command 0x0406 tx timeout [ 206.959839][ T8458] lo speed is unknown, defaulting to 1000 [ 207.874558][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.875100][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.043587][ T8458] lo speed is unknown, defaulting to 1000 [ 210.051444][ T8458] lo speed is unknown, defaulting to 1000 [ 210.059376][ T8458] lo speed is unknown, defaulting to 1000 [ 210.111643][ T8458] lo speed is unknown, defaulting to 1000 [ 210.241128][ T8484] netlink: 3783 bytes leftover after parsing attributes in process `syz.1.729'. [ 210.370854][ T8490] proc: Unknown parameter 'donQ_hash' [ 210.451851][ T8490] netlink: 44 bytes leftover after parsing attributes in process `syz.3.730'. [ 210.612336][ T8500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.995513][ T8501] netlink: 'syz.4.733': attribute type 3 has an invalid length. [ 211.011882][ T8505] sctp: [Deprecated]: syz.2.736 (pid 8505) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.011882][ T8505] Use struct sctp_sack_info instead [ 211.569768][ T8519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.740'. [ 211.570649][ T8521] netlink: 'syz.0.741': attribute type 9 has an invalid length. [ 211.638288][ T8519] netlink: 5192 bytes leftover after parsing attributes in process `syz.2.740'. [ 211.652861][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'. [ 211.874582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.913336][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 212.042271][ T8532] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.746'. [ 212.450834][ T8548] bridge_slave_1: left allmulticast mode [ 212.458843][ T8548] bridge_slave_1: left promiscuous mode [ 212.494227][ T8548] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.577651][ T8548] bridge_slave_0: left allmulticast mode [ 212.583641][ T8548] bridge_slave_0: left promiscuous mode [ 212.599516][ T8552] netlink: 220 bytes leftover after parsing attributes in process `syz.0.751'. [ 212.601611][ T8548] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.829161][ T8556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.753'. [ 213.171296][ T8564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.757'. [ 213.532052][ T8569] lo speed is unknown, defaulting to 1000 [ 213.874535][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.499850][ T8601] netlink: 220 bytes leftover after parsing attributes in process `syz.2.766'. [ 214.811992][ T8603] netlink: 120 bytes leftover after parsing attributes in process `syz.4.767'. [ 215.759840][ T8636] netlink: 'syz.4.778': attribute type 16 has an invalid length. [ 215.874591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.397511][ T8646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.081518][ T8656] __nla_validate_parse: 1 callbacks suppressed [ 217.081537][ T8656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.781'. [ 217.529349][ T8656] IPv6: NLM_F_CREATE should be specified when creating new route [ 217.622331][ T8636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.700466][ T8659] netlink: 120 bytes leftover after parsing attributes in process `syz.2.782'. [ 217.717463][ T8636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.874927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.596199][ T802] lo speed is unknown, defaulting to 1000 [ 218.610199][ T802] syz2: Port: 1 Link DOWN [ 218.736106][ T8667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.783'. [ 218.799039][ T1114] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.847989][ T1114] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.899564][ T1114] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.921924][ T1114] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.187857][ T8680] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.881514][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.702055][ T8705] netlink: 'syz.4.792': attribute type 1 has an invalid length. [ 221.874592][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.051709][ T8747] netlink: 16 bytes leftover after parsing attributes in process `syz.3.797'. [ 223.255802][ T8753] netlink: 132 bytes leftover after parsing attributes in process `syz.4.796'. [ 223.875343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.890904][ T8758] netlink: 104 bytes leftover after parsing attributes in process `syz.2.799'. [ 225.002699][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.874787][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.326430][ T8763] netlink: 'syz.1.802': attribute type 6 has an invalid length. [ 226.390677][ T8765] nbd: must specify a device to reconfigure [ 226.693768][ T8773] netlink: 32 bytes leftover after parsing attributes in process `syz.4.805'. [ 226.703163][ T8775] netlink: 'syz.3.804': attribute type 1 has an invalid length. [ 226.756524][ T8773] netlink: 32 bytes leftover after parsing attributes in process `syz.4.805'. [ 227.184808][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.810'. [ 227.383488][ T8794] netlink: 'syz.2.812': attribute type 10 has an invalid length. [ 227.880403][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.943464][ T8804] hsr0 speed is unknown, defaulting to 1000 [ 227.970271][ T8804] hsr0 speed is unknown, defaulting to 1000 [ 228.188639][ T8808] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 228.248115][ T8804] hsr0 speed is unknown, defaulting to 1000 [ 228.309133][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'. [ 228.330859][ T8804] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 228.370090][ T8804] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 228.434725][ T8804] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 228.675784][ T8813] netlink: 'syz.0.818': attribute type 62 has an invalid length. [ 228.687026][ T8804] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 228.866146][ T8804] hsr0 speed is unknown, defaulting to 1000 [ 228.892729][ T8804] hsr0 speed is unknown, defaulting to 1000 [ 228.973535][ T8804] hsr0 speed is unknown, defaulting to 1000 [ 229.018051][ T8804] hsr0 speed is unknown, defaulting to 1000 [ 229.063838][ T8804] hsr0 speed is unknown, defaulting to 1000 [ 229.320203][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.824'. [ 229.874660][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.889699][ T8846] nbd: must specify a device to reconfigure [ 230.035711][ T8848] netlink: 132 bytes leftover after parsing attributes in process `syz.2.830'. [ 230.040467][ T8846] siw: device registration error -23 [ 231.013032][ T8857] netlink: 'syz.0.832': attribute type 21 has an invalid length. [ 231.020806][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 231.020908][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 231.874550][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.217903][ T8857] netlink: 'syz.0.832': attribute type 2 has an invalid length. [ 233.225965][ T8857] netlink: 132 bytes leftover after parsing attributes in process `syz.0.832'. [ 233.286946][ T8855] lo speed is unknown, defaulting to 1000 [ 233.313407][ T8865] nbd: must specify a device to reconfigure [ 233.329195][ T8855] hsr0 speed is unknown, defaulting to 1000 [ 233.428544][ T8865] siw: device registration error -23 [ 233.599180][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.837'. [ 233.874961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.190084][ T8882] netlink: 10420 bytes leftover after parsing attributes in process `syz.0.839'. [ 234.679963][ T8891] netlink: 'syz.3.843': attribute type 3 has an invalid length. [ 234.753428][ T30] audit: type=1107 audit(1777076747.357:2): pid=8890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 235.069116][ T8901] sch_fq: defrate 6 ignored. [ 235.874576][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.909099][ T8916] netlink: 'syz.4.853': attribute type 13 has an invalid length. [ 235.932275][ T8916] netlink: 14532 bytes leftover after parsing attributes in process `syz.4.853'. [ 236.457859][ T8909] lo speed is unknown, defaulting to 1000 [ 236.491613][ T8909] hsr0 speed is unknown, defaulting to 1000 [ 236.871987][ T8933] netlink: 'syz.0.857': attribute type 10 has an invalid length. [ 236.886202][ T8933] netlink: 40 bytes leftover after parsing attributes in process `syz.0.857'. [ 236.939825][ T8933] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 237.153820][ T8940] openvswitch: netlink: IP tunnel dst address not specified [ 237.207312][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 237.228674][ T8942] netlink: 40 bytes leftover after parsing attributes in process `syz.3.862'. [ 237.254828][ T8942] netlink: 'syz.3.862': attribute type 10 has an invalid length. [ 237.268589][ T8942] netlink: 55 bytes leftover after parsing attributes in process `syz.3.862'. [ 237.576038][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.863'. [ 237.874702][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.396116][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.865'. [ 238.580025][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 238.626374][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 239.013930][ T8974] netlink: 'syz.2.870': attribute type 2 has an invalid length. [ 239.035946][ T8974] netlink: 'syz.2.870': attribute type 2 has an invalid length. [ 239.229439][ T8981] netlink: 822 bytes leftover after parsing attributes in process `syz.0.871'. [ 239.341186][ T8979] lo speed is unknown, defaulting to 1000 [ 239.368195][ T8979] hsr0 speed is unknown, defaulting to 1000 [ 239.389654][ T8981] netlink: 'syz.0.871': attribute type 10 has an invalid length. [ 239.416087][ T8981] netlink: 40 bytes leftover after parsing attributes in process `syz.0.871'. [ 239.502177][ T8981] ipvlan1: entered promiscuous mode [ 239.533673][ T8981] ipvlan1: entered allmulticast mode [ 239.576576][ T8981] veth0_vlan: entered allmulticast mode [ 239.594940][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.874'. [ 239.611500][ T5832] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10 [ 239.634094][ T8981] bridge0: port 1(ipvlan1) entered blocking state [ 239.669481][ T8981] bridge0: port 1(ipvlan1) entered disabled state [ 239.709353][ T8981] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 239.874527][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.963163][ T8999] netlink: 'syz.3.876': attribute type 2 has an invalid length. [ 240.568761][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'. [ 240.762558][ T9024] netlink: 'syz.2.884': attribute type 2 has an invalid length. [ 240.802199][ T9024] netlink: 164 bytes leftover after parsing attributes in process `syz.2.884'. [ 240.889422][ T9022] syzkaller0: entered promiscuous mode [ 240.909145][ T9022] syzkaller0: entered allmulticast mode [ 241.171018][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.887'. [ 241.515614][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'. [ 241.631174][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'. [ 241.664644][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'. [ 241.875298][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.920474][ T9051] netlink: 'syz.2.891': attribute type 2 has an invalid length. [ 241.934649][ T9051] netlink: 'syz.2.891': attribute type 1 has an invalid length. [ 242.045305][ T9053] netlink: 'syz.3.892': attribute type 3 has an invalid length. [ 243.186004][ T9076] netlink: 'syz.4.901': attribute type 10 has an invalid length. [ 243.249977][ T9077] netlink: 'syz.4.901': attribute type 10 has an invalid length. [ 243.319432][ T9076] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 243.411512][ T9076] team0: Port device netdevsim0 added [ 243.448871][ T9077] team0: Port device netdevsim0 removed [ 243.849275][ T9096] __nla_validate_parse: 7 callbacks suppressed [ 243.849294][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'. [ 243.867458][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'. [ 243.874943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.956287][ T9094] lo speed is unknown, defaulting to 1000 [ 243.991974][ T9094] hsr0 speed is unknown, defaulting to 1000 [ 244.844119][ T9116] netlink: 14 bytes leftover after parsing attributes in process `syz.4.912'. [ 245.064699][ T9120] netlink: 'syz.2.913': attribute type 21 has an invalid length. [ 245.445540][ T9126] netlink: 52 bytes leftover after parsing attributes in process `syz.2.916'. [ 245.688097][ T9134] netlink: 92 bytes leftover after parsing attributes in process `syz.4.920'. [ 245.711258][ T9134] netlink: 52 bytes leftover after parsing attributes in process `syz.4.920'. [ 245.873642][ T9136] netlink: 'syz.3.921': attribute type 10 has an invalid length. [ 245.874700][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.030305][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.924'. [ 246.388328][ T9149] netlink: 220 bytes leftover after parsing attributes in process `syz.0.926'. [ 247.022254][ T9159] netlink: 277 bytes leftover after parsing attributes in process `syz.3.929'. [ 247.037542][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.930'. [ 247.499617][ T9172] lo speed is unknown, defaulting to 1000 [ 247.524156][ T9172] hsr0 speed is unknown, defaulting to 1000 [ 247.530436][ T9175] netlink: 'syz.2.934': attribute type 25 has an invalid length. [ 247.557527][ T9174] netlink: 'syz.4.933': attribute type 10 has an invalid length. [ 247.569648][ T9175] netlink: 'syz.2.934': attribute type 1 has an invalid length. [ 247.596415][ T9175] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.629137][ T9174] ipvlan1: entered promiscuous mode [ 247.635598][ T9174] ipvlan1: entered allmulticast mode [ 247.658013][ T9174] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 247.680014][ T9181] netlink: 'syz.3.935': attribute type 11 has an invalid length. [ 247.874520][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.841873][ T5152] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.852611][ T5152] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.863649][ T5152] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.879671][ T5152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.889182][ T5152] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.071174][ T9200] lo speed is unknown, defaulting to 1000 [ 249.093801][ T9200] hsr0 speed is unknown, defaulting to 1000 [ 249.265881][ T9209] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 249.413455][ T9217] __nla_validate_parse: 3 callbacks suppressed [ 249.413485][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.946'. [ 249.763172][ T9211] lo speed is unknown, defaulting to 1000 [ 249.778603][ T9211] hsr0 speed is unknown, defaulting to 1000 [ 249.786143][ T9228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.948'. [ 249.810828][ T9200] chnl_net:caif_netlink_parms(): no params data found [ 249.837929][ T9228] netlink: 44 bytes leftover after parsing attributes in process `syz.0.948'. [ 249.874531][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.950740][ T9230] netlink: 9 bytes leftover after parsing attributes in process `syz.4.949'. [ 249.966904][ T9230] netlink: 9 bytes leftover after parsing attributes in process `syz.4.949'. [ 250.915912][ T5832] Bluetooth: hci5: command tx timeout [ 251.407905][ T9239] netlink: 830 bytes leftover after parsing attributes in process `syz.0.951'. [ 251.426526][ T9200] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.441427][ T9200] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.457721][ T9200] bridge_slave_0: entered allmulticast mode [ 251.473676][ T9200] bridge_slave_0: entered promiscuous mode [ 251.491378][ T9200] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.500771][ T9200] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.508431][ T9200] bridge_slave_1: entered allmulticast mode [ 251.517297][ T9200] bridge_slave_1: entered promiscuous mode [ 251.557317][ T9200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.570244][ T9200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.624255][ T9200] team0: Port device team_slave_0 added [ 251.633812][ T9200] team0: Port device team_slave_1 added [ 251.693681][ T9200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.711597][ T9200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.784223][ T9200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.835905][ T9200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.847723][ T9200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.875291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.888111][ T9200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.054963][ T9200] hsr_slave_0: entered promiscuous mode [ 252.065781][ T9200] hsr_slave_1: entered promiscuous mode [ 252.088724][ T9200] debugfs: 'hsr0' already exists in 'hsr' [ 252.102046][ T9200] Cannot create hsr debugfs directory [ 252.130552][ T9255] netlink: 'syz.4.957': attribute type 2 has an invalid length. [ 252.236866][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 252.820905][ T9272] netlink: 56 bytes leftover after parsing attributes in process `syz.2.963'. [ 252.892009][ T9200] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 252.953497][ T9200] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 252.981275][ T9200] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 252.996279][ T5832] Bluetooth: hci5: command tx timeout [ 253.023199][ T9200] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 253.031790][ T9200] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 253.062381][ T9200] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 253.078669][ T9200] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 253.110526][ T9200] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 253.329602][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.967'. [ 253.406630][ T9200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.447800][ T9200] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.483630][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.490915][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.525986][ T9291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.966'. [ 253.538761][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.545971][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.627860][ T9295] netlink: 'syz.2.969': attribute type 10 has an invalid length. [ 253.816265][ T9298] netlink: 'syz.4.970': attribute type 11 has an invalid length. [ 253.874525][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.069378][ T9200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.416659][ T9200] veth0_vlan: entered promiscuous mode [ 254.450280][ T9200] veth1_vlan: entered promiscuous mode [ 254.531950][ T9200] veth0_macvtap: entered promiscuous mode [ 254.551570][ T9200] veth1_macvtap: entered promiscuous mode [ 254.572314][ T9200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.583433][ T9200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.619367][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.641050][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.709182][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.741683][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.940238][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.970436][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.037936][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.072180][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.080427][ T5832] Bluetooth: hci5: command tx timeout [ 255.734937][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.745870][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.875024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.966322][ T9356] __nla_validate_parse: 6 callbacks suppressed [ 255.966353][ T9356] netlink: 36 bytes leftover after parsing attributes in process `syz.2.986'. [ 255.982105][ T9356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.986'. [ 256.018779][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.986'. [ 256.667904][ T9368] netlink: 'syz.3.989': attribute type 10 has an invalid length. [ 256.726865][ T9368] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 256.882184][ T9368] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 256.923520][ T9368] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 257.048926][ T9381] netlink: 120 bytes leftover after parsing attributes in process `syz.0.994'. [ 257.154543][ T5832] Bluetooth: hci5: command tx timeout [ 257.294160][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.995'. [ 257.876908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.381569][ T9421] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1008'. [ 258.564634][ T9427] netlink: 822 bytes leftover after parsing attributes in process `syz.3.1010'. [ 258.599902][ T9427] netlink: 'syz.3.1010': attribute type 10 has an invalid length. [ 258.621957][ T9427] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1010'. [ 258.636658][ T9425] lo speed is unknown, defaulting to 1000 [ 258.647859][ T9425] hsr0 speed is unknown, defaulting to 1000 [ 258.843869][ T9434] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1013'. [ 259.070659][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1014'. [ 259.493483][ T9452] openvswitch: netlink: Flow actions attr not present in new flow. [ 259.874525][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.289987][ T9476] siw: device registration error -23 [ 260.991489][ T9499] __nla_validate_parse: 11 callbacks suppressed [ 260.991520][ T9499] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1035'. [ 261.035581][ T9497] netlink: 'syz.0.1033': attribute type 10 has an invalid length. [ 261.058882][ T9497] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 261.079199][ T9501] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1037'. [ 261.092291][ T9503] netlink: 'syz.5.1036': attribute type 21 has an invalid length. [ 261.123543][ T9497] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 261.163925][ T9497] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 261.186418][ T9503] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1036'. [ 261.213935][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1036'. [ 261.239995][ T9505] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1035'. [ 261.731197][ T9516] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1040'. [ 261.874679][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.174240][ T9534] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1043'. [ 262.339862][ T9542] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1047'. [ 262.355779][ T9540] proc: Unknown parameter 'donQ_hash' [ 262.416109][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 262.435913][ T9540] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1045'. [ 263.276822][ T9571] nbd: must specify a device to reconfigure [ 263.361006][ T9571] siw: device registration error -23 [ 263.553569][ T9573] netlink: 'syz.4.1057': attribute type 1 has an invalid length. [ 263.642707][ T9580] netlink: 'syz.0.1059': attribute type 1 has an invalid length. [ 263.874490][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.972272][ T9588] proc: Unknown parameter 'donQ_hash' [ 263.989744][ T9586] netlink: 'syz.3.1061': attribute type 39 has an invalid length. [ 264.144051][ T9586] hsr_slave_1 (unregistering): left promiscuous mode [ 264.385893][ T9599] lo speed is unknown, defaulting to 1000 [ 264.393481][ T9599] hsr0 speed is unknown, defaulting to 1000 [ 264.478936][ T9601] netlink: 'syz.2.1066': attribute type 10 has an invalid length. [ 264.579289][ T9601] ipvlan1: entered promiscuous mode [ 264.597858][ T9601] ipvlan1: entered allmulticast mode [ 264.621176][ T9601] veth0_vlan: entered allmulticast mode [ 264.671468][ T9601] bridge0: port 3(ipvlan1) entered blocking state [ 264.687130][ T9601] bridge0: port 3(ipvlan1) entered disabled state [ 264.706980][ T9601] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 265.874721][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.879334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.909332][ T9612] __nla_validate_parse: 14 callbacks suppressed [ 267.909352][ T9612] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1068'. [ 268.343344][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1073'. [ 268.447842][ T9620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1073'. [ 268.596378][ T9620] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1073'. [ 268.598365][ T9622] netlink: 'syz.4.1074': attribute type 1 has an invalid length. [ 268.663038][ T9628] netlink: 'syz.5.1076': attribute type 10 has an invalid length. [ 268.679409][ T9628] bond0: (slave bond_slave_0): Releasing backup interface [ 268.681461][ T9625] netlink: 'syz.0.1075': attribute type 1 has an invalid length. [ 268.962514][ T9635] netlink: 'syz.5.1079': attribute type 1 has an invalid length. [ 269.210380][ T9642] proc: Unknown parameter 'donQ_hash' [ 269.283782][ T9642] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1080'. [ 269.778464][ T9660] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1089'. [ 269.838620][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1091'. [ 269.874521][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.935863][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1092'. [ 270.006378][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1095'. [ 270.037628][ T9668] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1092'. [ 270.257877][ T9679] netlink: 'syz.0.1096': attribute type 1 has an invalid length. [ 270.286158][ T9682] netlink: 'syz.3.1098': attribute type 1 has an invalid length. [ 270.297202][ T9685] netlink: 'syz.2.1097': attribute type 1 has an invalid length. [ 270.487805][ T9687] netlink: 'syz.0.1099': attribute type 1 has an invalid length. [ 270.513159][ T9690] netlink: 'syz.2.1100': attribute type 1 has an invalid length. [ 270.530993][ T9692] netlink: 'syz.3.1101': attribute type 1 has an invalid length. [ 270.643173][ T9694] proc: Unknown parameter 'donQ_hash' [ 270.712315][ T9696] netlink: 'syz.2.1103': attribute type 16 has an invalid length. [ 271.547881][ T9696] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.874767][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.121296][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.166561][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.199640][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.240610][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.969938][ T9740] __nla_validate_parse: 5 callbacks suppressed [ 272.969956][ T9740] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1117'. [ 273.358291][ T9746] netlink: 822 bytes leftover after parsing attributes in process `syz.5.1119'. [ 273.433430][ T9743] lo speed is unknown, defaulting to 1000 [ 273.475303][ T9745] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1119'. [ 273.480995][ T9743] hsr0 speed is unknown, defaulting to 1000 [ 273.512790][ T9745] ipvlan1: entered promiscuous mode [ 273.533253][ T9745] ipvlan1: entered allmulticast mode [ 273.548342][ T9745] veth0_vlan: entered allmulticast mode [ 273.583943][ T9745] bridge0: port 3(ipvlan1) entered blocking state [ 273.615482][ T9745] bridge0: port 3(ipvlan1) entered disabled state [ 273.626357][ T9745] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 273.873081][ T9757] validate_nla: 6 callbacks suppressed [ 273.873121][ T9757] netlink: 'syz.3.1122': attribute type 16 has an invalid length. [ 273.888069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.193974][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1125'. [ 274.526312][ T9773] netlink: 'syz.2.1126': attribute type 1 has an invalid length. [ 275.055392][ T9757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.075305][ T9757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.272709][ T9766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1125'. [ 275.290431][ T9769] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1125'. [ 275.355103][ T135] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.424238][ T135] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.471130][ T135] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.518965][ T135] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.843179][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1132'. [ 275.857673][ T9794] siw: device registration error -23 [ 275.874736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.562934][ T9812] netlink: 'syz.4.1134': attribute type 2 has an invalid length. [ 276.594122][ T9812] netlink: 'syz.4.1134': attribute type 2 has an invalid length. [ 276.988239][ T9822] netlink: 'syz.3.1136': attribute type 1 has an invalid length. [ 277.884519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.330721][ T9843] netlink: 10420 bytes leftover after parsing attributes in process `syz.5.1135'. [ 278.833835][ T9877] nbd: must specify a device to reconfigure [ 278.880828][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'. [ 278.940283][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1150'. [ 279.086015][ T9881] siw: device registration error -23 [ 279.874604][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.585670][ T9935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1162'. [ 280.761245][ T9941] netlink: 'syz.5.1161': attribute type 10 has an invalid length. [ 280.779530][ T9941] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1161'. [ 280.830130][ T9940] netlink: 822 bytes leftover after parsing attributes in process `syz.5.1161'. [ 280.864102][ T9941] bridge0: port 3(ipvlan1) entered blocking state [ 280.919171][ T9941] bridge0: port 3(ipvlan1) entered disabled state [ 280.974871][ T9941] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 280.996260][ T9939] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1162'. [ 281.042713][ T9937] lo speed is unknown, defaulting to 1000 [ 281.063999][ T9937] hsr0 speed is unknown, defaulting to 1000 [ 281.349063][ T9951] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1165'. [ 281.682069][ T9954] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1166'. [ 281.876126][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.868682][ T9976] netlink: 'syz.5.1169': attribute type 16 has an invalid length. [ 282.883454][ T9981] netlink: 'syz.3.1172': attribute type 2 has an invalid length. [ 282.896504][ T9981] netlink: 'syz.3.1172': attribute type 2 has an invalid length. [ 282.907081][ T9984] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1174'. [ 283.710905][ T9976] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.718698][ T9976] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.878056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.047986][ T9976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.064830][ T9976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.458637][ T36] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.488563][ T36] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.526491][ T36] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.547944][ T36] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.760034][T10007] netlink: 822 bytes leftover after parsing attributes in process `syz.5.1180'. [ 284.825987][T10015] netlink: 'syz.5.1180': attribute type 10 has an invalid length. [ 284.837398][T10014] nbd: must specify a device to reconfigure [ 284.898446][T10015] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1180'. [ 285.008204][T10013] netlink: 'syz.0.1182': attribute type 2 has an invalid length. [ 285.094327][T10015] bridge0: port 3(ipvlan1) entered blocking state [ 285.119063][T10015] bridge0: port 3(ipvlan1) entered disabled state [ 285.156767][T10015] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 285.206948][T10006] lo speed is unknown, defaulting to 1000 [ 285.452830][T10006] hsr0 speed is unknown, defaulting to 1000 [ 285.538980][T10004] lo speed is unknown, defaulting to 1000 [ 285.577809][T10004] hsr0 speed is unknown, defaulting to 1000 [ 285.586854][T10028] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1185'. [ 285.630865][T10028] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1185'. [ 285.874509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.893898][T10036] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1187'. [ 286.594139][T10041] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1199'. [ 286.616926][T10043] netlink: 'syz.2.1189': attribute type 1 has an invalid length. [ 286.846154][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1193'. [ 287.026143][T10064] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1193'. [ 287.057614][T10059] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1195'. [ 287.084969][T10055] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1194'. [ 287.543959][T10080] netlink: 'syz.2.1201': attribute type 1 has an invalid length. [ 287.874550][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.118686][T10097] nbd: must specify a device to reconfigure [ 288.267221][T10097] siw: device registration error -23 [ 289.874508][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.910852][T10145] nbd: must specify a device to reconfigure [ 290.012275][T10150] __nla_validate_parse: 8 callbacks suppressed [ 290.012306][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1226'. [ 290.057012][T10145] siw: device registration error -23 [ 290.296801][T10155] netlink: 'syz.2.1227': attribute type 1 has an invalid length. [ 290.505394][T10159] netlink: 'syz.0.1238': attribute type 1 has an invalid length. [ 290.664866][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1231'. [ 290.693057][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 290.740353][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 290.892275][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1233'. [ 291.035908][T10174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1232'. [ 291.077623][T10176] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1233'. [ 291.730624][T10192] netlink: 'syz.0.1239': attribute type 10 has an invalid length. [ 291.752196][T10192] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 291.874549][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.036054][T10199] netlink: 'syz.2.1242': attribute type 1 has an invalid length. [ 292.183053][T10189] lo speed is unknown, defaulting to 1000 [ 292.202483][T10189] hsr0 speed is unknown, defaulting to 1000 [ 292.380214][T10211] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1245'. [ 292.557520][T10216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1247'. [ 293.092596][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1250'. [ 293.724286][T10240] netlink: 'syz.4.1255': attribute type 1 has an invalid length. [ 293.874508][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.467958][T10266] netlink: 'syz.5.1263': attribute type 25 has an invalid length. [ 294.487473][T10266] netlink: 'syz.5.1263': attribute type 1 has an invalid length. [ 294.774133][T10275] netlink: 'syz.3.1268': attribute type 1 has an invalid length. [ 295.078724][T10291] __nla_validate_parse: 6 callbacks suppressed [ 295.078762][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1273'. [ 295.277659][T10297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1275'. [ 295.361540][T10303] netlink: 'syz.0.1274': attribute type 1 has an invalid length. [ 295.440456][T10300] netlink: 'syz.4.1276': attribute type 1 has an invalid length. [ 295.483308][T10308] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1275'. [ 295.609841][T10307] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 295.668092][T10312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1278'. [ 295.874550][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.138401][T10315] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1282'. [ 296.185545][T10315] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1282'. [ 296.322212][T10323] netlink: 'syz.5.1283': attribute type 1 has an invalid length. [ 297.130019][T10338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'. [ 297.327151][T10347] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1292'. [ 297.373211][T10347] netlink: 'syz.4.1292': attribute type 2 has an invalid length. [ 297.383262][T10343] netlink: 'syz.3.1289': attribute type 1 has an invalid length. [ 297.385860][T10347] netlink: 'syz.4.1292': attribute type 1 has an invalid length. [ 297.448856][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1293'. [ 297.624011][T10356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1294'. [ 297.682186][T10354] netlink: 'syz.2.1295': attribute type 1 has an invalid length. [ 297.874499][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.090078][T10372] netlink: 'syz.2.1299': attribute type 1 has an invalid length. [ 298.129555][T10374] netlink: 'syz.3.1300': attribute type 1 has an invalid length. [ 298.692193][T10392] netlink: 'syz.2.1315': attribute type 1 has an invalid length. [ 298.799016][T10383] lo speed is unknown, defaulting to 1000 [ 298.818396][T10383] hsr0 speed is unknown, defaulting to 1000 [ 299.307890][T10397] netlink: 'syz.4.1306': attribute type 1 has an invalid length. [ 299.884837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.363951][T10419] netlink: 'syz.0.1313': attribute type 1 has an invalid length. [ 300.405706][T10427] __nla_validate_parse: 6 callbacks suppressed [ 300.405724][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1318'. [ 300.523856][T10425] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1316'. [ 300.550732][T10423] netlink: 'syz.4.1314': attribute type 1 has an invalid length. [ 300.661996][T10435] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1318'. [ 300.831776][T10439] team0 (unregistering): Port device team_slave_0 removed [ 300.852214][T10439] team0 (unregistering): Port device team_slave_1 removed [ 301.022810][T10448] netlink: 'syz.5.1324': attribute type 11 has an invalid length. [ 301.046594][T10448] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.1324'. [ 301.231621][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1327'. [ 301.381968][T10450] lo speed is unknown, defaulting to 1000 [ 301.428253][T10450] hsr0 speed is unknown, defaulting to 1000 [ 301.800554][T10478] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1332'. [ 301.874525][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.205867][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1340'. [ 302.377409][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1342'. [ 302.390532][T10508] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1340'. [ 302.406987][T10504] validate_nla: 10 callbacks suppressed [ 302.407014][T10504] netlink: 'syz.5.1341': attribute type 1 has an invalid length. [ 302.625681][T10512] netlink: 'syz.3.1345': attribute type 1 has an invalid length. [ 302.790593][T10520] netlink: 'syz.3.1347': attribute type 1 has an invalid length. [ 302.966407][T10522] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1348'. [ 303.110664][T10531] siw: device registration error -23 [ 303.431935][T10537] netlink: 'syz.3.1354': attribute type 1 has an invalid length. [ 303.550856][T10544] netlink: 'syz.2.1353': attribute type 1 has an invalid length. [ 303.787040][T10547] netlink: 'syz.3.1355': attribute type 1 has an invalid length. [ 303.874516][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.150422][T10538] lo speed is unknown, defaulting to 1000 [ 304.168211][T10554] netlink: 'syz.5.1357': attribute type 1 has an invalid length. [ 304.190000][T10538] hsr0 speed is unknown, defaulting to 1000 [ 304.208462][T10557] netlink: 'syz.0.1359': attribute type 1 has an invalid length. [ 304.557628][T10571] netlink: 'syz.2.1365': attribute type 1 has an invalid length. [ 304.745516][T10575] netlink: 'syz.2.1367': attribute type 1 has an invalid length. [ 305.450278][T10605] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 305.519073][T10607] __nla_validate_parse: 7 callbacks suppressed [ 305.519126][T10607] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1379'. [ 305.653414][T10611] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 305.885339][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.251749][T10623] team0 (unregistering): Port device team_slave_0 removed [ 306.279540][T10623] team0 (unregistering): Port device team_slave_1 removed [ 306.726372][T10639] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1390'. [ 307.096945][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1396'. [ 307.254220][T10664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1399'. [ 307.283661][T10664] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1399'. [ 307.424122][T10669] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1399'. [ 307.610359][T10672] validate_nla: 8 callbacks suppressed [ 307.610394][T10672] netlink: 'syz.4.1401': attribute type 1 has an invalid length. [ 307.703465][T10674] netlink: 'syz.0.1402': attribute type 1 has an invalid length. [ 307.874644][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.916558][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1406'. [ 308.458836][T10695] netlink: 'syz.3.1410': attribute type 1 has an invalid length. [ 308.802222][T10704] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1412'. [ 308.835177][T10702] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1414'. [ 309.038899][T10713] netlink: 'syz.4.1415': attribute type 1 has an invalid length. [ 309.221203][T10721] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1419'. [ 309.242910][T10716] netlink: 'syz.0.1416': attribute type 1 has an invalid length. [ 309.875362][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.232373][T10750] netlink: 'syz.4.1428': attribute type 1 has an invalid length. [ 310.245222][T10753] netlink: 'syz.3.1429': attribute type 1 has an invalid length. [ 310.602826][T10772] __nla_validate_parse: 6 callbacks suppressed [ 310.602894][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1435'. [ 310.614522][T10765] netlink: 'syz.5.1432': attribute type 1 has an invalid length. [ 311.293855][T10791] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1441'. [ 311.571961][T10797] netlink: 'syz.2.1443': attribute type 1 has an invalid length. [ 311.698831][T10799] netlink: 'syz.5.1444': attribute type 1 has an invalid length. [ 311.875786][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.928405][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1448'. [ 312.285663][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.647517][T10826] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1453'. [ 312.671683][T10831] validate_nla: 1 callbacks suppressed [ 312.671703][T10831] netlink: 'syz.4.1454': attribute type 1 has an invalid length. [ 312.799050][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.978560][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.048055][T10841] netlink: 'syz.3.1458': attribute type 1 has an invalid length. [ 313.105410][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.222853][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1461'. [ 313.412138][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1463'. [ 313.656986][T10861] netlink: 'syz.4.1464': attribute type 1 has an invalid length. [ 313.687921][ T62] bridge_slave_1: left allmulticast mode [ 313.695378][ T62] bridge_slave_1: left promiscuous mode [ 313.703098][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.741563][ T62] bridge_slave_0: left allmulticast mode [ 313.747647][ T62] bridge_slave_0: left promiscuous mode [ 313.753795][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.011734][T10865] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1466'. [ 314.206857][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.219233][ T62] bond0 (unregistering): Released all slaves [ 314.249334][T10877] netlink: 'syz.3.1467': attribute type 1 has an invalid length. [ 314.641845][T10888] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1473'. [ 314.659161][T10890] netlink: 'syz.2.1472': attribute type 1 has an invalid length. [ 314.911502][T10894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 315.374956][T10909] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1479'. [ 315.685282][T10921] netlink: 'syz.0.1480': attribute type 1 has an invalid length. [ 315.699918][T10915] netlink: 'syz.2.1481': attribute type 1 has an invalid length. [ 315.848527][ T62] hsr_slave_0: left promiscuous mode [ 315.857267][ T62] hsr_slave_1: left promiscuous mode [ 315.891200][ T62] veth1_vlan: left promiscuous mode [ 315.900431][ T62] veth0_vlan: left promiscuous mode [ 315.907777][T10926] netlink: 'syz.3.1483': attribute type 1 has an invalid length. [ 316.163777][ T36] smbdirect: ib_dev[syz0] removed [ 316.223918][ T62] team0 (unregistering): Port device team_slave_1 removed [ 316.243761][ T62] team0 (unregistering): Port device team_slave_0 removed [ 316.407616][T10937] __nla_validate_parse: 1 callbacks suppressed [ 316.407647][T10937] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1485'. [ 316.449007][ T10] hsr0 speed is unknown, defaulting to 1000 [ 316.456240][ T10] infiniband syz0: ib_query_port failed (-19) [ 316.458991][ T5496] 8021q: adding VLAN 0 to HW filter on device eth1 [ 316.474802][T10943] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1485'. [ 316.767404][T10954] netlink: 'syz.0.1486': attribute type 1 has an invalid length. [ 316.831826][T10958] netlink: 'syz.3.1489': attribute type 2 has an invalid length. [ 317.160946][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.167922][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.554740][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1497'. [ 317.663187][T10982] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1496'. [ 317.786387][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1498'. [ 317.869454][T10997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1500'. [ 317.933041][T10992] validate_nla: 1 callbacks suppressed [ 317.933075][T10992] netlink: 'syz.3.1499': attribute type 1 has an invalid length. [ 318.142437][T11002] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1500'. [ 318.153143][ T5496] 8021q: adding VLAN 0 to HW filter on device eth2 [ 318.194925][T11006] netlink: 'syz.5.1501': attribute type 1 has an invalid length. [ 318.490018][T11017] netlink: 'syz.4.1503': attribute type 1 has an invalid length. [ 318.551978][T11025] netlink: 'syz.2.1505': attribute type 1 has an invalid length. [ 318.598601][T11015] netlink: 'syz.3.1504': attribute type 1 has an invalid length. [ 318.909315][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1511'. [ 319.151609][T11046] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1513'. [ 319.318341][T11044] mac80211_hwsim hwsim25 wlan1: entered promiscuous mode [ 319.352955][T11044] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 319.441340][T11056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'. [ 319.671839][ T5496] 8021q: adding VLAN 0 to HW filter on device eth3 [ 319.689243][T11059] netlink: 'syz.4.1516': attribute type 1 has an invalid length. [ 319.888860][T11076] netlink: 'syz.2.1518': attribute type 1 has an invalid length. [ 319.961644][T11069] netlink: 'syz.5.1519': attribute type 1 has an invalid length. [ 320.107305][T11080] netlink: 'syz.0.1521': attribute type 1 has an invalid length. [ 321.391805][T11123] netlink: 'syz.2.1532': attribute type 1 has an invalid length. [ 321.469531][ T5496] 8021q: adding VLAN 0 to HW filter on device eth4 [ 322.006858][T11154] __nla_validate_parse: 5 callbacks suppressed [ 322.006893][T11154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1540'. [ 322.073370][T11154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1540'. [ 322.132070][T11159] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1540'. [ 322.149807][T11157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1539'. [ 322.358960][T11162] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1542'. [ 322.974085][T11186] validate_nla: 6 callbacks suppressed [ 322.974127][T11186] netlink: 'syz.0.1550': attribute type 1 has an invalid length. [ 323.043045][T11194] netlink: 'syz.5.1553': attribute type 1 has an invalid length. [ 323.090473][T11197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1554'. [ 323.126296][T11197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1554'. [ 323.172978][T11197] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1554'. [ 323.787475][T11211] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1559'. [ 323.966066][T11219] netlink: 'syz.0.1561': attribute type 1 has an invalid length. [ 324.070040][T11191] lo speed is unknown, defaulting to 1000 [ 324.680799][T11226] netlink: 'syz.0.1564': attribute type 1 has an invalid length. [ 324.747937][T11232] netlink: 'syz.5.1566': attribute type 1 has an invalid length. [ 324.878735][T11234] netlink: 'syz.4.1567': attribute type 1 has an invalid length. [ 324.936572][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'. [ 325.376771][T11251] netlink: 'syz.2.1574': attribute type 1 has an invalid length. [ 325.780415][T11263] netlink: 'syz.2.1577': attribute type 10 has an invalid length. [ 325.810369][T11263] netlink: 'syz.2.1577': attribute type 10 has an invalid length. [ 326.363034][T11284] netlink: 'syz.0.1583': attribute type 1 has an invalid length. [ 327.052202][T11309] __nla_validate_parse: 9 callbacks suppressed [ 327.052235][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1592'. [ 327.089783][T11309] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1592'. [ 327.250359][T11318] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1592'. [ 327.686829][T11330] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1599'. [ 328.166630][T11346] ------------[ cut here ]------------ [ 328.174634][T11346] !cfg80211_chandef_valid(chandef) [ 328.174713][T11346] WARNING: net/wireless/chan.c:796 at cfg80211_chandef_dfs_required+0xe06/0xec0, CPU#1: syz.5.1605/11346 [ 328.191850][T11346] Modules linked in: [ 328.198293][T11346] CPU: 1 UID: 0 PID: 11346 Comm: syz.5.1605 Not tainted syzkaller #0 PREEMPT(full) [ 328.208333][T11346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 328.219260][T11346] RIP: 0010:cfg80211_chandef_dfs_required+0xe06/0xec0 [ 328.226397][T11346] Code: de e8 ee 9e b5 f6 48 83 fb 3f 0f 87 aa 00 00 00 e8 9f 9a b5 f6 b8 01 00 00 00 89 d9 48 d3 e0 e9 41 f4 ff ff e8 8b 9a b5 f6 90 <0f> 0b 90 b8 ea ff ff ff e9 2e f4 ff ff e8 18 80 a6 00 89 d1 80 e1 [ 328.246784][T11346] RSP: 0018:ffffc900059e7700 EFLAGS: 00010283 [ 328.253071][T11346] RAX: ffffffff8b1023c5 RBX: ffff8880597d57f8 RCX: 0000000000080000 [ 328.261232][T11346] RDX: ffffc9001afad000 RSI: 0000000000000924 RDI: 0000000000000925 [ 328.269848][T11346] RBP: ffffc900059e7890 R08: ffffffff82259d1f R09: ffff8880b873f5a8 [ 328.278326][T11346] R10: dffffc0000000000 R11: ffffed100f34654a R12: 0000000000000006 [ 328.286881][T11346] R13: dffffc0000000000 R14: ffffc900059e7a00 R15: dffffc0000000000 [ 328.295225][T11346] FS: 00007fa4562276c0(0000) GS:ffff888125324000(0000) knlGS:0000000000000000 [ 328.304707][T11346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.311819][T11346] CR2: 0000200000001100 CR3: 00000000798ba000 CR4: 00000000003526f0 [ 328.320690][T11346] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 328.329161][T11346] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 328.337658][T11346] Call Trace: [ 328.341204][T11346] [ 328.344584][T11346] ? irqentry_exit+0x218/0x730 [ 328.349662][T11346] ? lockdep_hardirqs_on+0x7a/0x110 [ 328.355630][T11346] ? irqentry_exit+0x218/0x730 [ 328.360545][T11346] ? trace_irq_disable+0x3b/0x140 [ 328.366044][T11346] ? __pfx_cfg80211_chandef_dfs_required+0x10/0x10 [ 328.372902][T11346] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 328.378316][T11346] ? lock_is_held_type+0x106/0x150 [ 328.383790][T11346] _ieee80211_link_use_channel+0x27a/0x7f0 [ 328.389880][T11346] ? __pfx___ieee80211_link_release_channel+0x10/0x10 [ 328.397246][T11346] ? __pfx__ieee80211_link_use_channel+0x10/0x10 [ 328.403866][T11346] ? irqentry_exit+0x6a0/0x730 [ 328.409088][T11346] ieee80211_set_monitor_channel+0x692/0x8e0 [ 328.415704][T11346] ? irqentry_exit+0x218/0x730 [ 328.420902][T11346] ? __pfx_ieee80211_set_monitor_channel+0x10/0x10 [ 328.428094][T11346] ? __pfx_ieee80211_set_monitor_channel+0x10/0x10 [ 328.435320][T11346] cfg80211_set_monitor_channel+0x22d/0x5f0 [ 328.441547][T11346] cfg80211_wext_siwfreq+0x713/0x850 [ 328.447083][T11346] ? irqentry_exit+0x218/0x730 [ 328.452202][T11346] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 328.458782][T11346] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 328.465107][T11346] ioctl_standard_call+0xcb/0x1b0 [ 328.470480][T11346] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 328.476805][T11346] wext_ioctl_dispatch+0xee/0x410 [ 328.482080][T11346] ? __pfx_ioctl_standard_call+0x10/0x10 [ 328.488132][T11346] wext_handle_ioctl+0x10f/0x1d0 [ 328.493428][T11346] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 328.499469][T11346] sock_ioctl+0x159/0x7f0 [ 328.504369][T11346] ? __pfx_sock_ioctl+0x10/0x10 [ 328.509567][T11346] ? __fget_files+0x2a/0x420 [ 328.514267][T11346] ? __fget_files+0x3a0/0x420 [ 328.519446][T11346] ? __fget_files+0x2a/0x420 [ 328.524188][T11346] ? bpf_lsm_file_ioctl+0x9/0x20 [ 328.529409][T11346] ? __pfx_sock_ioctl+0x10/0x10 [ 328.534644][T11346] __se_sys_ioctl+0xfc/0x170 [ 328.539483][T11346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.545730][T11346] do_syscall_64+0x15f/0xf80 [ 328.550588][T11346] ? clear_bhb_loop+0x40/0x90 [ 328.555786][T11346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.561735][T11346] RIP: 0033:0x7fa45539cdd9 [ 328.566321][T11346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.586225][T11346] RSP: 002b:00007fa456227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 328.594995][T11346] RAX: ffffffffffffffda RBX: 00007fa455615fa0 RCX: 00007fa45539cdd9 [ 328.603333][T11346] RDX: 00002000000000c0 RSI: 0000000000008b04 RDI: 0000000000000009 [ 328.611870][T11346] RBP: 00007fa455432d69 R08: 0000000000000000 R09: 0000000000000000 [ 328.620110][T11346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.628409][T11346] R13: 00007fa455616038 R14: 00007fa455615fa0 R15: 00007ffefc54eda8 [ 328.637026][T11346] [ 328.640167][T11346] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 328.647468][T11346] CPU: 1 UID: 0 PID: 11346 Comm: syz.5.1605 Not tainted syzkaller #0 PREEMPT(full) [ 328.656865][T11346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 328.666993][T11346] Call Trace: [ 328.670304][T11346] [ 328.673246][T11346] vpanic+0x56c/0xa60 [ 328.677314][T11346] ? __pfx__printk+0x10/0x10 [ 328.681955][T11346] ? __pfx_vpanic+0x10/0x10 [ 328.686509][T11346] ? is_bpf_text_address+0x292/0x2b0 [ 328.691859][T11346] ? is_bpf_text_address+0x26/0x2b0 [ 328.697128][T11346] panic+0xc5/0xd0 [ 328.700884][T11346] ? __pfx_panic+0x10/0x10 [ 328.705355][T11346] __warn+0x315/0x4c0 [ 328.709390][T11346] ? cfg80211_chandef_dfs_required+0xe06/0xec0 [ 328.715575][T11346] ? cfg80211_chandef_dfs_required+0xe06/0xec0 [ 328.721761][T11346] __report_bug+0x29a/0x540 [ 328.726304][T11346] ? cfg80211_chandef_dfs_required+0xe06/0xec0 [ 328.732497][T11346] ? __pfx___report_bug+0x10/0x10 [ 328.737571][T11346] ? lockdep_hardirqs_on+0x7a/0x110 [ 328.742815][T11346] ? irqentry_exit+0x218/0x730 [ 328.747609][T11346] ? trace_irq_disable+0x3b/0x140 [ 328.752672][T11346] ? cfg80211_chandef_dfs_required+0xe08/0xec0 [ 328.758857][T11346] ? cfg80211_chandef_dfs_required+0xe06/0xec0 [ 328.765040][T11346] report_bug+0x16a/0x220 [ 328.769413][T11346] ? cfg80211_chandef_dfs_required+0xe06/0xec0 [ 328.775589][T11346] ? cfg80211_chandef_dfs_required+0xe08/0xec0 [ 328.781756][T11346] handle_bug+0x9c/0x200 [ 328.786034][T11346] exc_invalid_op+0x1a/0x50 [ 328.790584][T11346] asm_exc_invalid_op+0x1a/0x20 [ 328.795464][T11346] RIP: 0010:cfg80211_chandef_dfs_required+0xe06/0xec0 [ 328.802248][T11346] Code: de e8 ee 9e b5 f6 48 83 fb 3f 0f 87 aa 00 00 00 e8 9f 9a b5 f6 b8 01 00 00 00 89 d9 48 d3 e0 e9 41 f4 ff ff e8 8b 9a b5 f6 90 <0f> 0b 90 b8 ea ff ff ff e9 2e f4 ff ff e8 18 80 a6 00 89 d1 80 e1 [ 328.821902][T11346] RSP: 0018:ffffc900059e7700 EFLAGS: 00010283 [ 328.827995][T11346] RAX: ffffffff8b1023c5 RBX: ffff8880597d57f8 RCX: 0000000000080000 [ 328.835989][T11346] RDX: ffffc9001afad000 RSI: 0000000000000924 RDI: 0000000000000925 [ 328.843984][T11346] RBP: ffffc900059e7890 R08: ffffffff82259d1f R09: ffff8880b873f5a8 [ 328.851989][T11346] R10: dffffc0000000000 R11: ffffed100f34654a R12: 0000000000000006 [ 328.859990][T11346] R13: dffffc0000000000 R14: ffffc900059e7a00 R15: dffffc0000000000 [ 328.868005][T11346] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 328.873068][T11346] ? cfg80211_chandef_dfs_required+0xe05/0xec0 [ 328.879261][T11346] ? irqentry_exit+0x218/0x730 [ 328.884061][T11346] ? lockdep_hardirqs_on+0x7a/0x110 [ 328.889304][T11346] ? irqentry_exit+0x218/0x730 [ 328.894098][T11346] ? trace_irq_disable+0x3b/0x140 [ 328.899167][T11346] ? __pfx_cfg80211_chandef_dfs_required+0x10/0x10 [ 328.905693][T11346] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 328.910751][T11346] ? lock_is_held_type+0x106/0x150 [ 328.915899][T11346] _ieee80211_link_use_channel+0x27a/0x7f0 [ 328.921745][T11346] ? __pfx___ieee80211_link_release_channel+0x10/0x10 [ 328.928537][T11346] ? __pfx__ieee80211_link_use_channel+0x10/0x10 [ 328.934896][T11346] ? irqentry_exit+0x6a0/0x730 [ 328.939708][T11346] ieee80211_set_monitor_channel+0x692/0x8e0 [ 328.945711][T11346] ? irqentry_exit+0x218/0x730 [ 328.950514][T11346] ? __pfx_ieee80211_set_monitor_channel+0x10/0x10 [ 328.957062][T11346] ? __pfx_ieee80211_set_monitor_channel+0x10/0x10 [ 328.963593][T11346] cfg80211_set_monitor_channel+0x22d/0x5f0 [ 328.969513][T11346] cfg80211_wext_siwfreq+0x713/0x850 [ 328.974832][T11346] ? irqentry_exit+0x218/0x730 [ 328.979628][T11346] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 328.985461][T11346] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 328.991287][T11346] ioctl_standard_call+0xcb/0x1b0 [ 328.996343][T11346] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 329.002176][T11346] wext_ioctl_dispatch+0xee/0x410 [ 329.007218][T11346] ? __pfx_ioctl_standard_call+0x10/0x10 [ 329.012875][T11346] wext_handle_ioctl+0x10f/0x1d0 [ 329.017834][T11346] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 329.023331][T11346] sock_ioctl+0x159/0x7f0 [ 329.027688][T11346] ? __pfx_sock_ioctl+0x10/0x10 [ 329.032581][T11346] ? __fget_files+0x2a/0x420 [ 329.037188][T11346] ? __fget_files+0x3a0/0x420 [ 329.041882][T11346] ? __fget_files+0x2a/0x420 [ 329.046488][T11346] ? bpf_lsm_file_ioctl+0x9/0x20 [ 329.051451][T11346] ? __pfx_sock_ioctl+0x10/0x10 [ 329.056334][T11346] __se_sys_ioctl+0xfc/0x170 [ 329.060942][T11346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.067022][T11346] do_syscall_64+0x15f/0xf80 [ 329.071641][T11346] ? clear_bhb_loop+0x40/0x90 [ 329.076342][T11346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.082251][T11346] RIP: 0033:0x7fa45539cdd9 [ 329.086690][T11346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.106312][T11346] RSP: 002b:00007fa456227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.114751][T11346] RAX: ffffffffffffffda RBX: 00007fa455615fa0 RCX: 00007fa45539cdd9 [ 329.122746][T11346] RDX: 00002000000000c0 RSI: 0000000000008b04 RDI: 0000000000000009 [ 329.130766][T11346] RBP: 00007fa455432d69 R08: 0000000000000000 R09: 0000000000000000 [ 329.138761][T11346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.146746][T11346] R13: 00007fa455616038 R14: 00007fa455615fa0 R15: 00007ffefc54eda8 [ 329.154758][T11346] [ 329.158723][T11346] Kernel Offset: disabled [ 329.163057][T11346] Rebooting in 86400 seconds..