last executing test programs: 5m46.793315692s ago: executing program 32 (id=7970): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b9120000000000000000000000000000000c001500283a6b304c"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 4m4.641936695s ago: executing program 33 (id=9090): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001700)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x4, 0xb, 0xd, 0xa, 0x6, 0x8, 0x1, 0x7, 0x4, 0x8, 0x43, 0xe, 0xf, 0x0, 0x2b, 0x7], 0x0, [0x6, 0x6, 0x9, 0x2, 0x800, 0x0, 0xff, 0x8, 0x440, 0x7, 0x9865, 0x7, 0x8, 0x8, 0xae15, 0x2], [0xc, 0x0, 0x6, 0xd, 0xa8a, 0x1fc4, 0xd5, 0x7cd3, 0xc, 0xd, 0xd, 0x2, 0x0, 0x0, 0x401, 0x4]}}}}]}, 0x88}}, 0x40000b4) 3m39.690406395s ago: executing program 34 (id=9260): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325", 0x1e8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 3m23.474013501s ago: executing program 35 (id=9389): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x18}, 0x90) 2m58.488391012s ago: executing program 8 (id=9673): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0xffffffff, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) 2m58.259975862s ago: executing program 8 (id=9676): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x9}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={{0x14, 0x10, 0x4, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) 2m57.925347668s ago: executing program 8 (id=9679): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m57.783981673s ago: executing program 8 (id=9681): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x14905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000420000000800000002"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2}, 0x18) 2m57.417049269s ago: executing program 8 (id=9684): perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_config_ext={0x4, 0x5}, 0x0, 0x4, 0x0, 0x8, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0xe007, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 2m56.78430853s ago: executing program 8 (id=9691): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 2m41.717583891s ago: executing program 36 (id=9691): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 2m27.82281243s ago: executing program 0 (id=9904): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x24d}], 0x1}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000e40), 0x800, r0}, 0x38) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000440)=""/135, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) 2m26.479550136s ago: executing program 0 (id=9909): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x800000, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x48010) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40001) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) 2m25.899657535s ago: executing program 0 (id=9912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 2m25.552679345s ago: executing program 0 (id=9915): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 2m25.354383941s ago: executing program 0 (id=9917): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) close(r0) 2m25.071452383s ago: executing program 0 (id=9919): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xa100, 0xc8, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xe) 2m24.43546531s ago: executing program 37 (id=9919): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xa100, 0xc8, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xe) 1m32.400935877s ago: executing program 3 (id=10294): r0 = getpid() r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x8}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xd8e, 0x6, 0x5, 0x4}, 0x1}}]}, {0xfffffffffffffd08}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1m31.785139027s ago: executing program 3 (id=10300): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x1, 0x60, 0x0, 0x0, 0x2b}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m30.507846394s ago: executing program 3 (id=10304): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1m30.234991784s ago: executing program 3 (id=10310): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m29.558469576s ago: executing program 3 (id=10313): r0 = syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x4800000000000008, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x75, 0x1ef7}, 0x20, 0x4, 0x5, 0x5, 0x2, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000003d00010325bd7000fddbdf2509"], 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) 1m28.925629059s ago: executing program 3 (id=10322): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047459, 0x0) 1m27.898471872s ago: executing program 38 (id=10322): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047459, 0x0) 1m20.607012451s ago: executing program 2 (id=10373): socketpair(0x6, 0x80000, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x38}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}]}], {0x14}}, 0xdc}}, 0x0) 1m20.31607375s ago: executing program 2 (id=10376): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000000000000028000000280000000200000000000000000000030000020000000200000000000000010000000000000104"], 0x0, 0x42}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffe95}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x3300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m19.161670656s ago: executing program 2 (id=10381): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1m18.747728435s ago: executing program 2 (id=10392): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 1m18.620000487s ago: executing program 2 (id=10386): syz_open_procfs$namespace(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 1m17.841259461s ago: executing program 2 (id=10388): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1m17.390123773s ago: executing program 39 (id=10388): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 51.484342444s ago: executing program 9 (id=10525): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r1], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 51.214195652s ago: executing program 9 (id=10530): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005fc0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9f, 0x11, 0x3, 0xd, 0x9c4}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8035}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x10) 50.786148013s ago: executing program 9 (id=10532): socket$kcm(0x2, 0x200000000000003, 0x106) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000005c0)={0x0, 0x11, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401003dbd010001000000080001"], 0x18}}, 0x20004018) 50.294705671s ago: executing program 9 (id=10537): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x84000, 0x0) 50.098167087s ago: executing program 9 (id=10538): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r2}, 0xc) 49.629041292s ago: executing program 9 (id=10545): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x7}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r2}, 0x38) 48.878908725s ago: executing program 40 (id=10545): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x7}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r2}, 0x38) 14.218214991s ago: executing program 4 (id=10763): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x2}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x5, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000120001002bbd7000ffdbdf250aa500fd400100000000000000000000000000000600000000000000000000000000000003000000", @ANYRES32=0x0, @ANYRES64], 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) 13.625733516s ago: executing program 4 (id=10765): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@map=r1, r0, 0x2f}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 13.498536499s ago: executing program 4 (id=10766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114d05, 0x4, 0x0, 0x2, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000010500000a5c000000180a0d00000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a3000000000"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 12.078190658s ago: executing program 4 (id=10773): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 11.98114711s ago: executing program 4 (id=10774): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 11.457152246s ago: executing program 4 (id=10779): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r2}, 0x38) 10.787294891s ago: executing program 41 (id=10779): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r2}, 0x38) 5.845394098s ago: executing program 5 (id=10809): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x2fcaa96ab9c96ad6, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x3, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r0}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 4.732747032s ago: executing program 7 (id=10814): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010300e8"], 0x14}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a80016002000014003", 0x39}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 4.698108496s ago: executing program 5 (id=10815): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24008030) 4.67093966s ago: executing program 1 (id=10816): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18f15a22d663caf76100000000ea00001811000064c90777629710fb4450aabdd612d61f4a0a2e18527d31cfd2e3ac68acdb4e31", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 4.643739574s ago: executing program 6 (id=10817): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 4.286889778s ago: executing program 1 (id=10818): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x17, 0x10, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8}, [@exit, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x40}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x1, 0x3, 0x6, 0x7, 0x30, 0xfffffffffffffffc}]}, 0x0, 0x7f, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 4.138890648s ago: executing program 6 (id=10819): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000540), 0x800a, r0, 0x4}, 0x38) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) 3.973439031s ago: executing program 5 (id=10820): r0 = syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x4800000000000008, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x75, 0x1ef7}, 0x20, 0x4, 0x5, 0x4, 0x2, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$unix(0x1, 0x2, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 3.947770664s ago: executing program 7 (id=10821): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xdffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.861980652s ago: executing program 1 (id=10822): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x4004, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c000580080001400000890d080001400000001c080002"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 3.7885897s ago: executing program 6 (id=10823): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9376, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x0, 0x4, 0x0, 0x20, 0x8eca}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xffc0) 2.804688918s ago: executing program 6 (id=10824): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6202, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022"], 0xcfa4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.729573187s ago: executing program 1 (id=10825): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) close(0x3) 2.686929218s ago: executing program 7 (id=10826): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0xffffff0b}, 0x1}}, 0x80, 0x0}, 0x0) 2.685441323s ago: executing program 5 (id=10827): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0x4}, 0x2a00, 0x0, 0x0, 0x8, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x80208, 0x0, 0x310c, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 2.453815732s ago: executing program 7 (id=10828): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) close(r2) 1.767303318s ago: executing program 1 (id=10829): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000006c8"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, r3}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x12) 1.763790265s ago: executing program 5 (id=10830): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0x3, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x8, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8e, 0x80000000, 0x10000000, 0xdbe, 0x300}, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.662680517s ago: executing program 6 (id=10831): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x4, 0x1946}, 0x0, 0x10001, 0x4, 0x9, 0x58, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000300)={'erspan0\x00', @random='\x00\x00\x00\x00\x00 '}) 1.370241208s ago: executing program 1 (id=10832): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@caif=@dgm={0x25, 0x6, 0xa}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)='Gb', 0x61}, {&(0x7f0000000b40)="22003c93b682ef5cb6dc5c145ff000000000", 0x12}], 0x2}, 0x0) 1.198859156s ago: executing program 7 (id=10833): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) close(0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a28000000000a010304000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000014000000110001"], 0xa4}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) close(0x3) 748.424198ms ago: executing program 7 (id=10834): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xf, 0xc, 0x2, 0x0, 0x0, 0x2, 0x8ca47, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62cb, 0x0, @perf_config_ext={0xc}, 0x550, 0x9, 0x0, 0x7, 0x2000000000, 0xffff0000, 0x2, 0x0, 0xffffffff, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) 45.649039ms ago: executing program 5 (id=10835): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mount$bpf(0x200000000000, 0x0, 0x0, 0x2002000, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4840) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 0s ago: executing program 6 (id=10836): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0xf3, 0x6, 0x0, 0x0, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0xc20, 0xc8, 0x94a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc5c082c00db5bffffffffff000000060300000023000000000000000000000000ac1414aa2b"], 0xfdef) syz_clone(0x41500, 0x0, 0xd, 0xfffffffffffffffd, 0x0, 0x0) kernel console output (not intermixed with test programs): 73.647360][T23154] team0: Device wg2 is of different type [ 573.765626][T22686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.283753][T22686] veth0_vlan: entered promiscuous mode [ 574.307493][T22686] veth1_vlan: entered promiscuous mode [ 574.372689][T22179] Bluetooth: hci3: command tx timeout [ 574.381686][T23184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7987'. [ 574.392433][ T5783] hsr_slave_0: left promiscuous mode [ 574.399581][ T5783] hsr_slave_1: left promiscuous mode [ 574.406062][ T5783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.420943][ T5783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.431757][ T5783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.445037][ T5783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.517334][ T5783] veth1_macvtap: left promiscuous mode [ 574.526249][ T5783] veth0_macvtap: left promiscuous mode [ 574.532599][ T5783] veth1_vlan: left promiscuous mode [ 574.538117][ T5783] veth0_vlan: left promiscuous mode [ 575.002206][ T5783] team0 (unregistering): Port device team_slave_1 removed [ 575.018553][ T5783] team0 (unregistering): Port device team_slave_0 removed [ 575.179399][T23120] gretap0 speed is unknown, defaulting to 1000 [ 575.204185][T22686] veth0_macvtap: entered promiscuous mode [ 575.223216][T23120] xfrm0 speed is unknown, defaulting to 1000 [ 575.240017][T22686] veth1_macvtap: entered promiscuous mode [ 575.374588][T22686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.412614][T22686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.502638][T17196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.532452][T17196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.589444][T17196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.625042][ T382] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.026704][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.060930][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.228454][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.252689][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.448614][T22179] Bluetooth: hci3: command tx timeout [ 576.653850][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 576.800271][T23120] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.813652][T23120] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.823708][T23120] bridge_slave_0: entered allmulticast mode [ 576.832602][T23120] bridge_slave_0: entered promiscuous mode [ 576.846749][T23120] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.858137][T23120] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.880647][T23120] bridge_slave_1: entered allmulticast mode [ 576.889879][T23120] bridge_slave_1: entered promiscuous mode [ 576.965994][T23120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.008038][T23120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.139718][T23120] team0: Port device team_slave_0 added [ 577.173519][T23120] team0: Port device team_slave_1 added [ 577.310356][T23254] netlink: 'syz.3.8007': attribute type 1 has an invalid length. [ 577.369285][T23254] netlink: 'syz.3.8007': attribute type 4 has an invalid length. [ 577.389452][T23254] netlink: 'syz.3.8007': attribute type 2 has an invalid length. [ 577.405755][T23120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.424542][T23254] netlink: 'syz.3.8007': attribute type 1 has an invalid length. [ 577.443047][T23120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.452944][T23254] netlink: 'syz.3.8007': attribute type 5 has an invalid length. [ 577.517926][T23120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.560306][T23120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.561306][T23254] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8007'. [ 577.586863][T23120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.657224][T23120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.778954][T23265] ksmbd: Unknown IPC event: 1, ignore. [ 577.873658][T23120] hsr_slave_0: entered promiscuous mode [ 577.895655][T23120] hsr_slave_1: entered promiscuous mode [ 577.925017][T23120] debugfs: 'hsr0' already exists in 'hsr' [ 577.946160][T23120] Cannot create hsr debugfs directory [ 578.338930][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2 [ 578.505470][T23120] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 578.517708][T23120] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 578.526899][T23120] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 578.533844][T22179] Bluetooth: hci3: command tx timeout [ 578.552816][T23120] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 578.570498][T23120] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 578.594004][T23120] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 578.602677][T23120] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 578.622309][T23120] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 578.795961][T23120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.826161][T23120] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.845559][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.852814][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.871400][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.878645][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.198073][ T5285] 8021q: adding VLAN 0 to HW filter on device eth3 [ 579.452815][T23120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.781090][T23120] veth0_vlan: entered promiscuous mode [ 579.796100][T23120] veth1_vlan: entered promiscuous mode [ 579.837769][ T5285] 8021q: adding VLAN 0 to HW filter on device eth4 [ 579.851178][T23120] veth0_macvtap: entered promiscuous mode [ 579.865019][T23120] veth1_macvtap: entered promiscuous mode [ 579.888223][T23120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.909462][T23120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.925972][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.955746][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.964881][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.985698][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.087237][ T5783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.104351][ T5783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.147637][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.157557][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.522012][T23356] netlink: 'syz.4.8016': attribute type 3 has an invalid length. [ 580.538938][T23356] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8016'. [ 580.608795][T22179] Bluetooth: hci3: command tx timeout [ 581.418056][T23388] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8034'. [ 582.325125][T23421] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 582.332966][T23421] syzkaller1: linktype set to 768 [ 582.391074][T23426] netlink: 'syz.0.8051': attribute type 10 has an invalid length. [ 582.399416][T23426] netlink: 'syz.0.8051': attribute type 19 has an invalid length. [ 582.424505][T23426] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8051'. [ 582.479338][T23428] netlink: 'syz.5.8052': attribute type 16 has an invalid length. [ 582.487308][T23428] netlink: 'syz.5.8052': attribute type 3 has an invalid length. [ 582.496659][T23428] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8052'. [ 582.634387][T23432] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 582.677478][T23434] tap0: tun_chr_ioctl cmd 1074025677 [ 582.692879][T23434] tap0: linktype set to 769 [ 583.896843][T23462] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8065'. [ 584.284839][T23482] netlink: 'syz.5.8074': attribute type 21 has an invalid length. [ 584.429998][T23486] ksmbd: Unknown IPC event: 1, ignore. [ 585.108922][T23510] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8087'. [ 585.157589][T23517] openvswitch: netlink: Message has 4 unknown bytes. [ 585.175026][T23517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.200715][T23522] netlink: 'syz.5.8092': attribute type 37 has an invalid length. [ 585.222498][T23522] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8092'. [ 585.726471][T23540] netlink: 'syz.1.8101': attribute type 39 has an invalid length. [ 586.122947][T23551] netlink: 'syz.4.8106': attribute type 13 has an invalid length. [ 586.159624][T23551] netlink: 'syz.4.8106': attribute type 4 has an invalid length. [ 586.198846][T23551] netlink: 13912 bytes leftover after parsing attributes in process `syz.4.8106'. [ 586.332379][T23562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8111'. [ 586.385860][T23562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8111'. [ 586.459937][T23568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8114'. [ 586.746156][T23581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8119'. [ 587.150117][T23596] ksmbd: Unknown IPC event: 1, ignore. [ 587.879497][T23633] ksmbd: Unknown IPC event: 1, ignore. [ 587.976986][T23637] openvswitch: netlink: IP tunnel dst address not specified [ 588.159894][T23649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8152'. [ 588.484203][T23661] netlink: 'syz.3.8157': attribute type 1 has an invalid length. [ 588.504876][T23661] netlink: 'syz.3.8157': attribute type 2 has an invalid length. [ 588.523349][T23661] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8157'. [ 589.151152][T23685] netlink: 3 bytes leftover after parsing attributes in process `syz.5.8170'. [ 589.614521][T23702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8176'. [ 589.802527][T23706] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8178'. [ 590.159611][T23706] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8178'. [ 590.321836][T23716] netlink: 'syz.5.8183': attribute type 5 has an invalid length. [ 590.331124][T23716] netlink: 'syz.5.8183': attribute type 6 has an invalid length. [ 590.343144][T23716] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.8183'. [ 590.370299][T23716] netlink: 'syz.5.8183': attribute type 1 has an invalid length. [ 590.401213][T23716] netlink: 6320 bytes leftover after parsing attributes in process `syz.5.8183'. [ 591.156856][T23750] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8196'. [ 591.166882][T23750] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8196'. [ 591.911430][T23787] netlink: 'syz.3.8210': attribute type 10 has an invalid length. [ 591.979104][T23787] team0: Device nlmon0 is of different type [ 593.726692][T23862] netlink: 'syz.5.8235': attribute type 10 has an invalid length. [ 593.776591][T23862] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8235'. [ 594.057000][T23880] proc: Bad value for 'gid' [ 595.063698][T23913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8248'. [ 595.906681][T23936] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8256'. [ 595.928676][T23936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8256'. [ 596.157764][T23948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8262'. [ 596.187690][T23948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8262'. [ 596.245999][T23950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8263'. [ 596.976449][T23979] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8277'. [ 597.393649][T23997] netlink: 'syz.4.8286': attribute type 29 has an invalid length. [ 597.418278][T23997] netlink: 'syz.4.8286': attribute type 29 has an invalid length. [ 597.450603][T23997] netlink: 'syz.4.8286': attribute type 29 has an invalid length. [ 597.506299][T24000] proc: Unknown parameter 'gi' [ 598.071324][T24031] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8302'. [ 598.090728][T24031] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8302'. [ 598.122427][T24031] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8302'. [ 599.600606][T24106] netlink: 'syz.3.8336': attribute type 2 has an invalid length. [ 600.006261][T24121] netlink: 'syz.3.8343': attribute type 21 has an invalid length. [ 600.040356][T24121] netlink: 'syz.3.8343': attribute type 5 has an invalid length. [ 600.069217][T24121] __nla_validate_parse: 4 callbacks suppressed [ 600.069240][T24121] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8343'. [ 600.183592][T24129] netlink: 'syz.4.8347': attribute type 10 has an invalid length. [ 600.191903][T24129] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.8347'. [ 600.343610][T24134] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8351'. [ 600.355037][T24134] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8351'. [ 600.366004][T24134] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8351'. [ 600.381460][T24133] netlink: 'syz.4.8349': attribute type 10 has an invalid length. [ 601.780090][T24196] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8380'. [ 601.978228][T24205] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8384'. [ 602.704829][T24236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8398'. [ 602.823406][T24239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8398'. [ 602.862345][T24244] netlink: 'syz.3.8401': attribute type 2 has an invalid length. [ 602.893543][T24244] netlink: 'syz.3.8401': attribute type 3 has an invalid length. [ 602.909759][T24244] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8401'. [ 603.182792][T24253] netlink: 'syz.3.8404': attribute type 2 has an invalid length. [ 603.353171][T24258] netlink: 'syz.1.8407': attribute type 21 has an invalid length. [ 604.093036][T24287] pim6reg: tun_chr_ioctl cmd 1074025677 [ 604.105074][T24287] pim6reg: linktype set to 270 [ 604.395091][T24300] netlink: 'syz.4.8427': attribute type 29 has an invalid length. [ 604.415315][T24300] netlink: 'syz.4.8427': attribute type 29 has an invalid length. [ 604.437848][T24300] netlink: 'syz.4.8427': attribute type 29 has an invalid length. [ 606.583854][T24352] __nla_validate_parse: 1 callbacks suppressed [ 606.583876][T24352] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.8450'. [ 609.382738][T24429] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.8487'. [ 609.406844][T24429] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.8487'. [ 609.428765][T24429] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.8487'. [ 609.839997][T24448] netlink: 'syz.4.8497': attribute type 10 has an invalid length. [ 609.862289][T24448] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8497'. [ 610.600256][T24467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8505'. [ 610.842965][T24477] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8510'. [ 612.052478][T24510] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 612.184083][T24516] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8527'. [ 612.207732][T24516] netlink: 'syz.0.8527': attribute type 12 has an invalid length. [ 612.228999][T24516] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8527'. [ 612.438909][T24523] tun0: tun_chr_ioctl cmd 1074025681 [ 612.492420][T24526] C: renamed from veth1_to_team (while UP) [ 612.513642][T24526] netlink: 'syz.3.8533': attribute type 3 has an invalid length. [ 612.530351][T24526] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8533'. [ 612.544492][T24526] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 612.876409][T24539] tap0: tun_chr_ioctl cmd 1074025681 [ 613.832574][T24549] netlink: 'syz.5.8543': attribute type 2 has an invalid length. [ 613.855790][T24549] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8543'. [ 614.078270][T24556] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8548'. [ 615.386604][T24594] netlink: 'syz.3.8566': attribute type 9 has an invalid length. [ 616.216643][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 616.398872][T24611] C: renamed from veth1_to_team (while UP) [ 616.431426][T24611] netlink: 'syz.0.8574': attribute type 2 has an invalid length. [ 616.461909][T24611] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8574'. [ 616.488507][T24611] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 617.434347][T24640] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8587'. [ 617.470499][T24643] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8586'. [ 618.237428][T24668] netlink: 'syz.4.8597': attribute type 16 has an invalid length. [ 618.282520][T24668] netlink: 'syz.4.8597': attribute type 3 has an invalid length. [ 618.305001][T24668] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8597'. [ 618.568823][T24687] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8606'. [ 618.579291][T24687] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8606'. [ 618.617039][T24687] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8606'. [ 618.986995][T24704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8612'. [ 622.081041][T24736] netlink: 124 bytes leftover after parsing attributes in process `syz.5.8628'. [ 622.515389][T24751] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8635'. [ 622.536254][T24751] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8635'. [ 622.758132][T24761] netlink: 703 bytes leftover after parsing attributes in process `syz.1.8639'. [ 622.863945][T24763] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8641'. [ 622.892524][T24763] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8641'. [ 622.987613][T24767] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8642'. [ 623.017867][T24767] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8642'. [ 623.055977][T24767] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8642'. [ 623.515326][T24793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8655'. [ 623.524900][T24793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8655'. [ 624.315044][T24804] netlink: 'syz.1.8658': attribute type 3 has an invalid length. [ 624.374957][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.383949][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.218147][T24943] __nla_validate_parse: 5 callbacks suppressed [ 629.218168][T24943] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8722'. [ 629.399081][T24948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 629.406414][T24948] IPv6: NLM_F_CREATE should be set when creating new route [ 629.413797][T24948] IPv6: NLM_F_CREATE should be set when creating new route [ 629.421100][T24948] IPv6: NLM_F_CREATE should be set when creating new route [ 630.058975][T24969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8736'. [ 630.374986][T24985] netlink: 'syz.0.8743': attribute type 1 has an invalid length. [ 630.401697][T24986] netlink: 'syz.4.8742': attribute type 10 has an invalid length. [ 630.949071][T25001] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8749'. [ 631.505392][T25023] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8760'. [ 632.405619][T25055] netlink: 'syz.3.8776': attribute type 21 has an invalid length. [ 632.427420][T25055] IPv6: NLM_F_CREATE should be specified when creating new route [ 633.308043][T25074] netlink: 'syz.4.8784': attribute type 1 has an invalid length. [ 633.758771][T25089] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8790'. [ 634.500298][T25123] netlink: 'syz.0.8807': attribute type 8 has an invalid length. [ 634.794454][T25135] netlink: 'syz.4.8815': attribute type 3 has an invalid length. [ 634.802724][T25135] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8815'. [ 635.057646][T25147] netlink: 'syz.3.8817': attribute type 10 has an invalid length. [ 635.233964][T25160] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.8826'. [ 635.250948][T25160] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.8826'. [ 635.263004][T25160] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.8826'. [ 635.760148][T25180] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.8831'. [ 636.075974][T25191] netlink: 1053 bytes leftover after parsing attributes in process `syz.4.8838'. [ 638.407604][T25212] netlink: 'syz.4.8849': attribute type 27 has an invalid length. [ 640.445788][T25260] netlink: 'syz.1.8865': attribute type 10 has an invalid length. [ 640.589361][T25260] team0: Device nlmon0 is of different type [ 641.701643][T25310] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8889'. [ 642.576757][T17196] tipc: Subscription rejected, illegal request [ 643.018220][T25365] netlink: 260 bytes leftover after parsing attributes in process `syz.0.8915'. [ 643.686595][T25378] netlink: 'syz.4.8922': attribute type 39 has an invalid length. [ 644.177807][T25396] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8930'. [ 644.187290][T25396] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8930'. [ 645.976213][T25458] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8957'. [ 646.034668][T25458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 647.455616][T25527] netlink: 'syz.4.8993': attribute type 9 has an invalid length. [ 647.515618][T25531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8991'. [ 647.558050][T25531] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8991'. [ 649.263173][T25584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9017'. [ 649.437849][T25593] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.9021'. [ 649.662657][T25603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9026'. [ 653.670059][T25643] netlink: 'syz.4.9043': attribute type 26 has an invalid length. [ 653.897704][T25653] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9049'. [ 654.011851][T25658] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.9048'. [ 654.625430][T25684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9062'. [ 654.634621][T25684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9062'. [ 655.147283][T25706] netlink: 'syz.1.9069': attribute type 21 has an invalid length. [ 655.179891][T25707] netlink: 122 bytes leftover after parsing attributes in process `syz.0.9070'. [ 656.211196][T25706] netlink: 'syz.1.9069': attribute type 6 has an invalid length. [ 656.221041][T25706] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9069'. [ 657.848277][T25711] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9071'. [ 657.880705][T25713] netlink: 'syz.4.9073': attribute type 1 has an invalid length. [ 658.102538][T25725] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9079'. [ 658.195067][T25727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9081'. [ 658.332485][T25733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9082'. [ 658.935560][T25751] __nla_validate_parse: 1 callbacks suppressed [ 658.935583][T25751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9092'. [ 662.385929][T25813] syzkaller1: tun_chr_ioctl cmd 1074025694 [ 663.012641][T25838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9133'. [ 663.132500][T25842] netlink: 'syz.4.9135': attribute type 10 has an invalid length. [ 663.153869][T25842] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9135'. [ 663.747090][T25863] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9143'. [ 663.786560][T25866] pim6reg1: entered promiscuous mode [ 663.788297][T25863] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9143'. [ 663.792367][T25866] pim6reg1: entered allmulticast mode [ 663.811965][T25863] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9143'. [ 664.411094][T25878] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.9152'. [ 664.884985][T25894] netlink: 'syz.0.9158': attribute type 16 has an invalid length. [ 664.903391][T25894] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9158'. [ 664.970081][T25898] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.9160'. [ 665.285077][T25910] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.9174'. [ 666.376696][T25934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9178'. [ 666.385888][T25934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9178'. [ 667.071839][T25947] lo speed is unknown, defaulting to 1000 [ 667.111027][T25947] lo speed is unknown, defaulting to 1000 [ 667.149719][T25947] lo speed is unknown, defaulting to 1000 [ 667.190379][T25947] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 667.282859][T25947] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 667.330941][T25947] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 667.370383][T25950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.443558][T25947] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 667.516933][T25947] lo speed is unknown, defaulting to 1000 [ 667.532037][T25947] lo speed is unknown, defaulting to 1000 [ 667.543065][T25947] lo speed is unknown, defaulting to 1000 [ 667.551480][T25947] lo speed is unknown, defaulting to 1000 [ 667.560627][T25947] lo speed is unknown, defaulting to 1000 [ 674.412501][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 674.435527][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 674.452509][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 674.464488][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 674.483545][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 675.414989][T26006] netlink: 'syz.4.9206': attribute type 10 has an invalid length. [ 675.495044][T26009] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9207'. [ 676.165566][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.493128][T25973] gretap0 speed is unknown, defaulting to 1000 [ 676.528502][ T50] Bluetooth: hci5: command tx timeout [ 676.594841][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.682759][T25973] xfrm0 speed is unknown, defaulting to 1000 [ 676.689082][T26015] gretap0 speed is unknown, defaulting to 1000 [ 676.700202][T25973] lo speed is unknown, defaulting to 1000 [ 676.809225][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.868420][T26015] xfrm0 speed is unknown, defaulting to 1000 [ 676.884039][T26015] lo speed is unknown, defaulting to 1000 [ 676.971332][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.293244][T22179] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 677.304379][T22179] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 677.314615][T22179] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 677.325802][T22179] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 677.336353][T22179] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 677.722448][T26055] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 678.019970][ T13] bridge_slave_1: left allmulticast mode [ 678.030335][ T13] bridge_slave_1: left promiscuous mode [ 678.043248][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.065937][ T13] bridge_slave_0: left allmulticast mode [ 678.079206][ T13] bridge_slave_0: left promiscuous mode [ 678.090677][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.484278][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.496812][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.509612][ T13] bond0 (unregistering): Released all slaves [ 678.554673][T26072] netlink: 'syz.0.9230': attribute type 13 has an invalid length. [ 678.590407][T26072] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.9230'. [ 678.610819][T22179] Bluetooth: hci5: command tx timeout [ 678.913435][T26084] netlink: 'syz.0.9232': attribute type 2 has an invalid length. [ 679.408714][T22179] Bluetooth: hci3: command tx timeout [ 679.423810][ T13] hsr_slave_0: left promiscuous mode [ 679.444697][ T13] hsr_slave_1: left promiscuous mode [ 679.451220][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.458903][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.484412][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.504727][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.544857][ T13] veth1_macvtap: left promiscuous mode [ 679.562111][ T13] veth0_macvtap: left promiscuous mode [ 679.578971][ T13] veth1_vlan: left promiscuous mode [ 679.598932][ T13] veth0_vlan: left promiscuous mode [ 680.227869][ T13] team0 (unregistering): Port device team_slave_1 removed [ 680.279312][ T13] team0 (unregistering): Port device team_slave_0 removed [ 680.636889][T25973] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.655996][T25973] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.677121][T25973] bridge_slave_0: entered allmulticast mode [ 680.695138][T25973] bridge_slave_0: entered promiscuous mode [ 680.701313][ T50] Bluetooth: hci5: command tx timeout [ 680.727622][T26045] gretap0 speed is unknown, defaulting to 1000 [ 680.736366][ T5285] 8021q: adding VLAN 0 to HW filter on device eth5 [ 680.830958][T25973] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.855251][T25973] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.882024][T25973] bridge_slave_1: entered allmulticast mode [ 680.906552][T25973] bridge_slave_1: entered promiscuous mode [ 680.990102][T26045] xfrm0 speed is unknown, defaulting to 1000 [ 681.057961][T26045] lo speed is unknown, defaulting to 1000 [ 681.084527][T25973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.346378][T25973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.489854][ T50] Bluetooth: hci3: command tx timeout [ 681.623108][T25973] team0: Port device team_slave_0 added [ 681.676492][T25973] team0: Port device team_slave_1 added [ 682.051067][T25973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.068434][T25973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.128410][T25973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.192289][T25973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.235629][T25973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.319949][T25973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.664929][T25973] hsr_slave_0: entered promiscuous mode [ 682.697113][T25973] hsr_slave_1: entered promiscuous mode [ 682.731490][T25973] debugfs: 'hsr0' already exists in 'hsr' [ 682.747531][T25973] Cannot create hsr debugfs directory [ 682.768691][ T50] Bluetooth: hci5: command tx timeout [ 682.776078][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 683.406420][ T5285] 8021q: adding VLAN 0 to HW filter on device eth6 [ 683.572189][T26153] Bluetooth: hci3: command tx timeout [ 684.543234][T26045] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.572015][T26045] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.590412][T26045] bridge_slave_0: entered allmulticast mode [ 684.607560][T26045] bridge_slave_0: entered promiscuous mode [ 684.671632][T26045] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.688667][T26045] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.706225][T26045] bridge_slave_1: entered allmulticast mode [ 684.720738][T26045] bridge_slave_1: entered promiscuous mode [ 684.807995][T26201] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.9265'. [ 684.942909][T26045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.047518][T26045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.116892][ T5285] 8021q: adding VLAN 0 to HW filter on device eth7 [ 685.221319][T26045] team0: Port device team_slave_0 added [ 685.333416][T26045] team0: Port device team_slave_1 added [ 685.461489][T26045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.478605][T26045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.528925][T26045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.650165][T26153] Bluetooth: hci3: command tx timeout [ 685.663923][T26045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.688042][T26045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.728079][T26045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.812660][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.819274][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.861115][T26219] netlink: 'syz.0.9273': attribute type 46 has an invalid length. [ 685.890915][ T13] bridge_slave_1: left allmulticast mode [ 685.904445][ T13] bridge_slave_1: left promiscuous mode [ 685.912321][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.940630][ T13] bridge_slave_0: left allmulticast mode [ 685.950903][ T13] bridge_slave_0: left promiscuous mode [ 685.963486][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.385665][T26227] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 686.424379][T25973] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 686.459604][T25973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 686.476167][ T13] : left promiscuous mode [ 686.646712][T26045] hsr_slave_0: entered promiscuous mode [ 686.665582][T26045] hsr_slave_1: entered promiscuous mode [ 686.683330][T26045] debugfs: 'hsr0' already exists in 'hsr' [ 686.700570][T26045] Cannot create hsr debugfs directory [ 686.713828][T25973] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 686.734218][T25973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 686.773938][T25973] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 686.806921][T25973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 686.894664][T25973] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 686.933466][T25973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 686.946873][T26238] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9282'. [ 686.988942][T26238] netlink: 'syz.3.9282': attribute type 1 has an invalid length. [ 686.996800][T26238] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.9282'. [ 688.247831][T26271] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 688.408119][T26274] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9290'. [ 688.452953][ T5285] 8021q: adding VLAN 0 to HW filter on device eth8 [ 688.714249][T25973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.761300][ T13] hsr_slave_1: left promiscuous mode [ 688.918227][T26288] netlink: 'syz.3.9296': attribute type 11 has an invalid length. [ 688.942323][T26288] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9296'. [ 689.687810][T25973] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.746302][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.753586][ T5792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.851215][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.858529][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.359459][T26045] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 690.385249][T26045] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 690.409442][T26045] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 690.444573][T26045] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 690.475386][T26045] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 690.531918][T26045] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 690.560774][T26045] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 690.589378][T26045] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 690.995607][T26045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.068230][T26045] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.133250][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.140584][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.193135][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.200382][ T5792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.778568][T26340] gretap0 speed is unknown, defaulting to 1000 [ 691.816384][T26340] xfrm0 speed is unknown, defaulting to 1000 [ 691.854444][T26340] lo speed is unknown, defaulting to 1000 [ 692.039969][T26355] netlink: 'syz.0.9311': attribute type 10 has an invalid length. [ 692.101663][T26355] .`: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 692.134398][T25973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.600194][T26371] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9313'. [ 692.748210][T26045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.901680][T25973] veth0_vlan: entered promiscuous mode [ 692.938906][T25973] veth1_vlan: entered promiscuous mode [ 693.080481][T25973] veth0_macvtap: entered promiscuous mode [ 693.116501][T25973] veth1_macvtap: entered promiscuous mode [ 693.175959][T25973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.212055][T25973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.257982][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.281696][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.307333][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.342056][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.587822][ T382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.624402][ T382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.754889][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.786136][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.953144][T26045] veth0_vlan: entered promiscuous mode [ 693.977176][T26045] veth1_vlan: entered promiscuous mode [ 694.074448][T26045] veth0_macvtap: entered promiscuous mode [ 694.104961][T26045] veth1_macvtap: entered promiscuous mode [ 694.173520][T26045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.210100][T26045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.265161][ T382] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.306594][ T382] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.372373][ T382] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.381334][ T382] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.692962][T26403] netlink: 14752 bytes leftover after parsing attributes in process `syz.3.9325'. [ 694.787444][T26403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9325'. [ 694.879144][T26403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9325'. [ 694.997533][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.034394][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.162281][ T5783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.191419][ T5783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.437288][T26416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9332'. [ 696.452334][T26450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9344'. [ 697.425776][T26463] netlink: 'syz.4.9351': attribute type 12 has an invalid length. [ 697.438040][T26463] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9351'. [ 698.041332][T26486] À: port 1(vlan1) entered blocking state [ 698.054578][T26486] À: port 1(vlan1) entered disabled state [ 698.060737][T26486] vlan1: entered allmulticast mode [ 698.066058][T26486] veth0_vlan: entered allmulticast mode [ 698.077864][T26486] vlan1: entered promiscuous mode [ 698.336363][T26497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9365'. [ 698.731098][T26514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9375'. [ 699.336786][T26531] netlink: 'syz.6.9380': attribute type 39 has an invalid length. [ 699.457528][ T5645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 699.475897][ T5645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 699.487235][ T5645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 699.520288][ T5645] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 699.535530][ T5645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 699.695207][T26543] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.9386'. [ 701.568500][ T5645] Bluetooth: hci4: command tx timeout [ 701.802878][T17196] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.566123][T17196] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.061635][T26595] sch_tbf: burst 2 is lower than device veth0_to_bond mtu (82) ! [ 703.502919][T26602] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9401'. [ 703.648529][ T5645] Bluetooth: hci4: command tx timeout [ 703.660071][T17196] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.027627][T17196] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.338823][T26536] gretap0 speed is unknown, defaulting to 1000 [ 704.405300][T26536] xfrm0 speed is unknown, defaulting to 1000 [ 704.470709][T26536] lo speed is unknown, defaulting to 1000 [ 705.045290][T26632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9409'. [ 705.728540][ T5645] Bluetooth: hci4: command tx timeout [ 705.810183][T17196] bridge_slave_1: left allmulticast mode [ 705.841834][T17196] bridge_slave_1: left promiscuous mode [ 705.872834][T17196] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.924496][T26648] netlink: 'syz.6.9413': attribute type 11 has an invalid length. [ 706.006975][T17196] bridge_slave_0: left allmulticast mode [ 706.022860][T26648] netlink: 168 bytes leftover after parsing attributes in process `syz.6.9413'. [ 706.064959][T17196] bridge_slave_0: left promiscuous mode [ 706.143353][T17196] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.317172][T17196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.364942][T17196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.395135][T17196] bond0 (unregistering): Released all slaves [ 707.539164][T26656] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9417'. [ 707.814948][ T5645] Bluetooth: hci4: command tx timeout [ 709.817870][T17196] hsr_slave_0: left promiscuous mode [ 709.850897][T17196] hsr_slave_1: left promiscuous mode [ 709.878046][T17196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.916074][T17196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.966454][T17196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.985063][T26697] Set syz1 is full, maxelem 2076 reached [ 710.016120][T17196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.092156][T17196] veth1_macvtap: left promiscuous mode [ 710.131961][T17196] veth0_macvtap: left promiscuous mode [ 710.163808][T17196] veth1_vlan: left promiscuous mode [ 710.201224][T17196] veth0_vlan: left promiscuous mode [ 711.547869][T17196] team0 (unregistering): Port device team_slave_1 removed [ 711.623833][T17196] team0 (unregistering): Port device team_slave_0 removed [ 711.793326][ T5792] tipc: Subscription rejected, illegal request [ 712.247958][ T382] smbdirect: ib_dev[syz2] removed [ 712.331142][ T5770] lo speed is unknown, defaulting to 1000 [ 712.361323][ T5770] syz2: Port: 1 Link DOWN [ 712.494513][T26683] gretap0 speed is unknown, defaulting to 1000 [ 712.614521][T26683] xfrm0 speed is unknown, defaulting to 1000 [ 713.156188][T26536] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.193785][T26536] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.233085][T26536] bridge_slave_0: entered allmulticast mode [ 713.283504][T26536] bridge_slave_0: entered promiscuous mode [ 713.371731][T26536] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.404874][T26536] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.445835][T26536] bridge_slave_1: entered allmulticast mode [ 713.501203][T26536] bridge_slave_1: entered promiscuous mode [ 714.137376][T26536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.175810][T26536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.469522][T26746] netlink: 'syz.3.9440': attribute type 16 has an invalid length. [ 714.477585][T26746] netlink: 'syz.3.9440': attribute type 17 has an invalid length. [ 714.591192][T26536] team0: Port device team_slave_0 added [ 714.990896][T26746] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.114071][T26746] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.474285][T26536] team0: Port device team_slave_1 added [ 715.616917][T26153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 715.631560][T26153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 715.642106][T26153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 715.651594][T26153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 715.660037][T26153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 715.672847][T26536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.718088][T26536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.791993][T26536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.805091][T26536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.813306][T26536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.841319][T26536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.999906][ T5792] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.198781][T26536] hsr_slave_0: entered promiscuous mode [ 716.229751][T26536] hsr_slave_1: entered promiscuous mode [ 716.246835][T26536] debugfs: 'hsr0' already exists in 'hsr' [ 716.271297][T26536] Cannot create hsr debugfs directory [ 716.408587][T26771] netlink: 'syz.3.9449': attribute type 10 has an invalid length. [ 716.426707][ T5792] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.547290][T26774] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9450'. [ 716.601168][T26771] team0: Device wg2 is of different type [ 716.887148][ T5792] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.184845][T26790] netlink: 'syz.0.9453': attribute type 2 has an invalid length. [ 717.202203][T26790] netlink: 'syz.0.9453': attribute type 5 has an invalid length. [ 717.265184][T26790] netlink: 'syz.0.9453': attribute type 2 has an invalid length. [ 717.276618][T26790] netlink: 'syz.0.9453': attribute type 5 has an invalid length. [ 717.286673][ T5792] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.729071][ T5645] Bluetooth: hci1: command tx timeout [ 717.803043][T26755] gretap0 speed is unknown, defaulting to 1000 [ 717.831841][T26755] xfrm0 speed is unknown, defaulting to 1000 [ 718.024096][ T5285] 8021q: adding VLAN 0 to HW filter on device eth9 [ 718.422251][ T5792] bridge_slave_1: left allmulticast mode [ 718.438439][ T5792] bridge_slave_1: left promiscuous mode [ 718.451815][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.486604][ T5792] bridge_slave_0: left allmulticast mode [ 718.517224][ T5792] bridge_slave_0: left promiscuous mode [ 718.539422][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.595876][ T5792] vlan1: left allmulticast mode [ 718.629512][ T5792] veth0_vlan: left allmulticast mode [ 718.640746][ T5792] vlan1: left promiscuous mode [ 718.655408][ T5792] À: port 1(vlan1) entered disabled state [ 719.808550][ T5645] Bluetooth: hci1: command tx timeout [ 720.016048][ T5792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.073467][ T5792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.093918][ T5792] bond0 (unregistering): Released all slaves [ 720.168522][ T5285] 8021q: adding VLAN 0 to HW filter on device eth10 [ 720.734545][T26863] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9474'. [ 720.785781][T26536] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 720.859885][T26536] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 720.896372][T26536] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 720.960777][T26536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 721.137042][T26536] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 721.204744][T26536] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 721.260440][T26536] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 721.299565][T26536] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 721.421501][ T5792] hsr_slave_0: left promiscuous mode [ 721.453363][ T5792] hsr_slave_1: left promiscuous mode [ 721.469213][ T5792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.488676][ T5792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.504494][ T5792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.539821][ T5792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.591920][ T5792] veth1_macvtap: left promiscuous mode [ 721.605081][ T5792] veth0_macvtap: left promiscuous mode [ 721.620696][ T5792] veth1_vlan: left promiscuous mode [ 721.630289][ T5792] veth0_vlan: left promiscuous mode [ 721.888797][ T5645] Bluetooth: hci1: command tx timeout [ 722.020865][ T5792] team0 (unregistering): Port device team_slave_1 removed [ 722.055268][ T5792] team0 (unregistering): Port device team_slave_0 removed [ 722.233731][ T5285] 8021q: adding VLAN 0 to HW filter on device eth11 [ 722.540724][T26915] netlink: 'syz.0.9489': attribute type 1 has an invalid length. [ 722.573944][T26915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9489'. [ 723.319072][T26755] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.327113][T26755] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.337922][T26755] bridge_slave_0: entered allmulticast mode [ 723.346390][T26755] bridge_slave_0: entered promiscuous mode [ 723.366937][T26755] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.375410][T26755] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.383254][T26755] bridge_slave_1: entered allmulticast mode [ 723.392334][T26755] bridge_slave_1: entered promiscuous mode [ 723.418384][T26536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.487487][T26536] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.613630][T26755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.642636][T26755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.852620][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.859870][ T5783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.926051][T26755] team0: Port device team_slave_0 added [ 723.954202][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.961434][ T5783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.968637][ T5645] Bluetooth: hci1: command tx timeout [ 724.047005][T26755] team0: Port device team_slave_1 added [ 724.406372][T26957] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9500'. [ 724.461836][ T5285] 8021q: adding VLAN 0 to HW filter on device eth12 [ 724.487404][T26755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.506944][T26755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.537269][T26755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.555265][T26755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.563665][T26755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.622606][T26755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.814349][T26755] hsr_slave_0: entered promiscuous mode [ 724.824875][T26755] hsr_slave_1: entered promiscuous mode [ 724.850953][T26755] debugfs: 'hsr0' already exists in 'hsr' [ 724.867796][T26755] Cannot create hsr debugfs directory [ 725.079813][T26965] gretap0 speed is unknown, defaulting to 1000 [ 725.131751][T26965] xfrm0 speed is unknown, defaulting to 1000 [ 725.937718][T27005] netlink: 'syz.3.9513': attribute type 10 has an invalid length. [ 726.035888][T27005] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.071206][T27005] bond0: (slave team0): Enslaving as an active interface with an up link [ 726.119606][ T5285] 8021q: adding VLAN 0 to HW filter on device eth13 [ 726.157861][T26987] gretap0 speed is unknown, defaulting to 1000 [ 726.244786][T26987] xfrm0 speed is unknown, defaulting to 1000 [ 726.376206][T27013] mac80211_hwsim hwsim59 wlan0: entered allmulticast mode [ 726.564818][T26755] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 726.611747][T26755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 726.634121][T26755] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 726.657418][T26755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 726.792316][T26755] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 726.835047][T26755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 726.862962][T27026] netlink: 'syz.3.9519': attribute type 3 has an invalid length. [ 726.878551][T27026] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9519'. [ 726.901648][T26755] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 726.923367][T26755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 726.967149][T27030] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9520'. [ 726.986163][T26536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.032183][T27030] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9520'. [ 727.353021][T26755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.466819][T26755] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.510078][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.517294][ T5792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.582719][T17196] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.589997][T17196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.068658][ T5285] 8021q: adding VLAN 0 to HW filter on device eth14 [ 728.364852][T26536] veth0_vlan: entered promiscuous mode [ 728.427216][T26536] veth1_vlan: entered promiscuous mode [ 728.590544][T26536] veth0_macvtap: entered promiscuous mode [ 728.636281][T26536] veth1_macvtap: entered promiscuous mode [ 728.831838][T26536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.865996][T26536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.911822][ T381] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.971219][ T381] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.983023][T27097] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9537'. [ 729.045797][ T381] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.073984][ T381] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.104156][T27100] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9538'. [ 729.421541][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.468081][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.553315][ T5792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.588849][ T5792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.762905][T26755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.040106][T27132] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9546'. [ 730.082057][T27132] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9546'. [ 730.099806][T27132] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9546'. [ 730.455214][ T5285] 8021q: adding VLAN 0 to HW filter on device eth15 [ 730.699246][T26755] veth0_vlan: entered promiscuous mode [ 730.724957][T26755] veth1_vlan: entered promiscuous mode [ 730.840230][T26755] veth0_macvtap: entered promiscuous mode [ 730.883756][T26755] veth1_macvtap: entered promiscuous mode [ 730.962236][T26755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.005858][T26755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.052090][ T35] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.061098][ T35] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.126090][ T35] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.172779][ T35] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.720516][ T381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.767918][ T381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.963662][ T381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.003641][ T381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.468897][ T5285] 8021q: adding VLAN 0 to HW filter on device eth16 [ 732.701633][T27200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9566'. [ 732.909023][T27208] netlink: 'syz.8.9569': attribute type 2 has an invalid length. [ 735.048544][T27262] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 735.112030][T27265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9589'. [ 735.575622][T27287] netlink: 'syz.0.9600': attribute type 2 has an invalid length. [ 736.120467][T27308] netlink: 'syz.6.9611': attribute type 16 has an invalid length. [ 736.143316][T27308] netlink: 'syz.6.9611': attribute type 17 has an invalid length. [ 736.347675][T27308] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.385673][T27308] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.809666][T27324] netlink: 'syz.7.9615': attribute type 10 has an invalid length. [ 736.857788][T27324] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.887520][T27324] bond0: (slave team0): Enslaving as an active interface with an up link [ 737.016357][T27330] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9619'. [ 737.048883][T27330] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9619'. [ 737.342889][T27340] netlink: 'syz.8.9625': attribute type 10 has an invalid length. [ 737.361290][T27340] netlink: 65015 bytes leftover after parsing attributes in process `syz.8.9625'. [ 737.538755][T27350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9629'. [ 737.733739][T27358] netlink: 'syz.8.9632': attribute type 10 has an invalid length. [ 737.823972][T27358] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.872417][T27358] bond0: (slave team0): Enslaving as an active interface with an up link [ 737.897959][T27363] netlink: 76 bytes leftover after parsing attributes in process `syz.7.9634'. [ 738.095805][T27371] blkio.reset_stats is deprecated [ 738.176084][T27377] netlink: 774 bytes leftover after parsing attributes in process `syz.3.9639'. [ 738.186507][T27377] netlink: 'syz.3.9639': attribute type 1 has an invalid length. [ 738.311599][T27380] C: renamed from veth1_to_team (while UP) [ 738.336115][T27380] netlink: 'syz.6.9641': attribute type 4 has an invalid length. [ 738.360168][T27380] netlink: 116 bytes leftover after parsing attributes in process `syz.6.9641'. [ 738.377300][T27380] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 738.393334][T27383] netlink: 'syz.8.9643': attribute type 13 has an invalid length. [ 738.417474][T27383] netlink: 24859 bytes leftover after parsing attributes in process `syz.8.9643'. [ 739.507718][T27436] netlink: 'syz.6.9663': attribute type 4 has an invalid length. [ 739.531977][T27436] netlink: 152 bytes leftover after parsing attributes in process `syz.6.9663'. [ 739.553867][T27436] .`: renamed from bond0 (while UP) [ 739.892168][T27446] xt_socket: unknown flags 0x30 [ 740.748262][T27475] netlink: 'syz.6.9680': attribute type 10 has an invalid length. [ 741.035076][T27475] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.054750][T27475] .`: (slave team0): Enslaving as an active interface with an up link [ 741.655036][T27491] gretap0 speed is unknown, defaulting to 1000 [ 741.666756][T27491] xfrm0 speed is unknown, defaulting to 1000 [ 742.250992][T27502] __nla_validate_parse: 1 callbacks suppressed [ 742.251015][T27502] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9693'. [ 742.334569][T27502] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9693'. [ 743.046120][T27509] netlink: 'syz.7.9696': attribute type 10 has an invalid length. [ 743.095806][T27513] netlink: 'syz.7.9696': attribute type 10 has an invalid length. [ 743.237551][T27509] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 743.299568][T27509] team0: Port device netdevsim1 added [ 744.746476][T27560] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9712'. [ 744.755972][T27556] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 744.810643][T27556] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 744.860088][T27556] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 744.999830][T27556] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 745.407092][ T35] smbdirect: ib_dev[syz2] removed [ 745.737973][T27586] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9720'. [ 745.774184][T27586] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9720'. [ 746.163543][T27596] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9723'. [ 747.253485][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.261727][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.722235][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.103188][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.383724][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.496841][T26153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 750.509983][T26153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 750.520737][T26153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 750.536794][T26153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 750.546497][T26153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 750.751425][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.181309][T27719] netlink: 'syz.7.9762': attribute type 2 has an invalid length. [ 751.563580][ T13] bridge_slave_1: left allmulticast mode [ 751.597375][ T13] bridge_slave_1: left promiscuous mode [ 751.627828][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.701851][ T13] bridge_slave_0: left allmulticast mode [ 751.732548][ T13] bridge_slave_0: left promiscuous mode [ 751.755226][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.401893][T27745] Set syz1 is full, maxelem 2076 reached [ 752.614051][T26153] Bluetooth: hci2: command tx timeout [ 752.820751][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.930705][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.021576][ T13] bond0 (unregistering): (slave team0): Releasing backup interface [ 753.034531][ T13] bond0 (unregistering): Released all slaves [ 753.281585][T27771] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9778'. [ 753.524223][T27777] netlink: 'syz.6.9780': attribute type 12 has an invalid length. [ 753.698808][ T13] hsr_slave_0: left promiscuous mode [ 753.721728][ T13] hsr_slave_1: left promiscuous mode [ 753.744092][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.772028][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.794973][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.831308][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.909470][ T13] veth1_macvtap: left promiscuous mode [ 753.931238][ T13] veth0_macvtap: left promiscuous mode [ 753.946688][ T13] veth1_vlan: left promiscuous mode [ 753.970013][ T13] veth0_vlan: left promiscuous mode [ 754.690180][T26153] Bluetooth: hci2: command tx timeout [ 754.881892][ T13] team0 (unregistering): Port device team_slave_1 removed [ 754.931523][ T13] team0 (unregistering): Port device team_slave_0 removed [ 755.231550][T27693] gretap0 speed is unknown, defaulting to 1000 [ 755.255761][T27693] xfrm0 speed is unknown, defaulting to 1000 [ 756.768787][T26153] Bluetooth: hci2: command tx timeout [ 756.933262][T27693] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.975702][T27693] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.012232][T27693] bridge_slave_0: entered allmulticast mode [ 757.065273][T27693] bridge_slave_0: entered promiscuous mode [ 757.104472][T27693] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.132678][T27693] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.155845][T27693] bridge_slave_1: entered allmulticast mode [ 757.177990][ T5645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 757.194493][ T5645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 757.203146][T27693] bridge_slave_1: entered promiscuous mode [ 757.210658][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 757.221667][ T5645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 757.229955][ T5645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 757.238941][T27864] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.9807'. [ 757.324458][T27693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.365226][T27693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.542508][T27693] team0: Port device team_slave_0 added [ 757.587617][T27693] team0: Port device team_slave_1 added [ 757.790978][T27693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.820780][T27693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.900147][T27885] IPv6: Can't replace route, no match found [ 757.921952][T27693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.961431][T27693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.001868][T27693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.051886][T27693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.233559][T27693] hsr_slave_0: entered promiscuous mode [ 758.262795][T27693] hsr_slave_1: entered promiscuous mode [ 758.270978][T27693] debugfs: 'hsr0' already exists in 'hsr' [ 758.292957][T27693] Cannot create hsr debugfs directory [ 758.317555][T27898] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9814'. [ 758.852632][T26153] Bluetooth: hci2: command tx timeout [ 759.292559][ T35] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.328759][T26153] Bluetooth: hci3: command tx timeout [ 759.358467][T27866] gretap0 speed is unknown, defaulting to 1000 [ 759.440038][T27866] xfrm0 speed is unknown, defaulting to 1000 [ 759.526527][ T35] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.876241][ T35] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.575380][ T35] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.224590][ T5285] 8021q: adding VLAN 0 to HW filter on device eth17 [ 761.422881][T26153] Bluetooth: hci3: command tx timeout [ 761.886252][ T35] bridge_slave_1: left allmulticast mode [ 761.913092][ T35] bridge_slave_1: left promiscuous mode [ 761.931763][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.943187][ T35] bridge_slave_0: left allmulticast mode [ 761.956563][T27992] IPv6: Can't replace route, no match found [ 761.958511][ T35] bridge_slave_0: left promiscuous mode [ 761.988829][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.770114][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.814851][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.860952][ T35] bond0 (unregistering): (slave team0): Releasing backup interface [ 762.886922][ T35] bond0 (unregistering): Released all slaves [ 763.162891][ T5285] 8021q: adding VLAN 0 to HW filter on device eth18 [ 763.489063][T26153] Bluetooth: hci3: command tx timeout [ 763.881444][T27693] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 763.927104][T27693] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 763.943502][T28040] netlink: 152 bytes leftover after parsing attributes in process `syz.7.9856'. [ 764.037776][T27693] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 764.197634][T27693] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 764.230789][T28054] netlink: 'syz.7.9860': attribute type 2 has an invalid length. [ 764.297226][T27866] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.324078][T27866] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.332053][T27866] bridge_slave_0: entered allmulticast mode [ 764.346515][T27866] bridge_slave_0: entered promiscuous mode [ 764.362831][T27866] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.378529][T27866] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.386835][T27866] bridge_slave_1: entered allmulticast mode [ 764.404250][T27866] bridge_slave_1: entered promiscuous mode [ 764.420712][T27693] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 764.442775][T27693] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 764.492852][ T35] hsr_slave_0: left promiscuous mode [ 764.545914][ T35] hsr_slave_1: left promiscuous mode [ 764.565448][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.588916][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.609915][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.623725][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.662577][ T35] veth1_macvtap: left promiscuous mode [ 764.681650][ T35] veth0_macvtap: left promiscuous mode [ 764.687331][ T35] veth1_vlan: left promiscuous mode [ 764.707688][ T35] veth0_vlan: left promiscuous mode [ 765.578601][T26153] Bluetooth: hci3: command tx timeout [ 765.589716][ T35] team0 (unregistering): Port device team_slave_1 removed [ 765.622783][ T35] team0 (unregistering): Port device team_slave_0 removed [ 766.395822][T27693] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 766.423273][T27693] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 766.455080][ T5285] 8021q: adding VLAN 0 to HW filter on device eth19 [ 766.483225][T27866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.564609][T27866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.761928][T27866] team0: Port device team_slave_0 added [ 766.796647][T27866] team0: Port device team_slave_1 added [ 766.984771][T27866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.031863][T27866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.086936][T27866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.116017][T27866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.124401][T27866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.151690][T27866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.364423][T27866] hsr_slave_0: entered promiscuous mode [ 767.373073][T27866] hsr_slave_1: entered promiscuous mode [ 767.380123][T27866] debugfs: 'hsr0' already exists in 'hsr' [ 767.386103][T27866] Cannot create hsr debugfs directory [ 768.038811][ T5285] 8021q: adding VLAN 0 to HW filter on device eth20 [ 768.325158][T27693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.409564][T27693] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.471472][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.478727][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.602246][T28152] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.9886'. [ 768.626144][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.633379][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.964663][T27866] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 768.992181][T27866] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 769.021634][T27866] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 769.064145][T27866] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 769.114196][T27866] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 769.172342][T27866] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 769.206299][T27866] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 769.245502][T27866] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 769.799702][T27866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.916249][T27866] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.984517][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.991798][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.083104][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.090374][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.576100][T28216] option changes via remount are deprecated (pid=28214 comm=syz.0.9901) [ 770.595588][T28225] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9903'. [ 770.661916][T28225] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9903'. [ 771.176222][T27693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.364277][T27693] veth0_vlan: entered promiscuous mode [ 771.528674][T27693] veth1_vlan: entered promiscuous mode [ 771.692623][T27693] veth0_macvtap: entered promiscuous mode [ 771.754963][T27693] veth1_macvtap: entered promiscuous mode [ 771.867313][T27693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 771.924933][T27693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 771.997521][T27866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.006247][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.074404][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.112973][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.133779][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.652697][T17196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.691726][T17196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.837895][ T5783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.868014][ T5783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.392651][T27866] veth0_vlan: entered promiscuous mode [ 773.485399][T27866] veth1_vlan: entered promiscuous mode [ 773.827900][T27866] veth0_macvtap: entered promiscuous mode [ 773.855063][T27866] veth1_macvtap: entered promiscuous mode [ 773.967205][T27866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.004976][T27866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.053435][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.094820][ T381] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 774.107326][ T381] bridge0: port 3(netdevsim1) entered disabled state [ 774.205639][T28314] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.9922'. [ 774.321903][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.367734][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.393771][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.634380][ T5645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 774.647919][ T5645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 774.656716][ T5645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 774.666911][ T5645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 774.681247][ T5645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 774.753200][T28323] netlink: 'syz.7.9926': attribute type 29 has an invalid length. [ 774.884590][T28323] netlink: 'syz.7.9926': attribute type 29 has an invalid length. [ 774.976642][T28323] netlink: 'syz.7.9926': attribute type 29 has an invalid length. [ 775.015287][T27500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.040476][T27500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.414353][ T5792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.463030][ T5792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.599678][ T381] bridge_slave_1: left allmulticast mode [ 775.614351][ T381] bridge_slave_1: left promiscuous mode [ 775.655634][ T381] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.685825][ T381] bridge_slave_0: left allmulticast mode [ 775.696995][ T381] bridge_slave_0: left promiscuous mode [ 775.711649][ T381] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.947585][T27500] smbdirect: ib_dev[syz1] removed [ 776.768489][T26153] Bluetooth: hci0: command tx timeout [ 778.848725][T26153] Bluetooth: hci0: command tx timeout [ 778.857248][T28361] smbdirect: ib_dev[syz0] removed [ 778.976821][ T381] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.020298][ T381] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.057928][ T381] .` (unregistering): (slave batadv0): Releasing backup interface [ 779.067423][T28368] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.9941'. [ 779.082542][ T381] .` (unregistering): (slave veth0_to_bond): Releasing backup interface [ 779.093149][T28368] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.9941'. [ 779.111658][ T381] .` (unregistering): Released all slaves [ 779.487681][T15166] xfrm0 speed is unknown, defaulting to 1000 [ 779.495432][T15166] infiniband syz1: ib_query_port failed (-19) [ 779.503735][T15175] gretap0 speed is unknown, defaulting to 1000 [ 779.514236][T15175] infiniband syz0: ib_query_port failed (-19) [ 779.621626][ T381] ´: left promiscuous mode [ 780.021128][T28380] netlink: 148 bytes leftover after parsing attributes in process `syz.7.9943'. [ 780.478816][T28399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9951'. [ 780.930590][T26153] Bluetooth: hci0: command tx timeout [ 780.958607][T28417] netlink: 'syz.3.9957': attribute type 1 has an invalid length. [ 781.804542][ T381] team0: Port device wlan0 removed [ 782.064685][ T381] hsr_slave_0: left promiscuous mode [ 782.102330][ T381] hsr_slave_1: left promiscuous mode [ 782.115560][ T381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.132302][ T381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.172779][ T381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.217791][ T381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.009411][T26153] Bluetooth: hci0: command tx timeout [ 783.322356][ T381] team0 (unregistering): Port device team_slave_1 removed [ 783.371990][ T381] team0 (unregistering): Port device team_slave_0 removed [ 783.541066][T28464] netlink: zone id is out of range [ 783.546619][T28464] netlink: zone id is out of range [ 783.553196][T28464] netlink: zone id is out of range [ 783.574001][T28464] netlink: zone id is out of range [ 783.591932][T28464] netlink: zone id is out of range [ 783.611880][T28464] netlink: zone id is out of range [ 783.630984][T28464] netlink: zone id is out of range [ 783.646755][T28464] netlink: zone id is out of range [ 783.661416][T28464] netlink: zone id is out of range [ 783.702180][T28464] netlink: zone id is out of range [ 783.967486][T28468] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9975'. [ 784.022083][T28471] netlink: 65047 bytes leftover after parsing attributes in process `syz.9.9976'. [ 784.771236][T28320] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.794889][T28320] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.802417][T28320] bridge_slave_0: entered allmulticast mode [ 784.816092][T28320] bridge_slave_0: entered promiscuous mode [ 784.842272][T28320] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.871494][T28320] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.893887][T28320] bridge_slave_1: entered allmulticast mode [ 784.923360][T28320] bridge_slave_1: entered promiscuous mode [ 785.083902][T28320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.353969][T28320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.476292][T28320] team0: Port device team_slave_0 added [ 785.506026][T28320] team0: Port device team_slave_1 added [ 785.688645][T28320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.727780][T28320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.818789][T28320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.877781][T28320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.898679][T28320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.935207][T28320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.177469][T28320] hsr_slave_0: entered promiscuous mode [ 786.186859][T28320] hsr_slave_1: entered promiscuous mode [ 786.196268][T28525] netlink: 'syz.6.9990': attribute type 21 has an invalid length. [ 786.580814][T28533] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9995'. [ 786.731740][T28538] netlink: 'syz.9.9996': attribute type 39 has an invalid length. [ 786.856517][ T5285] 8021q: adding VLAN 0 to HW filter on device eth21 [ 788.047276][ T5285] 8021q: adding VLAN 0 to HW filter on device eth22 [ 789.442991][T28320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 789.491145][T28320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 789.530602][T28320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 789.609457][T28320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 789.631947][T28609] netlink: 'syz.3.10017': attribute type 29 has an invalid length. [ 789.645397][T28609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10017'. [ 789.689904][T28320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 789.711755][T28612] netlink: 'syz.6.10018': attribute type 23 has an invalid length. [ 789.780318][T28320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 789.827797][T28320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 790.035631][T28320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 790.268112][T28635] netlink: 'syz.3.10021': attribute type 10 has an invalid length. [ 790.305280][T28635] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.314070][T28635] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.399901][T28635] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.407610][T28635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.415735][T28635] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.423201][T28635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.454875][T28635] team0: Port device bridge0 added [ 790.660099][T28320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.766853][T28320] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.819291][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.826540][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.865789][ T5285] 8021q: adding VLAN 0 to HW filter on device eth23 [ 790.952138][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.959397][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.790438][T28320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.908005][T28320] veth0_vlan: entered promiscuous mode [ 792.937328][T28320] veth1_vlan: entered promiscuous mode [ 793.023588][T28320] veth0_macvtap: entered promiscuous mode [ 793.057672][T28320] veth1_macvtap: entered promiscuous mode [ 793.103956][T28320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.127526][T28320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.290888][ T382] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.303873][ T382] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.327059][ T382] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.357510][ T382] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.404439][ T5285] 8021q: adding VLAN 0 to HW filter on device eth24 [ 793.662239][ T382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.706272][ T382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.966916][ T382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.009696][ T382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.084204][T28719] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.10041'. [ 795.714009][T28747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10045'. [ 795.905604][T28747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10045'. [ 795.973676][T28747] net_ratelimit: 12 callbacks suppressed [ 795.973701][T28747] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 799.103119][T28847] netlink: 'syz.2.10080': attribute type 1 has an invalid length. [ 800.638864][T26153] Bluetooth: hci5: command 0x0406 tx timeout [ 801.974029][T28928] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 802.603149][T28940] netlink: 'syz.2.10110': attribute type 11 has an invalid length. [ 802.626545][T28940] netlink: 140 bytes leftover after parsing attributes in process `syz.2.10110'. [ 803.244986][T28962] netlink: 6 bytes leftover after parsing attributes in process `syz.6.10116'. [ 803.794527][T28987] netlink: 182 bytes leftover after parsing attributes in process `syz.7.10126'. [ 804.768793][ T42] page_pool_release_retry() stalled pool shutdown: id 242, 1 inflight 60 sec [ 806.473853][T29076] netlink: 'syz.6.10153': attribute type 3 has an invalid length. [ 806.539877][T29076] netlink: 132 bytes leftover after parsing attributes in process `syz.6.10153'. [ 806.607450][T29082] sctp: [Deprecated]: syz.2.10155 (pid 29082) Use of struct sctp_assoc_value in delayed_ack socket option. [ 806.607450][T29082] Use struct sctp_sack_info instead [ 806.994946][T29096] netlink: 60 bytes leftover after parsing attributes in process `syz.6.10159'. [ 807.338568][ T29] audit: type=1107 audit(1784530189.345:9): pid=29106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 807.809903][T29119] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10167'. [ 808.724566][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.737375][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.987149][T29153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10177'. [ 810.794996][T29201] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10195'. [ 811.825697][T29239] netlink: 104 bytes leftover after parsing attributes in process `syz.9.10208'. [ 814.469668][T29291] netlink: 'syz.3.10222': attribute type 10 has an invalid length. [ 814.524021][T29291] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10222'. [ 814.951517][T29291] team0: Port device geneve1 added [ 816.466131][T29335] netlink: 'syz.9.10235': attribute type 10 has an invalid length. [ 816.567059][T29335] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 818.228547][T29375] netlink: 'syz.3.10247': attribute type 2 has an invalid length. [ 818.950888][T29399] netlink: 'syz.2.10255': attribute type 39 has an invalid length. [ 819.005091][T29399] netlink: 'syz.2.10255': attribute type 1 has an invalid length. [ 819.736225][T29416] netlink: 'syz.7.10259': attribute type 3 has an invalid length. [ 819.778707][ T5645] Bluetooth: hci2: unexpected event 0x01 length: 151 > 1 [ 819.783745][T29416] netlink: 'syz.7.10259': attribute type 1 has an invalid length. [ 819.864155][T29416] netlink: 60387 bytes leftover after parsing attributes in process `syz.7.10259'. [ 820.155375][T29431] netlink: 'syz.7.10265': attribute type 10 has an invalid length. [ 822.167685][T29431] team0: Device wg2 is of different type [ 822.268244][T29436] netlink: 76 bytes leftover after parsing attributes in process `syz.6.10266'. [ 822.716079][T29478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10272'. [ 824.057803][ C1] sit: Src spoofed 127.0.0.1/fe80::b -> 127.129.0.0/ff02::2 [ 825.117039][T29527] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10286'. [ 826.128582][T26153] Bluetooth: hci4: command 0x0406 tx timeout [ 826.386818][T29559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10294'. [ 826.454512][T29559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10294'. [ 827.207828][T29581] mac80211_hwsim hwsim75 ..ãc¤±: renamed from wlan1 (while UP) [ 831.378094][T26153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 831.388588][T26153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 831.397560][T26153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 831.415102][T26153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 831.424183][T26153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 832.755578][T29706] netlink: 'syz.9.10336': attribute type 2 has an invalid length. [ 832.900414][T29717] netlink: 'syz.7.10338': attribute type 10 has an invalid length. [ 832.957712][T29717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.023024][T29717] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 833.360385][T29732] netlink: 'syz.7.10342': attribute type 1 has an invalid length. [ 833.491101][T26153] Bluetooth: hci1: command tx timeout [ 834.972156][T29792] IPv6: NLM_F_CREATE should be specified when creating new route [ 835.061131][T26153] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 835.252601][T29679] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.286830][T29679] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.313873][T29679] bridge_slave_0: entered allmulticast mode [ 835.343891][T29679] bridge_slave_0: entered promiscuous mode [ 835.555279][T29679] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.594329][T29679] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.662482][T26153] Bluetooth: hci1: command tx timeout [ 835.781192][T29679] bridge_slave_1: entered allmulticast mode [ 835.832194][T29679] bridge_slave_1: entered promiscuous mode [ 836.410053][T29679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.512686][T29679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.723229][T29679] team0: Port device team_slave_0 added [ 836.759595][T29679] team0: Port device team_slave_1 added [ 836.880874][T29679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.890501][T29679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.933994][T29679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.986014][T29679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.018542][T29679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.088787][ T5645] Bluetooth: hci5: command 0x0406 tx timeout [ 837.169586][T29679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.424622][T29828] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.10366'. [ 837.611516][T29679] hsr_slave_0: entered promiscuous mode [ 837.624167][T29679] hsr_slave_1: entered promiscuous mode [ 837.636480][T29679] debugfs: 'hsr0' already exists in 'hsr' [ 837.650961][T29679] Cannot create hsr debugfs directory [ 837.738549][T26153] Bluetooth: hci1: command tx timeout [ 839.170106][T26153] Bluetooth: hci5: command 0x0406 tx timeout [ 839.822207][ T5645] Bluetooth: hci1: command tx timeout [ 841.176323][T29679] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 841.240402][T29679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 841.270370][T29679] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 841.355771][T29679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 841.371433][T29679] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 841.604480][T26153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 841.615433][T26153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 841.624303][T26153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 841.633160][T26153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 841.641017][T26153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 842.589610][T29679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 842.730810][T29679] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 842.818961][T29679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 843.184754][T29679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.265365][T29679] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.329356][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.336607][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.414717][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.422095][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.730176][T26153] Bluetooth: hci0: command tx timeout [ 844.694482][T29999] netlink: 'syz.6.10408': attribute type 12 has an invalid length. [ 844.737613][T30002] netlink: 'syz.7.10410': attribute type 6 has an invalid length. [ 845.222277][T29679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 845.237472][T29922] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.266579][T29922] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.292549][T29922] bridge_slave_0: entered allmulticast mode [ 845.320063][T29922] bridge_slave_0: entered promiscuous mode [ 845.351045][T29922] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.376332][T29922] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.400251][T29922] bridge_slave_1: entered allmulticast mode [ 845.412646][T29922] bridge_slave_1: entered promiscuous mode [ 845.595328][T29922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.641786][T29922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.796722][T29922] team0: Port device team_slave_0 added [ 845.819365][T26153] Bluetooth: hci0: command tx timeout [ 845.862157][T29922] team0: Port device team_slave_1 added [ 845.940547][T29922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.947760][T29922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.987117][T29922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.014259][T29922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.027332][T29922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.095629][T29922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.158976][ C1] sit: Src spoofed 127.0.0.1/500::e8:ffff:ffff:ffff -> 127.255.255.255/::7fff:ffff [ 846.168614][ C1] sit: Src spoofed 127.0.0.1/500::e8:ffff:ffff:ffff -> 127.255.255.255/::7fff:ffff [ 846.178078][ C1] sit: Src spoofed 127.0.0.1/500::e8:ffff:ffff:ffff -> 127.255.255.255/::7fff:ffff [ 846.187650][ C1] sit: Src spoofed 127.0.0.1/500::e8:ffff:ffff:ffff -> 127.255.255.255/::7fff:ffff [ 846.197275][ C1] sit: Src spoofed 127.0.0.1/500::e8:ffff:ffff:ffff -> 127.255.255.255/::7fff:ffff [ 846.206954][ C1] sit: Src spoofed 127.0.0.1/500::e8:ffff:ffff:ffff -> 127.255.255.255/::7fff:ffff [ 846.216619][ C1] sit: Src spoofed 127.0.0.1/500::e8:ffff:ffff:ffff -> 127.255.255.255/::7fff:ffff [ 846.226247][ C1] sit: Src spoofed 127.0.0.1/500::e8:ffff:ffff:ffff -> 127.255.255.255/::7fff:ffff [ 846.235888][ C1] sit: Src spoofed 127.0.0.1/500::e8:ffff:ffff:ffff -> 127.255.255.255/::7fff:ffff [ 846.245509][ C1] sit: Src spoofed 127.0.0.1/500::e8:ffff:ffff:ffff -> 127.255.255.255/::7fff:ffff [ 846.413550][T29922] hsr_slave_0: entered promiscuous mode [ 846.427479][T29922] hsr_slave_1: entered promiscuous mode [ 846.437923][T29922] debugfs: 'hsr0' already exists in 'hsr' [ 846.446922][T29922] Cannot create hsr debugfs directory [ 847.132022][T29679] veth0_vlan: entered promiscuous mode [ 847.257485][T29679] veth1_vlan: entered promiscuous mode [ 847.459088][T30055] netlink: 'syz.6.10427': attribute type 1 has an invalid length. [ 847.576063][T29679] veth0_macvtap: entered promiscuous mode [ 847.641453][T29679] veth1_macvtap: entered promiscuous mode [ 847.838764][T30066] netlink: 'syz.7.10432': attribute type 21 has an invalid length. [ 847.865156][T30066] IPv6: NLM_F_CREATE should be specified when creating new route [ 847.875069][T30066] netlink: 'syz.7.10432': attribute type 1 has an invalid length. [ 847.889143][T26153] Bluetooth: hci0: command tx timeout [ 847.932873][T29679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 847.964820][T29679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 848.025487][ T5792] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.048210][ T5792] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.197624][ T5792] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.217142][ T5792] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.588815][T30062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.800722][T17196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.826808][T17196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.920967][T17196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.945377][T17196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.428594][T30100] netlink: 61211 bytes leftover after parsing attributes in process `syz.5.10324'. [ 849.536709][T30106] netlink: 'syz.9.10439': attribute type 1 has an invalid length. [ 849.979456][T26153] Bluetooth: hci0: command tx timeout [ 850.073143][T29922] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 850.144704][T30133] netlink: 'syz.5.10442': attribute type 21 has an invalid length. [ 850.184586][T29922] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 850.202805][T30133] IPv6: NLM_F_CREATE should be specified when creating new route [ 850.215342][T29922] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 850.262075][T29922] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 850.265193][T30133] netlink: 'syz.5.10442': attribute type 1 has an invalid length. [ 850.307344][T29922] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 850.345620][T29922] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 850.374187][T29922] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 850.428500][T29922] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 851.026386][T30163] netlink: 'syz.5.10450': attribute type 10 has an invalid length. [ 851.219728][T30163] mac80211_hwsim hwsim80 wlan0: entered allmulticast mode [ 851.287793][T30163] team0: Port device wlan0 added [ 851.480014][T29922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.578695][T29922] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.633522][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.640811][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.742276][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.749578][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.424697][T30185] netlink: 'syz.5.10453': attribute type 1 has an invalid length. [ 853.557628][T30209] netlink: 76 bytes leftover after parsing attributes in process `syz.9.10459'. [ 854.005330][T29922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.118433][T29922] veth0_vlan: entered promiscuous mode [ 854.134633][T29922] veth1_vlan: entered promiscuous mode [ 854.185080][T29922] veth0_macvtap: entered promiscuous mode [ 854.203699][T29922] veth1_macvtap: entered promiscuous mode [ 854.229393][T29922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.250592][T29922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.273989][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.299711][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.310802][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.330118][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.430227][T30126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.455994][T30126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.490821][ T5783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.503173][ T5783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.655431][T30248] netlink: 'syz.6.10475': attribute type 1 has an invalid length. [ 854.693764][T30248] netlink: 'syz.6.10475': attribute type 2 has an invalid length. [ 854.745663][T30248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10475'. [ 854.981733][T30241] veth0_macvtap: left promiscuous mode [ 855.144915][T30256] netlink: 'syz.5.10467': attribute type 4 has an invalid length. [ 855.193534][T30241] veth0_macvtap: entered promiscuous mode [ 855.346778][T30263] netlink: 'syz.1.10465': attribute type 1 has an invalid length. [ 857.614571][T30312] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10485'. [ 857.678174][T30312] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10485'. [ 857.815181][T30317] netlink: 'syz.7.10487': attribute type 1 has an invalid length. [ 858.069673][T30320] netlink: 'syz.5.10488': attribute type 12 has an invalid length. [ 858.247991][T30329] netlink: 'syz.9.10490': attribute type 5 has an invalid length. [ 859.146039][T30337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 859.276778][T30331] syzkaller0: entered promiscuous mode [ 859.291042][T30331] syzkaller0: entered allmulticast mode [ 867.063296][T30420] netlink: 172 bytes leftover after parsing attributes in process `syz.6.10523'. [ 867.361191][T30427] netlink: 144 bytes leftover after parsing attributes in process `syz.7.10526'. [ 867.420340][T30427] netlink: 144 bytes leftover after parsing attributes in process `syz.7.10526'. [ 867.536863][T30431] netlink: 'syz.1.10527': attribute type 21 has an invalid length. [ 868.701071][T30469] netlink: 'syz.1.10542': attribute type 21 has an invalid length. [ 868.726186][T30465] tmpfs: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 869.117735][ T5783] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.283465][T30482] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10547'. [ 869.470447][ T5783] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.608737][ T5783] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.998226][ T5783] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.136571][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.146658][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.242411][ T5645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 870.266800][ T5645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 870.285732][ T5645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 870.305454][ T5645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 870.315152][ T5645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 870.364756][T30509] syzkaller0: entered promiscuous mode [ 870.414874][T30509] syzkaller0: entered allmulticast mode [ 870.500208][T30519] netlink: 'syz.6.10556': attribute type 10 has an invalid length. [ 870.613793][T30519] .`: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 872.376404][ T5645] Bluetooth: hci2: command tx timeout [ 873.951707][ T5783] bridge_slave_1: left allmulticast mode [ 873.981405][ T5783] bridge_slave_1: left promiscuous mode [ 874.011350][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.067831][T30551] cgroup: Unknown subsys name 'measure' [ 874.126774][ T5783] bridge_slave_0: left allmulticast mode [ 874.154077][ T5783] bridge_slave_0: left promiscuous mode [ 874.180104][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.461002][ T5645] Bluetooth: hci2: command tx timeout [ 874.527053][T30565] Cannot find del_set index 14804 as target [ 875.432179][ T5783] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 875.653430][ T5783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.699775][T30590] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10574'. [ 875.732094][ T5783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.744215][T30590] netlink: 5 bytes leftover after parsing attributes in process `syz.7.10574'. [ 875.809130][ T5783] bond0 (unregistering): Released all slaves [ 876.530323][ T5645] Bluetooth: hci2: command tx timeout [ 876.753264][T30617] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10583'. [ 876.971752][ T5783] hsr_slave_0: left promiscuous mode [ 877.005615][ T5783] hsr_slave_1: left promiscuous mode [ 877.044039][ T5783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.069738][ T5783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.111602][ T5783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.132225][ T5783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.191631][ T5783] veth1_macvtap: left promiscuous mode [ 877.204957][ T5783] veth0_macvtap: left promiscuous mode [ 877.269163][ T5783] veth1_vlan: left promiscuous mode [ 877.285448][ T5783] veth0_vlan: left promiscuous mode [ 878.621136][ T5645] Bluetooth: hci2: command tx timeout [ 879.180367][ T5783] team0 (unregistering): Port device team_slave_1 removed [ 879.229005][ T5783] team0 (unregistering): Port device team_slave_0 removed [ 879.642209][T30691] netlink: 124 bytes leftover after parsing attributes in process `syz.1.10602'. [ 879.796217][T30693] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10603'. [ 879.947434][T30701] netlink: 176 bytes leftover after parsing attributes in process `syz.6.10606'. [ 880.725893][T30510] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.776753][T30510] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.821045][T30510] bridge_slave_0: entered allmulticast mode [ 880.855330][T30510] bridge_slave_0: entered promiscuous mode [ 880.894610][T30510] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.934267][T30510] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.950170][T30510] bridge_slave_1: entered allmulticast mode [ 880.970771][T30510] bridge_slave_1: entered promiscuous mode [ 881.055123][T30737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10617'. [ 881.276938][T30510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.301871][T30510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.460703][T30510] team0: Port device team_slave_0 added [ 881.492347][T30510] team0: Port device team_slave_1 added [ 881.660528][T30510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.667654][T30510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.709996][T30510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.740333][T30510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.747553][T30510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.821049][T30510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.047713][T30757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10633'. [ 882.229080][T30510] hsr_slave_0: entered promiscuous mode [ 882.252438][T30510] hsr_slave_1: entered promiscuous mode [ 882.276252][T30510] debugfs: 'hsr0' already exists in 'hsr' [ 882.286153][T30510] Cannot create hsr debugfs directory [ 882.988668][T30778] netlink: 60 bytes leftover after parsing attributes in process `syz.6.10630'. [ 883.531057][T30800] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.10637'. [ 883.598580][T30801] netlink: 'syz.7.10636': attribute type 6 has an invalid length. [ 883.643126][T30801] netlink: 168 bytes leftover after parsing attributes in process `syz.7.10636'. [ 885.942064][T30510] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 886.341683][T30510] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 886.377110][T30510] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 886.472319][T30510] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 886.498167][T30510] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 886.546995][T30510] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 886.585808][T30510] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 886.782317][T30510] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 887.740048][T30510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.816946][T30510] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.877322][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.884610][ T5792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.961685][T30128] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.968969][T30128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.050281][T30510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.679119][T31015] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10683'. [ 892.127493][T30510] veth0_vlan: entered promiscuous mode [ 892.190720][T30510] veth1_vlan: entered promiscuous mode [ 892.334541][T30510] veth0_macvtap: entered promiscuous mode [ 892.362224][T30510] veth1_macvtap: entered promiscuous mode [ 892.444804][T30510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 892.552397][T30510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 892.620043][ T381] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.653083][ T381] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.675834][ T381] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.712218][ T381] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.086693][T30121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.116147][T30121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.290452][ T5792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.310042][ T5792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.053027][T31091] infiniband syz0: set down [ 894.059899][T31091] infiniband syz0: added ipvlan1 [ 894.094948][T31091] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 894.110600][T31091] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 894.131296][T31091] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 894.168479][T31091] RDS/IB: syz0: added [ 894.174146][T31091] smc: adding ib device syz0 with port count 1 [ 894.180871][T31091] smc: ib device syz0 port 1 has no pnetid [ 894.923520][T31129] netlink: 64 bytes leftover after parsing attributes in process `syz.7.10719'. [ 895.819044][T31148] syzkaller0: entered promiscuous mode [ 895.824694][T31148] syzkaller0: entered allmulticast mode [ 897.868605][T31211] netlink: 'syz.7.10733': attribute type 10 has an invalid length. [ 897.876859][T31211] netlink: 55 bytes leftover after parsing attributes in process `syz.7.10733'. [ 900.541846][T31222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10735'. [ 901.157444][T31239] netlink: 168 bytes leftover after parsing attributes in process `syz.7.10740'. [ 901.911888][T31250] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10744'. [ 905.171462][T31324] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10764'. [ 905.869119][ T5645] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 906.598925][T31351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10772'. [ 907.396477][T30126] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.653376][T30126] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.225790][T26153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 908.237188][T26153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 908.252262][T26153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 908.275528][T26153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 908.301914][T26153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 908.442483][T30126] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.751354][T31410] netlink: 65035 bytes leftover after parsing attributes in process `syz.6.10789'. [ 908.893053][T30126] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.133728][T31416] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10790'. [ 909.185872][T31416] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10790'. [ 910.368651][ T5645] Bluetooth: hci2: command tx timeout [ 911.583577][T30126] bridge_slave_1: left allmulticast mode [ 911.602769][T30126] bridge_slave_1: left promiscuous mode [ 911.630414][T30126] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.697063][T30126] bridge_slave_0: left allmulticast mode [ 911.723504][T30126] bridge_slave_0: left promiscuous mode [ 911.762491][T30126] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.160078][T31460] net_ratelimit: 1654 callbacks suppressed [ 912.160130][T31460] netlink: get zone limit has 8 unknown bytes [ 912.450270][ T5645] Bluetooth: hci2: command tx timeout [ 912.786691][T31473] netlink: 'syz.5.10809': attribute type 2 has an invalid length. [ 913.487443][T30126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 913.525469][T30126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 913.548045][T30126] bond0 (unregistering): Released all slaves [ 913.657062][T31473] : entered promiscuous mode [ 914.023420][T31495] netlink: 'syz.6.10817': attribute type 1 has an invalid length. [ 914.046674][T31495] netlink: 'syz.6.10817': attribute type 4 has an invalid length. [ 914.079459][T31498] netlink: 'syz.6.10817': attribute type 1 has an invalid length. [ 914.087629][T31495] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.10817'. [ 914.130444][T31498] netlink: 'syz.6.10817': attribute type 4 has an invalid length. [ 914.170990][T31498] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.10817'. [ 914.529674][ T5645] Bluetooth: hci2: command tx timeout [ 914.903249][T31522] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10822'. [ 916.608298][ T5645] Bluetooth: hci2: command tx timeout [ 916.714372][T30126] hsr_slave_0: left promiscuous mode [ 916.742533][T30126] hsr_slave_1: left promiscuous mode [ 916.767277][T30126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.791174][T30126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.820598][T30126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.860160][T30126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.891731][ T5645] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 916.946786][T30126] veth1_macvtap: left promiscuous mode [ 916.975548][T30126] veth0_macvtap: left promiscuous mode [ 917.004957][T30126] veth1_vlan: left promiscuous mode [ 917.033084][T30126] veth0_vlan: left promiscuous mode [ 917.933252][ T35] smc: removing ib device syz0 [ 918.136631][T30126] team0 (unregistering): Port device team_slave_1 removed [ 918.167861][T30126] team0 (unregistering): Port device team_slave_0 removed [ 918.592830][T27277] ================================================================== [ 918.601000][T27277] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x230/0x250 [ 918.609905][T27277] Read of size 1 at addr ffff88807f3e8e09 by task kworker/0:0/27277 [ 918.617901][T27277] [ 918.620266][T27277] CPU: 0 UID: 0 PID: 27277 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 918.620287][T27277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 918.620300][T27277] Workqueue: events smc_ib_port_event_work [ 918.620341][T27277] Call Trace: [ 918.620348][T27277] [ 918.620355][T27277] dump_stack_lvl+0xe8/0x150 [ 918.620383][T27277] print_address_description+0x55/0x1e0 [ 918.620408][T27277] ? __ethtool_get_link_ksettings+0x230/0x250 [ 918.620430][T27277] print_report+0x58/0x70 [ 918.620452][T27277] kasan_report+0x117/0x150 [ 918.620480][T27277] ? __ethtool_get_link_ksettings+0x230/0x250 [ 918.620506][T27277] __ethtool_get_link_ksettings+0x230/0x250 [ 918.620530][T27277] __ethtool_get_link_ksettings+0x11f/0x250 [ 918.620554][T27277] ib_get_eth_speed+0x180/0x7f0 [ 918.620572][T27277] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 918.620593][T27277] ? do_raw_spin_unlock+0xf5/0x210 [ 918.620613][T27277] ? rxe_query_port+0x6b/0x3d0 [ 918.620631][T27277] rxe_query_port+0x93/0x3d0 [ 918.620649][T27277] ib_query_port+0x16e/0x830 [ 918.620669][T27277] smc_ib_port_event_work+0x147/0x920 [ 918.620698][T27277] ? rcu_is_watching+0x15/0xb0 [ 918.620725][T27277] ? process_scheduled_works+0xa20/0x14e0 [ 918.620751][T27277] process_scheduled_works+0xa8e/0x14e0 [ 918.620782][T27277] ? __pfx_process_scheduled_works+0x10/0x10 [ 918.620804][T27277] ? assign_work+0x3cf/0x5d0 [ 918.620823][T27277] worker_thread+0xa47/0xfb0 [ 918.620849][T27277] ? __kthread_parkme+0x71/0x1f0 [ 918.620874][T27277] kthread+0x388/0x470 [ 918.620898][T27277] ? __pfx_worker_thread+0x10/0x10 [ 918.620916][T27277] ? __pfx_kthread+0x10/0x10 [ 918.620940][T27277] ret_from_fork+0x514/0xb70 [ 918.620966][T27277] ? __pfx_ret_from_fork+0x10/0x10 [ 918.620989][T27277] ? __switch_to+0xc89/0x1420 [ 918.621011][T27277] ? __pfx_kthread+0x10/0x10 [ 918.621035][T27277] ret_from_fork_asm+0x1a/0x30 [ 918.621057][T27277] [ 918.621063][T27277] [ 918.809447][T27277] Allocated by task 30510: [ 918.813874][T27277] kasan_save_track+0x3e/0x80 [ 918.818574][T27277] __kasan_kmalloc+0x93/0xb0 [ 918.823192][T27277] __kvmalloc_node_noprof+0x53f/0x860 [ 918.828583][T27277] alloc_netdev_mqs+0xa9/0x12b0 [ 918.833460][T27277] rtnl_create_link+0x321/0xd70 [ 918.838339][T27277] rtnl_newlink_create+0x25f/0xb00 [ 918.843483][T27277] rtnl_newlink+0x167f/0x1bd0 [ 918.848182][T27277] rtnetlink_rcv_msg+0x802/0xc00 [ 918.853149][T27277] netlink_rcv_skb+0x226/0x4a0 [ 918.857939][T27277] netlink_unicast+0x7bb/0x940 [ 918.862729][T27277] netlink_sendmsg+0x813/0xb40 [ 918.867513][T27277] sock_sendmsg_nosec+0x13a/0x180 [ 918.872559][T27277] __sys_sendto+0x408/0x5a0 [ 918.877093][T27277] __x64_sys_sendto+0xde/0x100 [ 918.881876][T27277] do_syscall_64+0x174/0x580 [ 918.886510][T27277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.892421][T27277] [ 918.894850][T27277] Freed by task 30126: [ 918.898950][T27277] kasan_save_track+0x3e/0x80 [ 918.903672][T27277] kasan_save_free_info+0x40/0x50 [ 918.908721][T27277] __kasan_slab_free+0x5c/0x80 [ 918.913515][T27277] kfree+0x1c5/0x640 [ 918.917430][T27277] device_release+0xc4/0x1f0 [ 918.922049][T27277] kobject_put+0x222/0x550 [ 918.926488][T27277] netdev_run_todo+0xf56/0x10d0 [ 918.931362][T27277] default_device_exit_batch+0x966/0x9e0 [ 918.937017][T27277] ops_undo_list+0x4b4/0x8d0 [ 918.941638][T27277] cleanup_net+0x572/0x810 [ 918.946076][T27277] process_scheduled_works+0xa8e/0x14e0 [ 918.951638][T27277] worker_thread+0xa47/0xfb0 [ 918.956251][T27277] kthread+0x388/0x470 [ 918.960347][T27277] ret_from_fork+0x514/0xb70 [ 918.964957][T27277] ret_from_fork_asm+0x1a/0x30 [ 918.969749][T27277] [ 918.972096][T27277] The buggy address belongs to the object at ffff88807f3e8000 [ 918.972096][T27277] which belongs to the cache kmalloc-cg-4k of size 4096 [ 918.986437][T27277] The buggy address is located 3593 bytes inside of [ 918.986437][T27277] freed 4096-byte region [ffff88807f3e8000, ffff88807f3e9000) [ 919.000441][T27277] [ 919.002796][T27277] The buggy address belongs to the physical page: [ 919.009258][T27277] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f3e8 [ 919.018047][T27277] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 919.026577][T27277] memcg:ffff8880786c3401 [ 919.030843][T27277] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 919.038428][T27277] page_type: f5(slab) [ 919.042435][T27277] raw: 00fff00000000040 ffff88801b01c500 dead000000000100 dead000000000122 [ 919.051041][T27277] raw: 0000000000000000 0000000800040004 00000000f5000000 ffff8880786c3401 [ 919.059668][T27277] head: 00fff00000000040 ffff88801b01c500 dead000000000100 dead000000000122 [ 919.068353][T27277] head: 0000000000000000 0000000800040004 00000000f5000000 ffff8880786c3401 [ 919.077057][T27277] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 919.085745][T27277] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 919.094431][T27277] page dumped because: kasan: bad access detected [ 919.100867][T27277] page_owner tracks the page as allocated [ 919.106592][T27277] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4982, tgid 4982 (find), ts 32006430866, free_ts 29487858419 [ 919.127278][T27277] post_alloc_hook+0x1f9/0x250 [ 919.132072][T27277] get_page_from_freelist+0x21fa/0x2270 [ 919.137645][T27277] __alloc_frozen_pages_noprof+0x18d/0x380 [ 919.143662][T27277] allocate_slab+0x79/0x5e0 [ 919.148184][T27277] refill_objects+0x2d5/0x350 [ 919.152901][T27277] __pcs_replace_empty_main+0x2bf/0x6b0 [ 919.158653][T27277] __kvmalloc_node_noprof+0x66b/0x860 [ 919.164057][T27277] seq_read_iter+0x1ea/0xca0 [ 919.168664][T27277] vfs_read+0x595/0xa80 [ 919.172847][T27277] ksys_read+0x150/0x270 [ 919.177120][T27277] do_syscall_64+0x174/0x580 [ 919.181732][T27277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.187647][T27277] page last free pid 1 tgid 1 stack trace: [ 919.193466][T27277] free_pages_prepare+0x960/0xa60 [ 919.198530][T27277] __free_contig_range_common+0x174/0x340 [ 919.204290][T27277] destroy_args+0x4e5/0x570 [ 919.208826][T27277] debug_vm_pgtable+0x3f8/0x410 [ 919.213708][T27277] do_one_initcall+0x250/0x870 [ 919.218506][T27277] do_initcall_level+0x10a/0x1a0 [ 919.223467][T27277] do_initcalls+0x59/0xa0 [ 919.227817][T27277] kernel_init_freeable+0x29d/0x3e0 [ 919.233082][T27277] kernel_init+0x1d/0x1d0 [ 919.237429][T27277] ret_from_fork+0x514/0xb70 [ 919.242042][T27277] ret_from_fork_asm+0x1a/0x30 [ 919.246845][T27277] [ 919.249180][T27277] Memory state around the buggy address: [ 919.254845][T27277] ffff88807f3e8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 919.262919][T27277] ffff88807f3e8d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 919.271000][T27277] >ffff88807f3e8e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 919.279075][T27277] ^ [ 919.283418][T27277] ffff88807f3e8e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 919.291491][T27277] ffff88807f3e8f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 919.299561][T27277] ================================================================== [ 919.459719][T27277] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 919.467024][T27277] CPU: 0 UID: 0 PID: 27277 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 919.476527][T27277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 919.486617][T27277] Workqueue: events smc_ib_port_event_work [ 919.492487][T27277] Call Trace: [ 919.495795][T27277] [ 919.498855][T27277] vpanic+0x56c/0xa60 [ 919.502884][T27277] ? __pfx_vpanic+0x10/0x10 [ 919.507522][T27277] panic+0xc5/0xd0 [ 919.511287][T27277] ? __pfx_panic+0x10/0x10 [ 919.515747][T27277] ? preempt_schedule_thunk+0x16/0x40 [ 919.521156][T27277] ? __ethtool_get_link_ksettings+0x230/0x250 [ 919.527263][T27277] ? preempt_schedule_thunk+0x16/0x40 [ 919.532678][T27277] ? __ethtool_get_link_ksettings+0x230/0x250 [ 919.538788][T27277] check_panic_on_warn+0x89/0xb0 [ 919.543768][T27277] ? __ethtool_get_link_ksettings+0x230/0x250 [ 919.549873][T27277] end_report+0x73/0x170 [ 919.554187][T27277] ? __ethtool_get_link_ksettings+0x230/0x250 [ 919.560305][T27277] kasan_report+0x128/0x150 [ 919.564855][T27277] ? __ethtool_get_link_ksettings+0x230/0x250 [ 919.570959][T27277] __ethtool_get_link_ksettings+0x230/0x250 [ 919.576920][T27277] __ethtool_get_link_ksettings+0x11f/0x250 [ 919.582851][T27277] ib_get_eth_speed+0x180/0x7f0 [ 919.587748][T27277] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 919.593155][T27277] ? do_raw_spin_unlock+0xf5/0x210 [ 919.598348][T27277] ? rxe_query_port+0x6b/0x3d0 [ 919.603162][T27277] rxe_query_port+0x93/0x3d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 919.607799][T27277] ib_query_port+0x16e/0x830 [ 919.612433][T27277] smc_ib_port_event_work+0x147/0x920 [ 919.617869][T27277] ? rcu_is_watching+0x15/0xb0 [ 919.622680][T27277] ? process_scheduled_works+0xa20/0x14e0 [ 919.628440][T27277] process_scheduled_works+0xa8e/0x14e0 [ 919.634131][T27277] ? __pfx_process_scheduled_works+0x10/0x10 [ 919.640191][T27277] ? assign_work+0x3cf/0x5d0 [ 919.644841][T27277] worker_thread+0xa47/0xfb0 [ 919.649494][T27277] ? __kthread_parkme+0x71/0x1f0 [ 919.654507][T27277] kthread+0x388/0x470 [ 919.658646][T27277] ? __pfx_worker_thread+0x10/0x10 [ 919.663804][T27277] ? __pfx_kthread+0x10/0x10 [ 919.668478][T27277] ret_from_fork+0x514/0xb70 [ 919.673134][T27277] ? __pfx_ret_from_fork+0x10/0x10 [ 919.678302][T27277] ? __switch_to+0xc89/0x1420 [ 919.683147][T27277] ? __pfx_kthread+0x10/0x10 [ 919.687798][T27277] ret_from_fork_asm+0x1a/0x30 [ 919.692626][T27277] [ 919.696301][T27277] Kernel Offset: disabled [ 919.700658][T27277] Rebooting in 86400 seconds..