last executing test programs: 38.962583884s ago: executing program 2 (id=3049): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0xa892, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x8000000000032, 0xfffffbff, 0x3, 0x9, 0x0, 0x5, 0x0, 0xffffffff, 0x0, 0x20000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x9) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008080) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffb, 0x20000000aea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xb}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x46, &(0x7f0000000040), 0xcf) sendmsg$kcm(r3, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=0x1, @ANYBLOB="004e2fe5120000ac4af00000f0ffffffff", @ANYRES32=0x0, @ANYRES32], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'veth1_virt_wifi\x00', @broadcast}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x18, 0x453, 0x200, 0x70bd28, 0x25dfdbfe, "2930fa6902"}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 38.644070105s ago: executing program 2 (id=3052): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, 0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000440)='\xc2*g\xa5z\t\xa8H]\xcdH5;\v\xef\x8c[\x84\x8e\xe5\xc0v\xefJg\x9cX\xb7\x87\xf9\xef<\xcf\xe9\x03W\xf3 E'}, 0x30) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) recvmsg$unix(r3, &(0x7f0000000680)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000500)=""/76, 0x4c}], 0x2, &(0x7f00000005c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x2) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) socket$unix(0x1, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20004080) socket$nl_netfilter(0x10, 0x3, 0xc) 37.970815691s ago: executing program 2 (id=3064): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x40}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x40000) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64841}, 0x40000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r2, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=@newqdisc={0xa5a40a680613f77e, 0x24, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xf}, {0x5, 0x5}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x1, 0x7}}}}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0xb43, 0xffffffff, 0xec, 0x3}}}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x5}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x885}, 0xc1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$bpf(0x0, &(0x7f0000000300)='./cgroup/../file0\x00', &(0x7f0000000340), 0x80, &(0x7f0000000700)={[{@gid}, {@gid}, {}, {@mode={'mode', 0x3d, 0x400}}]}) 36.913462432s ago: executing program 2 (id=3056): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000140)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000640)={0x3, 0x80, 0x9, 0x0, 0x2, 0x4, 0x0, 0x5, 0x80, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3a, 0x2a}, 0x8, 0x7, 0x2, 0x0, 0xf, 0x1, 0xa9a, 0x0, 0x6, 0x0, 0x1ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x5, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x109801, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1470c, 0x9, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x800, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x5f, 0x0, 0x0, 0x5f, 0x61]}}, 0x0, 0x1f, 0x0, 0x9}, 0x28) 35.127017229s ago: executing program 2 (id=3061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000003060500000000000000000000000000050001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10049014) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, 0x0, &(0x7f0000000200)}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000010000000004a54000000060a0b0400000000000000000200000928000480240001800b000100657874686472000014000280080004400000000308000640000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x2000, 0x0, 0x0, 0x4, 0xe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x200c8000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x1000, 0x0, 0x0, 0x8, 0x3fe, 0x5}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 33.923068009s ago: executing program 2 (id=3068): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet_icmp(0x2, 0x2, 0x1) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20004, 0x8}, 0x2, 0x0, 0x8, 0x8, 0x43fe, 0x7fffffff, 0x3351, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, 0x0, 0x25, 0x14, @void}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffc, 0x830e}, 0x13100, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0xff4d, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x12, &(0x7f0000000200), 0x4) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007fc0000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 11.91030226s ago: executing program 32 (id=3068): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet_icmp(0x2, 0x2, 0x1) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20004, 0x8}, 0x2, 0x0, 0x8, 0x8, 0x43fe, 0x7fffffff, 0x3351, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, 0x0, 0x25, 0x14, @void}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffc, 0x830e}, 0x13100, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0xff4d, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x12, &(0x7f0000000200), 0x4) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007fc0000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 9.353892423s ago: executing program 1 (id=3096): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x8}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x81}}, @enum64={0x7, 0x0, 0x0, 0x13, 0x0, 0x1}, @func={0x6, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x61, 0x5f, 0x0, 0x61, 0x61]}}, 0x0, 0x68, 0x0, 0x1, 0x6}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000800000850000007d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x803, 0x1) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000100)='\b', 0x1}, {&(0x7f0000000200)="84", 0x1}], 0x2}, 0x84) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x35}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000000)=r6, 0x4) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x2000}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)={0x28, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd=r1}, @nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4}]}]}, 0x28}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="89ffffffffffffff000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.964199884s ago: executing program 1 (id=3101): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c0100001700010025bd7000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ff0200000000000000000000000000014e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}}, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00050004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) r2 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) close(r3) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0xfc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x8802, 0x7ff, 0x0, 0x7, 0x7, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.962776789s ago: executing program 4 (id=3103): socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x23, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x240080d1}, 0x8010) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x2c, 0x117, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) socket$kcm(0x2, 0x1, 0x84) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x20000800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.114338637s ago: executing program 3 (id=3105): bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYRESHEX], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f727400000083afd5a770f1c0a9f196e22be8d4"], 0x60}}, 0xc004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x21e0461, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="b8d3d8e48974aae5039847936746be", 0xf}], 0x1, 0x0, 0x0, 0x400c000}, 0x4008001) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x75) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 5.849677324s ago: executing program 4 (id=3107): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb"], 0x48}, 0x20040004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x20, 0x34, 0x107, 0xfffffffe, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x4, 0x142}, @typed={0x8, 0x50, 0x0, 0x0, @uid=r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x40}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = socket$kcm(0x10, 0x2, 0x0) fstat(r6, &(0x7f0000000880)) r8 = syz_clone(0x20000, &(0x7f0000000900)="682dd675a252ea259210a3f1f97addfec4416217092ff0043923206ee733b9bcffc69d30c3c64d32400768b21a2b6a4f8143277a320dfeb62f8f59c0da49f87f1853d0219c08c242617bc302bacac7902dfc817296da7af7dbdb0928ceb1598336f0b72365229889c717fa9fc89bdcf9b5850b19a4ca20fdea1a9205c72d0abb58ff9cb2d34a659f0bbd23cc2d37f89e1257993293", 0x95, 0x0, &(0x7f0000000a00), &(0x7f0000000a40)="e012031af86c4d3722e1448a096f6910538361d1b00ae5e00bed0683f4e45e0e3bfa452b9bac9f4110dd254dfb5fc0c7c2eb044bc32514e4e50e8c74f295f56fd6c2a810172635eb") fstat(r4, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000d40)}, {0x0}], 0x2, &(0x7f0000000bc0)=ANY=[@ANYBLOB="100000000000010000000100000010000000000000000100000001000000", @ANYRES32=r8, @ANYRES32, @ANYRES32=r9, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32=r4, @ANYRES32, @ANYRES32=r2], 0x78, 0x40448d0}, 0x48400) fstat(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0)={[{}, {@uid={'uid', 0x3d, r1}}, {@gid={'gid', 0x3d, r9}}], [{@fowner_eq={'fowner', 0x3d, r10}}, {@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r0}, 0x10) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}, 0x0) 5.764000944s ago: executing program 3 (id=3108): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6421, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xee, 0x9}, 0x4000, 0x1, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x13, &(0x7f0000001b80)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffef5}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r2 = getpid() r3 = perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000000d0a010800000000080000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c660b9a0a5a94aafa2e4b50b6ac7c34bfeec745d446622b26d17a22ed9f659ca7ad6b"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'wlan1\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 5.669365546s ago: executing program 0 (id=3109): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000001313217ff6e88bebf340b0239d9420000000"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r1, &(0x7f0000000080), 0x0}, 0x20) r2 = getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r6}, 0x3d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r7, 0x2000002, 0xe, 0x0, &(0x7f00000016c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$unix(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="86d6", 0x2}], 0x1, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01}}}], 0x20, 0x4000}, 0x840) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000006c0)="5c0000006c006bcd9e3fe3dc6e48aa31086b8703240000007ea60264160a451a7feb39f365040014401f0003000e0040009ee517d34460bc24eab556a705259e6182949a36519a8037e786a6d0bdd7fcf50e4509c5bb000000000008", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8810) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x2}, {0x0, 0x40000000}]}]}}, &(0x7f0000001880)=""/4100, 0x36, 0x1004, 0xfffffffe}, 0x28) 5.501438761s ago: executing program 1 (id=3110): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1000000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03004e21000af32c6e020675f800250002400100000017d34460bc24eab556a705251e6182949a", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004880) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x4, 0x0, 0x0, 0x0, 0x80001, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x100000, 0x0, 0xffffffff, 0x4, 0x89, 0x80000003, 0x0, 0x0, 0xfffffffd, 0x0, 0x8000}, 0x0, 0x1, r3, 0xa) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x8800) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x10, 0x3, 0x10) 5.31410037s ago: executing program 3 (id=3111): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000)) write$cgroup_subtree(r0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x10, 0x140e, 0x1, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0xc8800}, 0x40000) 4.893097989s ago: executing program 4 (id=3112): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000140)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000040), 0x4) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x5, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x109801, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1470c, 0x9, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x800, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x5f, 0x0, 0x0, 0x5f, 0x61]}}, 0x0, 0x1f, 0x0, 0x9}, 0x28) 4.224964238s ago: executing program 1 (id=3113): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x2f00, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xffffffff}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet(0x2, 0x2, 0x1) r6 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r6, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x7}, 0x0) recvmsg$kcm(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x142) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00'}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080013002d03010000000000950017b8000000006916000000000000bf67000000000000350607000fff07206706000002000000160300000ee6fe5fbf500000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f19de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03cc86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800030cffa651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a60100c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40446d7074be86a912a5ac00f7ffffffffffffff000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000001fe4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642894cacd473b543ccb5f0d7b63924f17c67b00631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809f905f12f6106f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad0fceee5f339550130a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3116dbc7e2bf2402a75fd7a557317c66dd255ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d644b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a6749b94a42b25e9321fc2cc17dc4a29b9cba8ded5de439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f3b563ab9000000ff000000000077a99fb5b0a43749ca477c9c7ca20bd428d8f77bb920ad0db4c1da671bfad7f109b776476a54939e621232cd115ba9f37057ad891fea2353f3ad9c042c64a5ecf80f4e4cf927ae39347c22822375c26edf2754695c16780429e03759691adb63553e9c4561528ded5f35bb20e98b2e6d01dbfcde82608359c50881324524db0dbe21efba4f0fc338f4b0b11cb028d1063b3bacaab92fb7f9d2971440f873ec261d54c1570adef8004c91896fcd74c9e03dfd9a781210c0346ed1b02a44c64adad8a3f238a8ddf7207c45057c02e922b942f15ddcfbfb00"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, 0x0, 0x40000020) 4.133736099s ago: executing program 0 (id=3114): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20004080) 3.820988903s ago: executing program 0 (id=3115): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1", 0x12}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x4a, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x20, 0x0, 0x0, 0x1, 0x402, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = getpid() socket$kcm(0xa, 0x1, 0x106) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x16, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x4, 0xad, 0x0, "a3bfd4e5649e7b8783a2fc9ff8d5d5f838674f29dcab9c4853857fa104d377acaa22eae84f2f590ff0ecbfef69d3d96813ad8168c490fdfa0176f7071770bf", 0xc}, 0x80, 0x0}, 0xe07e872424dfefca) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x80407fff, 0xaea}, 0x1012d, 0x2e, 0x4, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007160000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) syz_open_procfs$namespace(r3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x14) 3.580175559s ago: executing program 4 (id=3116): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x49, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), 0x0, 0x0, 0x51, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0xf, 0x73) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5069}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x36, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0xffffffffffffffff) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB="00000000000000000000005e2a2bdddf14ae2500", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x66) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a15aa2bfe", 0x14}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3.271802521s ago: executing program 3 (id=3117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x400, 0x1c9, 0x400, 0x204, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x1}, 0x50) sendmsg$nl_xfrm(r2, 0x0, 0x20000004) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x4, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7ff, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "1d88d56a159a45"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) sendmsg$kcm(r4, 0x0, 0xff4c) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x4) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x20040810) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) gettid() sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x94}}, 0x0) 3.218124461s ago: executing program 1 (id=3118): r0 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x2, 0x0, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x39, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@tail_call, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @alu={0x4, 0x0, 0xd, 0x8, 0x5, 0x8, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6fb}, @func={0x85, 0x0, 0x1, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @exit, @exit, @alu={0x3, 0x0, 0x2, 0x0, 0xb, 0xffffffffffffffc4, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @tail_call, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x62a2}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x34}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2160) r4 = socket$kcm(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf73}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) sendmsg$kcm(r4, 0x0, 0x4000080) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x14, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x11, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.184841455s ago: executing program 0 (id=3119): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c0100001700010025bd7000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ff0200000000000000000000000000014e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}}, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00050004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) r2 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) close(r3) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0xfc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x8802, 0x7ff, 0x0, 0x7, 0x7, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.85663724s ago: executing program 3 (id=3120): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6421, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xee, 0x9}, 0x4000, 0x1, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x13, &(0x7f0000001b80)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffef5}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r2 = getpid() r3 = perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000000d0a010800000000080000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c660b9a0a5a94aafa2e4b50b6ac7c34bfeec745d446622b26d17a22ed9f659ca7ad6b"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'wlan1\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 2.769666064s ago: executing program 0 (id=3121): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, 0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000440)='\xc2*g\xa5z\t\xa8H]\xcdH5;\v\xef\x8c[\x84\x8e\xe5\xc0v\xefJg\x9cX\xb7\x87\xf9\xef<\xcf\xe9\x03W\xf3 E'}, 0x30) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) recvmsg$unix(r3, &(0x7f0000000680)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000500)=""/76, 0x4c}], 0x2, &(0x7f00000005c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x2) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) socket$unix(0x1, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20004080) socket$nl_netfilter(0x10, 0x3, 0xc) 2.651407254s ago: executing program 3 (id=3122): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xd, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffff, 0x7fffffff, 0x40, 0xb6, 0x4, 0x0, 0x0, 0x400, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYBLOB='\x00'/20, @ANYRES8=r7, @ANYBLOB='\x00'/25], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, 0x0, &(0x7f0000000700)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9}, &(0x7f00000014c0), &(0x7f0000001500)}, 0x1d) 2.584211429s ago: executing program 0 (id=3123): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000)) write$cgroup_subtree(r0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)}], 0x1}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x87}}, 0x0, 0x5}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x10, 0x140e, 0x1, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0xc8800}, 0x40000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup=r0, 0x2, 0x1, 0x200, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)}, 0x40) 2.325530594s ago: executing program 4 (id=3124): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) getpid() r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, &(0x7f0000004740)=""/4096, 0x0, 0x1000, 0x0, 0x800}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x328}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0x88}}, 0x0) 2.242580502s ago: executing program 1 (id=3125): r0 = socket$kcm(0x11, 0x20000000000000a, 0x300) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x0, 0x0, 0xa}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r6}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=3126): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x28, 0x2b, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@local}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="f300ced6"]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x20000044) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x4a0, 0x30, 0x12f, 0x0, 0x0, {}, [{0x48c, 0x1, [@m_police={0x488, 0x1, 0x0, 0x0, {{0xb}, {0x45c, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf91]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x4a0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_ext_rm_idx\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f00000005c0)='GPL\x00'}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000004c0)=r4, 0x4) socket$kcm(0xa, 0x2, 0x73) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f00000001c0)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x19, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 4][ T9263] rdma_rxe: rxe_newlink: failed to add vcan0 [ 247.834468][ T9263] rdma_rxe: rxe_newlink: failed to add vcan0 [ 248.028892][ T9277] netlink: 'syz.2.1102': attribute type 2 has an invalid length. [ 248.036851][ T9277] netlink: 'syz.2.1102': attribute type 1 has an invalid length. [ 248.056480][ T9278] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1103'. [ 248.166940][ T9282] delete_channel: no stack [ 248.171806][ T9282] delete_channel: no stack [ 248.270033][ T9288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.729980][ T9300] netlink: 4440 bytes leftover after parsing attributes in process `syz.4.1110'. [ 249.039424][ T9311] rdma_rxe: rxe_newlink: failed to add vcan0 [ 249.056337][ T9311] rdma_rxe: rxe_newlink: failed to add vcan0 [ 249.112437][ T9314] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1116'. [ 250.132906][ T9344] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 250.677714][ T9354] rdma_rxe: rxe_newlink: failed to add vcan0 [ 250.712109][ T9359] rdma_rxe: rxe_newlink: failed to add vcan0 [ 250.725733][ T9354] rdma_rxe: rxe_newlink: failed to add vcan0 [ 250.765294][ T9363] rdma_rxe: rxe_newlink: failed to add vcan0 [ 251.795902][ T9376] validate_nla: 3 callbacks suppressed [ 251.795954][ T9376] netlink: 'syz.3.1137': attribute type 2 has an invalid length. [ 252.140736][ T9387] netlink: 'syz.1.1139': attribute type 13 has an invalid length. [ 252.223263][ T9387] erspan0: refused to change device tx_queue_len [ 252.281645][ T9387] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 255.783250][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.793886][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.994542][ T9435] netlink: 'syz.3.1154': attribute type 10 has an invalid length. [ 258.014976][ T9435] team0: Cannot enslave team device to itself [ 258.208506][ T9448] __nla_validate_parse: 3 callbacks suppressed [ 258.208524][ T9448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1159'. [ 258.248008][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1157'. [ 258.255828][ T9452] netlink: 'syz.3.1159': attribute type 39 has an invalid length. [ 258.284392][ T9448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1159'. [ 259.582249][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 259.592122][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 259.886436][ T9484] netlink: 'syz.0.1169': attribute type 13 has an invalid length. [ 259.894431][ T9484] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1169'. [ 259.904258][ T9484] erspan0: refused to change device tx_queue_len [ 259.910903][ T9484] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 260.450350][ T9515] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1179'. [ 260.934864][ T9528] rdma_rxe: rxe_newlink: failed to add vcan0 [ 260.967377][ T9528] rdma_rxe: rxe_newlink: failed to add vcan0 [ 262.401938][ T9543] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1188'. [ 262.508345][ T9549] syz1: rxe_newlink: already configured on vcan0 [ 262.516060][ T9549] syz1: rxe_newlink: already configured on vcan0 [ 262.965006][ T9560] syz1: rxe_newlink: already configured on vcan0 [ 262.969321][ T9562] netlink: 'syz.1.1196': attribute type 29 has an invalid length. [ 262.979239][ T9560] syz1: rxe_newlink: already configured on vcan0 [ 262.996983][ T9562] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1196'. [ 263.511277][ T9582] netlink: 'syz.1.1199': attribute type 13 has an invalid length. [ 263.542756][ T9582] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1199'. [ 263.570527][ T9582] erspan0: refused to change device tx_queue_len [ 263.579033][ T9582] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 263.936738][ T9596] netlink: 'syz.2.1205': attribute type 39 has an invalid length. [ 264.953818][ T9615] rdma_rxe: rxe_newlink: failed to add vcan0 [ 264.987329][ T9615] rdma_rxe: rxe_newlink: failed to add vcan0 [ 267.547259][ T9634] sit0: left promiscuous mode [ 267.635646][ T9634] sit0: entered promiscuous mode [ 267.712312][ T9643] netlink: 'syz.2.1219': attribute type 1 has an invalid length. [ 268.349695][ T9654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1220'. [ 268.369543][ T9654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1220'. [ 268.790996][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1215'. [ 268.808464][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1215'. [ 269.165246][ T9674] rdma_rxe: rxe_newlink: failed to add vcan0 [ 269.178615][ T9669] netlink: 'syz.0.1226': attribute type 10 has an invalid length. [ 269.195383][ T9674] rdma_rxe: rxe_newlink: failed to add vcan0 [ 272.291665][ T9691] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1231'. [ 272.541615][ T9699] tmpfs: Bad value for 'gid' [ 272.564235][ T9699] tmpfs: Bad value for 'gid' [ 272.826680][ T5845] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 273.727299][ T9728] wg2: left promiscuous mode [ 273.742946][ T9728] wg2: left allmulticast mode [ 275.088230][ T9762] netlink: 'syz.3.1251': attribute type 13 has an invalid length. [ 275.103186][ T9762] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1251'. [ 275.122840][ T9762] erspan0: refused to change device tx_queue_len [ 275.153966][ T9762] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 275.180864][ T9769] netlink: 'syz.4.1253': attribute type 10 has an invalid length. [ 275.189281][ T9769] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 275.207693][ T9769] team0: Port device wlan1 added [ 275.315764][ T9774] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 275.592246][ T9784] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1256'. [ 275.676223][ T9783] rdma_rxe: rxe_newlink: failed to add vcan0 [ 275.692865][ T9783] rdma_rxe: rxe_newlink: failed to add vcan0 [ 276.841010][ T9802] rdma_rxe: rxe_newlink: failed to add vcan0 [ 276.874302][ T9800] rdma_rxe: rxe_newlink: failed to add vcan0 [ 277.104196][ T9812] sit0: entered promiscuous mode [ 277.175388][ T9814] rdma_rxe: rxe_newlink: failed to add vcan0 [ 277.222882][ T9814] rdma_rxe: rxe_newlink: failed to add vcan0 [ 277.579134][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1268'. [ 277.668528][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1268'. [ 278.124016][ T9829] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 278.334309][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1275'. [ 278.336539][ T9838] netlink: 'syz.0.1273': attribute type 13 has an invalid length. [ 278.413463][ T9838] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1273'. [ 278.666934][ T9838] erspan0: refused to change device tx_queue_len [ 278.686360][ T9838] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 279.036265][ T9854] rdma_rxe: rxe_newlink: failed to add vcan0 [ 279.068841][ T9854] rdma_rxe: rxe_newlink: failed to add vcan0 [ 279.442349][ T9869] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1287'. [ 279.697038][ T9876] syz1: rxe_newlink: already configured on vcan0 [ 279.714528][ T9876] syz1: rxe_newlink: already configured on vcan0 [ 280.345593][ T9892] rdma_rxe: rxe_newlink: failed to add vcan0 [ 280.357517][ T9892] rdma_rxe: rxe_newlink: failed to add vcan0 [ 280.387211][ T9896] netlink: 'syz.3.1292': attribute type 13 has an invalid length. [ 280.436523][ T9896] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1292'. [ 280.476794][ T9896] erspan0: refused to change device tx_queue_len [ 280.483855][ T9896] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 280.564330][ T9895] netlink: 'syz.4.1297': attribute type 13 has an invalid length. [ 280.585303][ T9895] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1297'. [ 280.621931][ T9895] erspan0: refused to change device tx_queue_len [ 280.656341][ T9895] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 280.806442][ T9905] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1299'. [ 282.129948][ T9923] block nbd1: not configured, cannot reconfigure [ 282.485566][ T5845] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 282.873499][ T9948] netlink: 'syz.0.1314': attribute type 4 has an invalid length. [ 282.889029][ T9948] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1314'. [ 282.988698][ T9948] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 283.213173][ T9953] netlink: 'syz.3.1315': attribute type 13 has an invalid length. [ 283.223419][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1316'. [ 283.238764][ T9953] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1315'. [ 283.250097][ T9953] erspan0: refused to change device tx_queue_len [ 283.309875][ T9953] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 284.719729][T10015] vcan0 speed is unknown, defaulting to 1000 [ 285.054634][T10044] option changes via remount are deprecated (pid=10043 comm=syz.1.1333) [ 285.650115][T10065] rdma_rxe: rxe_newlink: failed to add vcan0 [ 285.650353][T10060] rdma_rxe: rxe_newlink: failed to add vcan0 [ 285.930441][T10069] netlink: 'syz.2.1342': attribute type 10 has an invalid length. [ 285.949299][T10069] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1342'. [ 286.032674][T10076] rdma_rxe: rxe_newlink: failed to add vcan0 [ 286.075098][T10076] rdma_rxe: rxe_newlink: failed to add vcan0 [ 286.282725][T10079] netlink: 'syz.2.1345': attribute type 13 has an invalid length. [ 286.292349][T10079] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1345'. [ 286.302620][T10079] erspan0: refused to change device tx_queue_len [ 286.313513][T10079] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 286.607822][T10093] netlink: 'syz.4.1348': attribute type 10 has an invalid length. [ 286.627033][T10093] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1348'. [ 287.181601][T10099] netlink: 'syz.1.1350': attribute type 13 has an invalid length. [ 287.204309][T10099] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1350'. [ 287.229071][T10099] erspan0: refused to change device tx_queue_len [ 287.237112][T10099] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 287.612531][T10123] tmpfs: Bad value for 'uid' [ 287.617316][T10123] tmpfs: Bad value for 'uid' [ 287.723523][T10126] rdma_rxe: rxe_newlink: failed to add vcan0 [ 287.745733][T10126] rdma_rxe: rxe_newlink: failed to add vcan0 [ 288.152697][T10132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1360'. [ 288.291974][ T5845] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 288.535639][T10152] netlink: 'syz.2.1366': attribute type 1 has an invalid length. [ 289.028517][T10163] netlink: 'syz.3.1369': attribute type 13 has an invalid length. [ 289.103285][T10163] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1369'. [ 289.150514][T10163] erspan0: refused to change device tx_queue_len [ 289.219272][T10163] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 290.387524][T10180] netlink: 'syz.2.1375': attribute type 10 has an invalid length. [ 290.450003][T10179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1377'. [ 290.574208][T10180] team0: Port device dummy0 added [ 292.920238][T10251] sit0: left promiscuous mode [ 292.949192][T10253] netlink: 'syz.3.1391': attribute type 13 has an invalid length. [ 292.967453][T10253] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1391'. [ 293.051916][T10254] sit0: entered promiscuous mode [ 293.841591][T10253] erspan0: refused to change device tx_queue_len [ 293.847986][T10253] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 294.331842][ T30] audit: type=1107 audit(1762293870.331:2): pid=10278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='-9,&EZZ.*H#AN+P˶eylv9%N1FYxЙa0' [ 294.352280][T10279] netlink: 'syz.2.1402': attribute type 4 has an invalid length. [ 294.694499][T10291] netlink: 'syz.3.1405': attribute type 13 has an invalid length. [ 294.759663][T10291] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1405'. [ 294.769708][T10291] erspan0: refused to change device tx_queue_len [ 294.776063][T10291] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 294.977511][T10297] netlink: 'syz.0.1407': attribute type 10 has an invalid length. [ 295.060885][T10297] team0: Port device dummy0 added [ 295.359650][T10301] netlink: 'syz.2.1410': attribute type 1 has an invalid length. [ 295.634624][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1411'. [ 296.070665][T10325] tap0: tun_chr_ioctl cmd 2148553947 [ 296.394544][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1411'. [ 297.463506][T10350] tmpfs: Bad value for 'gid' [ 297.487729][T10350] tmpfs: Bad value for 'gid' [ 297.618688][T10356] netlink: 'syz.0.1421': attribute type 13 has an invalid length. [ 297.641275][T10356] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1421'. [ 297.674841][T10356] erspan0: refused to change device tx_queue_len [ 297.702749][T10356] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 298.825212][T10370] syzkaller0: entered promiscuous mode [ 298.832768][T10370] syzkaller0: entered allmulticast mode [ 299.071750][T10375] delete_channel: no stack [ 299.076335][T10375] delete_channel: no stack [ 300.849019][T10385] sit0: left promiscuous mode [ 300.905820][T10385] sit0: entered promiscuous mode [ 301.380188][T10398] netlink: 'syz.0.1440': attribute type 13 has an invalid length. [ 301.388411][T10398] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1440'. [ 301.410158][T10400] netlink: 'syz.4.1430': attribute type 13 has an invalid length. [ 301.418020][T10400] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1430'. [ 301.430133][T10394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1432'. [ 301.669638][T10394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1432'. [ 301.763576][T10398] erspan0: refused to change device tx_queue_len [ 301.789298][T10398] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 301.857089][T10394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1432'. [ 301.909291][T10400] erspan0: refused to change device tx_queue_len [ 301.915682][T10400] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 302.135485][T10415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1434'. [ 302.262679][T10415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.379413][T10422] netlink: 'syz.0.1437': attribute type 10 has an invalid length. [ 303.128466][T10422] bond0: (slave bond_slave_0): Releasing backup interface [ 303.143944][T10422] bond_slave_0: left promiscuous mode [ 303.230984][T10446] sit0: entered allmulticast mode [ 303.296342][T10446] sit0: entered promiscuous mode [ 303.450099][T10448] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1445'. [ 304.565703][T10475] tmpfs: Bad value for 'gid' [ 304.570761][T10475] tmpfs: Bad value for 'gid' [ 304.679611][T10481] tmpfs: Bad value for 'gid' [ 304.726481][T10481] tmpfs: Bad value for 'gid' [ 304.992904][T10496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.026745][T10496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.204256][T10498] tmpfs: Bad value for 'gid' [ 305.223962][T10498] tmpfs: Bad value for 'gid' [ 305.372000][T10491] delete_channel: no stack [ 305.473899][T10503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1463'. [ 305.489692][T10503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1463'. [ 305.504285][T10503] netlink: 'syz.4.1463': attribute type 39 has an invalid length. [ 306.242251][T10522] tmpfs: Bad value for 'gid' [ 306.254315][T10522] tmpfs: Bad value for 'gid' [ 306.686324][T10533] tmpfs: Bad value for 'gid' [ 306.716314][T10533] tmpfs: Bad value for 'gid' [ 306.724582][ T5845] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6 [ 306.873548][T10542] netlink: 'syz.2.1474': attribute type 21 has an invalid length. [ 306.903092][T10542] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1474'. [ 308.529095][T10570] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1483'. [ 308.735107][T10574] tmpfs: Bad value for 'gid' [ 308.740189][T10574] tmpfs: Bad value for 'gid' [ 308.856319][T10576] tmpfs: Bad value for 'gid' [ 308.868226][T10576] tmpfs: Bad value for 'gid' [ 309.593168][T10587] tmpfs: Bad value for 'gid' [ 309.598585][T10587] tmpfs: Bad value for 'gid' [ 309.885263][T10592] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1490'. [ 311.575733][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1496'. [ 312.152924][T10631] tmpfs: Bad value for 'gid' [ 312.172105][T10631] tmpfs: Bad value for 'gid' [ 312.713615][T10635] netlink: 'syz.1.1504': attribute type 13 has an invalid length. [ 312.728341][T10635] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1504'. [ 312.737807][T10635] erspan0: refused to change device tx_queue_len [ 312.745567][T10635] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 312.913442][T10652] netlink: 'syz.2.1506': attribute type 13 has an invalid length. [ 312.933249][T10652] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1506'. [ 312.960685][T10652] erspan0: refused to change device tx_queue_len [ 312.967069][T10652] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 313.430406][T10669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1512'. [ 313.443082][T10669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1512'. [ 313.460467][T10671] tmpfs: Bad value for 'gid' [ 313.465204][T10671] tmpfs: Bad value for 'gid' [ 315.023909][T10688] rdma_rxe: rxe_newlink: failed to add vcan0 [ 315.036704][T10688] rdma_rxe: rxe_newlink: failed to add vcan0 [ 315.110448][T10692] syz1: rxe_newlink: already configured on vcan0 [ 315.131511][T10692] syz1: rxe_newlink: already configured on vcan0 [ 315.145039][T10689] netlink: 'syz.1.1517': attribute type 13 has an invalid length. [ 315.154727][T10689] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1517'. [ 315.190783][T10689] erspan0: refused to change device tx_queue_len [ 315.214854][T10689] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 315.422250][T10700] netlink: 'syz.4.1522': attribute type 13 has an invalid length. [ 315.436246][T10700] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1522'. [ 315.461838][T10700] erspan0: refused to change device tx_queue_len [ 315.468604][T10700] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 315.491279][T10704] tmpfs: Bad value for 'gid' [ 315.496255][T10704] tmpfs: Bad value for 'gid' [ 317.230126][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.236458][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.969698][T10729] netlink: 'syz.4.1531': attribute type 13 has an invalid length. [ 317.978660][T10729] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1531'. [ 317.990151][T10736] netlink: 'syz.1.1532': attribute type 13 has an invalid length. [ 317.990887][T10729] erspan0: refused to change device tx_queue_len [ 317.997990][T10736] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1532'. [ 318.014330][T10729] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 318.025704][T10738] tmpfs: Bad value for 'gid' [ 318.035377][T10736] erspan0: refused to change device tx_queue_len [ 318.042290][T10736] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 318.050515][T10738] tmpfs: Bad value for 'gid' [ 318.647788][T10752] netlink: 'syz.3.1539': attribute type 10 has an invalid length. [ 319.397079][T10773] netlink: 'syz.3.1544': attribute type 13 has an invalid length. [ 319.485323][T10773] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1544'. [ 319.637261][T10773] erspan0: refused to change device tx_queue_len [ 319.714393][T10773] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 320.272771][T10792] netlink: 'syz.4.1551': attribute type 39 has an invalid length. [ 320.294404][T10791] rdma_rxe: rxe_newlink: failed to add vcan0 [ 320.306588][T10791] rdma_rxe: rxe_newlink: failed to add vcan0 [ 320.830578][T10802] netlink: 'syz.2.1553': attribute type 13 has an invalid length. [ 320.877388][T10802] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1553'. [ 321.802519][T10802] erspan0: refused to change device tx_queue_len [ 321.818256][T10802] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 321.983510][T10807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1555'. [ 321.993979][T10807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1555'. [ 322.114242][T10813] rdma_rxe: rxe_newlink: failed to add vcan0 [ 322.141730][T10813] rdma_rxe: rxe_newlink: failed to add vcan0 [ 322.406694][T10825] tmpfs: Bad value for 'gid' [ 322.428268][T10825] tmpfs: Bad value for 'gid' [ 322.443274][T10829] netlink: 'syz.2.1559': attribute type 13 has an invalid length. [ 322.488210][T10829] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1559'. [ 322.541596][T10829] erspan0: refused to change device tx_queue_len [ 322.546023][T10831] tmpfs: Bad value for 'gid' [ 322.549510][T10829] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 322.563871][T10831] tmpfs: Bad value for 'gid' [ 322.850956][T10842] siw: device registration error -23 [ 322.853540][T10844] syzkaller0: entered promiscuous mode [ 322.871416][T10844] syzkaller0: entered allmulticast mode [ 323.022932][T10853] netlink: 'syz.0.1567': attribute type 13 has an invalid length. [ 323.037170][T10853] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1567'. [ 323.102321][T10856] netlink: 'syz.3.1568': attribute type 1 has an invalid length. [ 323.127864][T10856] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1568'. [ 323.137629][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1568'. [ 324.352983][T10853] erspan0: refused to change device tx_queue_len [ 324.359468][T10853] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 324.558906][T10867] syz1: rxe_newlink: already configured on vcan0 [ 324.582292][T10867] syz1: rxe_newlink: already configured on vcan0 [ 325.015158][ T5845] Bluetooth: hci1: unexpected event 0x12 length: 151 > 8 [ 325.086941][T10887] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1588'. [ 325.462722][T10897] netlink: 'syz.1.1580': attribute type 13 has an invalid length. [ 325.473155][T10897] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1580'. [ 325.483225][T10897] erspan0: refused to change device tx_queue_len [ 325.490026][T10897] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 325.520614][T10899] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1581'. [ 325.530013][T10899] netlink: 'syz.3.1581': attribute type 1 has an invalid length. [ 325.709890][T10915] tmpfs: Bad value for 'gid' [ 325.714615][T10915] tmpfs: Bad value for 'gid' [ 326.037264][T10924] tmpfs: Bad value for 'gid' [ 326.045943][T10924] tmpfs: Bad value for 'gid' [ 326.251598][T10933] netlink: 'syz.0.1591': attribute type 39 has an invalid length. [ 326.253413][ T5845] Bluetooth: hci0: unexpected event 0x12 length: 151 > 8 [ 326.456602][T10935] bpf: Bad value for 'gid' [ 326.665915][T10941] netlink: 'syz.2.1593': attribute type 10 has an invalid length. [ 326.810410][T10941] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 328.041459][T10969] rdma_rxe: rxe_newlink: failed to add vcan0 [ 328.133791][T10969] rdma_rxe: rxe_newlink: failed to add vcan0 [ 328.142842][ T5845] Bluetooth: hci4: unexpected event 0x12 length: 151 > 8 [ 328.408011][T10974] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1605'. [ 328.417661][T10984] siw: device registration error -23 [ 328.705998][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1612'. [ 328.755740][T10999] netlink: 'syz.3.1613': attribute type 39 has an invalid length. [ 328.778178][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1612'. [ 329.118380][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1612'. [ 330.184357][ T5845] Bluetooth: hci4: unexpected event 0x12 length: 151 > 8 [ 330.387020][T11031] tmpfs: Bad value for 'gid' [ 330.403922][T11023] netlink: 'syz.4.1619': attribute type 13 has an invalid length. [ 330.412295][T11031] tmpfs: Bad value for 'gid' [ 330.425034][T11023] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1619'. [ 330.511898][T11023] erspan0: refused to change device tx_queue_len [ 330.519169][T11023] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 330.634863][ T5845] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5 [ 331.029070][T11057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1629'. [ 331.160072][T11057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1629'. [ 331.200786][T11065] syz1: rxe_newlink: already configured on vcan0 [ 331.212349][T11065] syz1: rxe_newlink: already configured on vcan0 [ 331.376284][ T5845] Bluetooth: hci1: unexpected event 0x12 length: 151 > 8 [ 331.388833][T11057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1629'. [ 331.870307][T11079] tmpfs: Bad value for 'gid' [ 331.885909][T11079] tmpfs: Bad value for 'gid' [ 332.027251][T11075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.043773][T11083] netlink: 'syz.1.1634': attribute type 39 has an invalid length. [ 332.530751][T11097] netlink: 'syz.2.1641': attribute type 13 has an invalid length. [ 332.778311][T11097] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1641'. [ 332.857101][T11105] tmpfs: Bad value for 'gid' [ 332.862219][T11105] tmpfs: Bad value for 'gid' [ 333.043137][T11097] erspan0: refused to change device tx_queue_len [ 333.050013][T11097] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 333.563271][T11119] can: request_module (can-proto-0) failed. [ 333.742583][T11117] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1647'. [ 333.904096][T11113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1647'. [ 333.929490][T11115] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1647'. [ 333.980617][T11116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1647'. [ 334.193327][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1649'. [ 334.338168][T11132] sit0: entered promiscuous mode [ 334.641690][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1651'. [ 334.666670][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1651'. [ 335.243496][T11153] rdma_rxe: rxe_newlink: failed to add vcan0 [ 335.290029][T11160] rdma_rxe: rxe_newlink: failed to add vcan0 [ 335.630908][ T30] audit: type=1107 audit(1762293911.641:3): pid=11169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 335.659483][T11164] tap0: tun_chr_ioctl cmd 1074025680 [ 337.191306][T11208] netlink: 'syz.0.1677': attribute type 10 has an invalid length. [ 337.294340][T11208] veth0_vlan: left promiscuous mode [ 337.327813][T11208] veth0_vlan: entered promiscuous mode [ 337.354662][T11208] team0: Device veth0_vlan failed to register rx_handler [ 337.826752][T11228] netlink: 'syz.1.1686': attribute type 1 has an invalid length. [ 337.836631][T11228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1686'. [ 337.839850][T11230] netlink: 'syz.4.1684': attribute type 13 has an invalid length. [ 337.877848][T11230] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1684'. [ 337.887550][T11230] : renamed from syz_tun (while UP) [ 337.901428][T11230] : refused to change device tx_queue_len [ 337.907281][T11230] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 338.439329][T11247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1691'. [ 338.517398][T11247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.529217][T11247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.541815][T11247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.549566][T11247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.842778][T11262] netlink: 'syz.4.1693': attribute type 13 has an invalid length. [ 338.860095][T11262] __nla_validate_parse: 1 callbacks suppressed [ 338.860112][T11262] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1693'. [ 338.887329][T11262] erspan0: refused to change device tx_queue_len [ 338.901044][T11262] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 339.472838][T11286] syz1: rxe_newlink: already configured on vcan0 [ 339.480546][T11286] syz1: rxe_newlink: already configured on vcan0 [ 339.650927][ T5845] Bluetooth: hci1: unexpected event 0x12 length: 151 > 8 [ 340.074573][T11302] netlink: 'syz.0.1711': attribute type 13 has an invalid length. [ 340.092987][T11302] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1711'. [ 342.196568][T11302] erspan0: refused to change device tx_queue_len [ 342.203688][T11302] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 343.066255][T11331] rdma_rxe: rxe_newlink: failed to add vcan0 [ 343.151658][T11331] rdma_rxe: rxe_newlink: failed to add vcan0 [ 344.765402][ T5845] Bluetooth: hci4: unexpected event 0x20 length: 15 > 7 [ 345.040660][T11353] bpf: Bad value for 'gid' [ 345.198725][T11353] netlink: 'syz.0.1723': attribute type 10 has an invalid length. [ 346.379955][T11374] netlink: 'syz.2.1726': attribute type 13 has an invalid length. [ 346.398372][T11374] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1726'. [ 346.444706][T11375] netlink: 'syz.0.1728': attribute type 13 has an invalid length. [ 346.449085][T11374] erspan0: refused to change device tx_queue_len [ 346.471801][T11375] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1728'. [ 346.508443][T11374] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 346.583594][T11375] erspan0: refused to change device tx_queue_len [ 346.590774][T11375] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 347.052106][T11384] syz1: rxe_newlink: already configured on vcan0 [ 347.083487][T11384] syz1: rxe_newlink: already configured on vcan0 [ 347.535016][T11387] rdma_rxe: rxe_newlink: failed to add vcan0 [ 347.564676][T11389] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1731'. [ 347.577416][T11387] rdma_rxe: rxe_newlink: failed to add vcan0 [ 348.670244][T11391] delete_channel: no stack [ 349.805176][T11407] tmpfs: Bad value for 'gid' [ 349.811206][T11407] tmpfs: Bad value for 'gid' [ 350.027038][T11411] netlink: 'syz.2.1738': attribute type 1 has an invalid length. [ 351.342358][T11429] tmpfs: Bad value for 'gid' [ 351.378555][T11429] tmpfs: Bad value for 'gid' [ 351.499913][T11422] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1743'. [ 351.823228][T11439] netlink: 'syz.0.1746': attribute type 10 has an invalid length. [ 351.869511][T11437] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1745'. [ 351.991297][T11439] bond0: (slave wlan1): Releasing backup interface [ 352.044417][T11442] rdma_rxe: rxe_newlink: failed to add vcan0 [ 352.077543][T11439] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 352.104906][T11441] rdma_rxe: rxe_newlink: failed to add vcan0 [ 352.107744][T11439] team0: Port device wlan1 added [ 352.149945][T11437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.317990][ T5845] Bluetooth: hci4: unexpected event 0x12 length: 151 > 8 [ 352.408871][T11448] tmpfs: Bad value for 'gid' [ 352.421164][T11448] tmpfs: Bad value for 'gid' [ 352.688381][T11454] bpf: Bad value for 'gid' [ 352.783618][T11457] netlink: 'syz.3.1752': attribute type 10 has an invalid length. [ 353.170074][T11457] bond0: (slave wlan1): Opening slave failed [ 353.336833][T11470] tmpfs: Bad value for 'gid' [ 353.351280][T11470] tmpfs: Bad value for 'gid' [ 353.401185][T11466] netlink: 'syz.1.1755': attribute type 13 has an invalid length. [ 353.409324][T11466] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1755'. [ 353.445435][T11466] erspan0: refused to change device tx_queue_len [ 353.456558][T11466] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 353.808625][T11477] tmpfs: Bad value for 'gid' [ 353.833224][T11477] tmpfs: Bad value for 'gid' [ 354.030712][T11489] wlan1 speed is unknown, defaulting to 1000 [ 354.036825][T11489] wlan1 speed is unknown, defaulting to 1000 [ 354.044871][T11489] wlan1 speed is unknown, defaulting to 1000 [ 354.057405][T11489] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 354.076058][T11489] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 354.680445][T11500] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1764'. [ 354.757609][T11503] netlink: 'syz.3.1764': attribute type 10 has an invalid length. [ 355.878482][T11510] tmpfs: Bad value for 'gid' [ 355.883221][T11510] tmpfs: Bad value for 'gid' [ 355.904648][T11489] wlan1 speed is unknown, defaulting to 1000 [ 355.983504][T11489] wlan1 speed is unknown, defaulting to 1000 [ 356.001685][T11489] wlan1 speed is unknown, defaulting to 1000 [ 356.015700][T11489] wlan1 speed is unknown, defaulting to 1000 [ 356.030361][T11489] wlan1 speed is unknown, defaulting to 1000 [ 356.073695][T11517] netlink: 'syz.3.1769': attribute type 8 has an invalid length. [ 356.083668][T11517] netlink: 163260 bytes leftover after parsing attributes in process `syz.3.1769'. [ 356.140778][T11516] rdma_rxe: rxe_newlink: failed to add lo [ 356.226670][T11521] tmpfs: Bad value for 'gid' [ 356.231627][T11521] tmpfs: Bad value for 'gid' [ 356.598327][T11530] netlink: 'syz.1.1773': attribute type 10 has an invalid length. [ 356.810994][ T5845] Bluetooth: hci1: ISO packet for unknown connection handle 3602 [ 357.469409][T11557] tmpfs: Bad value for 'gid' [ 357.478269][T11557] tmpfs: Bad value for 'gid' [ 357.516929][T11560] netlink: 'syz.2.1781': attribute type 13 has an invalid length. [ 357.566352][T11560] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1781'. [ 357.621786][T11560] erspan0: refused to change device tx_queue_len [ 357.632016][T11560] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 358.419501][T11576] netlink: 'syz.0.1787': attribute type 29 has an invalid length. [ 358.431044][T11576] netlink: 'syz.0.1787': attribute type 29 has an invalid length. [ 358.451466][T11576] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1787'. [ 358.659660][T11584] netlink: 'syz.0.1790': attribute type 21 has an invalid length. [ 358.668115][T11584] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1790'. [ 359.139252][T11599] tmpfs: Bad value for 'gid' [ 359.144113][T11599] tmpfs: Bad value for 'gid' [ 360.335227][T11631] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1806'. [ 360.711402][T11646] tmpfs: Bad value for 'gid' [ 360.716105][T11646] tmpfs: Bad value for 'gid' [ 360.836198][T11650] tmpfs: Bad value for 'gid' [ 360.842028][T11650] tmpfs: Bad value for 'gid' [ 361.017336][T11656] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1813'. [ 361.075445][T11653] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1813'. [ 361.261000][T11663] netlink: 512 bytes leftover after parsing attributes in process `syz.2.1817'. [ 361.308172][T11663] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 361.643675][T11678] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1821'. [ 361.725838][T11687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.772533][T11687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.782394][T11687] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 361.798220][T11687] batman_adv: batadv0: Removing interface: virt_wifi0 [ 361.832577][T11691] warn_alloc: 1 callbacks suppressed [ 361.832628][T11691] syz.0.1824: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 361.875082][T11691] CPU: 1 UID: 0 PID: 11691 Comm: syz.0.1824 Not tainted syzkaller #0 PREEMPT(full) [ 361.875108][T11691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 361.875129][T11691] Call Trace: [ 361.875137][T11691] [ 361.875145][T11691] dump_stack_lvl+0x189/0x250 [ 361.875178][T11691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.875203][T11691] ? __pfx__printk+0x10/0x10 [ 361.875221][T11691] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 361.875243][T11691] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 361.875267][T11691] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 361.875293][T11691] warn_alloc+0x214/0x310 [ 361.875319][T11691] ? stack_depot_save_flags+0x40/0x860 [ 361.875357][T11691] ? __pfx_warn_alloc+0x10/0x10 [ 361.875384][T11691] ? kasan_save_track+0x3e/0x80 [ 361.875407][T11691] ? __kasan_kmalloc+0x93/0xb0 [ 361.875433][T11691] ? xsk_setsockopt+0x57b/0x8d0 [ 361.875450][T11691] ? do_sock_setsockopt+0x17c/0x1b0 [ 361.875467][T11691] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 361.875484][T11691] ? do_syscall_64+0xfa/0xfa0 [ 361.875505][T11691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.875534][T11691] __vmalloc_node_range_noprof+0x125/0x12d0 [ 361.875588][T11691] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 361.875618][T11691] ? __kasan_kmalloc+0x93/0xb0 [ 361.875649][T11691] vmalloc_user_noprof+0xad/0xf0 [ 361.875673][T11691] ? xskq_create+0xbf/0x170 [ 361.875695][T11691] xskq_create+0xbf/0x170 [ 361.875720][T11691] xsk_init_queue+0xb0/0x110 [ 361.875744][T11691] xsk_setsockopt+0x57b/0x8d0 [ 361.875767][T11691] ? __pfx_xsk_setsockopt+0x10/0x10 [ 361.875790][T11691] ? __pfx_aa_sk_perm+0x10/0x10 [ 361.875816][T11691] ? aa_sock_opt_perm+0xff/0x1b0 [ 361.875844][T11691] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 361.875861][T11691] ? __pfx_xsk_setsockopt+0x10/0x10 [ 361.875883][T11691] do_sock_setsockopt+0x17c/0x1b0 [ 361.875907][T11691] __x64_sys_setsockopt+0x13f/0x1b0 [ 361.875931][T11691] do_syscall_64+0xfa/0xfa0 [ 361.875954][T11691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.875970][T11691] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 361.875988][T11691] ? clear_bhb_loop+0x60/0xb0 [ 361.876009][T11691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.876027][T11691] RIP: 0033:0x7fcf6278f6c9 [ 361.876044][T11691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.876058][T11691] RSP: 002b:00007fcf63579038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 361.876077][T11691] RAX: ffffffffffffffda RBX: 00007fcf629e6090 RCX: 00007fcf6278f6c9 [ 361.876091][T11691] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 361.876102][T11691] RBP: 00007fcf62811f91 R08: 0000000000000004 R09: 0000000000000000 [ 361.876113][T11691] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 361.876124][T11691] R13: 00007fcf629e6128 R14: 00007fcf629e6090 R15: 00007ffe0beb62d8 [ 361.876157][T11691] [ 361.876197][T11691] Mem-Info: [ 362.186169][T11691] active_anon:12053 inactive_anon:0 isolated_anon:0 [ 362.186169][T11691] active_file:19076 inactive_file:39990 isolated_file:0 [ 362.186169][T11691] unevictable:768 dirty:317 writeback:0 [ 362.186169][T11691] slab_reclaimable:11131 slab_unreclaimable:152833 [ 362.186169][T11691] mapped:31365 shmem:1356 pagetables:1275 [ 362.186169][T11691] sec_pagetables:0 bounce:0 [ 362.186169][T11691] kernel_misc_reclaimable:0 [ 362.186169][T11691] free:1245274 free_pcp:21898 free_cma:0 [ 362.244836][T11691] Node 0 active_anon:48212kB inactive_anon:0kB active_file:76304kB inactive_file:159756kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125460kB dirty:1268kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11808kB pagetables:4936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 362.284905][T11691] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 362.317986][T11691] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.349365][T11691] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 362.355430][T11691] Node 0 DMA32 free:1078228kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48312kB inactive_anon:0kB active_file:76304kB inactive_file:159756kB unevictable:1536kB writepending:1268kB zspages:0kB present:3129332kB managed:2565168kB mlocked:0kB bounce:0kB free_pcp:68716kB local_pcp:31732kB free_cma:0kB [ 362.393004][T11691] lowmem_reserve[]: 0 0 0 0 0 [ 362.397986][T11691] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.430272][T11691] lowmem_reserve[]: 0 0 0 0 0 [ 362.435329][T11691] Node 1 Normal free:3887744kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19200kB local_pcp:10464kB free_cma:0kB [ 362.473587][T11691] lowmem_reserve[]: 0 0 0 0 0 [ 362.482978][T11691] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 362.497734][T11691] Node 0 DMA32: 1651*4kB (UME) 1087*8kB (UM) 1011*16kB (UM) 805*32kB (UME) 1225*64kB (UME) 580*128kB (UME) 184*256kB (UME) 66*512kB (UM) 35*1024kB (UM) 13*2048kB (UME) 177*4096kB (UM) = 1078228kB [ 362.518613][T11691] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 362.530810][T11691] Node 1 Normal: 224*4kB (UME) 44*8kB (UME) 40*16kB (UME) 127*32kB (UME) 41*64kB (UME) 16*128kB (UME) 5*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3887744kB [ 362.550726][T11691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.560395][T11691] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 362.570133][T11691] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.581794][T11691] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 362.628455][T11691] 60418 total pagecache pages [ 362.633260][T11691] 0 pages in swap cache [ 362.637476][T11691] Free swap = 124996kB [ 362.642135][T11691] Total swap = 124996kB [ 362.646325][T11691] 2097051 pages RAM [ 362.650288][T11691] 0 pages HighMem/MovableOnly [ 362.655079][T11691] 424117 pages reserved [ 362.660051][T11691] 0 pages cma reserved [ 362.892279][T11716] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 362.927234][T11720] tmpfs: Bad value for 'gid' [ 362.937875][T11720] tmpfs: Bad value for 'gid' [ 363.127744][T11729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.138139][T11729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.161132][T11729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.177547][T11729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.194160][T11729] batman_adv: batadv0: Removing interface: netdevsim0 [ 363.617527][T11725] delete_channel: no stack [ 363.854448][T11740] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1837'. [ 363.867901][T11740] hsr_slave_0: left promiscuous mode [ 363.885930][T11740] hsr_slave_1: left promiscuous mode [ 363.922351][T11743] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1840'. [ 364.310262][T11759] tmpfs: Bad value for 'gid' [ 364.315040][T11759] tmpfs: Bad value for 'gid' [ 364.392020][T11764] tmpfs: Bad value for 'gid' [ 364.408698][T11764] tmpfs: Bad value for 'gid' [ 364.711863][T11779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.238232][T11799] tmpfs: Bad value for 'gid' [ 365.243192][T11799] tmpfs: Bad value for 'gid' [ 365.263616][T11796] netlink: 'syz.1.1857': attribute type 13 has an invalid length. [ 365.272462][T11796] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1857'. [ 365.282977][T11796] erspan0: refused to change device tx_queue_len [ 365.293145][T11796] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 365.395347][T11802] tmpfs: Bad value for 'gid' [ 365.400366][T11802] tmpfs: Bad value for 'gid' [ 365.740598][T11818] tmpfs: Bad value for 'gid' [ 365.758318][T11818] tmpfs: Bad value for 'gid' [ 367.347856][T11846] tmpfs: Bad value for 'gid' [ 367.371661][T11846] tmpfs: Bad value for 'gid' [ 367.642366][T11849] tmpfs: Bad value for 'gid' [ 367.657555][T11849] tmpfs: Bad value for 'gid' [ 368.838759][T11860] tmpfs: Bad value for 'gid' [ 368.850917][T11860] tmpfs: Bad value for 'gid' [ 371.722218][T11891] tmpfs: Bad value for 'gid' [ 371.727271][T11891] tmpfs: Bad value for 'gid' [ 371.785771][T11893] tmpfs: Bad value for 'gid' [ 371.836259][T11893] tmpfs: Bad value for 'gid' [ 372.093763][T11905] tmpfs: Bad value for 'gid' [ 372.108953][T11905] tmpfs: Bad value for 'gid' [ 373.040130][T11922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1899'. [ 373.761517][T11937] tmpfs: Bad value for 'gid' [ 373.766408][T11937] tmpfs: Bad value for 'gid' [ 373.942253][T11941] tmpfs: Bad value for 'gid' [ 373.947171][T11941] tmpfs: Bad value for 'gid' [ 377.791951][T11964] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1911'. [ 377.802506][T11964] netlink: 'syz.0.1911': attribute type 1 has an invalid length. [ 378.721006][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.727466][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.360155][T12025] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1928'. [ 382.418157][T12025] netlink: 'syz.2.1928': attribute type 1 has an invalid length. [ 384.972987][T12033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1930'. [ 384.997509][T12034] tmpfs: Bad value for 'gid' [ 385.002885][T12034] tmpfs: Bad value for 'gid' [ 385.012393][T12033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1930'. [ 385.040245][T12033] netlink: 'syz.0.1930': attribute type 39 has an invalid length. [ 385.223607][ T5845] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 386.726336][T12085] tmpfs: Bad value for 'gid' [ 386.749626][T12085] tmpfs: Bad value for 'gid' [ 387.300941][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 387.974966][T12111] netlink: 'syz.3.1953': attribute type 10 has an invalid length. [ 388.978989][T12111] bond0: (slave bond_slave_0): Releasing backup interface [ 390.230534][T12156] netlink: 'syz.4.1967': attribute type 13 has an invalid length. [ 390.259560][T12156] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1967'. [ 391.379444][T12156] erspan0: refused to change device tx_queue_len [ 391.386328][T12156] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 391.553658][T12166] tmpfs: Bad value for 'gid' [ 391.568212][T12166] tmpfs: Bad value for 'gid' [ 392.170430][ T5845] Bluetooth: hci4: unexpected event 0x12 length: 151 > 8 [ 392.453921][T12204] netlink: 'syz.2.1986': attribute type 13 has an invalid length. [ 392.469828][T12204] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1986'. [ 393.064644][T12214] tmpfs: Bad value for 'gid' [ 393.069602][T12214] tmpfs: Bad value for 'gid' [ 393.811205][T12204] erspan0: refused to change device tx_queue_len [ 393.828229][T12204] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 394.462896][ T5845] Bluetooth: hci4: unexpected event 0x12 length: 151 > 8 [ 394.542629][T12247] tmpfs: Bad value for 'gid' [ 394.565239][T12247] tmpfs: Bad value for 'gid' [ 394.666295][T12253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2002'. [ 395.121269][T12266] netlink: 'syz.3.2005': attribute type 13 has an invalid length. [ 395.162563][T12268] tmpfs: Bad value for 'gid' [ 395.171954][T12268] tmpfs: Bad value for 'gid' [ 395.195424][T12266] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2005'. [ 396.765229][T12266] erspan0: refused to change device tx_queue_len [ 396.772116][T12266] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 397.390693][T12304] tmpfs: Bad value for 'gid' [ 397.406259][T12304] tmpfs: Bad value for 'gid' [ 397.978732][T12328] netlink: 'syz.0.2026': attribute type 13 has an invalid length. [ 398.003911][T12328] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2026'. [ 398.020360][T12328] erspan0: refused to change device tx_queue_len [ 398.028729][T12328] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 398.247448][T12344] rdma_rxe: rxe_newlink: failed to add vcan0 [ 398.257736][T12344] rdma_rxe: rxe_newlink: failed to add vcan0 [ 398.353639][T12346] tmpfs: Bad value for 'gid' [ 398.367137][T12346] tmpfs: Bad value for 'gid' [ 398.569826][T12353] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2032'. [ 398.952422][T12362] tmpfs: Bad value for 'gid' [ 398.971289][T12362] tmpfs: Bad value for 'gid' [ 400.411965][T12389] syz1: rxe_newlink: already configured on vcan0 [ 400.434309][T12389] syz1: rxe_newlink: already configured on vcan0 [ 400.615921][T12396] tmpfs: Bad value for 'gid' [ 400.646350][T12396] tmpfs: Bad value for 'gid' [ 401.533029][T12425] netlink: 'syz.2.2052': attribute type 13 has an invalid length. [ 401.541330][T12425] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2052'. [ 401.553359][T12425] erspan0: refused to change device tx_queue_len [ 401.561484][T12425] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 401.715238][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2054'. [ 401.732104][T12436] rdma_rxe: rxe_newlink: failed to add vcan0 [ 401.747907][T12436] rdma_rxe: rxe_newlink: failed to add vcan0 [ 402.464168][T12454] netlink: 'syz.3.2062': attribute type 41 has an invalid length. [ 402.515234][T12454] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2062'. [ 403.215103][T12467] rdma_rxe: rxe_newlink: failed to add lo [ 404.646551][T12500] tmpfs: Bad value for 'gid' [ 404.649467][T12498] netlink: 'syz.4.2077': attribute type 1 has an invalid length. [ 404.668955][T12500] tmpfs: Bad value for 'gid' [ 405.133059][T12522] netlink: 'syz.1.2082': attribute type 39 has an invalid length. [ 406.029761][T12539] netlink: 'syz.0.2086': attribute type 13 has an invalid length. [ 406.037628][T12539] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2086'. [ 406.058455][T12539] erspan0: refused to change device tx_queue_len [ 406.064828][T12539] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 408.983043][ T5845] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6 [ 409.538375][ T5845] Bluetooth: hci4: unexpected event 0x14 length: 15 > 6 [ 410.806841][ T30] audit: type=1107 audit(1762293986.811:4): pid=12655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 410.897719][T12656] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 410.938323][T12654] netlink: 4472 bytes leftover after parsing attributes in process `syz.1.2128'. [ 411.166702][T12669] syz1: rxe_newlink: already configured on vcan0 [ 411.310068][T12665] syz1: rxe_newlink: already configured on vcan0 [ 412.078422][T12683] tmpfs: Bad value for 'gid' [ 412.083566][T12683] tmpfs: Bad value for 'gid' [ 413.068192][T12716] syz1: rxe_newlink: already configured on vcan0 [ 413.085790][T12716] syz1: rxe_newlink: already configured on vcan0 [ 413.627134][T12730] tmpfs: Bad value for 'gid' [ 413.641269][T12730] tmpfs: Bad value for 'gid' [ 415.019429][T12777] tmpfs: Bad value for 'gid' [ 415.024416][T12777] tmpfs: Bad value for 'gid' [ 416.447263][T12821] tmpfs: Bad value for 'gid' [ 416.454189][T12821] tmpfs: Bad value for 'gid' [ 417.282289][T12852] netlink: 'syz.4.2191': attribute type 10 has an invalid length. [ 417.350853][T12859] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2191'. [ 417.447118][T12852] bond0: (slave team0): Releasing backup interface [ 417.476892][T12852] team0 (unregistering): Port device team_slave_0 removed [ 417.496578][T12852] team0 (unregistering): Port device team_slave_1 removed [ 417.506594][T12852] team0 (unregistering): Port device wlan1 removed [ 421.063302][T12960] rdma_rxe: rxe_newlink: failed to add vcan0 [ 421.081110][T12960] rdma_rxe: rxe_newlink: failed to add vcan0 [ 421.522339][T12997] netlink: 'syz.4.2233': attribute type 13 has an invalid length. [ 421.530491][T12997] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2233'. [ 421.561017][T12997] erspan0: refused to change device tx_queue_len [ 421.599011][T12997] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 421.919087][T13014] syz1: rxe_newlink: already configured on vcan0 [ 421.960194][T13014] syz1: rxe_newlink: already configured on vcan0 [ 424.489607][T13045] rdma_rxe: rxe_newlink: failed to add vcan0 [ 424.502038][T13045] rdma_rxe: rxe_newlink: failed to add vcan0 [ 424.507263][T13047] tmpfs: Bad value for 'gid' [ 424.513109][T13047] tmpfs: Bad value for 'gid' [ 426.429419][T13090] tmpfs: Bad value for 'gid' [ 426.434197][T13090] tmpfs: Bad value for 'gid' [ 426.780947][T13107] netlink: 'syz.0.2274': attribute type 21 has an invalid length. [ 427.939953][T13137] rdma_rxe: rxe_newlink: failed to add vcan0 [ 427.977868][T13137] rdma_rxe: rxe_newlink: failed to add vcan0 [ 428.986589][T13162] netlink: 'syz.0.2293': attribute type 39 has an invalid length. [ 429.134953][T13167] rdma_rxe: rxe_newlink: failed to add vcan0 [ 429.221789][T13167] rdma_rxe: rxe_newlink: failed to add vcan0 [ 430.302649][T13203] syz1: rxe_newlink: already configured on vcan0 [ 430.316558][T13203] syz1: rxe_newlink: already configured on vcan0 [ 432.002301][T13248] rdma_rxe: rxe_newlink: failed to add vcan0 [ 432.014816][T13248] rdma_rxe: rxe_newlink: failed to add vcan0 [ 434.426455][T13297] syz1: rxe_newlink: already configured on vcan0 [ 434.447470][T13297] syz1: rxe_newlink: already configured on vcan0 [ 436.905627][T13356] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2360'. [ 439.129959][T13412] tmpfs: Bad value for 'gid' [ 439.134720][T13412] tmpfs: Bad value for 'gid' [ 439.240664][ T2124] tipc: Subscription rejected, illegal request [ 440.117034][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.123500][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.549318][T13453] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2388'. [ 441.582252][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2389'. [ 445.502552][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2405'. [ 445.976046][T13519] tmpfs: Bad value for 'gid' [ 445.982292][T13519] tmpfs: Bad value for 'gid' [ 446.251111][ T50] tipc: Subscription rejected, illegal request [ 446.750661][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2419'. [ 447.003488][T13548] tmpfs: Bad value for 'gid' [ 447.018291][T13548] tmpfs: Bad value for 'gid' [ 447.570804][ T30] audit: type=1107 audit(1762294023.581:5): pid=13562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 447.701452][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2427'. [ 449.170457][T13598] tmpfs: Bad value for 'gid' [ 449.180886][T13598] tmpfs: Bad value for 'gid' [ 449.476152][T13604] netlink: 'syz.4.2438': attribute type 21 has an invalid length. [ 449.502760][T13602] : port 1(ip6gretap0) entered blocking state [ 449.512351][T13602] : port 1(ip6gretap0) entered disabled state [ 449.519250][T13602] ip6gretap0: entered allmulticast mode [ 449.526960][T13602] ip6gretap0: entered promiscuous mode [ 449.639119][T13608] xt_NFQUEUE: number of queues (65297) out of range (got 111634) [ 449.671154][T13608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2440'. [ 449.693287][T13608] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2440'. [ 449.861788][ T30] audit: type=1107 audit(1762294025.871:6): pid=13617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 450.202015][T13628] tmpfs: Bad value for 'gid' [ 450.216706][T13628] tmpfs: Bad value for 'gid' [ 451.357713][T13653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2458'. [ 451.759735][T13667] rdma_rxe: rxe_newlink: failed to add vcan0 [ 451.785331][T13667] rdma_rxe: rxe_newlink: failed to add vcan0 [ 452.044267][T13678] netlink: 'syz.4.2467': attribute type 13 has an invalid length. [ 452.055046][T13678] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2467'. [ 452.105966][T13678] erspan0: refused to change device tx_queue_len [ 452.112766][T13678] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 452.490592][T13689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2470'. [ 452.756504][T13695] netlink: 'syz.1.2472': attribute type 1 has an invalid length. [ 452.987775][T13704] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2474'. [ 453.000138][T13704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2474'. [ 453.010387][T13704] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2474'. [ 453.021486][T13704] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2474'. [ 453.133058][T13708] rdma_rxe: rxe_newlink: failed to add vcan0 [ 453.163255][T13708] rdma_rxe: rxe_newlink: failed to add vcan0 [ 454.020633][T13713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.056109][T13693] vcan0 speed is unknown, defaulting to 1000 [ 454.606447][T13736] tmpfs: Bad value for 'gid' [ 454.611790][T13736] tmpfs: Bad value for 'gid' [ 454.836733][T13743] netlink: 'syz.4.2486': attribute type 13 has an invalid length. [ 454.855006][T13743] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2486'. [ 454.890107][T13743] erspan0: refused to change device tx_queue_len [ 454.896490][T13743] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 455.009228][T13747] veth1_macvtap: left promiscuous mode [ 455.038059][T13747] macsec0: entered promiscuous mode [ 455.129921][T13693] wlan1 speed is unknown, defaulting to 1000 [ 455.286251][T13762] netlink: 'syz.2.2491': attribute type 13 has an invalid length. [ 455.298166][T13762] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2491'. [ 455.342183][T13762] erspan0: refused to change device tx_queue_len [ 455.348729][T13762] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 458.190783][T13784] tmpfs: Bad value for 'gid' [ 458.195879][T13784] tmpfs: Bad value for 'gid' [ 458.385104][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2500'. [ 458.487814][T13799] netlink: 'syz.2.2505': attribute type 13 has an invalid length. [ 458.496104][T13799] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2505'. [ 458.507338][T13799] erspan0: refused to change device tx_queue_len [ 458.514680][T13799] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 459.400013][T13821] tmpfs: Bad value for 'gid' [ 459.404938][T13821] tmpfs: Bad value for 'gid' [ 460.433571][T13834] tmpfs: Bad value for 'gid' [ 460.439254][T13834] tmpfs: Bad value for 'gid' [ 460.831846][ T5845] Bluetooth: hci1: unexpected event 0x12 length: 151 > 8 [ 460.853839][T13841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.145752][T13862] netlink: 'syz.0.2523': attribute type 13 has an invalid length. [ 461.155925][T13862] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2523'. [ 461.166187][T13862] erspan0: refused to change device tx_queue_len [ 461.174096][T13862] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 462.722329][T13871] sit0: left promiscuous mode [ 462.906278][T13880] tmpfs: Bad value for 'gid' [ 462.925058][T13880] tmpfs: Bad value for 'gid' [ 462.930267][ T5845] Bluetooth: hci0: unexpected event 0x12 length: 151 > 8 [ 463.127010][ T30] audit: type=1107 audit(1762294039.131:7): pid=13887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 463.913128][ T5845] Bluetooth: hci1: unexpected event 0x12 length: 151 > 8 [ 464.295369][T13933] netlink: 'syz.1.2549': attribute type 21 has an invalid length. [ 464.480850][ T30] audit: type=1107 audit(1762294040.481:8): pid=13934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 465.145326][T13961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2560'. [ 465.833532][T13979] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2567'. [ 465.843696][T13979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2567'. [ 465.904434][T13979] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2567'. [ 465.950741][T13979] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2567'. [ 466.065793][ T30] audit: type=1107 audit(1762294042.071:9): pid=13986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 466.647928][T14003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2576'. [ 466.946943][T14013] netlink: 4472 bytes leftover after parsing attributes in process `syz.3.2580'. [ 467.915656][T14025] netlink: 'syz.0.2594': attribute type 13 has an invalid length. [ 467.924870][T14025] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2594'. [ 468.003523][T14025] erspan0: refused to change device tx_queue_len [ 468.010822][T14025] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 468.077602][ T30] audit: type=1107 audit(1762294044.001:10): pid=14022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 468.289400][T14031] tmpfs: Bad value for 'gid' [ 468.294635][T14031] tmpfs: Bad value for 'gid' [ 468.592621][T14034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2586'. [ 470.299894][T14063] tmpfs: Bad value for 'gid' [ 470.327308][T14063] tmpfs: Bad value for 'gid' [ 470.403462][T14065] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.2600'. [ 470.488967][T14069] netlink: 4472 bytes leftover after parsing attributes in process `syz.0.2599'. [ 470.669517][T14080] netlink: 'syz.2.2604': attribute type 13 has an invalid length. [ 470.677773][T14080] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2604'. [ 470.743476][T14080] erspan0: refused to change device tx_queue_len [ 470.751519][T14080] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 472.101261][T14089] tmpfs: Bad value for 'gid' [ 472.106248][T14089] tmpfs: Bad value for 'gid' [ 473.346310][T14107] tmpfs: Bad value for 'gid' [ 473.351780][T14107] tmpfs: Bad value for 'gid' [ 473.652323][T14113] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2615'. [ 475.162223][T14129] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2619'. [ 475.473522][T14148] tmpfs: Bad value for 'gid' [ 475.478313][T14148] tmpfs: Bad value for 'gid' [ 475.851640][ T30] audit: type=1107 audit(1762294051.861:11): pid=14164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 477.161755][T14165] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 477.178969][T14165] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 477.198539][T14165] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 477.580384][ T30] audit: type=1107 audit(1762294053.591:12): pid=14189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 478.179283][T14197] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.2644'. [ 481.165159][T14261] veth0_vlan: entered allmulticast mode [ 481.925866][T14268] veth0_vlan: left promiscuous mode [ 481.932101][T14268] veth0_vlan: entered promiscuous mode [ 481.942376][T14269] veth0_vlan: entered allmulticast mode [ 482.122465][T14272] siw: device registration error -23 [ 482.335543][ T5845] Bluetooth: hci1: Unable to find connection for big 0x00 [ 484.008185][T14318] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2678'. [ 486.139587][T14357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2694'. [ 486.223424][T14359] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2693'. [ 487.049994][T14391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2702'. [ 487.780900][T14407] netlink: 4472 bytes leftover after parsing attributes in process `syz.4.2705'. [ 488.708470][T14415] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2707'. [ 488.965013][T14425] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2710'. [ 488.989995][T14429] : renamed from gre0 (while UP) [ 489.153597][T14436] : port 1(vlan0) entered blocking state [ 489.171044][T14436] : port 1(vlan0) entered disabled state [ 489.178808][T14436] vlan0: entered allmulticast mode [ 489.196561][T14436] vlan0: entered promiscuous mode [ 489.208141][T14436] : port 1(vlan0) entered blocking state [ 489.214002][T14436] : port 1(vlan0) entered forwarding state [ 489.222633][T14439] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2718'. [ 489.282183][T14444] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 489.517227][T14453] syzkaller0: entered promiscuous mode [ 489.524028][T14453] syzkaller0: entered allmulticast mode [ 489.816802][T14465] netlink: 'syz.0.2726': attribute type 13 has an invalid length. [ 489.825610][T14465] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2726'. [ 489.835302][T14465] erspan0: refused to change device tx_queue_len [ 489.847006][T14465] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 491.467377][T14481] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2733'. [ 491.611838][T14482] rdma_rxe: rxe_newlink: failed to add vcan0 [ 491.663375][T14482] rdma_rxe: rxe_newlink: failed to add vcan0 [ 491.995251][T14507] netlink: 'syz.2.2743': attribute type 2 has an invalid length. [ 492.007618][T14507] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.2743'. [ 492.596229][T14524] netlink: 'syz.0.2746': attribute type 13 has an invalid length. [ 492.604831][T14524] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2746'. [ 492.615647][T14524] erspan0: refused to change device tx_queue_len [ 492.622133][T14524] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 493.056104][T14533] rdma_rxe: rxe_newlink: failed to add vcan0 [ 493.069652][T14533] rdma_rxe: rxe_newlink: failed to add vcan0 [ 494.205897][T14531] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2750'. [ 494.666168][T14562] netlink: 'syz.0.2758': attribute type 13 has an invalid length. [ 494.779433][T14562] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2758'. [ 495.035715][T14562] erspan0: refused to change device tx_queue_len [ 495.052270][T14562] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 496.734579][T14574] netlink: 'syz.4.2762': attribute type 29 has an invalid length. [ 496.880460][T14589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2764'. [ 496.893560][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2767'. [ 497.897834][T14611] netlink: 2060 bytes leftover after parsing attributes in process `syz.1.2774'. [ 497.925482][T14611] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.2774'. [ 497.936148][T14613] netlink: 'syz.2.2775': attribute type 13 has an invalid length. [ 497.998129][T14613] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2775'. [ 498.076273][T14613] erspan0: refused to change device tx_queue_len [ 498.088109][T14613] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 499.979279][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.163490][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.320589][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.352088][T14660] netlink: 'syz.2.2789': attribute type 10 has an invalid length. [ 500.363624][T14660] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2789'. [ 500.374195][T14660] ipvlan1: entered promiscuous mode [ 500.380500][T14660] ipvlan1: entered allmulticast mode [ 500.391868][T14660] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 500.655874][ T12] bond0: (slave ): Releasing backup interface [ 500.670390][ T12] netdevsim netdevsim0 (unregistering): left promiscuous mode [ 500.682920][ T12] netdevsim netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.713826][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 500.726254][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 500.737057][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 500.749187][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 500.761654][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 500.914088][ T12] ip6gretap0: left allmulticast mode [ 500.941983][ T12] ip6gretap0: left promiscuous mode [ 500.962183][ T12] : port 1(ip6gretap0) entered disabled state [ 501.003281][ T12] vlan0: left allmulticast mode [ 501.031568][ T12] vlan0: left promiscuous mode [ 501.055937][ T12] : port 1(vlan0) entered disabled state [ 501.543280][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.550073][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.579810][T14686] netlink: 'syz.1.2799': attribute type 13 has an invalid length. [ 501.609770][T14686] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2799'. [ 501.931630][T14690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2800'. [ 502.086884][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.095925][ T12] bond_slave_1: left promiscuous mode [ 502.104836][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 502.114102][ T12] bridge_slave_1: left promiscuous mode [ 502.121625][ T12] bond0 (unregistering): Released all slaves [ 502.160158][T14686] erspan0: refused to change device tx_queue_len [ 502.166538][T14686] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 502.217187][T14692] netlink: 'syz.2.2800': attribute type 3 has an invalid length. [ 502.832123][ T5845] Bluetooth: hci2: command tx timeout [ 502.847710][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 502.877131][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 502.888757][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 502.907172][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 502.914986][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 503.673728][ T12] : left promiscuous mode [ 503.685609][T14709] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2803'. [ 503.695349][T14671] vcan0 speed is unknown, defaulting to 1000 [ 504.040652][T14716] vcan0 speed is unknown, defaulting to 1000 [ 504.391581][T14730] netlink: 'syz.2.2811': attribute type 10 has an invalid length. [ 504.670773][ T12] team0: Port device wlan1 removed [ 504.813182][T14671] wlan1 speed is unknown, defaulting to 1000 [ 504.900021][ T5831] Bluetooth: hci2: command tx timeout [ 504.989911][ T5831] Bluetooth: hci3: command tx timeout [ 505.586179][T14746] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2816'. [ 505.596494][T14716] wlan1 speed is unknown, defaulting to 1000 [ 505.679820][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 505.691750][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 505.700543][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 505.709806][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 505.721030][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 505.940534][T14753] netlink: 'syz.1.2818': attribute type 13 has an invalid length. [ 505.948674][T14753] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2818'. [ 506.018348][T14753] erspan0: refused to change device tx_queue_len [ 506.024837][T14753] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 506.082347][T14671] chnl_net:caif_netlink_parms(): no params data found [ 506.101315][T14747] vcan0 speed is unknown, defaulting to 1000 [ 506.162817][ T12] hsr_slave_0: left promiscuous mode [ 506.169340][ T12] hsr_slave_1: left promiscuous mode [ 506.200346][ T12] veth1_macvtap: left promiscuous mode [ 506.206332][ T12] veth1_vlan: left promiscuous mode [ 506.228264][ T12] veth0_vlan: left promiscuous mode [ 506.622410][ T12] team0 (unregistering): Port device team_slave_1 removed [ 506.662276][ T12] team0 (unregistering): Port device team_slave_0 removed [ 506.860995][ T12] team0 (unregistering): Port device dummy0 removed [ 506.980364][ T5831] Bluetooth: hci2: command tx timeout [ 507.058088][ T5831] Bluetooth: hci3: command tx timeout [ 507.950693][ T5831] Bluetooth: hci1: command tx timeout [ 508.381510][T14671] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.398182][T14671] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.405449][T14671] bridge_slave_0: entered allmulticast mode [ 508.441630][T14671] bridge_slave_0: entered promiscuous mode [ 508.479363][T14671] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.492270][T14671] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.513222][T14671] bridge_slave_1: entered allmulticast mode [ 508.532600][T14671] bridge_slave_1: entered promiscuous mode [ 508.572762][T14747] wlan1 speed is unknown, defaulting to 1000 [ 508.725515][T14671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.738618][T14671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.845494][T14716] chnl_net:caif_netlink_parms(): no params data found [ 508.868119][T14671] team0: Port device team_slave_0 added [ 508.874503][T14763] vcan0 speed is unknown, defaulting to 1000 [ 508.962569][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 508.971938][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 508.980636][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 508.991198][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 508.999208][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 509.025730][T14671] team0: Port device team_slave_1 added [ 509.058156][ T5845] Bluetooth: hci2: command tx timeout [ 509.138963][ T5845] Bluetooth: hci3: command tx timeout [ 509.151054][T14671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.168105][T14671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.207320][T14671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.228827][T14671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.239128][T14671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.266180][T14671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.341068][T14767] vcan0 speed is unknown, defaulting to 1000 [ 509.473017][T14716] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.489375][T14716] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.496639][T14716] bridge_slave_0: entered allmulticast mode [ 509.526043][T14716] bridge_slave_0: entered promiscuous mode [ 509.590387][T14671] hsr_slave_0: entered promiscuous mode [ 509.597203][T14671] hsr_slave_1: entered promiscuous mode [ 509.646714][T14716] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.658386][T14716] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.665722][T14716] bridge_slave_1: entered allmulticast mode [ 509.674681][T14716] bridge_slave_1: entered promiscuous mode [ 509.702500][T14763] wlan1 speed is unknown, defaulting to 1000 [ 509.723761][T14716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.839684][T14716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.919418][ T12] bond0: (slave ): Releasing backup interface [ 509.965357][T14716] team0: Port device team_slave_0 added [ 509.988181][T14767] wlan1 speed is unknown, defaulting to 1000 [ 510.006627][T14716] team0: Port device team_slave_1 added [ 510.018329][ T5845] Bluetooth: hci1: command tx timeout [ 510.070560][T14716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.077542][T14716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.104077][T14716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.155517][T14747] chnl_net:caif_netlink_parms(): no params data found [ 510.166550][T14716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.173649][T14716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.200111][T14716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.636100][T14716] hsr_slave_0: entered promiscuous mode [ 510.642734][T14716] hsr_slave_1: entered promiscuous mode [ 510.649891][T14716] debugfs: 'hsr0' already exists in 'hsr' [ 510.655644][T14716] Cannot create hsr debugfs directory [ 510.784474][T14747] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.791862][T14747] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.799737][T14747] bridge_slave_0: entered allmulticast mode [ 510.807366][T14747] bridge_slave_0: entered promiscuous mode [ 510.815752][T14747] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.823092][T14747] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.831434][T14747] bridge_slave_1: entered allmulticast mode [ 510.840466][T14747] bridge_slave_1: entered promiscuous mode [ 510.956829][T14747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.022122][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.049130][T14747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.058601][ T5845] Bluetooth: hci4: command tx timeout [ 511.074669][T14767] chnl_net:caif_netlink_parms(): no params data found [ 511.175020][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.213626][T14747] team0: Port device team_slave_0 added [ 511.228358][ T5845] Bluetooth: hci3: command tx timeout [ 511.267454][T14747] team0: Port device team_slave_1 added [ 511.286032][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.405266][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.431216][T14747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.442866][T14747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.471380][T14747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.527863][T14747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.547711][T14747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.575206][T14747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.586881][T14767] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.594281][T14767] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.601681][T14767] bridge_slave_0: entered allmulticast mode [ 511.617809][T14767] bridge_slave_0: entered promiscuous mode [ 511.652282][T14767] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.662370][T14767] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.669914][T14767] bridge_slave_1: entered allmulticast mode [ 511.677382][T14767] bridge_slave_1: entered promiscuous mode [ 511.729846][T14767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.763967][T14767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.778763][T14747] hsr_slave_0: entered promiscuous mode [ 511.785424][T14747] hsr_slave_1: entered promiscuous mode [ 511.792428][T14747] debugfs: 'hsr0' already exists in 'hsr' [ 511.798219][T14747] Cannot create hsr debugfs directory [ 511.879959][T14767] team0: Port device team_slave_0 added [ 511.914901][T14767] team0: Port device team_slave_1 added [ 512.101419][ T5845] Bluetooth: hci1: command tx timeout [ 512.258639][ T12] team0: Port device bond0 removed [ 512.265385][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.275415][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 512.285355][ T12] bond0 (unregistering): Released all slaves [ 512.546582][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.557552][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.569177][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 512.580310][ T12] bond0 (unregistering): Released all slaves [ 512.626231][T14767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.633539][T14767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.667870][T14767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.723782][T14767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.731857][T14767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.758237][T14767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.872000][T14767] hsr_slave_0: entered promiscuous mode [ 512.879568][T14767] hsr_slave_1: entered promiscuous mode [ 512.886291][T14767] debugfs: 'hsr0' already exists in 'hsr' [ 512.892170][T14767] Cannot create hsr debugfs directory [ 513.146712][T14716] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 513.149048][ T5845] Bluetooth: hci4: command tx timeout [ 513.163501][T14716] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 513.174278][T14716] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 513.185707][T14716] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 513.280378][T14671] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 513.294358][T14671] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 513.339256][T14671] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 513.350925][T14671] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 513.623359][T14716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.663919][T14671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.764652][T14716] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.782110][T14671] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.799689][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.806849][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.862475][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.869754][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.880838][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.888021][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.920453][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.927725][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.181072][ T5845] Bluetooth: hci1: command tx timeout [ 514.205234][T14747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 514.250004][T14767] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.273526][ T12] hsr_slave_0: left promiscuous mode [ 514.280455][ T12] hsr_slave_1: left promiscuous mode [ 514.290532][ T12] hsr_slave_0: left promiscuous mode [ 514.296433][ T12] hsr_slave_1: left promiscuous mode [ 514.303299][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.311571][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.321249][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.329038][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.345584][ T12] veth1_macvtap: left promiscuous mode [ 514.351971][ T12] veth1_vlan: left promiscuous mode [ 514.357218][ T12] veth0_vlan: left promiscuous mode [ 514.602243][ T12] team0 (unregistering): Port device team_slave_1 removed [ 514.644052][ T12] team0 (unregistering): Port device team_slave_0 removed [ 514.923482][ T6619] smc: removing ib device syz1 [ 515.228377][ T5845] Bluetooth: hci4: command tx timeout [ 516.135454][T14747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 516.189349][T14747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 516.201657][T14747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 516.254176][T14767] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.317875][T14716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.349879][T14767] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.479252][T14767] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.671044][T14671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.722266][T14747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.757830][T14767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 516.787047][T14767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 516.805172][T14767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 516.834647][T14747] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.842320][T14767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 516.870529][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.877678][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.920539][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.927728][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.982211][T14671] veth0_vlan: entered promiscuous mode [ 517.073671][T14671] veth1_vlan: entered promiscuous mode [ 517.089802][T14716] veth0_vlan: entered promiscuous mode [ 517.137282][T14716] veth1_vlan: entered promiscuous mode [ 517.179093][T14671] veth0_macvtap: entered promiscuous mode [ 517.223264][T14767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.233911][T14671] veth1_macvtap: entered promiscuous mode [ 517.262128][T14716] veth0_macvtap: entered promiscuous mode [ 517.290787][T14716] veth1_macvtap: entered promiscuous mode [ 517.301261][ T5845] Bluetooth: hci4: command tx timeout [ 517.305302][T14671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.333832][T14767] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.347487][T14671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.370654][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.377828][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.411216][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.418406][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.440072][ T74] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.449159][ T74] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.472097][T14716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.483743][ T74] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.494185][ T74] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.516005][T14716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.535781][T14747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.579961][ T74] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.590057][ T74] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.623253][ T74] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.659037][ T74] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.690175][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.710163][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.795178][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.809577][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.853378][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.857504][T14747] veth0_vlan: entered promiscuous mode [ 517.890175][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.927030][T14747] veth1_vlan: entered promiscuous mode [ 517.985530][ T2124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.995493][ T2124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.021155][T14747] veth0_macvtap: entered promiscuous mode [ 518.034778][T14767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.110849][T14747] veth1_macvtap: entered promiscuous mode [ 518.119413][T14846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2805'. [ 518.160352][T14747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.202255][T14747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.260698][T14848] openvswitch: netlink: Message has 716 unknown bytes. [ 518.270707][ T1043] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.290628][T14767] veth0_vlan: entered promiscuous mode [ 518.315421][T14848] netlink: 'syz.1.2837': attribute type 16 has an invalid length. [ 518.332187][T14848] netlink: 'syz.1.2837': attribute type 17 has an invalid length. [ 518.339056][ T1043] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.349183][ T1043] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.401470][T14848] sit0: left promiscuous mode [ 518.406511][T14848] sit0: left allmulticast mode [ 518.434585][T14848] 8021q: adding VLAN 0 to HW filter on device .` [ 518.449105][T14848] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.461359][T14848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 518.478514][T14851] : port 1(vlan0) entered blocking state [ 518.485007][T14851] : port 1(vlan0) entered disabled state [ 518.491548][T14851] vlan0: entered allmulticast mode [ 518.497187][T14851] veth0_vlan: entered allmulticast mode [ 518.505197][T14851] vlan0: entered promiscuous mode [ 518.515485][ T1043] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.534139][T14850] : port 1(vlan0) entered blocking state [ 518.540277][T14850] : port 1(vlan0) entered forwarding state [ 518.572330][T14767] veth1_vlan: entered promiscuous mode [ 518.731440][T14853] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2828'. [ 518.756616][ T2124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.780242][ T2124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.805732][T14767] veth0_macvtap: entered promiscuous mode [ 518.832499][T14767] veth1_macvtap: entered promiscuous mode [ 518.864292][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.903597][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.946842][T14767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.983415][T14767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.046254][ T6619] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.081106][ T6619] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.120872][ T6619] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.171486][ T6619] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.198746][T14868] netlink: 'syz.0.2831': attribute type 13 has an invalid length. [ 519.225635][T14868] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2831'. [ 519.252554][T14868] erspan0: refused to change device tx_queue_len [ 519.259226][T14868] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 519.402584][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.438481][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.612942][ T6619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.631889][ T6619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.902126][T14880] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2839'. [ 519.971872][T14881] tmpfs: Bad value for 'gid' [ 519.987165][T14881] tmpfs: Bad value for 'gid' [ 520.654521][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 520.681110][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 520.693506][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 520.723799][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 520.740327][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 521.883306][T14894] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2842'. [ 522.319884][ T2124] veth0_to_team: left allmulticast mode [ 522.334897][ T2124] veth0_to_team: left promiscuous mode [ 522.356114][ T2124] : port 2(veth0_to_team) entered disabled state [ 522.380857][ T2124] veth0_to_bridge: left allmulticast mode [ 522.386749][ T5831] Bluetooth: hci1: ISO packet for unknown connection handle 45 [ 522.406346][ T2124] veth0_to_bridge: left promiscuous mode [ 522.412645][ T2124] : port 1(veth0_to_bridge) entered disabled state [ 522.829572][ T5831] Bluetooth: hci0: command tx timeout [ 523.134667][T14917] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2851'. [ 523.255082][T14921] netlink: 'syz.0.2853': attribute type 8 has an invalid length. [ 523.264066][T14921] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.2853'. [ 523.552693][ T2124] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.570543][ T2124] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.582138][ T2124] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 523.594654][ T2124] .` (unregistering): Released all slaves [ 523.627663][T14928] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2855'. [ 523.655026][T14891] wlan1 speed is unknown, defaulting to 1000 [ 523.723740][ T2124] 9: left promiscuous mode [ 523.836225][T14932] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2857'. [ 524.002623][T14891] chnl_net:caif_netlink_parms(): no params data found [ 525.348087][ T5831] Bluetooth: hci0: command tx timeout [ 525.841009][T14954] netlink: 'syz.0.2862': attribute type 10 has an invalid length. [ 525.851580][T14954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2862'. [ 525.869183][T14891] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.876688][T14891] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.885672][T14891] bridge_slave_0: entered allmulticast mode [ 525.894374][T14891] bridge_slave_0: entered promiscuous mode [ 525.903533][T14954] dummy0: entered promiscuous mode [ 525.910792][T14954] dummy0: entered allmulticast mode [ 525.936373][T14954] bridge0: port 3(dummy0) entered blocking state [ 525.946494][T14954] bridge0: port 3(dummy0) entered disabled state [ 525.951763][T14956] openvswitch: netlink: Message has 716 unknown bytes. [ 526.006365][T14954] bridge0: port 3(dummy0) entered blocking state [ 526.015044][T14954] bridge0: port 3(dummy0) entered forwarding state [ 526.020356][T14956] netlink: 'syz.2.2863': attribute type 16 has an invalid length. [ 526.029938][T14956] netlink: 'syz.2.2863': attribute type 17 has an invalid length. [ 526.066982][T14891] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.076122][T14891] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.083534][T14891] bridge_slave_1: entered allmulticast mode [ 526.091484][T14891] bridge_slave_1: entered promiscuous mode [ 526.096645][T14960] rdma_rxe: rxe_newlink: failed to add lo [ 526.128327][T14960] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2864'. [ 526.137438][T14960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2864'. [ 526.153478][T14960] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2864'. [ 526.163029][T14960] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2864'. [ 526.400140][T14956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 526.463075][T14969] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2867'. [ 526.588500][T14962] netlink: 'syz.4.2865': attribute type 10 has an invalid length. [ 526.652639][T14962] dummy0: entered promiscuous mode [ 526.956051][T14891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.000885][T14891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.379349][ T5845] Bluetooth: hci0: command tx timeout [ 528.427635][ T2124] team0 (unregistering): Port device team_slave_1 removed [ 528.567654][ T2124] team0 (unregistering): Port device C removed [ 529.458385][ T5845] Bluetooth: hci0: command tx timeout [ 532.149875][T15022] __nla_validate_parse: 3 callbacks suppressed [ 532.149923][T15022] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2879'. [ 532.802030][T15025] netlink: 'syz.2.2880': attribute type 4 has an invalid length. [ 532.810741][T15025] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2880'. [ 533.180918][T15025] .`: renamed from bond0 (while UP) [ 533.359511][T14891] team0: Port device team_slave_0 added [ 533.396141][T14891] team0: Port device team_slave_1 added [ 533.664863][T15032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2882'. [ 533.706279][T15032] netlink: 'syz.0.2882': attribute type 40 has an invalid length. [ 533.854063][T15036] siw: device registration error -23 [ 534.172007][T15039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2884'. [ 534.374865][T15041] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2884'. [ 534.426528][T15039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2884'. [ 534.450359][T14891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.491916][T14891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.614971][T14891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.706510][T15041] wg2: entered promiscuous mode [ 534.715938][T15041] wg2: entered allmulticast mode [ 534.736296][T14891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.767881][T14891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.822666][T14891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.223778][T14891] hsr_slave_0: entered promiscuous mode [ 535.268435][T14891] hsr_slave_1: entered promiscuous mode [ 535.276253][T14891] debugfs: 'hsr0' already exists in 'hsr' [ 535.298208][T14891] Cannot create hsr debugfs directory [ 538.752701][T15079] openvswitch: netlink: Message has 716 unknown bytes. [ 539.149651][T15079] netlink: 'syz.2.2896': attribute type 16 has an invalid length. [ 539.157767][T15079] netlink: 'syz.2.2896': attribute type 17 has an invalid length. [ 539.376963][T15079] 8021q: adding VLAN 0 to HW filter on device .` [ 539.413563][T15079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.451518][T15085] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2897'. [ 540.251815][T15105] netlink: 'syz.3.2904': attribute type 4 has an invalid length. [ 540.509179][T14891] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 540.645201][T14891] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 540.696805][T15114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2906'. [ 540.711885][T14891] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 540.752415][T14891] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 541.001375][T15127] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2908'. [ 541.019299][T15127] bond_slave_0: entered promiscuous mode [ 541.025467][T15127] bond_slave_1: entered promiscuous mode [ 541.168164][T14891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.189700][T14891] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.202798][T14219] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.210332][T14219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.275909][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.283182][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.512157][T15137] openvswitch: netlink: Message has 716 unknown bytes. [ 541.542723][T15136] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2921'. [ 541.571355][T15137] netlink: 'syz.3.2911': attribute type 16 has an invalid length. [ 541.579492][T15137] netlink: 'syz.3.2911': attribute type 17 has an invalid length. [ 541.735479][T15137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 541.774179][T15140] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2912'. [ 542.255865][T14891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.323416][T14891] veth0_vlan: entered promiscuous mode [ 542.407410][T14891] veth1_vlan: entered promiscuous mode [ 542.480747][T14891] veth0_macvtap: entered promiscuous mode [ 542.571467][T14891] veth1_macvtap: entered promiscuous mode [ 542.639625][T14891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.657011][T14891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.672874][T14219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.702722][T14219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.721655][T14219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.743876][T14219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.891926][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.924509][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.984695][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.994061][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.010429][T15169] netlink: 'syz.3.2920': attribute type 13 has an invalid length. [ 543.025971][T15169] netlink: 'syz.3.2920': attribute type 17 has an invalid length. [ 544.222651][T15169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 544.624890][T15196] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2928'. [ 544.742869][T15198] openvswitch: netlink: Message has 716 unknown bytes. [ 545.600741][T15198] netlink: 'syz.4.2929': attribute type 16 has an invalid length. [ 545.630377][T15198] netlink: 'syz.4.2929': attribute type 17 has an invalid length. [ 546.494714][T15205] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2931'. [ 546.556127][T15198] dummy0: left promiscuous mode [ 546.575498][T15198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.702865][T15217] netlink: 'syz.0.2932': attribute type 1 has an invalid length. [ 547.111642][T15228] bridge_slave_1: left allmulticast mode [ 547.118374][T15228] bridge_slave_1: left promiscuous mode [ 547.127945][T15228] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.186256][T15228] bridge_slave_0: left allmulticast mode [ 547.192812][T15228] bridge_slave_0: left promiscuous mode [ 547.234151][T15228] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.815325][T15239] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2941'. [ 547.973590][T15236] vcan0 speed is unknown, defaulting to 1000 [ 547.980948][T15236] vcan0 speed is unknown, defaulting to 1000 [ 547.987816][T15236] vcan0 speed is unknown, defaulting to 1000 [ 548.027904][T15242] rdma_rxe: rxe_newlink: failed to add vcan0 [ 548.332127][T15236] infiniband syz1: set active [ 548.337005][T14678] vcan0 speed is unknown, defaulting to 1000 [ 548.343431][T15236] infiniband syz1: added vcan0 [ 548.421691][T15236] RDS/IB: syz1: added [ 548.433722][T15236] smc: adding ib device syz1 with port count 1 [ 548.441561][T15236] smc: ib device syz1 port 1 has no pnetid [ 548.448417][T14678] vcan0 speed is unknown, defaulting to 1000 [ 548.457366][T15236] vcan0 speed is unknown, defaulting to 1000 [ 549.617538][T15236] vcan0 speed is unknown, defaulting to 1000 [ 549.807663][T15236] vcan0 speed is unknown, defaulting to 1000 [ 550.181175][T15236] vcan0 speed is unknown, defaulting to 1000 [ 550.256900][T15276] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2952'. [ 551.343798][T15236] vcan0 speed is unknown, defaulting to 1000 [ 551.630483][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2957'. [ 551.710566][T15236] vcan0 speed is unknown, defaulting to 1000 [ 552.200816][T15302] netlink: 'syz.3.2960': attribute type 10 has an invalid length. [ 552.239163][T15302] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2960'. [ 552.288279][T15304] netlink: 'syz.2.2962': attribute type 2 has an invalid length. [ 552.388731][T15302] dummy0: entered promiscuous mode [ 552.394205][T15302] dummy0: entered allmulticast mode [ 552.464250][T15302] bridge0: port 3(dummy0) entered blocking state [ 552.558534][T15302] bridge0: port 3(dummy0) entered disabled state [ 552.813043][T15302] bridge0: port 3(dummy0) entered blocking state [ 552.819740][T15302] bridge0: port 3(dummy0) entered forwarding state [ 553.093215][T15314] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 553.160079][T15315] netlink: 'syz.2.2964': attribute type 60 has an invalid length. [ 553.245881][T15310] delete_channel: no stack [ 553.284727][T15317] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2965'. [ 553.665258][T15326] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2968'. [ 553.734815][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2971'. [ 553.911510][T15340] siw: device registration error -23 [ 554.050768][T15346] syz1: rxe_newlink: already configured on vcan0 [ 554.087508][T15346] syz1: rxe_newlink: already configured on vcan0 [ 554.163296][T15353] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2978'. [ 554.564487][T15367] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2980'. [ 554.896307][T15380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2984'. [ 555.066100][T15384] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2986'. [ 555.067563][T15386] IPv6: Can't replace route, no match found [ 555.325888][T15386] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 555.342346][T15392] rdma_rxe: rxe_newlink: failed to add vcan0 [ 555.364605][T15390] rdma_rxe: rxe_newlink: failed to add vcan0 [ 555.490237][T15385] delete_channel: no stack [ 557.607155][T15411] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2995'. [ 557.708948][T15415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.784476][T15414] netlink: 'syz.1.2997': attribute type 10 has an invalid length. [ 557.796104][T15414] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2997'. [ 557.986992][T14219] wlan1: Trigger new scan to find an IBSS to join [ 558.486737][T15425] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3000'. [ 558.724745][T15437] bridge_slave_1: left allmulticast mode [ 558.731487][T15437] bridge_slave_1: left promiscuous mode [ 558.739021][T15437] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.796547][T15437] bridge_slave_0: left allmulticast mode [ 558.806129][T15437] bridge_slave_0: left promiscuous mode [ 558.813584][T15437] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.896642][T15442] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3004'. [ 559.005226][T15450] netlink: 'syz.1.3004': attribute type 10 has an invalid length. [ 559.013524][T15450] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3004'. [ 559.183116][T15444] netlink: 'syz.0.3006': attribute type 12 has an invalid length. [ 559.974055][T15470] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3015'. [ 562.131417][T15497] rdma_rxe: rxe_newlink: failed to add vcan0 [ 562.141429][T15497] rdma_rxe: rxe_newlink: failed to add vcan0 [ 562.245846][T15498] netlink: 'syz.1.3023': attribute type 39 has an invalid length. [ 562.509307][T15507] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3025'. [ 563.138616][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.144967][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.153562][ T12] wlan1: Trigger new scan to find an IBSS to join [ 563.198484][T15508] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3026'. [ 563.421812][T15521] veth0_vlan: entered allmulticast mode [ 563.456728][T15525] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3032'. [ 563.475627][T15524] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3031'. [ 564.318169][T15540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3036'. [ 564.441041][ T2124] wlan1: Creating new IBSS network, BSSID 3a:cb:3e:5e:93:a4 [ 564.543167][T15546] rdma_rxe: rxe_newlink: failed to add vcan0 [ 564.555902][T15546] rdma_rxe: rxe_newlink: failed to add vcan0 [ 564.720086][T15549] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3039'. [ 564.792228][T15549] netlink: 'syz.3.3039': attribute type 10 has an invalid length. [ 564.800415][T15549] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3039'. [ 565.834253][T15532] veth0_vlan: left promiscuous mode [ 565.841589][T15532] veth0_vlan: entered promiscuous mode [ 566.044633][T15559] nbd: must specify a device to reconfigure [ 567.791482][T15581] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3048'. [ 567.895697][ T30] audit: type=1107 audit(1762294143.901:13): pid=15582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=')0i' [ 568.318290][T15562] wlan1 speed is unknown, defaulting to 1000 [ 568.326769][T15562] vcan0 speed is unknown, defaulting to 1000 [ 569.659526][T15606] netlink: 'syz.4.3055': attribute type 10 has an invalid length. [ 569.670373][T15606] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3055'. [ 571.467661][T15606] dummy0: entered promiscuous mode [ 571.473133][T15606] dummy0: entered allmulticast mode [ 571.479227][T15606] bridge0: port 3(dummy0) entered blocking state [ 571.485695][T15606] bridge0: port 3(dummy0) entered disabled state [ 571.493897][T15606] bridge0: port 3(dummy0) entered blocking state [ 571.500409][T15606] bridge0: port 3(dummy0) entered forwarding state [ 571.545677][T15618] netlink: 'syz.3.3058': attribute type 3 has an invalid length. [ 571.568221][T15617] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3058'. [ 571.596960][T15621] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3059'. [ 571.661927][T15624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3061'. [ 572.585761][T15641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3066'. [ 573.955551][T15652] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3070'. [ 576.611544][T15674] netlink: 'syz.1.3076': attribute type 3 has an invalid length. [ 576.643267][T15674] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 576.884038][T15675] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3076'. [ 578.510964][T15684] netlink: 'syz.4.3079': attribute type 11 has an invalid length. [ 578.548788][T15684] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.3079'. [ 581.724316][T15698] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3083'. [ 581.860521][T15698] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3083'. [ 584.346680][ T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.377443][ T74] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.400354][ T74] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 584.419345][ T74] bond0 (unregistering): (slave team0): Releasing backup interface [ 584.437392][ T74] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 584.483775][ T74] bond0 (unregistering): Released all slaves [ 584.631256][T15712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3085'. [ 584.655139][T15712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3085'. [ 584.746819][T14678] wlan1 speed is unknown, defaulting to 1000 [ 584.753936][ T43] wlan1 speed is unknown, defaulting to 1000 [ 584.760344][T15646] wlan1 speed is unknown, defaulting to 1000 [ 584.788778][T15646] vcan0 speed is unknown, defaulting to 1000 [ 594.629725][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 597.302537][T15750] delete_channel: no stack [ 597.536931][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 597.555806][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 597.566609][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 597.582603][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 597.594406][T15764] netlink: 'syz.1.3096': attribute type 20 has an invalid length. [ 597.606069][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 598.202040][T15774] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3099'. [ 599.639462][T15760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3096'. [ 599.648727][T15760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3096'. [ 599.699336][ T5845] Bluetooth: hci5: command tx timeout [ 599.974839][T15777] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3100'. [ 600.381542][T15789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 600.637788][T15761] wlan1 speed is unknown, defaulting to 1000 [ 600.646735][T15761] vcan0 speed is unknown, defaulting to 1000 [ 601.373237][T15761] chnl_net:caif_netlink_parms(): no params data found [ 601.488176][T15807] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3109'. [ 601.779548][ T5845] Bluetooth: hci5: command tx timeout [ 603.594468][T15761] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.631523][T15848] netlink: 'syz.1.3118': attribute type 10 has an invalid length. [ 603.635917][T15761] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.652380][T15848] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3118'. [ 603.666796][T15761] bridge_slave_0: entered allmulticast mode [ 603.683012][T15761] bridge_slave_0: entered promiscuous mode [ 603.717697][T15850] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3119'. [ 603.858574][ T5845] Bluetooth: hci5: command tx timeout [ 604.301509][T15761] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.322231][T15761] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.329625][T15761] bridge_slave_1: entered allmulticast mode [ 604.356382][T15761] bridge_slave_1: entered promiscuous mode [ 604.487256][ T74] hsr_slave_0: left promiscuous mode [ 604.574102][ T74] hsr_slave_1: left promiscuous mode [ 604.635710][ T74] veth1_vlan: left promiscuous mode [ 605.675326][ T12] smc: removing ib device syz2 [ 606.008240][ T5845] Bluetooth: hci5: command tx timeout [ 606.590547][ T74] team0 (unregistering): Port device team_slave_1 removed [ 606.656855][ T74] team0 (unregistering): Port device team_slave_0 removed [ 606.948393][ T74] team0 (unregistering): Port device dummy0 removed [ 607.094305][T15860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3122'. [ 607.116591][T15860] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3122'. [ 607.186399][T14678] ================================================================== [ 607.194597][T14678] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 607.203501][T14678] Read of size 8 at addr ffff88807c23a2e8 by task kworker/1:0/14678 [ 607.211515][T14678] [ 607.213869][T14678] CPU: 1 UID: 0 PID: 14678 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 607.213893][T14678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 607.213904][T14678] Workqueue: events smc_ib_port_event_work [ 607.213931][T14678] Call Trace: [ 607.213937][T14678] [ 607.213945][T14678] dump_stack_lvl+0x189/0x250 [ 607.213967][T14678] ? rcu_is_watching+0x15/0xb0 [ 607.213985][T14678] ? __kasan_check_byte+0x12/0x40 [ 607.214002][T14678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.214022][T14678] ? rcu_is_watching+0x15/0xb0 [ 607.214040][T14678] ? lock_release+0x4b/0x3e0 [ 607.214059][T14678] ? __virt_addr_valid+0x1c8/0x5c0 [ 607.214080][T14678] ? __virt_addr_valid+0x4a5/0x5c0 [ 607.214101][T14678] print_report+0xca/0x240 [ 607.214121][T14678] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 607.214138][T14678] kasan_report+0x118/0x150 [ 607.214154][T14678] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 607.214175][T14678] __ethtool_get_link_ksettings+0x6e/0x190 [ 607.214194][T14678] ib_get_eth_speed+0x15e/0x7b0 [ 607.214217][T14678] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 607.214242][T14678] ? do_raw_spin_unlock+0x122/0x240 [ 607.214268][T14678] rxe_query_port+0x93/0x3b0 [ 607.214287][T14678] ib_query_port+0x170/0x830 [ 607.214311][T14678] smc_ib_port_event_work+0x15a/0x940 [ 607.214334][T14678] ? _raw_spin_unlock_irq+0x23/0x50 [ 607.214354][T14678] ? process_scheduled_works+0x9ef/0x17b0 [ 607.214371][T14678] ? process_scheduled_works+0x9ef/0x17b0 [ 607.214389][T14678] process_scheduled_works+0xae1/0x17b0 [ 607.214418][T14678] ? __pfx_process_scheduled_works+0x10/0x10 [ 607.214442][T14678] worker_thread+0x8a0/0xda0 [ 607.214461][T14678] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 607.214484][T14678] ? __kthread_parkme+0x7b/0x200 [ 607.214505][T14678] kthread+0x711/0x8a0 [ 607.214571][T14678] ? __pfx_worker_thread+0x10/0x10 [ 607.214594][T14678] ? __pfx_kthread+0x10/0x10 [ 607.214615][T14678] ? _raw_spin_unlock_irq+0x23/0x50 [ 607.214633][T14678] ? lockdep_hardirqs_on+0x9c/0x150 [ 607.214651][T14678] ? __pfx_kthread+0x10/0x10 [ 607.214671][T14678] ret_from_fork+0x4bc/0x870 [ 607.214689][T14678] ? __pfx_ret_from_fork+0x10/0x10 [ 607.214709][T14678] ? __switch_to_asm+0x39/0x70 [ 607.214722][T14678] ? __switch_to_asm+0x33/0x70 [ 607.214735][T14678] ? __pfx_kthread+0x10/0x10 [ 607.214755][T14678] ret_from_fork_asm+0x1a/0x30 [ 607.214776][T14678] [ 607.214782][T14678] [ 607.449649][T14678] Allocated by task 5840: [ 607.453981][T14678] kasan_save_track+0x3e/0x80 [ 607.458653][T14678] __kasan_kmalloc+0x93/0xb0 [ 607.463233][T14678] __kvmalloc_node_noprof+0x5cd/0x910 [ 607.468596][T14678] alloc_netdev_mqs+0xa6/0x11b0 [ 607.473441][T14678] rtnl_create_link+0x31f/0xd10 [ 607.478285][T14678] rtnl_newlink_create+0x25c/0xb00 [ 607.483381][T14678] rtnl_newlink+0x16e4/0x1c80 [ 607.488050][T14678] rtnetlink_rcv_msg+0x7cf/0xb70 [ 607.493172][T14678] netlink_rcv_skb+0x208/0x470 [ 607.497946][T14678] netlink_unicast+0x82f/0x9e0 [ 607.502833][T14678] netlink_sendmsg+0x805/0xb30 [ 607.507963][T14678] __sock_sendmsg+0x21c/0x270 [ 607.512774][T14678] __sys_sendto+0x3bd/0x520 [ 607.517374][T14678] __x64_sys_sendto+0xde/0x100 [ 607.522218][T14678] do_syscall_64+0xfa/0xfa0 [ 607.526746][T14678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.532662][T14678] [ 607.534970][T14678] Freed by task 74: [ 607.538761][T14678] kasan_save_track+0x3e/0x80 [ 607.543512][T14678] __kasan_save_free_info+0x46/0x50 [ 607.548972][T14678] __kasan_slab_free+0x5c/0x80 [ 607.553725][T14678] kfree+0x19a/0x6d0 [ 607.557621][T14678] device_release+0x9c/0x1c0 [ 607.562202][T14678] kobject_put+0x22b/0x480 [ 607.566604][T14678] netdev_run_todo+0xd2e/0xea0 [ 607.571351][T14678] default_device_exit_batch+0x81e/0x890 [ 607.576974][T14678] ops_undo_list+0x525/0x990 [ 607.581743][T14678] cleanup_net+0x4d8/0x820 [ 607.586280][T14678] process_scheduled_works+0xae1/0x17b0 [ 607.591911][T14678] worker_thread+0x8a0/0xda0 [ 607.596505][T14678] kthread+0x711/0x8a0 [ 607.600589][T14678] ret_from_fork+0x4bc/0x870 [ 607.605399][T14678] ret_from_fork_asm+0x1a/0x30 [ 607.610346][T14678] [ 607.612674][T14678] The buggy address belongs to the object at ffff88807c23a000 [ 607.612674][T14678] which belongs to the cache kmalloc-cg-4k of size 4096 [ 607.627047][T14678] The buggy address is located 744 bytes inside of [ 607.627047][T14678] freed 4096-byte region [ffff88807c23a000, ffff88807c23b000) [ 607.641529][T14678] [ 607.643864][T14678] The buggy address belongs to the physical page: [ 607.650308][T14678] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c238 [ 607.659234][T14678] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 607.667896][T14678] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 607.675897][T14678] page_type: f5(slab) [ 607.680185][T14678] raw: 00fff00000000040 ffff88801a030500 dead000000000100 dead000000000122 [ 607.689481][T14678] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 607.698144][T14678] head: 00fff00000000040 ffff88801a030500 dead000000000100 dead000000000122 [ 607.706816][T14678] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 607.715507][T14678] head: 00fff00000000003 ffffea0001f08e01 00000000ffffffff 00000000ffffffff [ 607.724177][T14678] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 607.732833][T14678] page dumped because: kasan: bad access detected [ 607.739251][T14678] page_owner tracks the page as allocated [ 607.744977][T14678] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5824, tgid 5824 (syz-executor), ts 76841052789, free_ts 76784647880 [ 607.766411][T14678] post_alloc_hook+0x240/0x2a0 [ 607.771170][T14678] get_page_from_freelist+0x2365/0x2440 [ 607.776698][T14678] __alloc_frozen_pages_noprof+0x181/0x370 [ 607.782503][T14678] alloc_pages_mpol+0x232/0x4a0 [ 607.787396][T14678] allocate_slab+0x96/0x350 [ 607.791901][T14678] ___slab_alloc+0xe94/0x18a0 [ 607.796577][T14678] __slab_alloc+0x65/0x100 [ 607.800976][T14678] __kmalloc_cache_noprof+0x411/0x6f0 [ 607.806352][T14678] register_vlan_dev+0x380/0x800 [ 607.811385][T14678] vlan_newlink+0x4b2/0x610 [ 607.815900][T14678] rtnl_newlink_create+0x310/0xb00 [ 607.821189][T14678] rtnl_newlink+0x16e4/0x1c80 [ 607.825861][T14678] rtnetlink_rcv_msg+0x7cf/0xb70 [ 607.830794][T14678] netlink_rcv_skb+0x208/0x470 [ 607.835559][T14678] netlink_unicast+0x82f/0x9e0 [ 607.840321][T14678] netlink_sendmsg+0x805/0xb30 [ 607.845183][T14678] page last free pid 5825 tgid 5825 stack trace: [ 607.851539][T14678] __free_frozen_pages+0xbc4/0xd30 [ 607.856750][T14678] __put_partials+0x146/0x170 [ 607.861481][T14678] put_cpu_partial+0x1f2/0x2e0 [ 607.866370][T14678] __slab_free+0x2b9/0x390 [ 607.870860][T14678] qlist_free_all+0x97/0x140 [ 607.875444][T14678] kasan_quarantine_reduce+0x148/0x160 [ 607.880896][T14678] __kasan_slab_alloc+0x22/0x80 [ 607.885753][T14678] kmem_cache_alloc_node_noprof+0x433/0x710 [ 607.891637][T14678] __alloc_skb+0x112/0x2d0 [ 607.896043][T14678] netlink_ack+0x146/0xa50 [ 607.900706][T14678] netlink_rcv_skb+0x28c/0x470 [ 607.905593][T14678] netlink_unicast+0x82f/0x9e0 [ 607.910350][T14678] netlink_sendmsg+0x805/0xb30 [ 607.915114][T14678] __sock_sendmsg+0x21c/0x270 [ 607.919787][T14678] __sys_sendto+0x3bd/0x520 [ 607.924386][T14678] __x64_sys_sendto+0xde/0x100 [ 607.930085][T14678] [ 607.932490][T14678] Memory state around the buggy address: [ 607.938215][T14678] ffff88807c23a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 607.946281][T14678] ffff88807c23a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 607.954333][T14678] >ffff88807c23a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 607.962468][T14678] ^ [ 607.969929][T14678] ffff88807c23a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 607.977978][T14678] ffff88807c23a380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 607.986029][T14678] ================================================================== [ 608.000618][T14678] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 608.007843][T14678] CPU: 1 UID: 0 PID: 14678 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 608.017301][T14678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 608.027359][T14678] Workqueue: events smc_ib_port_event_work [ 608.033174][T14678] Call Trace: [ 608.036466][T14678] [ 608.039392][T14678] dump_stack_lvl+0x99/0x250 [ 608.043981][T14678] ? __asan_memcpy+0x40/0x70 [ 608.048556][T14678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 608.053741][T14678] ? __pfx__printk+0x10/0x10 [ 608.058329][T14678] vpanic+0x237/0x6d0 [ 608.062432][T14678] ? __pfx_vpanic+0x10/0x10 [ 608.066933][T14678] ? preempt_schedule+0xae/0xc0 [ 608.071776][T14678] ? __pfx_preempt_schedule+0x10/0x10 [ 608.077586][T14678] panic+0xb9/0xc0 [ 608.081393][T14678] ? __pfx_panic+0x10/0x10 [ 608.085811][T14678] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 608.091698][T14678] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 608.097732][T14678] check_panic_on_warn+0x89/0xb0 [ 608.103112][T14678] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 608.109093][T14678] end_report+0x78/0x160 [ 608.113410][T14678] kasan_report+0x129/0x150 [ 608.117907][T14678] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 608.123882][T14678] __ethtool_get_link_ksettings+0x6e/0x190 [ 608.129685][T14678] ib_get_eth_speed+0x15e/0x7b0 [ 608.134632][T14678] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 608.140000][T14678] ? do_raw_spin_unlock+0x122/0x240 [ 608.145191][T14678] rxe_query_port+0x93/0x3b0 [ 608.149768][T14678] ib_query_port+0x170/0x830 [ 608.154349][T14678] smc_ib_port_event_work+0x15a/0x940 [ 608.159715][T14678] ? _raw_spin_unlock_irq+0x23/0x50 [ 608.164898][T14678] ? process_scheduled_works+0x9ef/0x17b0 [ 608.170602][T14678] ? process_scheduled_works+0x9ef/0x17b0 [ 608.176306][T14678] process_scheduled_works+0xae1/0x17b0 [ 608.181845][T14678] ? __pfx_process_scheduled_works+0x10/0x10 [ 608.187821][T14678] worker_thread+0x8a0/0xda0 [ 608.192400][T14678] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 608.198717][T14678] ? __kthread_parkme+0x7b/0x200 [ 608.203769][T14678] kthread+0x711/0x8a0 [ 608.207941][T14678] ? __pfx_worker_thread+0x10/0x10 [ 608.213063][T14678] ? __pfx_kthread+0x10/0x10 [ 608.217644][T14678] ? _raw_spin_unlock_irq+0x23/0x50 [ 608.222834][T14678] ? lockdep_hardirqs_on+0x9c/0x150 [ 608.228024][T14678] ? __pfx_kthread+0x10/0x10 [ 608.232629][T14678] ret_from_fork+0x4bc/0x870 [ 608.237215][T14678] ? __pfx_ret_from_fork+0x10/0x10 [ 608.242401][T14678] ? __switch_to_asm+0x39/0x70 [ 608.247151][T14678] ? __switch_to_asm+0x33/0x70 [ 608.251894][T14678] ? __pfx_kthread+0x10/0x10 [ 608.256476][T14678] ret_from_fork_asm+0x1a/0x30 [ 608.261228][T14678] [ 608.264530][T14678] Kernel Offset: disabled [ 608.268874][T14678] Rebooting in 86400 seconds..