last executing test programs: 24m25.551718352s ago: executing program 4 (id=152): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) 24m25.056923075s ago: executing program 4 (id=155): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x6) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa100, 0x7, 0x8, 0x0, 0x2b66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640)) 24m24.758628355s ago: executing program 4 (id=159): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 24m24.159308191s ago: executing program 4 (id=163): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000100)=r0}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x181, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000001ac0)=""/4096, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe00000000a4080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24m23.704337882s ago: executing program 4 (id=166): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0xfffffffd, 0x1}, 0x0, 0x100000001, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x15, 0x5, 0x0) close(r2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x8800) 24m20.681320792s ago: executing program 4 (id=170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_clone(0x80000100, &(0x7f0000000880)="483806b4", 0x4, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 24m5.26570776s ago: executing program 32 (id=170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_clone(0x80000100, &(0x7f0000000880)="483806b4", 0x4, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 10.503850791s ago: executing program 2 (id=8036): perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x4, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x34004000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x18, 0x62, 0x8, 0x7, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x8, 0xffffffff, 0xfff, 0x2, r3, 0xf, '\x00', r5, 0xffffffffffffffff, 0x2, 0x1}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0xa4c1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r8 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0xb54b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x4, 0xfffff271, 0xffff, 0x0, 0x0, 0x0, 0x24}, 0x0, 0x5, 0xffffffffffffffff, 0x2) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open$cgroup(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x7, 0x6, 0x3, 0x0, 0xc00000000000, 0x5088, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x2}, 0x12410, 0x6, 0xfffffffa, 0x0, 0x9, 0x101, 0x4, 0x0, 0x4, 0x0, 0x9}, r7, 0xe, r8, 0xb) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000440)=[{0x0}], 0x1}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x10, @remote, 0x5}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="0de548b6a3ae0e", 0x7}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000d010000001000e00c"], 0x28}, 0x40) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0xffff8880b920a000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272}) 9.924133122s ago: executing program 0 (id=8038): socket$kcm(0x2, 0x922000000001, 0x106) r0 = syz_clone(0x2000080, &(0x7f0000000340)="0ba019686e66c6213215dd1dd9341b7dc3fc8f628e090d0c6cff01c3634f6f7377ed8c9522dddbccac92a30f5dd6e1aac7958bf56fa11c7cc518f9e33bb476aef49f68034b0b49d7bfe792dbd20fe6463355397b9f48c3", 0x57, &(0x7f0000001540), &(0x7f0000001580), &(0x7f00000015c0)="69ba20583ffb1c8a936936679b48638137f33d5eb8ff5d5eee0ccf4dd170785b457c878ab9f4815d396bcdd268f645a968121d2c675737861b2800baf82cb31234262ec984d046f7cc23") r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001140)={0x0, r1}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x5, 0x3, &(0x7f0000001380)=ANY=[@ANYBLOB="18000000000012000000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x4}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[], 0x50) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001240), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68736c00000000140001"], 0xfc}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000006c0)="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", 0x174}], 0x1}, 0x894) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYRESDEC, @ANYBLOB="ab46a9cb619e1e000000f51f000000000000", @ANYRES32=r5, @ANYBLOB="36ab0e5de1d1aa7c8183ae6577ceb892b18f5197927dd72a4a8f31c18cd0e734fe11cec3", @ANYRES64=r2], 0x20) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1940, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) socket$kcm(0xa, 0x5, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r9) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x541b, &(0x7f00000000c0)) 9.003916154s ago: executing program 1 (id=8042): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x20a22000, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000480)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x32, 0x0, 0x3, 0xfffffffb}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x29, 0x7, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000240)="41d290b11a8b01a140737b31d69ea9c542dced75f154b4787fd7402ac9fa069cb9297c90f559b34505c64e77020692c71f9d2d75a44c461d708caec2c77ab04cc5d8ae12770db6", 0x47}, {&(0x7f00000012c0)}, {&(0x7f0000001380)}, {&(0x7f0000001480)}, {&(0x7f0000001600)="1f998858c5689e35ac6a1eb676d5854f6bca73e96620685dff409cf13e06826417f18e166181ea2c8f5f5af0fba493de77784e98a08a665270684e7fe3dd786bc8ff45dcae7e44adbbb9744295756e1e0d651ab9f3b135ae04172e8a48508946e4ab1f31f4a483cd64ec05b259589a0f80de1538472aa7c655f634c682c32288d9063437cf30e609040b6d0dc15ee45404897e23cb30d70765c579aa3c1d5650481f29cbdbee8eb430894e28dc7d198641ccc389d2721c93ac8d68cb0b884c02201b5bd7fd578899e489522c82cb01c87fff69fad728dc53751a6c4fbf9980b476639bd00df3e0e3800d2e8366461948e57bb84576", 0xf5}, {&(0x7f00000000c0)}, {&(0x7f0000001500)}, {&(0x7f0000001700)="25f9906148ce5e101a0dbaec80a40da8dfdd403980103dfa191fb78b486a8b8d5f09b8eca3a15da2fd8aeda3a97ea796cd2226ec5a93d4c19cd2d37f77ceeef55812686c5e0c5ff1bb7f26322f19939b5c456f783e7aa78ae5b6551c83f1b04052de94a19781d697c51a993e7f48dbf435f9aef87631d7636b0464a36121906f15ff8b691d1b79c99bd25b0fed33267e4824a1a58e7e8263852700606451f3dc7650d227fe5d7b5ec3c3c2bff96278e7036bb83af316a005b5c8d39d9f61f45ff53a11fca433e4", 0xc7}, {&(0x7f0000001800)}], 0x9}, 0x20044080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0b000000ff000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000040)={r6, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x41}, 0x80, &(0x7f0000000140)}, 0x44850) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003d000b12d25a80648c2594f90124fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe0}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000200)={r4}) 7.484291097s ago: executing program 5 (id=8044): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000"], 0x50}, 0x19}, 0x40094) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0xfdf, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f0000000680), 0x2, r1}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 7.15237191s ago: executing program 5 (id=8045): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x20a22000, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000480)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x32, 0x0, 0x3, 0xfffffffb}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x29, 0x7, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000240)="41d290b11a8b01a140737b31d69ea9c542dced75f154b4787fd7402ac9fa069cb9297c90f559b34505c64e77020692c71f9d2d75a44c461d708caec2c77ab04cc5d8ae12770db6", 0x47}, {&(0x7f00000012c0)}, {&(0x7f0000001380)}, {&(0x7f0000001480)}, {&(0x7f0000001600)="1f998858c5689e35ac6a1eb676d5854f6bca73e96620685dff409cf13e06826417f18e166181ea2c8f5f5af0fba493de77784e98a08a665270684e7fe3dd786bc8ff45dcae7e44adbbb9744295756e1e0d651ab9f3b135ae04172e8a48508946e4ab1f31f4a483cd64ec05b259589a0f80de1538472aa7c655f634c682c32288d9063437cf30e609040b6d0dc15ee45404897e23cb30d70765c579aa3c1d5650481f29cbdbee8eb430894e28dc7d198641ccc389d2721c93ac8d68cb0b884c02201b5bd7fd578899e489522c82cb01c87fff69fad728dc53751a6c4fbf9980b476639bd00df3e0e3800d2e8366461948e57bb84576", 0xf5}, {&(0x7f00000000c0)}, {0x0}, {&(0x7f0000001700)="25f9906148ce5e101a0dbaec80a40da8dfdd403980103dfa191fb78b486a8b8d5f09b8eca3a15da2fd8aeda3a97ea796cd2226ec5a93d4c19cd2d37f77ceeef55812686c5e0c5ff1bb7f26322f19939b5c456f783e7aa78ae5b6551c83f1b04052de94a19781d697c51a993e7f48dbf435f9aef87631d7636b0464a36121906f15ff8b691d1b79c99bd25b0fed33267e4824a1a58e7e8263852700606451f3dc7650d227fe5d7b5ec3c3c2bff96278e7036bb83af316a005b5c8d39d9f61f45ff53a11fca433e4", 0xc7}, {&(0x7f0000001800)}], 0x9}, 0x20044080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0b000000ff000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000040)={r6, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x41}, 0x80, &(0x7f0000000140)}, 0x44850) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003d000b12d25a80648c2594f90124fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe0}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000200)={r4}) 3.236178044s ago: executing program 0 (id=8046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340), 0x4) 3.205418016s ago: executing program 1 (id=8047): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048824}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) 3.199803593s ago: executing program 5 (id=8048): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) 3.153039316s ago: executing program 3 (id=8049): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000002d00092f27bd70000000000006"], 0x1c}}, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) recvmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2) 3.05661963s ago: executing program 2 (id=8050): syz_open_procfs$namespace(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) recvmsg$kcm(r1, 0x0, 0x20) socket$kcm(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x64, 0x30, 0xb, 0x40, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0xffffffffffffffa8, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x7fff, 0x5, 0x2, 0x8}, 0x2}}]}, {0x4, 0x6, "1cb5b2c7bdb3681a02725ce27c17c7f53988696d5b4a9154be3466f1325001dc1099c8f93b944c5f30280687948ac34c8e2faad0a2cfa7a88c231a4139008300b2a1ef4445060359622a334c7add699b961dac3153ec043431bef9d92ee75e7943fcb3d3ddabe0674d8acfa9c71d13d4a45da1ea4a608e9f591cdf566ecbb7091d7e659340aedfee9349f614ab4ee758cde72c836cd7b9da614e27f5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.755629391s ago: executing program 2 (id=8051): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) 2.755334901s ago: executing program 3 (id=8052): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1, 0x7fffffff, 0x3, 0x80ea, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0xc}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0045878, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c080001"], 0x122}, 0x1, 0x0, 0x0, 0x40000}, 0x80d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x3}, {0x8, 0x6}, {0xc, 0xb}}}, 0x24}}, 0x20040004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 2.540391663s ago: executing program 3 (id=8053): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x1000, 0x0, 0x0, 0x2, 0x5, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) 2.122814278s ago: executing program 3 (id=8054): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) 1.881776978s ago: executing program 1 (id=8055): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffbffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 1.771745975s ago: executing program 2 (id=8056): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 1.654179662s ago: executing program 0 (id=8057): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xfc, 0x0, 0x40, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2000007fff, 0x0, 0x9, 0x0, 0x80002, 0x0, 0x0, 0x1000000, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xa7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1000000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1.653203551s ago: executing program 1 (id=8058): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x20a22000, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000480)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x32, 0x0, 0x3, 0xfffffffb}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x29, 0x7, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000240)="41d290b11a8b01a140737b31d69ea9c542dced75f154b4787fd7402ac9fa069cb9297c90f559b34505c64e77020692c71f9d2d75a44c461d708caec2c77ab04cc5d8ae12770db6", 0x47}, {&(0x7f00000012c0)}, {&(0x7f0000001380)}, {&(0x7f0000001480)}, {&(0x7f0000001600)="1f998858c5689e35ac6a1eb676d5854f6bca73e96620685dff409cf13e06826417f18e166181ea2c8f5f5af0fba493de77784e98a08a665270684e7fe3dd786bc8ff45dcae7e44adbbb9744295756e1e0d651ab9f3b135ae04172e8a48508946e4ab1f31f4a483cd64ec05b259589a0f80de1538472aa7c655f634c682c32288d9063437cf30e609040b6d0dc15ee45404897e23cb30d70765c579aa3c1d5650481f29cbdbee8eb430894e28dc7d198641ccc389d2721c93ac8d68cb0b884c02201b5bd7fd578899e489522c82cb01c87fff69fad728dc53751a6c4fbf9980b476639bd00df3e0e3800d2e8366461948e57bb84576", 0xf5}, {&(0x7f00000000c0)}, {&(0x7f0000001500)}, {&(0x7f0000001700)="25f9906148ce5e101a0dbaec80a40da8dfdd403980103dfa191fb78b486a8b8d5f09b8eca3a15da2fd8aeda3a97ea796cd2226ec5a93d4c19cd2d37f77ceeef55812686c5e0c5ff1bb7f26322f19939b5c456f783e7aa78ae5b6551c83f1b04052de94a19781d697c51a993e7f48dbf435f9aef87631d7636b0464a36121906f15ff8b691d1b79c99bd25b0fed33267e4824a1a58e7e8263852700606451f3dc7650d227fe5d7b5ec3c3c2bff96278e7036bb83af316a005b5c8d39d9f61f45ff53a11fca433e4", 0xc7}, {&(0x7f0000001800)}], 0x9}, 0x20044080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0b000000ff000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000040)={r6, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x41}, 0x80, &(0x7f0000000140)}, 0x44850) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003d000b12d25a80648c2594f90124fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe0}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000200)={r4}) 1.574908073s ago: executing program 5 (id=8059): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x20a22000, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000480)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x32, 0x0, 0x3, 0xfffffffb}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x29, 0x7, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000240)="41d290b11a8b01a140737b31d69ea9c542dced75f154b4787fd7402ac9fa069cb9297c90f559b34505c64e77020692c71f9d2d75a44c461d708caec2c77ab04cc5d8ae12770db6", 0x47}, {&(0x7f00000012c0)}, {&(0x7f0000001380)}, {&(0x7f0000001480)}, {&(0x7f0000001600)="1f998858c5689e35ac6a1eb676d5854f6bca73e96620685dff409cf13e06826417f18e166181ea2c8f5f5af0fba493de77784e98a08a665270684e7fe3dd786bc8ff45dcae7e44adbbb9744295756e1e0d651ab9f3b135ae04172e8a48508946e4ab1f31f4a483cd64ec05b259589a0f80de1538472aa7c655f634c682c32288d9063437cf30e609040b6d0dc15ee45404897e23cb30d70765c579aa3c1d5650481f29cbdbee8eb430894e28dc7d198641ccc389d2721c93ac8d68cb0b884c02201b5bd7fd578899e489522c82cb01c87fff69fad728dc53751a6c4fbf9980b476639bd00df3e0e3800d2e8366461948e57bb84576", 0xf5}, {&(0x7f00000000c0)}, {0x0}, {&(0x7f0000001700)="25f9906148ce5e101a0dbaec80a40da8dfdd403980103dfa191fb78b486a8b8d5f09b8eca3a15da2fd8aeda3a97ea796cd2226ec5a93d4c19cd2d37f77ceeef55812686c5e0c5ff1bb7f26322f19939b5c456f783e7aa78ae5b6551c83f1b04052de94a19781d697c51a993e7f48dbf435f9aef87631d7636b0464a36121906f15ff8b691d1b79c99bd25b0fed33267e4824a1a58e7e8263852700606451f3dc7650d227fe5d7b5ec3c3c2bff96278e7036bb83af316a005b5c8d39d9f61f45ff53a11fca433e4", 0xc7}, {&(0x7f0000001800)}], 0x9}, 0x20044080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0b000000ff000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000040)={r6, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x41}, 0x80, &(0x7f0000000140)}, 0x44850) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003d000b12d25a80648c2594f90124fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe0}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000200)={r4}) 1.472343624s ago: executing program 2 (id=8060): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x11, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000680)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x60}}, 0x0) r8 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x891b, &(0x7f0000000640)) 1.30699069s ago: executing program 0 (id=8061): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0xfbfffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) 1.19253268s ago: executing program 1 (id=8062): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b9040202080006007c09e8fe08a10a0015c00200142603600e120d000d0024000000a8000e00110001400347", 0x3a}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce"], 0xcfa4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.098171951s ago: executing program 3 (id=8063): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xcfa4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b2266"], 0xfdef) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0xd5, 0x0, 0x7, 0x43, 0x40, 0x0, 0x8000, 0x3018, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x104000, 0xe, 0x0, 0x0, 0x4000000000, 0x80001000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {0x0, 0xfe}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4d31, 0xc0051, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x0, 0x1, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x180, 0xc8, 0x400000, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000180000001811009c62043d72e73baa9588d96d2b7dbcb92cf6f782e3414ee1e0987fd8092667f0a29373bfce65329f9527630d7b0d97", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], 0x0, 0x8001, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x12, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x2100000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000002100)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000038000b63d25a8064c15494f90324fc60", 0x14}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000000206010200000000000000000700ffff0500010006000000050005000a00000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000a9ce8ae9ea0753398ed21129cfa7f140ba3b04b1b511c2b7c2139c0406c9d438bb1259bbb1160b2243aa536c92d1fceb24a5ad65e8d0ba5e07b470dbd0bc2cfbdea9372fc0b6e08f18c678f0c5ce277f44"], 0x4c}, 0x1, 0x0, 0x0, 0x4044081}, 0x4008000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) 1.080241729s ago: executing program 0 (id=8064): close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.079045953s ago: executing program 5 (id=8065): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 581.894021ms ago: executing program 5 (id=8066): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0xfe, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xe93, 0x100000001}, 0x20, 0x4, 0x1, 0x2, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8902, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)='J', 0x1}], 0x1}, 0x1001) 112.101208ms ago: executing program 2 (id=8067): socket$kcm(0x2, 0x922000000001, 0x106) r0 = syz_clone(0x2000080, &(0x7f0000000340)="0ba019686e66c6213215dd1dd9341b7dc3fc8f628e090d0c6cff01c3634f6f7377ed8c9522dddbccac92a30f5dd6e1aac7958bf56fa11c7cc518f9e33bb476aef49f68034b0b49d7bfe792dbd20fe6463355397b9f48c3", 0x57, &(0x7f0000001540), &(0x7f0000001580), &(0x7f00000015c0)="69ba20583ffb1c8a936936679b48638137f33d5eb8ff5d5eee0ccf4dd170785b457c878ab9f4815d396bcdd268f645a968121d2c675737861b2800baf82cb31234262ec984d046f7cc23") r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001140)={0x0, r1}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x5, 0x3, &(0x7f0000001380)=ANY=[@ANYBLOB="18000000000012000000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x4}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[], 0x50) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001240), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68736c00000000140001"], 0xfc}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000006c0)="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", 0x174}], 0x1}, 0x894) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYRESDEC, @ANYBLOB="ab46a9cb619e1e000000f51f000000000000", @ANYRES32=r5, @ANYBLOB="36ab0e5de1d1aa7c8183ae6577ceb892b18f5197927dd72a4a8f31c18cd0e734fe11cec3", @ANYRES64=r2], 0x20) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) socket$kcm(0xa, 0x5, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r9) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x541b, &(0x7f00000000c0)) 83.511992ms ago: executing program 3 (id=8068): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000002000000fe8000000000000000000000030000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000010000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 72.091259ms ago: executing program 0 (id=8069): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x1000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) 0s ago: executing program 1 (id=8070): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800"/12], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xb3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): es in process `syz.1.5459'. [ 1086.415287][T22787] netlink: 'syz.2.5462': attribute type 10 has an invalid length. [ 1087.538464][T22792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5464'. [ 1087.549571][T22792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5464'. [ 1090.905860][T22818] batman_adv: batadv0: Interface deactivated: vlan1 [ 1091.182032][T22840] syzkaller0: entered promiscuous mode [ 1091.188185][T22840] syzkaller0: entered allmulticast mode [ 1091.888541][T22864] netlink: 'syz.3.5487': attribute type 7 has an invalid length. [ 1091.897920][T22864] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5487'. [ 1091.926914][T22865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1092.014081][T22856] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5484'. [ 1092.028227][T22864] mac80211_hwsim hwsim3 .3c: renamed from wlan1 [ 1092.082996][T22868] netlink: 'syz.0.5488': attribute type 10 has an invalid length. [ 1092.183838][T22868] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 1092.896261][T22892] sock: sock_timestamping_bind_phc: sock not bind to device [ 1094.553652][T22921] tmpfs: Bad value for 'gid' [ 1094.585502][T22921] tmpfs: Bad value for 'gid' [ 1094.999772][T22940] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5506'. [ 1095.172699][T22946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5507'. [ 1095.473945][T22942] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1097.282944][T22979] netlink: 'syz.3.5514': attribute type 10 has an invalid length. [ 1097.300117][T22979] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5514'. [ 1097.741273][T22985] netlink: 'syz.0.5516': attribute type 10 has an invalid length. [ 1097.770564][T22985] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5516'. [ 1097.798987][T22985] bridge0: port 3(ipvlan1) entered blocking state [ 1097.823449][T22985] bridge0: port 3(ipvlan1) entered disabled state [ 1097.860852][T22985] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1098.318301][T22989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1098.442993][T23000] netlink: 'syz.5.5520': attribute type 4 has an invalid length. [ 1098.523124][T23000] netlink: 209028 bytes leftover after parsing attributes in process `syz.5.5520'. [ 1098.783545][T23004] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1099.217469][T23015] bridge0: port 1(ip6gretap0) entered blocking state [ 1099.246333][T23015] bridge0: port 1(ip6gretap0) entered disabled state [ 1099.275593][T23015] ip6gretap0: entered allmulticast mode [ 1099.283188][T23015] ip6gretap0: entered promiscuous mode [ 1099.306851][T23015] bridge0: port 1(ip6gretap0) entered blocking state [ 1099.313834][T23015] bridge0: port 1(ip6gretap0) entered forwarding state [ 1099.532977][T23024] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5527'. [ 1101.010450][T23067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5542'. [ 1101.166632][T23065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5542'. [ 1102.249802][T23089] netlink: 'syz.2.5549': attribute type 13 has an invalid length. [ 1103.450113][T23119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5560'. [ 1103.628062][T23119] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1104.005419][T23125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5561'. [ 1104.820537][T23137] lo speed is unknown, defaulting to 1000 [ 1104.847293][T23137] lo speed is unknown, defaulting to 1000 [ 1104.897005][T23137] lo speed is unknown, defaulting to 1000 [ 1105.232388][T23137] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1105.441141][T23137] lo speed is unknown, defaulting to 1000 [ 1105.462227][T23137] lo speed is unknown, defaulting to 1000 [ 1105.483070][T23137] lo speed is unknown, defaulting to 1000 [ 1105.503884][T23137] lo speed is unknown, defaulting to 1000 [ 1105.532101][T23137] lo speed is unknown, defaulting to 1000 [ 1109.258044][T23178] netlink: 'syz.0.5575': attribute type 2 has an invalid length. [ 1109.310278][T23178] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5575'. [ 1109.387253][T23180] netlink: 'syz.1.5578': attribute type 4 has an invalid length. [ 1109.391195][T23178] nbd: must specify an index to disconnect [ 1109.411597][T23180] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5578'. [ 1109.477419][T23180] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1110.736890][T23214] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5589'. [ 1110.774606][T23216] netlink: 'syz.2.5588': attribute type 10 has an invalid length. [ 1111.850400][T23214] bond0 (unregistering): left promiscuous mode [ 1111.871056][T23214] !: left promiscuous mode [ 1111.881478][T23214] bond_slave_1: left promiscuous mode [ 1111.892117][T23214] dummy0: left promiscuous mode [ 1111.897731][T23214] bridge0: left promiscuous mode [ 1111.903186][T23214] batadv0: left promiscuous mode [ 1111.908516][T23214] bond0 (unregistering): left allmulticast mode [ 1111.923512][T23214] !: left allmulticast mode [ 1111.936035][T23214] bond_slave_1: left allmulticast mode [ 1111.941713][T23214] dummy0: left allmulticast mode [ 1111.953330][T23214] bridge0: left allmulticast mode [ 1111.958658][T23214] batadv0: left allmulticast mode [ 1111.970047][T23214] team0: Port device bond0 removed [ 1111.979107][T23214] bond0 (unregistering): (slave 1!): Releasing backup interface [ 1112.004115][T23214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.051581][T23214] bond0 (unregistering): (slave .3c): Releasing backup interface [ 1112.089787][T23214] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1112.123198][T23214] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1112.132517][T23214] bridge0: port 3(ip6gretap0) entered disabled state [ 1112.139621][T23214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.146971][T23214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.232456][T23214] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1112.272481][T23214] bond0 (unregistering): Released all slaves [ 1112.559905][T23242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5598'. [ 1113.735914][T23261] netdevsim netdevsim5 : renamed from netdevsim0 [ 1113.869270][T23275] netlink: 'syz.0.5607': attribute type 39 has an invalid length. [ 1113.878522][T23277] netlink: 'syz.2.5606': attribute type 10 has an invalid length. [ 1113.886464][T23277] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5606'. [ 1115.190557][T23309] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5617'. [ 1115.505214][T23309] netlink: 'syz.3.5617': attribute type 10 has an invalid length. [ 1115.519162][T23316] netlink: 'syz.5.5619': attribute type 10 has an invalid length. [ 1115.535587][T23316] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5619'. [ 1115.789979][T23309] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1116.071528][T23332] netlink: 'syz.5.5622': attribute type 10 has an invalid length. [ 1116.084257][T23332] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5622'. [ 1116.202787][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.209819][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.660373][T23338] netlink: 'syz.5.5627': attribute type 25 has an invalid length. [ 1116.856865][T23338] netlink: 'syz.5.5627': attribute type 39 has an invalid length. [ 1117.793897][T23361] netlink: 'syz.2.5633': attribute type 10 has an invalid length. [ 1117.810752][T23361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5633'. [ 1118.258468][T23368] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5636'. [ 1118.582980][T23375] netlink: 'syz.5.5638': attribute type 10 has an invalid length. [ 1118.595945][T23375] mac80211_hwsim hwsim16 .3c: left promiscuous mode [ 1118.603178][T23375] mac80211_hwsim hwsim16 .3c: left allmulticast mode [ 1119.144072][T23381] netlink: 4800 bytes leftover after parsing attributes in process `syz.3.5642'. [ 1119.213894][T23381] netlink: 4800 bytes leftover after parsing attributes in process `syz.3.5642'. [ 1119.924768][T23399] netlink: 'syz.3.5646': attribute type 10 has an invalid length. [ 1119.932752][T23399] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5646'. [ 1120.074458][T23400] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1120.080872][T23400] syzkaller1: linktype set to 823 [ 1120.142806][T23405] netlink: 'syz.0.5647': attribute type 10 has an invalid length. [ 1120.162082][T23405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5647'. [ 1120.182526][T23405] bridge0: port 3(ipvlan1) entered blocking state [ 1120.194000][T23405] bridge0: port 3(ipvlan1) entered disabled state [ 1120.205347][T23405] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1120.553844][T23412] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5649'. [ 1120.728754][T23416] netlink: 'syz.0.5650': attribute type 29 has an invalid length. [ 1121.564803][T23432] netlink: 'syz.2.5655': attribute type 1 has an invalid length. [ 1121.580326][T23432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5655'. [ 1122.617535][T23457] netlink: 'syz.1.5660': attribute type 10 has an invalid length. [ 1122.625552][T23457] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5660'. [ 1124.125736][T23474] : entered promiscuous mode [ 1124.915074][T23497] netlink: 'syz.5.5673': attribute type 10 has an invalid length. [ 1124.923413][T23497] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5673'. [ 1125.439541][T23505] netlink: 'syz.5.5676': attribute type 21 has an invalid length. [ 1125.448866][T23505] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5676'. [ 1125.535691][T23508] netlink: 'syz.2.5677': attribute type 29 has an invalid length. [ 1125.547943][T23508] netlink: 'syz.2.5677': attribute type 29 has an invalid length. [ 1125.571483][T23508] netlink: 'syz.2.5677': attribute type 29 has an invalid length. [ 1125.615367][T23508] netlink: 'syz.2.5677': attribute type 29 has an invalid length. [ 1126.396650][T23519] netlink: 'syz.2.5681': attribute type 10 has an invalid length. [ 1126.454422][T23519] bond0: (slave 1!): Releasing backup interface [ 1126.472995][T23519] !: left promiscuous mode [ 1126.493878][T23519] !: left allmulticast mode [ 1130.208566][T23528] netlink: 'syz.2.5684': attribute type 1 has an invalid length. [ 1130.374854][T23543] netlink: 'syz.1.5688': attribute type 10 has an invalid length. [ 1132.156755][T23573] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5699'. [ 1132.803832][T23586] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.5703'. [ 1134.302241][T23620] netlink: 'syz.0.5712': attribute type 10 has an invalid length. [ 1134.358666][T23620] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5712'. [ 1134.383069][T23620] bridge0: port 3(ipvlan1) entered blocking state [ 1134.392758][T23620] bridge0: port 3(ipvlan1) entered disabled state [ 1134.408978][T23620] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1135.364033][T23644] netlink: 'syz.2.5722': attribute type 8 has an invalid length. [ 1135.373685][T23644] netlink: 'syz.2.5722': attribute type 3 has an invalid length. [ 1135.398756][T23644] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.5722'. [ 1135.451303][T23644] netlink: 'syz.2.5722': attribute type 13 has an invalid length. [ 1135.476813][T23644] netlink: 'syz.2.5722': attribute type 17 has an invalid length. [ 1135.835503][T23644] sit0: left allmulticast mode [ 1136.074663][T23663] netlink: 'syz.0.5727': attribute type 10 has an invalid length. [ 1136.174594][T23663] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5727'. [ 1136.213775][T23644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1136.248820][T23644] team0: left promiscuous mode [ 1136.263790][T23644] C: left promiscuous mode [ 1136.285786][T23644] team_slave_1: left promiscuous mode [ 1136.292683][T23644] bond0: left promiscuous mode [ 1136.315932][T23644] bond_slave_1: left promiscuous mode [ 1136.339433][T23644] batadv0: left promiscuous mode [ 1136.353169][T23644] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1136.365719][T23644] team0: left allmulticast mode [ 1136.371298][T23644] C: left allmulticast mode [ 1136.382340][T23644] team_slave_1: left allmulticast mode [ 1136.389865][T23644] bond0: left allmulticast mode [ 1136.399454][T23644] bond_slave_1: left allmulticast mode [ 1136.408973][T23644] geneve0: left allmulticast mode [ 1136.416617][T23644] batadv0: left allmulticast mode [ 1136.421961][T23644] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1136.440578][T23644] 8021q: adding VLAN 0 to HW filter on device team0 [ 1136.457009][T23644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1136.478809][T19826] lo speed is unknown, defaulting to 1000 [ 1136.504154][T19826] syz2: Port: 1 Link ACTIVE [ 1136.509308][T23663] bridge0: port 3(ipvlan1) entered blocking state [ 1136.517693][T23663] bridge0: port 3(ipvlan1) entered disabled state [ 1136.528548][T23663] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1137.318555][T23687] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.5735'. [ 1137.392873][T23687] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1137.463624][T23687] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1138.245927][T23707] warn_alloc: 1 callbacks suppressed [ 1138.245976][T23707] syz.2.5741: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1138.337243][T23707] CPU: 1 UID: 0 PID: 23707 Comm: syz.2.5741 Not tainted syzkaller #0 PREEMPT(full) [ 1138.337279][T23707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1138.337294][T23707] Call Trace: [ 1138.337303][T23707] [ 1138.337314][T23707] dump_stack_lvl+0x189/0x250 [ 1138.337361][T23707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1138.337390][T23707] ? __pfx__printk+0x10/0x10 [ 1138.337423][T23707] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1138.337450][T23707] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1138.337479][T23707] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1138.337509][T23707] warn_alloc+0x214/0x310 [ 1138.337545][T23707] ? stack_depot_save_flags+0x40/0x860 [ 1138.337578][T23707] ? __pfx_warn_alloc+0x10/0x10 [ 1138.337615][T23707] ? kasan_save_track+0x4f/0x80 [ 1138.337644][T23707] ? xskq_create+0x56/0x170 [ 1138.337671][T23707] ? xsk_init_queue+0xb0/0x110 [ 1138.337694][T23707] ? xsk_setsockopt+0x57b/0x8d0 [ 1138.337716][T23707] ? do_sock_setsockopt+0x17c/0x1b0 [ 1138.337747][T23707] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 1138.337778][T23707] ? do_syscall_64+0xfa/0x3b0 [ 1138.337807][T23707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.337839][T23707] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1138.337910][T23707] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1138.337951][T23707] ? __kasan_kmalloc+0x93/0xb0 [ 1138.337985][T23707] vmalloc_user_noprof+0xad/0xf0 [ 1138.338018][T23707] ? xskq_create+0xbf/0x170 [ 1138.338048][T23707] xskq_create+0xbf/0x170 [ 1138.338080][T23707] xsk_init_queue+0xb0/0x110 [ 1138.338113][T23707] xsk_setsockopt+0x57b/0x8d0 [ 1138.338144][T23707] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1138.338172][T23707] ? __pfx_aa_sk_perm+0x10/0x10 [ 1138.338201][T23707] ? irqentry_exit+0x74/0x90 [ 1138.338230][T23707] ? lockdep_hardirqs_on+0x9c/0x150 [ 1138.338260][T23707] ? aa_sock_opt_perm+0xff/0x1b0 [ 1138.338299][T23707] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1138.338323][T23707] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1138.338366][T23707] do_sock_setsockopt+0x17c/0x1b0 [ 1138.338408][T23707] __x64_sys_setsockopt+0x13f/0x1b0 [ 1138.338460][T23707] do_syscall_64+0xfa/0x3b0 [ 1138.338495][T23707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.338517][T23707] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1138.338539][T23707] ? clear_bhb_loop+0x60/0xb0 [ 1138.338567][T23707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.338590][T23707] RIP: 0033:0x7f565398ebe9 [ 1138.338612][T23707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1138.338632][T23707] RSP: 002b:00007f5654864038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1138.338657][T23707] RAX: ffffffffffffffda RBX: 00007f5653bc6090 RCX: 00007f565398ebe9 [ 1138.338673][T23707] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000d [ 1138.338687][T23707] RBP: 00007f5653a11e19 R08: 0000000000000004 R09: 0000000000000000 [ 1138.338702][T23707] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1138.338716][T23707] R13: 00007f5653bc6128 R14: 00007f5653bc6090 R15: 00007ffd14e06af8 [ 1138.338754][T23707] [ 1138.342458][T23707] Mem-Info: [ 1138.752376][T23707] active_anon:7037 inactive_anon:0 isolated_anon:0 [ 1138.752376][T23707] active_file:21700 inactive_file:40262 isolated_file:0 [ 1138.752376][T23707] unevictable:768 dirty:344 writeback:0 [ 1138.752376][T23707] slab_reclaimable:7127 slab_unreclaimable:152221 [ 1138.752376][T23707] mapped:29110 shmem:1370 pagetables:966 [ 1138.752376][T23707] sec_pagetables:0 bounce:0 [ 1138.752376][T23707] kernel_misc_reclaimable:0 [ 1138.752376][T23707] free:1251474 free_pcp:16280 free_cma:0 [ 1138.811747][T23715] netlink: 'syz.5.5744': attribute type 10 has an invalid length. [ 1138.822682][T23715] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5744'. [ 1138.833823][T23707] Node 0 active_anon:28148kB inactive_anon:0kB active_file:86800kB inactive_file:160848kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116440kB dirty:1376kB writeback:0kB shmem:3944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11112kB pagetables:3828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1138.870417][T23707] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1138.920246][T23707] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1138.957250][T23707] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 1138.961201][T23714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1138.963747][T23707] Node 0 DMA32 free:1104848kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28300kB inactive_anon:0kB active_file:86800kB inactive_file:159260kB unevictable:1536kB writepending:1376kB present:3129332kB managed:2557488kB mlocked:0kB bounce:0kB free_pcp:41448kB local_pcp:19228kB free_cma:0kB [ 1139.029659][T23707] lowmem_reserve[]: 0 0 1 1 1 [ 1139.035520][T23707] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1588kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1139.052253][T19813] lo speed is unknown, defaulting to 1000 [ 1139.070608][T23707] lowmem_reserve[]: [ 1139.075980][T23717] netlink: 'syz.1.5743': attribute type 10 has an invalid length. [ 1139.077890][T23707] 0 [ 1139.079994][T23717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5743'. [ 1139.089653][T23707] 0 0 0 0 [ 1139.108917][T19813] syz1: Port: 1 Link DOWN [ 1139.109687][T23707] Node 1 Normal free:3885488kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23968kB local_pcp:14240kB free_cma:0kB [ 1139.148540][T23707] lowmem_reserve[]: 0 0 0 0 0 [ 1139.154614][T23707] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1139.175566][T23707] Node 0 DMA32: 2558*4kB (UM) 1961*8kB (UME) 1773*16kB (UME) 1099*32kB (UME) 771*64kB (UME) 349*128kB (UME) 143*256kB (UME) 34*512kB (UME) 46*1024kB (UM) 23*2048kB (UME) 189*4096kB (UM) = 1105840kB [ 1139.213335][T23707] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1139.238235][T23707] Node 1 Normal: 192*4kB (UE) 40*8kB (UME) 49*16kB (UME) 93*32kB (UME) 29*64kB (UME) 5*128kB (UME) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3885488kB [ 1139.279957][T23707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1139.293588][T23707] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1139.303095][T23707] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1139.318643][T23707] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1139.329292][T23707] 63329 total pagecache pages [ 1139.334382][T23707] 0 pages in swap cache [ 1139.338830][T23707] Free swap = 124996kB [ 1139.344290][T23707] Total swap = 124996kB [ 1139.348731][T23707] 2097051 pages RAM [ 1139.352853][T23707] 0 pages HighMem/MovableOnly [ 1139.358057][T23707] 425653 pages reserved [ 1139.370326][T23707] 0 pages cma reserved [ 1139.782656][T23733] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5749'. [ 1140.201591][T23748] netlink: 'syz.0.5752': attribute type 10 has an invalid length. [ 1140.278834][T23748] bond0: (slave c@): Releasing backup interface [ 1140.296857][T23748] @: left promiscuous mode [ 1140.301370][T23747] netlink: 'syz.2.5753': attribute type 1 has an invalid length. [ 1140.317002][T23748] @: left allmulticast mode [ 1140.336786][T23747] netlink: 'syz.2.5753': attribute type 3 has an invalid length. [ 1140.353106][T23747] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5753'. [ 1140.461440][T23755] netlink: 'syz.3.5755': attribute type 2 has an invalid length. [ 1140.501835][T23757] netlink: 'syz.1.5756': attribute type 2 has an invalid length. [ 1140.513681][T23757] netlink: 'syz.1.5756': attribute type 5 has an invalid length. [ 1140.522426][T23757] netlink: 'syz.1.5756': attribute type 6 has an invalid length. [ 1140.532049][T23757] netlink: 'syz.1.5756': attribute type 7 has an invalid length. [ 1140.541110][T23757] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5756'. [ 1140.553428][T23757] netlink: 130080 bytes leftover after parsing attributes in process `syz.1.5756'. [ 1140.564090][T23757] netlink: 'syz.1.5756': attribute type 2 has an invalid length. [ 1140.590217][T23757] netlink: 'syz.1.5756': attribute type 5 has an invalid length. [ 1140.611898][T23757] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5756'. [ 1141.528416][T23771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5758'. [ 1141.599499][T23771] bridge0: port 3(ipvlan1) entered blocking state [ 1141.673623][T23771] bridge0: port 3(ipvlan1) entered disabled state [ 1141.706872][T23771] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1141.818888][T23778] delete_channel: no stack [ 1141.831310][T23778] delete_channel: no stack [ 1141.962015][T23780] netdevsim netdevsim5 : left allmulticast mode [ 1141.976442][T23780] bridge0: port 5() entered disabled state [ 1142.114204][T23780] ip6gretap0: left allmulticast mode [ 1142.120492][T23780] ip6gretap0: left promiscuous mode [ 1142.140691][T23780] bridge0: port 3(ip6gretap0) entered disabled state [ 1142.230765][T23780] bridge_slave_1: left allmulticast mode [ 1142.238104][T23780] bridge_slave_1: left promiscuous mode [ 1142.245589][T23780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.301722][T23780] bridge_slave_0: left allmulticast mode [ 1142.308443][T23780] bridge_slave_0: left promiscuous mode [ 1142.339316][T23780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.628515][T23791] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5765'. [ 1143.005128][T23798] syzkaller0: entered promiscuous mode [ 1143.011202][T23798] syzkaller0: entered allmulticast mode [ 1143.319508][T23805] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5769'. [ 1143.341011][T23805] bridge0: port 3(ipvlan1) entered blocking state [ 1143.361589][T23805] bridge0: port 3(ipvlan1) entered disabled state [ 1143.371571][T23807] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5771'. [ 1143.407822][T23805] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1143.657732][T23819] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5773'. [ 1143.706205][T23822] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5775'. [ 1143.779779][T23813] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5774'. [ 1145.162656][T23828] lo speed is unknown, defaulting to 1000 [ 1145.190218][T23828] lo speed is unknown, defaulting to 1000 [ 1145.507498][T23845] validate_nla: 13 callbacks suppressed [ 1145.507550][T23845] netlink: 'syz.1.5783': attribute type 29 has an invalid length. [ 1145.540891][T23845] netlink: 'syz.1.5783': attribute type 10 has an invalid length. [ 1145.718529][T23856] netlink: 'syz.5.5785': attribute type 10 has an invalid length. [ 1145.761502][T23856] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5785'. [ 1145.889691][T23861] netlink: 'syz.0.5784': attribute type 39 has an invalid length. [ 1146.394547][T23870] netlink: 'syz.5.5788': attribute type 10 has an invalid length. [ 1146.435568][T23870] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5788'. [ 1148.591193][T23917] netlink: 'syz.1.5800': attribute type 10 has an invalid length. [ 1148.613927][T23911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5799'. [ 1148.628618][T23917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5800'. [ 1150.282737][T23947] netlink: 'syz.1.5811': attribute type 1 has an invalid length. [ 1150.596510][T23951] netlink: 'syz.2.5809': attribute type 10 has an invalid length. [ 1150.923129][T23957] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.5812'. [ 1150.946413][T23957] openvswitch: netlink: Message has 6 unknown bytes. [ 1150.989426][T23967] netlink: 'syz.5.5814': attribute type 10 has an invalid length. [ 1151.002744][T23967] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5814'. [ 1151.624708][T23975] sctp: [Deprecated]: syz.5.5827 (pid 23975) Use of int in maxseg socket option. [ 1151.624708][T23975] Use struct sctp_assoc_value instead [ 1151.779975][T23977] netlink: 'syz.0.5817': attribute type 10 has an invalid length. [ 1151.799858][T23977] batadv0: left allmulticast mode [ 1151.812777][T23977] batadv0: left promiscuous mode [ 1151.822779][T23977] bridge0: port 1(batadv0) entered disabled state [ 1152.048524][T23977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1152.110508][T23977] batadv0: entered promiscuous mode [ 1152.209471][T23977] batadv0: entered allmulticast mode [ 1152.266150][T23977] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1152.553119][T23991] netlink: 'syz.2.5820': attribute type 39 has an invalid length. [ 1152.709361][T23994] netlink: 'syz.3.5822': attribute type 21 has an invalid length. [ 1152.754126][T23994] netlink: 'syz.3.5822': attribute type 15 has an invalid length. [ 1152.782953][T23994] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5822'. [ 1152.801516][T23994] IPv6: NLM_F_CREATE should be specified when creating new route [ 1152.856348][T23994] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1152.864509][T23994] IPv6: NLM_F_CREATE should be set when creating new route [ 1152.872853][T23994] IPv6: NLM_F_CREATE should be set when creating new route [ 1152.881345][T23994] IPv6: NLM_F_CREATE should be set when creating new route [ 1153.370896][T24004] netlink: 'syz.1.5825': attribute type 29 has an invalid length. [ 1153.398697][T24004] netlink: 'syz.1.5825': attribute type 10 has an invalid length. [ 1153.624286][T24011] netlink: 'syz.5.5828': attribute type 10 has an invalid length. [ 1153.648029][T24011] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5828'. [ 1154.350552][T24029] netlink: 'syz.0.5831': attribute type 10 has an invalid length. [ 1154.361044][T24029] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5831'. [ 1154.420372][T24027] option changes via remount are deprecated (pid=24025 comm=syz.5.5833) [ 1154.459083][T24029] bridge0: port 1(ipvlan1) entered blocking state [ 1154.466603][T24029] bridge0: port 1(ipvlan1) entered disabled state [ 1154.481619][T24029] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1155.305403][T24041] syzkaller0: entered promiscuous mode [ 1155.319047][T24041] syzkaller0: entered allmulticast mode [ 1156.873794][T24069] validate_nla: 2 callbacks suppressed [ 1156.873816][T24069] netlink: 'syz.0.5843': attribute type 10 has an invalid length. [ 1156.901257][T24069] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5843'. [ 1158.775664][T24069] bridge0: port 1(ipvlan1) entered blocking state [ 1158.787664][T24069] bridge0: port 1(ipvlan1) entered disabled state [ 1158.799012][T24069] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1158.894841][T24060] lo speed is unknown, defaulting to 1000 [ 1158.929507][T24060] lo speed is unknown, defaulting to 1000 [ 1159.087409][T24080] netlink: 'syz.2.5846': attribute type 10 has an invalid length. [ 1159.108435][T24080] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5846'. [ 1159.183834][T24079] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1159.225056][T24071] lo speed is unknown, defaulting to 1000 [ 1159.304948][T24071] lo speed is unknown, defaulting to 1000 [ 1160.052951][T24094] netlink: 'syz.2.5852': attribute type 13 has an invalid length. [ 1160.192565][T24094] netlink: 'syz.2.5852': attribute type 17 has an invalid length. [ 1160.585095][T24094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1160.876834][T24108] netlink: 'syz.0.5856': attribute type 29 has an invalid length. [ 1160.918028][T24108] netlink: 'syz.0.5856': attribute type 10 has an invalid length. [ 1161.043280][T24107] netlink: 'syz.5.5858': attribute type 10 has an invalid length. [ 1161.176305][T24114] netlink: 'syz.3.5860': attribute type 10 has an invalid length. [ 1161.223660][T24114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5860'. [ 1161.249032][T24113] netlink: 'syz.2.5859': attribute type 10 has an invalid length. [ 1161.268348][T24113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5859'. [ 1162.350055][T24104] lo speed is unknown, defaulting to 1000 [ 1162.501743][T24104] lo speed is unknown, defaulting to 1000 [ 1162.920090][T24120] sit0: entered promiscuous mode [ 1163.843139][T24129] lo speed is unknown, defaulting to 1000 [ 1163.900762][T24129] lo speed is unknown, defaulting to 1000 [ 1164.551789][T24144] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.5870'. [ 1164.586855][T24147] netlink: 'syz.2.5869': attribute type 21 has an invalid length. [ 1164.643801][T24147] netlink: 'syz.2.5869': attribute type 6 has an invalid length. [ 1164.780546][T24147] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5869'. [ 1165.575048][T24164] netlink: 'syz.5.5873': attribute type 10 has an invalid length. [ 1165.658756][T24164] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5873'. [ 1167.335550][T24197] syzkaller0: entered promiscuous mode [ 1167.341377][T24197] syzkaller0: entered allmulticast mode [ 1167.479137][T24198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5881'. [ 1169.059666][T24217] netlink: 'syz.3.5885': attribute type 10 has an invalid length. [ 1169.091060][T24219] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5886'. [ 1169.155329][T24217] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5885'. [ 1171.428497][T24241] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5894'. [ 1171.456071][T24241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5894'. [ 1172.226207][T24250] netlink: 'syz.3.5898': attribute type 10 has an invalid length. [ 1172.242656][T24250] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5898'. [ 1172.537773][T24256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5899'. [ 1172.559385][T24256] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1172.757854][T24262] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5900'. [ 1173.020660][T24271] netlink: 'syz.2.5904': attribute type 29 has an invalid length. [ 1173.057660][T24271] netlink: 'syz.2.5904': attribute type 10 has an invalid length. [ 1173.068913][T24269] syzkaller0: entered promiscuous mode [ 1173.104833][T24269] syzkaller0: entered allmulticast mode [ 1173.628615][T24288] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.5908'. [ 1173.659450][T24288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5908'. [ 1173.964489][T24293] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5910'. [ 1176.517926][T24333] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5923'. [ 1176.589468][T24340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5923'. [ 1177.513657][T24344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5924'. [ 1177.550342][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.559491][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.854363][T24354] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5930'. [ 1178.048763][T24354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5930'. [ 1178.291387][T24363] netlink: 'syz.5.5931': attribute type 10 has an invalid length. [ 1178.351274][T24363] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5931'. [ 1178.695884][T24369] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5932'. [ 1178.781810][T24369] hsr_slave_0: left promiscuous mode [ 1178.833959][T24369] hsr_slave_1: left promiscuous mode [ 1179.683469][T24394] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5939'. [ 1179.719659][T24392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5938'. [ 1180.801256][T24408] sit0: entered allmulticast mode [ 1180.865516][T24408] sit0: entered promiscuous mode [ 1180.985714][T24416] netlink: 'syz.5.5945': attribute type 10 has an invalid length. [ 1181.006792][T24416] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5945'. [ 1181.262926][T24417] netlink: 'syz.3.5946': attribute type 13 has an invalid length. [ 1182.014922][T24427] netlink: 'syz.2.5951': attribute type 10 has an invalid length. [ 1182.033852][T24427] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5951'. [ 1182.458598][T24435] netlink: 22 bytes leftover after parsing attributes in process `syz.5.5954'. [ 1182.995557][T24450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5959'. [ 1185.113635][T24483] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5972'. [ 1185.181892][T24483] hsr_slave_0: left promiscuous mode [ 1185.199916][T24483] hsr_slave_1: left promiscuous mode [ 1186.389443][T24495] lo speed is unknown, defaulting to 1000 [ 1186.462642][T24495] lo speed is unknown, defaulting to 1000 [ 1188.562256][T24526] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5983'. [ 1188.669326][T24529] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5985'. [ 1190.100076][T24560] netlink: 'syz.2.5992': attribute type 10 has an invalid length. [ 1190.137426][T24560] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 1191.369838][T24565] netlink: 'syz.1.5994': attribute type 10 has an invalid length. [ 1191.422408][T24565] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5994'. [ 1191.540085][T24571] syzkaller0: entered promiscuous mode [ 1191.546198][T24571] syzkaller0: entered allmulticast mode [ 1192.595876][T24599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1193.775653][T24609] netlink: 'syz.2.6004': attribute type 1 has an invalid length. [ 1193.783933][T24609] netlink: 'syz.2.6004': attribute type 4 has an invalid length. [ 1193.791865][T24609] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6004'. [ 1194.179132][T24612] netlink: 'syz.1.6006': attribute type 10 has an invalid length. [ 1194.771446][T24614] netlink: 'syz.5.6007': attribute type 2 has an invalid length. [ 1196.678906][T24646] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6016'. [ 1197.228616][T24662] netlink: 'syz.3.6020': attribute type 29 has an invalid length. [ 1197.238599][T24662] netlink: 'syz.3.6020': attribute type 10 has an invalid length. [ 1198.208794][T24674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6025'. [ 1198.339480][T24668] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 1198.347137][T24668] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 1198.993494][ T30] audit: type=1107 audit(1756887978.934:2): pid=24683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=',' [ 1199.307610][T24687] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6034'. [ 1199.471527][T24689] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6028'. [ 1199.623324][T24687] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1200.203045][T24689] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6028'. [ 1202.846581][ T30] audit: type=1107 audit(1756887982.804:3): pid=24729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=',' [ 1202.953059][T24735] bridge0: port 1(ip6gretap0) entered disabled state [ 1202.961122][T24735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.977017][T24735] bridge0: entered allmulticast mode [ 1203.028504][T24740] bridge0: port 1(ip6gretap0) entered blocking state [ 1203.035509][T24740] bridge0: port 1(ip6gretap0) entered forwarding state [ 1203.042744][T24740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.050004][T24740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1203.097002][T24740] bridge0: entered promiscuous mode [ 1203.113969][T24743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1203.238800][T24746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6043'. [ 1206.008171][T24755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6047'. [ 1206.228862][T24758] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6048'. [ 1206.300998][T24767] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1206.460748][T24768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1206.468315][T24768] IPv6: NLM_F_CREATE should be set when creating new route [ 1206.475804][T24768] IPv6: NLM_F_CREATE should be set when creating new route [ 1206.483294][T24768] IPv6: NLM_F_CREATE should be set when creating new route [ 1207.490266][T24781] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6056'. [ 1207.526073][T24781] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6056'. [ 1207.674045][T24790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1207.681903][T24790] IPv6: NLM_F_CREATE should be set when creating new route [ 1207.689587][T24790] IPv6: NLM_F_CREATE should be set when creating new route [ 1207.831657][T24793] bridge0: port 1(dummy0) entered disabled state [ 1207.840411][T24793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.941501][T24795] bridge0: port 1(dummy0) entered blocking state [ 1207.948590][T24795] bridge0: port 1(dummy0) entered forwarding state [ 1207.955581][T24795] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.962822][T24795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1209.036928][T24815] netlink: 'syz.1.6066': attribute type 2 has an invalid length. [ 1209.350775][T24818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6067'. [ 1209.480313][T24820] sit0: left promiscuous mode [ 1209.532479][T24820] sit0: entered promiscuous mode [ 1209.549168][T24824] netlink: 'syz.0.6069': attribute type 1 has an invalid length. [ 1210.173008][T24836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6072'. [ 1210.225922][T24836] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1210.446110][T24843] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6075'. [ 1210.497873][T24848] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1211.516817][T24866] netlink: 'syz.3.6082': attribute type 39 has an invalid length. [ 1212.006909][T24875] netlink: 'syz.5.6085': attribute type 39 has an invalid length. [ 1213.233858][T24898] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6091'. [ 1213.841632][T24898] hsr_slave_1: left promiscuous mode [ 1214.142596][T24907] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6094'. [ 1214.211279][T24909] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.6095'. [ 1214.284968][T24904] openvswitch: netlink: IP tunnel dst address not specified [ 1214.445185][T24912] netlink: 'syz.3.6096': attribute type 1 has an invalid length. [ 1214.453968][T24912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6096'. [ 1215.785846][T24940] netlink: 'syz.1.6104': attribute type 13 has an invalid length. [ 1215.796660][T24940] netlink: 'syz.1.6104': attribute type 17 has an invalid length. [ 1215.811614][T24940] sit0: left promiscuous mode [ 1215.886823][T24940] 8021q: adding VLAN 0 to HW filter on device .` [ 1215.897504][T24940] team0: left promiscuous mode [ 1215.902536][T24940] team_slave_1: left promiscuous mode [ 1215.910003][T24940] .`: left promiscuous mode [ 1215.916690][T24940] bond_slave_0: left promiscuous mode [ 1215.922692][T24940] bond_slave_1: left promiscuous mode [ 1215.946264][T24940] batadv_slave_0: left promiscuous mode [ 1215.952391][T24940] bridge0: left promiscuous mode [ 1215.958359][T24940] netdevsim netdevsim1 : left promiscuous mode [ 1215.965917][T24940] team0: left allmulticast mode [ 1215.981693][T24940] team_slave_1: left allmulticast mode [ 1215.988100][T24940] .`: left allmulticast mode [ 1215.994218][T24940] bond_slave_0: left allmulticast mode [ 1216.024217][T24940] bond_slave_1: left allmulticast mode [ 1216.029770][T24940] batadv_slave_0: left allmulticast mode [ 1216.048862][T24940] bridge0: left allmulticast mode [ 1216.056215][T24940] netdevsim netdevsim1 : left allmulticast mode [ 1216.120695][T24940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1216.140669][T24937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1216.151970][T24937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1216.165654][T24937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1216.173700][T24937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1216.201854][T24937] bond0: (slave batadv0): Releasing backup interface [ 1216.636439][T24956] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6107'. [ 1219.357631][T24958] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6119'. [ 1219.643065][T24976] sit0: entered allmulticast mode [ 1219.787627][T24973] netlink: 'syz.0.6110': attribute type 2 has an invalid length. [ 1219.798683][T24973] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.6110'. [ 1220.030317][T24980] sit0: entered promiscuous mode [ 1220.502144][T24994] sit0: entered promiscuous mode [ 1221.662831][T25006] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1221.718409][T25006] syzkaller0: linktype set to 801 [ 1222.529887][T25024] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6122'. [ 1222.636688][T25026] netlink: 'syz.5.6123': attribute type 64 has an invalid length. [ 1223.340582][T25039] netlink: 'syz.5.6127': attribute type 1 has an invalid length. [ 1223.665738][T25042] netlink: 'syz.2.6128': attribute type 15 has an invalid length. [ 1223.708947][T25039] netlink: 'syz.5.6127': attribute type 4 has an invalid length. [ 1223.759802][T25039] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.6127'. [ 1224.040343][T25047] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1224.063302][T25048] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1224.267064][T25052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6130'. [ 1224.732413][T25064] netlink: 'syz.2.6133': attribute type 29 has an invalid length. [ 1224.781893][T25069] netlink: 'syz.2.6133': attribute type 29 has an invalid length. [ 1224.832809][T25064] netlink: 'syz.2.6133': attribute type 29 has an invalid length. [ 1224.919751][T25064] netlink: 'syz.2.6133': attribute type 29 has an invalid length. [ 1224.961950][T25072] netlink: 'syz.0.6137': attribute type 1 has an invalid length. [ 1224.970666][T25072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6137'. [ 1224.997011][T25072] netlink: 'syz.0.6137': attribute type 16 has an invalid length. [ 1225.006106][T25072] netlink: 'syz.0.6137': attribute type 17 has an invalid length. [ 1225.045540][T25064] netlink: 'syz.2.6133': attribute type 2 has an invalid length. [ 1225.106489][T25064] netlink: 'syz.2.6133': attribute type 9 has an invalid length. [ 1225.162220][T25064] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6133'. [ 1225.176411][T25072] sit0: left promiscuous mode [ 1225.181732][T25072] sit0: left allmulticast mode [ 1225.274580][T25072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.297841][T25072] team0: left promiscuous mode [ 1225.303521][T25072] C: left promiscuous mode [ 1225.311156][T25072] team_slave_1: left promiscuous mode [ 1225.320779][T25072] hsr_slave_0: left promiscuous mode [ 1225.328364][T25072] bond0: left promiscuous mode [ 1225.339242][T25072] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1225.355412][T25072] team0: left allmulticast mode [ 1225.362599][T25072] C: left allmulticast mode [ 1225.370489][T25072] team_slave_1: left allmulticast mode [ 1225.376889][T25072] hsr_slave_0: left allmulticast mode [ 1225.382762][T25072] bond0: left allmulticast mode [ 1225.394030][T25072] bond_slave_1: left allmulticast mode [ 1225.400877][T25072] bridge0: left allmulticast mode [ 1225.407198][T25072] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1225.419062][T25072] batadv0: left allmulticast mode [ 1225.558523][T25072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1225.863312][T19826] lo speed is unknown, defaulting to 1000 [ 1225.869263][T19826] syz1: Port: 1 Link ACTIVE [ 1225.910055][T25081] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1225.975396][T25081] blkio.reset_stats is deprecated [ 1226.732622][T25098] netlink: 'syz.2.6143': attribute type 64 has an invalid length. [ 1227.332832][T25110] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6149'. [ 1227.399940][T25110] netlink: zone id is out of range [ 1227.412563][T25110] netlink: zone id is out of range [ 1227.420352][T25110] netlink: zone id is out of range [ 1227.429656][T25110] netlink: zone id is out of range [ 1227.450251][T25110] netlink: zone id is out of range [ 1227.456826][T25110] netlink: zone id is out of range [ 1227.485558][T25110] netlink: zone id is out of range [ 1227.492260][T25110] netlink: zone id is out of range [ 1228.351144][ T30] audit: type=1107 audit(1756888008.274:4): pid=25124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=',' [ 1230.128620][T25156] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.6162'. [ 1230.364133][T25167] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6164'. [ 1231.647458][T25183] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6167'. [ 1231.772279][T25187] sit0: entered allmulticast mode [ 1231.840584][T25187] sit0: entered promiscuous mode [ 1232.492281][T25205] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6177'. [ 1233.109101][T25219] netlink: 116572 bytes leftover after parsing attributes in process `syz.2.6179'. [ 1234.376311][T25245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6187'. [ 1234.543016][T25256] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6190'. [ 1235.370667][T25268] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6195'. [ 1235.486107][T25274] netlink: 'syz.5.6198': attribute type 10 has an invalid length. [ 1235.580221][T25274] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6198'. [ 1235.692449][T25274] batadv0: entered promiscuous mode [ 1235.739512][T25274] batadv0: entered allmulticast mode [ 1235.791064][T25274] net_ratelimit: 77 callbacks suppressed [ 1235.791120][T25274] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1236.673019][T25294] netlink: 'syz.0.6204': attribute type 2 has an invalid length. [ 1236.681873][T25294] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6204'. [ 1236.692608][T25294] nbd: must specify an index to disconnect [ 1237.044578][T25306] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6207'. [ 1237.173991][T25309] netlink: 'syz.2.6206': attribute type 1 has an invalid length. [ 1237.181914][T25309] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6206'. [ 1238.806597][T25343] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6217'. [ 1238.988309][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.992565][T25351] netlink: 'syz.0.6216': attribute type 6 has an invalid length. [ 1239.003255][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.045889][T25351] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6216'. [ 1239.892762][T25366] netlink: 'syz.0.6222': attribute type 39 has an invalid length. [ 1240.795586][T25379] netlink: 'syz.5.6228': attribute type 23 has an invalid length. [ 1241.164821][T25386] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6230'. [ 1241.259002][T25390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6231'. [ 1241.270124][T25390] netlink: 6 bytes leftover after parsing attributes in process `syz.5.6231'. [ 1241.539483][T25399] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6233'. [ 1241.609919][T25399] netlink: 'syz.1.6233': attribute type 11 has an invalid length. [ 1241.628613][T25399] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.6233'. [ 1241.784295][T25399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1241.818249][T25398] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6234'. [ 1242.821397][T25410] siw: device registration error -23 [ 1242.962150][T25410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6236'. [ 1245.064127][T25426] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6242'. [ 1245.470856][T25447] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 1245.498304][T25447] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 1245.994011][T25465] netlink: 'syz.1.6250': attribute type 39 has an invalid length. [ 1247.280333][T25477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6254'. [ 1247.384910][T25477] siw: device registration error -23 [ 1248.242223][T25494] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6256'. [ 1248.730234][T25493] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 1248.846399][T25500] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1248.900933][T25505] netlink: 'syz.0.6261': attribute type 1 has an invalid length. [ 1248.945919][T25505] netlink: 'syz.0.6261': attribute type 2 has an invalid length. [ 1248.993443][T25512] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6260'. [ 1249.340817][T25517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6264'. [ 1250.528425][T25533] syzkaller0: entered promiscuous mode [ 1250.535861][T25533] syzkaller0: entered allmulticast mode [ 1253.773122][T25558] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 1253.917269][T25573] netlink: 'syz.2.6277': attribute type 3 has an invalid length. [ 1253.938984][T25573] netlink: 4264 bytes leftover after parsing attributes in process `syz.2.6277'. [ 1253.968457][T25573] netlink: 'syz.2.6277': attribute type 3 has an invalid length. [ 1253.994391][T25566] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 1254.059334][T25573] netlink: 4264 bytes leftover after parsing attributes in process `syz.2.6277'. [ 1254.368849][T25582] netlink: 830 bytes leftover after parsing attributes in process `syz.5.6280'. [ 1254.735848][T25579] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6280'. [ 1255.236380][T25598] netlink: 'syz.5.6285': attribute type 2 has an invalid length. [ 1255.247190][T25598] netlink: 'syz.5.6285': attribute type 8 has an invalid length. [ 1255.256684][T25598] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6285'. [ 1256.127998][T25602] lo speed is unknown, defaulting to 1000 [ 1256.235457][T25602] lo speed is unknown, defaulting to 1000 [ 1256.962458][T25632] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode [ 1257.016181][T25634] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 1258.794493][T25674] netlink: 'syz.0.6308': attribute type 10 has an invalid length. [ 1258.831780][T25674] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6308'. [ 1258.855780][T25674] batadv0: entered allmulticast mode [ 1258.975608][T25674] bond0: (slave batadv0): Releasing backup interface [ 1259.178349][T25674] bridge0: port 1(batadv0) entered blocking state [ 1259.195337][T25674] bridge0: port 1(batadv0) entered disabled state [ 1259.737232][ T8153] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1259.746697][ T8153] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1259.936879][T25691] netlink: 'syz.0.6313': attribute type 28 has an invalid length. [ 1259.945604][T25691] netlink: 'syz.0.6313': attribute type 3 has an invalid length. [ 1259.953767][T25691] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6313'. [ 1260.348476][T25693] syzkaller0: entered promiscuous mode [ 1260.354620][T25693] syzkaller0: entered allmulticast mode [ 1260.566875][T25703] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6317'. [ 1260.674256][T25709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6318'. [ 1260.697346][T25709] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6318'. [ 1260.774359][T25692] netlink: 830 bytes leftover after parsing attributes in process `syz.5.6314'. [ 1265.165204][T25736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1266.697144][T25725] sit0: left promiscuous mode [ 1266.732517][T25727] sit0: entered promiscuous mode [ 1266.787480][T25743] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.6326'. [ 1267.507678][T25768] netlink: 'syz.2.6334': attribute type 2 has an invalid length. [ 1267.533069][T25764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6333'. [ 1267.826208][T25771] lo speed is unknown, defaulting to 1000 [ 1267.835698][T25771] lo speed is unknown, defaulting to 1000 [ 1268.845120][T25803] netlink: 'syz.2.6343': attribute type 3 has an invalid length. [ 1268.873413][T25803] netlink: 'syz.2.6343': attribute type 1 has an invalid length. [ 1268.897732][T25803] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.6343'. [ 1269.250640][T25819] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6348'. [ 1269.271836][T25818] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6348'. [ 1269.297509][T25819] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6348'. [ 1269.400817][T25822] netlink: 'syz.3.6349': attribute type 28 has an invalid length. [ 1269.413604][T25822] netlink: 'syz.3.6349': attribute type 3 has an invalid length. [ 1269.421764][T25822] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6349'. [ 1269.452209][T25818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1269.546046][T25825] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1269.555539][T25825] syzkaller1: linktype set to 780 [ 1269.588285][T25825] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6351'. [ 1269.601289][T25825] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6351'. [ 1270.492202][T25838] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6356'. [ 1271.271757][T25843] openvswitch: netlink: Message has 6 unknown bytes. [ 1272.172213][T25867] netlink: 'syz.1.6363': attribute type 4 has an invalid length. [ 1272.188289][T25867] __nla_validate_parse: 4 callbacks suppressed [ 1272.188359][T25867] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6363'. [ 1272.536384][T25882] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6362'. [ 1275.414202][T25900] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6370'. [ 1275.474958][T25898] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6372'. [ 1275.630966][T25902] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1275.638088][T25902] syzkaller1: linktype set to 780 [ 1275.670251][T25902] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6374'. [ 1275.786240][T25909] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6374'. [ 1276.078811][T25917] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6377'. [ 1276.481385][T25924] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6371'. [ 1277.143297][ T30] audit: type=1107 audit(1756888057.064:5): pid=25937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=',' [ 1277.174748][T25953] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6385'. [ 1277.266530][T25956] netlink: 'syz.0.6387': attribute type 21 has an invalid length. [ 1277.286226][T25956] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6387'. [ 1278.065267][T25971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6392'. [ 1278.308770][T25982] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6396'. [ 1279.876656][T26017] netlink: 'syz.2.6416': attribute type 1 has an invalid length. [ 1279.917124][T26017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6416'. [ 1280.489661][T26027] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6408'. [ 1280.608357][T26035] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6410'. [ 1281.008018][T26044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6412'. [ 1281.468439][T26061] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6419'. [ 1281.486065][T26061] sock: sock_timestamping_bind_phc: sock not bind to device [ 1282.848028][T26082] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6424'. [ 1283.245416][T26097] netlink: 'syz.3.6429': attribute type 29 has an invalid length. [ 1283.260320][T26097] netlink: 'syz.3.6429': attribute type 29 has an invalid length. [ 1283.273904][T26097] netlink: 'syz.3.6429': attribute type 29 has an invalid length. [ 1283.308779][T26091] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.6427'. [ 1283.335763][T26091] openvswitch: netlink: Message has 6 unknown bytes. [ 1283.346929][T26095] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6428'. [ 1283.392240][T26096] netlink: 'syz.3.6429': attribute type 29 has an invalid length. [ 1283.500822][T26091] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6427'. [ 1283.981022][T26108] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6434'. [ 1285.087370][T26130] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6439'. [ 1286.688605][T26166] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6451'. [ 1289.328406][T26213] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6464'. [ 1289.411700][T26217] netlink: 'syz.5.6465': attribute type 10 has an invalid length. [ 1289.453474][T26217] netlink: 2 bytes leftover after parsing attributes in process `syz.5.6465'. [ 1291.154370][T26241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6473'. [ 1291.272575][T26249] netlink: 'syz.2.6474': attribute type 10 has an invalid length. [ 1291.775958][T26262] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6476'. [ 1292.456668][T26272] netlink: 'syz.3.6478': attribute type 1 has an invalid length. [ 1292.484561][T26272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6478'. [ 1292.508006][T26272] netlink: 'syz.3.6478': attribute type 16 has an invalid length. [ 1292.526592][T26272] netlink: 'syz.3.6478': attribute type 17 has an invalid length. [ 1292.615047][T26272] sit0: left promiscuous mode [ 1292.644741][T26272] sit0: left allmulticast mode [ 1292.723384][T26272] bridge0: left promiscuous mode [ 1292.763410][T26272] bridge0: left allmulticast mode [ 1292.862746][T26272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.929865][T26272] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.045723][T26272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1293.465323][T26286] netlink: 'syz.3.6484': attribute type 1 has an invalid length. [ 1293.585417][T26291] netlink: 'syz.5.6485': attribute type 21 has an invalid length. [ 1293.685342][T26291] netlink: 'syz.5.6485': attribute type 21 has an invalid length. [ 1293.713022][T26291] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6485'. [ 1294.026901][T26301] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6489'. [ 1294.045738][T26301] !: entered promiscuous mode [ 1294.051487][T26301] bond_slave_1: entered promiscuous mode [ 1294.057517][T26301] netdevsim netdevsim3 : entered promiscuous mode [ 1294.065183][T26301] bridge0: entered promiscuous mode [ 1294.071049][T26301] dummy0: entered promiscuous mode [ 1294.156722][T26301] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6489'. [ 1294.580882][T26310] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6493'. [ 1294.778345][T26323] netlink: 'syz.2.6495': attribute type 10 has an invalid length. [ 1295.096624][T26337] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6508'. [ 1295.452942][T26343] syzkaller0: entered promiscuous mode [ 1295.469655][T26341] netlink: 'syz.1.6498': attribute type 1 has an invalid length. [ 1295.473262][T26343] syzkaller0: entered allmulticast mode [ 1295.555634][T26345] netlink: 'syz.1.6498': attribute type 16 has an invalid length. [ 1295.576904][T26345] netlink: 'syz.1.6498': attribute type 17 has an invalid length. [ 1295.585123][T26341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6498'. [ 1296.085612][T26355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6503'. [ 1296.148709][T26345] sit0: left promiscuous mode [ 1296.175412][T26345] sit0: left allmulticast mode [ 1296.238744][T26345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1299.076526][T26388] netlink: 'syz.3.6523': attribute type 10 has an invalid length. [ 1299.186987][T26382] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6511'. [ 1299.500680][T26396] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1299.538563][T26396] syzkaller0: entered promiscuous mode [ 1299.553220][T26396] syzkaller0: entered allmulticast mode [ 1299.709093][T26410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6516'. [ 1300.430395][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.437258][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.767731][T26426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6520'. [ 1302.533053][T26437] syzkaller0: entered promiscuous mode [ 1302.558633][T26437] syzkaller0: entered allmulticast mode [ 1303.248785][T26448] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6527'. [ 1303.307579][T26454] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6529'. [ 1305.796501][T26449] veth0_vlan: left promiscuous mode [ 1305.802463][T26449] veth0_vlan: entered promiscuous mode [ 1305.809781][T26449] batman_adv: batadv0: Interface activated: vlan1 [ 1305.819933][T26459] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6530'. [ 1306.148042][T26477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6536'. [ 1306.579067][T26481] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6539'. [ 1307.279665][T26493] netlink: 'syz.5.6540': attribute type 1 has an invalid length. [ 1307.290428][T26493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6540'. [ 1307.309915][T26495] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6541'. [ 1307.332849][T26493] netlink: 'syz.5.6540': attribute type 16 has an invalid length. [ 1307.362856][T26494] netlink: 763 bytes leftover after parsing attributes in process `syz.0.6550'. [ 1307.366373][T26493] netlink: 'syz.5.6540': attribute type 17 has an invalid length. [ 1307.382764][T26494] netlink: 'syz.0.6550': attribute type 10 has an invalid length. [ 1307.397169][T26494] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6550'. [ 1308.412743][T26494] team0: entered promiscuous mode [ 1308.418436][T26494] C: entered promiscuous mode [ 1308.423705][T26494] team_slave_1: entered promiscuous mode [ 1308.430108][T26494] hsr_slave_0: entered promiscuous mode [ 1308.436546][T26494] bond0: entered promiscuous mode [ 1308.442334][T26494] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1308.454531][T26494] team0: entered allmulticast mode [ 1308.459694][T26494] C: entered allmulticast mode [ 1308.465129][T26494] team_slave_1: entered allmulticast mode [ 1308.472228][T26494] hsr_slave_0: entered allmulticast mode [ 1308.478550][T26494] bond0: entered allmulticast mode [ 1308.488685][T26494] bond_slave_1: entered allmulticast mode [ 1308.496974][T26494] bridge0: entered allmulticast mode [ 1308.502462][T26494] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1308.510498][T26494] bridge0: port 3(team0) entered blocking state [ 1308.517369][T26494] bridge0: port 3(team0) entered disabled state [ 1308.561962][T26494] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1308.645300][T26493] sit0: left promiscuous mode [ 1308.747977][T26493] team0: left promiscuous mode [ 1308.759224][T26493] team_slave_1: left promiscuous mode [ 1308.769955][T26493] geneve1: left promiscuous mode [ 1308.799323][T26493] team0: left allmulticast mode [ 1308.820478][T26493] team_slave_1: left allmulticast mode [ 1308.828640][T26493] geneve1: left allmulticast mode [ 1308.845986][T26493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1309.248373][T26517] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6547'. [ 1309.604996][T26535] netlink: 'syz.3.6552': attribute type 210 has an invalid length. [ 1310.284484][T26541] netlink: 'syz.5.6553': attribute type 10 has an invalid length. [ 1310.359257][T26547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6555'. [ 1310.462554][T26547] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1311.101055][T26564] netlink: 'syz.1.6560': attribute type 9 has an invalid length. [ 1311.109291][T26564] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.6560'. [ 1312.188967][T26594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6567'. [ 1313.974799][T26618] netdevsim netdevsim0 : renamed from netdevsim0 [ 1315.068740][T26634] netlink: 'syz.0.6580': attribute type 10 has an invalid length. [ 1315.172937][T26634] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6580'. [ 1315.635639][T26634] bond0: left allmulticast mode [ 1315.681587][T26634] bond_slave_1: left allmulticast mode [ 1315.861915][T26634] bridge0: left allmulticast mode [ 1315.993602][T26634] netdevsim netdevsim0 : left allmulticast mode [ 1316.290598][T26634] team0: Port device bond0 removed [ 1316.316727][T26634] bridge0: port 3(bond0) entered blocking state [ 1316.338769][T26634] bridge0: port 3(bond0) entered disabled state [ 1316.364692][T26634] bond0: entered allmulticast mode [ 1316.385559][T26634] bond_slave_1: entered allmulticast mode [ 1316.411428][T26634] bridge0: entered allmulticast mode [ 1316.435773][T26634] netdevsim netdevsim0 : entered allmulticast mode [ 1316.467627][T26634] bond0: left allmulticast mode [ 1316.472545][T26634] bond_slave_1: left allmulticast mode [ 1316.498181][T26634] bridge0: left allmulticast mode [ 1316.523118][T26634] netdevsim netdevsim0 : left allmulticast mode [ 1316.550814][T26639] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6582'. [ 1316.922549][T26666] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6586'. [ 1317.157853][T26670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6589'. [ 1317.877696][T26685] netdevsim netdevsim2 : renamed from netdevsim0 [ 1317.938212][T26681] netlink: 'syz.0.6592': attribute type 29 has an invalid length. [ 1317.969663][T26681] netlink: 'syz.0.6592': attribute type 29 has an invalid length. [ 1318.131747][T26688] netlink: 'syz.0.6592': attribute type 29 has an invalid length. [ 1318.285709][T26681] netlink: 'syz.0.6592': attribute type 29 has an invalid length. [ 1318.926891][T26700] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6596'. [ 1319.299560][T26705] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.6598'. [ 1319.404974][T26705] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.6598'. [ 1319.448495][T26710] sctp: [Deprecated]: syz.5.6600 (pid 26710) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1319.448495][T26710] Use struct sctp_sack_info instead [ 1319.742477][T26722] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.6602'. [ 1319.979882][T26731] netlink: 'syz.1.6605': attribute type 10 has an invalid length. [ 1320.427438][T26736] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6618'. [ 1320.877010][T26736] netlink: 'syz.2.6618': attribute type 13 has an invalid length. [ 1320.916833][T26736] netlink: 'syz.2.6618': attribute type 17 has an invalid length. [ 1320.987155][T26736] sit0: left promiscuous mode [ 1321.013458][T26736] sit0: left allmulticast mode [ 1321.079737][T26736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1321.148583][T26736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1321.719269][T26761] netlink: 'syz.5.6616': attribute type 13 has an invalid length. [ 1321.758453][T26761] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.6616'. [ 1323.406404][T26782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6623'. [ 1324.062928][T26786] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1325.069807][T26808] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6629'. [ 1325.432290][T26818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6634'. [ 1325.441587][T26818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6634'. [ 1326.847658][T26826] netlink: 'syz.5.6636': attribute type 40 has an invalid length. [ 1327.224353][T26836] netlink: 'syz.2.6638': attribute type 29 has an invalid length. [ 1327.253761][T26836] netlink: 'syz.2.6638': attribute type 29 has an invalid length. [ 1327.268573][T26836] netlink: 'syz.2.6638': attribute type 29 has an invalid length. [ 1327.411608][T26833] netlink: 'syz.2.6638': attribute type 29 has an invalid length. [ 1327.567826][T26838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6639'. [ 1327.617485][T26838] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1327.674138][T26847] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6641'. [ 1327.729983][T26838] netlink: 'syz.3.6639': attribute type 10 has an invalid length. [ 1328.085894][T26853] netlink: 'syz.1.6641': attribute type 39 has an invalid length. [ 1328.130272][T26838] bond0: (slave dummy0): Releasing backup interface [ 1328.336212][T26838] dummy0: left promiscuous mode [ 1328.392858][T26838] team0: Port device dummy0 added [ 1329.297140][T26870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6649'. [ 1330.218064][T26882] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6652'. [ 1330.979123][T26901] netlink: 'syz.5.6654': attribute type 21 has an invalid length. [ 1331.170889][T26905] netlink: 'syz.2.6658': attribute type 2 has an invalid length. [ 1331.347270][T26905] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.6658'. [ 1331.427760][T26890] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6654'. [ 1331.773227][T26907] C: renamed from team_slave_0 [ 1331.830035][T26914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6661'. [ 1331.911268][T26907] netlink: 'syz.5.6654': attribute type 4 has an invalid length. [ 1332.450678][T26907] netlink: 116 bytes leftover after parsing attributes in process `syz.5.6654'. [ 1332.534064][T26907] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1332.930211][T26923] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6663'. [ 1333.195251][T26928] sctp: [Deprecated]: syz.0.6664 (pid 26928) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1333.195251][T26928] Use struct sctp_sack_info instead [ 1333.552725][T26931] IPv6: Can't replace route, no match found [ 1335.852904][T26967] netlink: 731 bytes leftover after parsing attributes in process `syz.1.6675'. [ 1335.997177][T26968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1336.004854][T26968] IPv6: NLM_F_CREATE should be set when creating new route [ 1336.012229][T26968] IPv6: NLM_F_CREATE should be set when creating new route [ 1337.386031][T26991] delete_channel: no stack [ 1337.411665][T26991] delete_channel: no stack [ 1337.627217][T26991] netlink: 'syz.0.6685': attribute type 6 has an invalid length. [ 1338.007234][T26991] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6685'. [ 1338.327162][T26997] netlink: 'syz.1.6686': attribute type 29 has an invalid length. [ 1338.398572][T27002] netlink: 'syz.1.6686': attribute type 29 has an invalid length. [ 1338.528607][T27004] netlink: 'syz.1.6686': attribute type 29 has an invalid length. [ 1338.617912][T27006] netlink: 'syz.1.6686': attribute type 29 has an invalid length. [ 1338.745245][T27009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6689'. [ 1339.115561][T27012] delete_channel: no stack [ 1339.686242][T27023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6694'. [ 1339.772606][T27023] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1339.815108][T27023] netlink: 'syz.2.6694': attribute type 10 has an invalid length. [ 1341.083391][T27047] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6702'. [ 1341.956678][T27075] tmpfs: Unknown parameter 'uid' [ 1342.011562][T27073] netlink: 'syz.5.6706': attribute type 29 has an invalid length. [ 1342.066557][T27076] netlink: 'syz.5.6706': attribute type 29 has an invalid length. [ 1342.086714][T27073] netlink: 'syz.5.6706': attribute type 29 has an invalid length. [ 1342.154812][T27073] netlink: 'syz.5.6706': attribute type 29 has an invalid length. [ 1342.230411][T27080] openvswitch: netlink: Flow actions attr not present in new flow. [ 1343.123494][T27088] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6709'. [ 1343.155513][T27089] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6711'. [ 1343.323881][T27085] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6711'. [ 1343.409328][T27094] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6711'. [ 1343.447952][T27098] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6713'. [ 1343.627507][T27100] netlink: 'syz.2.6714': attribute type 6 has an invalid length. [ 1343.646817][T27100] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6714'. [ 1343.767424][T27098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1343.817171][T27098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6713'. [ 1343.910402][T27101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6713'. [ 1343.932611][T27103] netlink: 196 bytes leftover after parsing attributes in process `syz.5.6718'. [ 1343.989618][T27098] netlink: 'syz.1.6713': attribute type 1 has an invalid length. [ 1344.541003][T27124] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.6723'. [ 1346.405213][T27144] netlink: 'syz.3.6731': attribute type 6 has an invalid length. [ 1346.436481][T27162] netlink: 'syz.2.6734': attribute type 29 has an invalid length. [ 1346.481435][T27162] netlink: 'syz.2.6734': attribute type 29 has an invalid length. [ 1346.528358][T27162] netlink: 'syz.2.6734': attribute type 29 has an invalid length. [ 1346.591748][T27162] netlink: 'syz.2.6734': attribute type 29 has an invalid length. [ 1346.617384][T27168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1348.085697][T27198] hsr_slave_1: left promiscuous mode [ 1348.211974][T27204] sctp: [Deprecated]: syz.3.6747 (pid 27204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1348.211974][T27204] Use struct sctp_sack_info instead [ 1349.052983][T27212] __nla_validate_parse: 6 callbacks suppressed [ 1349.053014][T27212] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6748'. [ 1349.554764][T27229] bridge0: port 1(batadv0) entered disabled state [ 1349.586539][T27229] bridge_slave_1: left allmulticast mode [ 1349.629881][T27229] bridge_slave_1: left promiscuous mode [ 1349.670653][T27229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.914270][T27229] bond0: (slave bridge0): Releasing backup interface [ 1349.930611][T27229] bridge0 (unregistering): left promiscuous mode [ 1350.783494][T27247] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6762'. [ 1351.007501][T27252] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.6763'. [ 1351.256104][T27256] netlink: 'syz.1.6764': attribute type 21 has an invalid length. [ 1351.703529][T27255] netlink: 'syz.1.6764': attribute type 4 has an invalid length. [ 1351.711351][T27255] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6764'. [ 1351.773371][T27255] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1351.781693][T27256] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6764'. [ 1352.016325][T27275] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6768'. [ 1353.781856][T27276] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.6769'. [ 1353.808608][T27278] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.6769'. [ 1353.975955][T27285] netlink: 'syz.1.6770': attribute type 12 has an invalid length. [ 1353.984448][T27285] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6770'. [ 1354.928073][T27299] netlink: 'syz.0.6776': attribute type 33 has an invalid length. [ 1354.958298][T27299] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6776'. [ 1355.050943][T27302] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6777'. [ 1355.619142][T27311] delete_channel: no stack [ 1355.622144][T27319] sit0: left promiscuous mode [ 1355.725125][T27319] sit0: entered promiscuous mode [ 1356.158741][T27337] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6786'. [ 1356.426006][T27342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1357.225552][T27358] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6793'. [ 1358.932547][T27393] netlink: 'syz.3.6802': attribute type 27 has an invalid length. [ 1358.942340][T27393] netlink: 'syz.3.6802': attribute type 3 has an invalid length. [ 1358.950675][T27393] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6802'. [ 1359.100601][T27414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6809'. [ 1360.853658][T27431] pim6reg1: left allmulticast mode [ 1361.785896][T27460] netlink: 'syz.3.6818': attribute type 6 has an invalid length. [ 1361.798172][T27458] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6830'. [ 1361.810007][T27460] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6818'. [ 1361.822630][T27456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6819'. [ 1361.869287][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.878442][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.838261][T27483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1365.327150][T27489] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6829'. [ 1365.847118][T27506] netlink: 'syz.5.6838': attribute type 11 has an invalid length. [ 1365.878517][T27506] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6838'. [ 1365.906361][T27501] mac80211_hwsim hwsim54 wlan1: entered promiscuous mode [ 1365.938538][T27501] mac80211_hwsim hwsim54 wlan1: entered allmulticast mode [ 1366.105388][T27509] mac80211_hwsim hwsim15 wlan0: left promiscuous mode [ 1366.108162][T27514] netlink: 'syz.2.6825': attribute type 40 has an invalid length. [ 1366.113060][T27509] mac80211_hwsim hwsim15 wlan0: left allmulticast mode [ 1366.240316][T27503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1366.568648][T27517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1366.576395][T27517] IPv6: NLM_F_CREATE should be set when creating new route [ 1366.584064][T27517] IPv6: NLM_F_CREATE should be set when creating new route [ 1366.622799][T27525] netlink: 'syz.0.6841': attribute type 39 has an invalid length. [ 1368.733927][T27565] netlink: 'syz.0.6851': attribute type 10 has an invalid length. [ 1368.962584][T27570] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6852'. [ 1370.139407][T27588] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6857'. [ 1370.331514][T27588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6857'. [ 1370.399606][T27589] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.6857'. [ 1370.413296][T27588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6857'. [ 1370.495951][T27587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6857'. [ 1370.522998][T27587] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6857'. [ 1370.601724][T27597] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6861'. [ 1372.362758][T27626] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6873'. [ 1373.415977][T27661] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6878'. [ 1376.586613][T27711] netlink: 'syz.5.6890': attribute type 16 has an invalid length. [ 1376.637653][T27711] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6890'. [ 1376.859561][T27716] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6892'. [ 1377.531884][T27738] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.6900'. [ 1379.317186][T27753] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1382.105930][T27777] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6908'. [ 1383.122227][T27795] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6915'. [ 1383.949783][T27813] netlink: 'syz.1.6927': attribute type 2 has an invalid length. [ 1384.134284][T27812] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1384.182918][T27816] netlink: 22 bytes leftover after parsing attributes in process `syz.1.6927'. [ 1386.994949][T27835] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6923'. [ 1388.201912][T27846] netlink: 'syz.0.6930': attribute type 12 has an invalid length. [ 1388.214460][T27846] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6930'. [ 1388.894418][T27867] netlink: 'syz.0.6932': attribute type 21 has an invalid length. [ 1389.158562][T27866] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.6933'. [ 1389.895492][T27884] netlink: 'syz.5.6937': attribute type 40 has an invalid length. [ 1394.397532][T27920] netlink: 'syz.1.6949': attribute type 1 has an invalid length. [ 1394.427084][ T30] audit: type=1107 audit(1756888174.344:6): pid=27919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' #?v&ԹI~+#{U=TsamvDP])x}C | [ 1394.427084][ T30] CA6cz06YX}Yq̌4Iޓp5BeVSo$<1v.b紛xq,HrNG5[$8L{+=i~{5#r4,;=GfVeuu;){ZK><XmG#zv0{ᑤQTOňFU~ ~z1s^|^eM5R;V?'Ss}_cV4q{ΞO1wXf.(\&vhq7"0B+':񢕎1k8)וv7F>7;ްqSݰ\vqށTFkYҵoZi*0 1->uJ.h`@A)2CEhFTڑC_9C?^LCnM`3@$KqH<Ō03ҢI\1A7$Lo)7_֫hQ, QAl [ 1394.427084][ T30] cvm1kOk:tN=,R; wD_b'ɀA‰M"5qfg]<'ſU փ] c!{@6cG|rC(m T}Z{0.Cӭlt9aԘA$G+4BtU'GVj- .㢐TkD4V%(ƈ\pEUBd\Ldc}b(hom(m̈awO} [ 1394.427084][ T30] ru)aoG7>9NeʇNf4+ePz'*apS(0m9.v!$HDt}1nuR [ 1394.652084][T27928] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6951'. [ 1395.028052][T27929] : left promiscuous mode [ 1395.062323][T27922] netlink: 'syz.5.6948': attribute type 39 has an invalid length. [ 1396.736419][T27957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6957'. [ 1396.819840][T27961] siw: device registration error -23 [ 1397.541411][T27967] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6961'. [ 1398.270108][T27991] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6966'. [ 1399.130600][T27993] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6967'. [ 1400.705739][T28031] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6977'. [ 1401.907141][T28045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6979'. [ 1402.380094][T28053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6983'. [ 1405.417880][T28057] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6984'. [ 1405.427525][T28057] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6984'. [ 1405.436784][T28057] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6984'. [ 1405.448351][T28057] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6984'. [ 1405.675610][T28075] netlink: 'syz.1.6989': attribute type 10 has an invalid length. [ 1405.685768][T28075] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6989'. [ 1406.052345][T28086] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6993'. [ 1406.195980][T28089] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6992'. [ 1407.052054][T28100] netlink: 'syz.1.6998': attribute type 10 has an invalid length. [ 1407.060188][T28100] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6998'. [ 1407.314629][T28108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6999'. [ 1407.501360][T28113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7000'. [ 1407.530107][T28114] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7011'. [ 1408.139978][T28126] netlink: 'syz.1.7003': attribute type 10 has an invalid length. [ 1408.202162][T28126] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7003'. [ 1408.533923][T28119] delete_channel: no stack [ 1409.059707][T28140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7006'. [ 1409.156015][T28146] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7007'. [ 1410.377363][T28170] netlink: 'syz.5.7016': attribute type 10 has an invalid length. [ 1410.568736][T28165] team0: Port device C removed [ 1410.574436][T28165] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1410.889500][T28186] netlink: 'syz.2.7020': attribute type 2 has an invalid length. [ 1410.953769][T28186] netlink: 85376 bytes leftover after parsing attributes in process `syz.2.7020'. [ 1411.234680][T28192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7020'. [ 1411.312411][T28189] netlink: 212940 bytes leftover after parsing attributes in process `syz.5.7022'. [ 1411.337173][T28192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7020'. [ 1412.271136][T28206] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 1412.352199][T28208] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7028'. [ 1412.463785][T28211] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 1412.559194][T28217] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7031'. [ 1412.608826][T28217] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7031'. [ 1413.247785][T28238] netlink: 'syz.1.7037': attribute type 1 has an invalid length. [ 1413.267265][T28238] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7037'. [ 1413.339929][T28246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7038'. [ 1413.386374][T28247] netlink: 10 bytes leftover after parsing attributes in process `syz.5.7039'. [ 1413.409069][T28246] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.7038'. [ 1414.808542][T28266] : left promiscuous mode [ 1416.555864][T28294] sit0: left promiscuous mode [ 1416.708309][T28308] rdma_rxe: rxe_newlink: failed to add erspan0 [ 1416.809152][T28305] netlink: 'syz.5.7057': attribute type 10 has an invalid length. [ 1417.618075][T28313] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1417.733366][T28313] syzkaller0: entered promiscuous mode [ 1417.738901][T28313] syzkaller0: entered allmulticast mode [ 1419.255993][T28347] __nla_validate_parse: 6 callbacks suppressed [ 1419.256032][T28347] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7066'. [ 1421.020191][T28378] netlink: 1018 bytes leftover after parsing attributes in process `syz.3.7073'. [ 1423.324973][T28416] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7082'. [ 1423.334843][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.341193][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.735806][T28438] netlink: 294 bytes leftover after parsing attributes in process `syz.1.7088'. [ 1425.289222][T28442] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.7089'. [ 1425.324675][T28446] netlink: 'syz.1.7090': attribute type 39 has an invalid length. [ 1425.427510][T28446] veth0_macvtap: left promiscuous mode [ 1425.666734][T28449] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7087'. [ 1427.575365][T28487] netlink: 'syz.3.7097': attribute type 9 has an invalid length. [ 1427.633368][T28487] netlink: 211924 bytes leftover after parsing attributes in process `syz.3.7097'. [ 1429.668743][T28516] netlink: 'syz.3.7102': attribute type 39 has an invalid length. [ 1430.531608][T28523] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7106'. [ 1430.775905][T28528] netlink: 'syz.5.7105': attribute type 21 has an invalid length. [ 1430.840076][T28528] netlink: 'syz.5.7105': attribute type 15 has an invalid length. [ 1430.943473][T28528] netlink: 156 bytes leftover after parsing attributes in process `syz.5.7105'. [ 1430.952841][T28528] IPv6: NLM_F_CREATE should be specified when creating new route [ 1431.078138][T28528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1431.085712][T28528] IPv6: NLM_F_CREATE should be set when creating new route [ 1431.093551][T28528] IPv6: NLM_F_CREATE should be set when creating new route [ 1431.101123][T28528] IPv6: NLM_F_CREATE should be set when creating new route [ 1431.377892][T28534] rdma_rxe: rxe_newlink: failed to add erspan0 [ 1432.195415][T28553] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 1432.330554][T28555] netlink: 'syz.3.7109': attribute type 10 has an invalid length. [ 1433.958213][T28581] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7114'. [ 1433.992408][T28580] netlink: 'syz.2.7118': attribute type 29 has an invalid length. [ 1434.025385][T28580] netlink: 'syz.2.7118': attribute type 10 has an invalid length. [ 1434.523856][T28589] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7119'. [ 1434.677084][T28572] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 1434.876744][T28581] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7114'. [ 1434.987052][T28581] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1435.276317][T28573] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1435.516436][T28598] netlink: 'syz.2.7121': attribute type 39 has an invalid length. [ 1435.917774][T28604] netlink: 'syz.5.7125': attribute type 29 has an invalid length. [ 1435.953784][T28604] netlink: 'syz.5.7125': attribute type 29 has an invalid length. [ 1436.010584][T28607] netlink: 'syz.5.7125': attribute type 29 has an invalid length. [ 1436.282013][T28607] netlink: 'syz.5.7125': attribute type 29 has an invalid length. [ 1436.528690][T28610] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7124'. [ 1436.947941][T28600] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7122'. [ 1436.972322][T28625] netlink: 'syz.2.7136': attribute type 10 has an invalid length. [ 1437.079417][T28625] team0: Port device geneve1 added [ 1437.244524][T28632] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.7127'. [ 1437.335169][ T8151] netdevsim netdevsim2 : set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.363415][T28632] netlink: 5 bytes leftover after parsing attributes in process `syz.5.7127'. [ 1437.391136][ T8151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.488350][ T8151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.588143][ T8151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.614123][T28636] netlink: 180 bytes leftover after parsing attributes in process `syz.5.7127'. [ 1437.812711][T28638] netlink: 'syz.1.7128': attribute type 10 has an invalid length. [ 1439.116145][T28651] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7131'. [ 1439.443281][T28653] tap0: tun_chr_ioctl cmd 1074025677 [ 1439.449779][T28653] tap0: linktype set to 0 [ 1439.528941][T28658] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7134'. [ 1440.062270][T28665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7138'. [ 1440.107410][T28666] : left promiscuous mode [ 1440.724482][T28678] netlink: 10 bytes leftover after parsing attributes in process `syz.5.7142'. [ 1440.863249][T28682] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 1440.931173][T28686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7140'. [ 1441.697598][T28697] netlink: 'syz.3.7145': attribute type 10 has an invalid length. [ 1442.387075][T28697] team0: Port device geneve1 added [ 1443.520797][T28721] rdma_rxe: rxe_newlink: failed to add erspan0 [ 1443.655789][T28722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1443.674789][T28723] __nla_validate_parse: 3 callbacks suppressed [ 1443.674810][T28723] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7151'. [ 1444.209890][T28734] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7154'. [ 1445.994236][T28755] netlink: 'syz.2.7161': attribute type 1 has an invalid length. [ 1446.018777][T28755] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.7161'. [ 1446.851200][T28772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7166'. [ 1447.027119][T28772] netlink: 'syz.2.7166': attribute type 21 has an invalid length. [ 1447.105042][T28772] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7166'. [ 1447.250116][T28781] netlink: 10 bytes leftover after parsing attributes in process `syz.5.7168'. [ 1447.636942][T28762] tap0: tun_chr_ioctl cmd 1074025677 [ 1447.677730][T28762] tap0: linktype set to 0 [ 1447.944948][T28779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7165'. [ 1448.106195][T28779] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 1448.199162][T28787] syzkaller0: entered promiscuous mode [ 1448.204943][T28787] syzkaller0: entered allmulticast mode [ 1448.250931][T28779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1449.594191][T28810] netlink: zone id is out of range [ 1449.607717][T28810] netlink: zone id is out of range [ 1449.639667][T28810] netlink: del zone limit has 4 unknown bytes [ 1452.333975][T28801] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7174'. [ 1452.476719][T28818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7177'. [ 1452.552346][T28823] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7179'. [ 1453.020995][T28835] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7182'. [ 1454.397567][T28852] netlink: 182 bytes leftover after parsing attributes in process `syz.1.7188'. [ 1454.411103][T28852] netlink: 'syz.1.7188': attribute type 10 has an invalid length. [ 1454.530992][T28855] netlink: 216 bytes leftover after parsing attributes in process `syz.1.7188'. [ 1454.650760][T28857] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7188'. [ 1456.429151][T28838] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7183'. [ 1456.684952][T28867] netlink: 182 bytes leftover after parsing attributes in process `syz.0.7190'. [ 1456.842662][T28864] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7190'. [ 1456.900185][T28867] netlink: 'syz.0.7190': attribute type 10 has an invalid length. [ 1457.058980][T28867] batman_adv: batadv0: Interface deactivated: vlan1 [ 1457.147975][T28867] veth0_vlan: left promiscuous mode [ 1457.178320][T28867] veth0_vlan: entered promiscuous mode [ 1457.226705][T28867] batman_adv: batadv0: Interface activated: vlan1 [ 1457.233809][T28867] team0: Device veth0_vlan failed to register rx_handler [ 1457.254829][T28877] rdma_rxe: rxe_newlink: failed to add erspan0 [ 1457.281162][T28867] batman_adv: batadv0: Interface deactivated: vlan1 [ 1457.611209][T28885] netlink: 'syz.2.7195': attribute type 10 has an invalid length. [ 1457.709449][T28889] __nla_validate_parse: 1 callbacks suppressed [ 1457.709469][T28889] netlink: 188 bytes leftover after parsing attributes in process `syz.0.7196'. [ 1458.463958][T28905] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7201'. [ 1459.024764][T28917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1461.738813][T28967] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7215'. [ 1463.266114][T28992] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1463.360753][T28991] rdma_rxe: rxe_newlink: failed to add erspan0 [ 1463.587176][T28994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7224'. [ 1463.780467][T29002] netlink: 'syz.1.7223': attribute type 1 has an invalid length. [ 1463.963276][T29002] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.7223'. [ 1464.688353][T29013] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7230'. [ 1465.021156][T29021] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7232'. [ 1465.100155][T29024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7234'. [ 1465.191142][T29024] netlink: 6 bytes leftover after parsing attributes in process `syz.0.7234'. [ 1465.842190][T29028] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7235'. [ 1466.172487][T29040] netlink: 'syz.5.7240': attribute type 29 has an invalid length. [ 1466.211605][T29040] netlink: 'syz.5.7240': attribute type 10 has an invalid length. [ 1466.266449][T29042] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7250'. [ 1467.434889][T29060] netlink: 'syz.0.7242': attribute type 1 has an invalid length. [ 1467.514356][T29060] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.7242'. [ 1467.662464][T29058] netlink: 'syz.2.7245': attribute type 29 has an invalid length. [ 1468.067686][T29062] netlink: 'syz.2.7245': attribute type 29 has an invalid length. [ 1468.279827][T29063] netlink: 'syz.2.7245': attribute type 29 has an invalid length. [ 1468.306134][T29069] netlink: 'syz.2.7245': attribute type 29 has an invalid length. [ 1468.664220][T29079] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7251'. [ 1469.324423][T29095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7256'. [ 1469.386500][T29093] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7257'. [ 1470.133456][T29102] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7261'. [ 1470.578597][T29116] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7264'. [ 1470.857933][T29115] netlink: 'syz.3.7262': attribute type 6 has an invalid length. [ 1470.922260][T29127] netlink: 'syz.0.7265': attribute type 10 has an invalid length. [ 1471.010805][T29127] team0: Device veth1_vlan failed to register rx_handler [ 1471.519789][T29139] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7267'. [ 1472.293275][T29152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7272'. [ 1472.336278][T29152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7272'. [ 1472.823411][T29152] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.7272'. [ 1472.853040][T29155] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.7272'. [ 1475.338578][T29197] __nla_validate_parse: 2 callbacks suppressed [ 1475.338619][T29197] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7282'. [ 1475.362444][T29197] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7282'. [ 1475.402078][T29197] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1475.655067][T29206] netlink: 'syz.1.7285': attribute type 10 has an invalid length. [ 1476.621602][T29214] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7288'. [ 1478.656959][T29254] netlink: 'syz.5.7299': attribute type 1 has an invalid length. [ 1478.723368][T29254] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.7299'. [ 1479.412600][T29263] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7302'. [ 1482.319864][T29307] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7312'. [ 1482.509413][T29308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7314'. [ 1482.518955][T29308] netlink: 200 bytes leftover after parsing attributes in process `syz.1.7314'. [ 1483.179035][T29322] netlink: 'syz.1.7316': attribute type 2 has an invalid length. [ 1483.842370][T29307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1483.885351][T29307] bond_slave_1: left promiscuous mode [ 1483.946921][T29307] bond0 (unregistering): (slave ): Releasing backup interface [ 1484.000089][T29307] netdevsim netdevsim0 : left promiscuous mode [ 1484.028719][T29307] bond0 (unregistering): Released all slaves [ 1484.267968][T29325] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 1484.575617][T29331] netlink: 'syz.1.7320': attribute type 10 has an invalid length. [ 1484.583906][T29331] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7320'. [ 1484.686235][T29336] netlink: 'syz.0.7322': attribute type 10 has an invalid length. [ 1484.695538][T29336] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7322'. [ 1484.749336][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.754639][T29345] delete_channel: no stack [ 1484.755883][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.490828][T29336] batman_adv: batadv0: Removing interface: vlan1 [ 1485.860915][T29350] netlink: 180 bytes leftover after parsing attributes in process `syz.5.7323'. [ 1487.854259][T29376] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.7331'. [ 1487.864961][T29378] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7329'. [ 1488.376982][T29388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7330'. [ 1488.386690][T29388] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7330'. [ 1488.395241][T29387] netlink: 'syz.5.7333': attribute type 10 has an invalid length. [ 1488.428014][T29387] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7333'. [ 1488.470590][T29387] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 1488.493323][T29387] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1488.547335][T29387] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 1489.208445][T29412] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 1489.217567][T29412] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 1489.517774][T29418] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7342'. [ 1489.536695][T29418] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7342'. [ 1490.290271][T29435] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7348'. [ 1491.748627][T29459] netlink: 'syz.1.7355': attribute type 1 has an invalid length. [ 1491.858357][T29459] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7355'. [ 1492.464122][T29472] netlink: 240 bytes leftover after parsing attributes in process `syz.5.7360'. [ 1493.106172][T29486] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7363'. [ 1493.122422][T29486] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7363'. [ 1493.198255][T29488] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7365'. [ 1493.220095][T29488] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7365'. [ 1493.261356][T29488] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1493.903581][T29507] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7371'. [ 1494.483809][T29526] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7376'. [ 1495.677953][T29545] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7381'. [ 1498.145484][T29588] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7393'. [ 1498.307185][T29583] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7392'. [ 1498.963929][T29598] netlink: 'syz.5.7399': attribute type 13 has an invalid length. [ 1499.868608][T29623] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7408'. [ 1500.823656][T29647] netlink: 'syz.2.7415': attribute type 10 has an invalid length. [ 1500.893729][T29647] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7415'. [ 1501.001295][T29652] netlink: 10 bytes leftover after parsing attributes in process `syz.5.7421'. [ 1503.309575][T29692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7435'. [ 1503.579343][T29697] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7434'. [ 1503.616519][T29695] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1504.721480][T29716] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7442'. [ 1504.810283][T29716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7442'. [ 1506.378574][ T30] audit: type=1107 audit(1756888286.334:7): pid=29752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1507.206176][T29786] netlink: 'syz.1.7472': attribute type 6 has an invalid length. [ 1507.379354][T29782] lo speed is unknown, defaulting to 1000 [ 1507.396731][T29794] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1507.469004][T29782] lo speed is unknown, defaulting to 1000 [ 1508.133335][T29804] netlink: 196 bytes leftover after parsing attributes in process `syz.0.7477'. [ 1509.631896][T29826] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7483'. [ 1511.224948][T29867] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7498'. [ 1511.881732][T29872] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7501'. [ 1512.108849][T29882] netlink: 'syz.2.7503': attribute type 39 has an invalid length. [ 1512.853329][T29900] netlink: 'syz.2.7513': attribute type 10 has an invalid length. [ 1512.863179][T29900] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7513'. [ 1512.886576][T29900] team0: entered promiscuous mode [ 1512.891707][T29900] team_slave_1: entered promiscuous mode [ 1512.926279][T29900] bond0: entered promiscuous mode [ 1512.936223][T29900] bond_slave_1: entered promiscuous mode [ 1512.962714][T29900] batadv0: entered promiscuous mode [ 1512.971703][T29900] netdevsim netdevsim2 : entered promiscuous mode [ 1513.003802][T29900] geneve1: entered promiscuous mode [ 1513.033316][T29900] team0: entered allmulticast mode [ 1513.044324][T29900] team_slave_1: entered allmulticast mode [ 1513.050229][T29900] bond0: entered allmulticast mode [ 1513.065549][T29900] bond_slave_1: entered allmulticast mode [ 1513.078855][T29900] geneve0: entered allmulticast mode [ 1513.086618][T29900] batadv0: entered allmulticast mode [ 1513.113456][T29900] netdevsim netdevsim2 : entered allmulticast mode [ 1513.127404][T29900] geneve1: entered allmulticast mode [ 1513.135597][T29900] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1513.430605][T29918] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7517'. [ 1513.441108][T29912] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7516'. [ 1514.116146][T29927] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7520'. [ 1515.149416][T29912] team0: Port device .` removed [ 1515.205788][T29912] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1515.323887][T29912] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1515.477059][T29912] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1515.571316][T29912] .` (unregistering): (slave bridge0): Releasing backup interface [ 1515.632499][T29912] bridge0: port 1(dummy0) entered disabled state [ 1515.639140][T29912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.733798][T29912] .` (unregistering): (slave ): Releasing backup interface [ 1515.781734][T29912] .` (unregistering): Released all slaves [ 1515.985608][T29929] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7521'. [ 1516.257453][T29940] netlink: 'syz.0.7525': attribute type 10 has an invalid length. [ 1517.501367][T29968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7537'. [ 1517.936261][T29988] netlink: 'syz.0.7547': attribute type 10 has an invalid length. [ 1517.963215][T29988] team0: Device ip6_vti0 is of different type [ 1518.132089][T29996] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7550'. [ 1518.422929][T29999] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7551'. [ 1518.560550][T30011] netlink: 22 bytes leftover after parsing attributes in process `syz.0.7556'. [ 1520.233324][T30048] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7569'. [ 1520.522541][T30055] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7570'. [ 1520.907933][T30063] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7576'. [ 1521.505664][T30086] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7582'. [ 1521.600554][T30088] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7585'. [ 1521.887305][T30102] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7588'. [ 1521.906428][T30101] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7591'. [ 1522.607558][T30123] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7597'. [ 1522.805783][T30125] netlink: 'syz.1.7599': attribute type 6 has an invalid length. [ 1523.159825][T30113] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7595'. [ 1523.170073][T30113] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7595'. [ 1524.604699][T30168] netlink: 'syz.3.7615': attribute type 6 has an invalid length. [ 1525.097829][T30199] netlink: 'syz.2.7626': attribute type 29 has an invalid length. [ 1525.262376][T30200] netlink: 'syz.2.7626': attribute type 29 has an invalid length. [ 1525.340432][T30205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7627'. [ 1530.450090][T30309] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7665'. [ 1531.523759][T30329] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7674'. [ 1532.713387][T30351] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7681'. [ 1533.898050][T30366] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7689'. [ 1539.366774][T30445] netlink: 10 bytes leftover after parsing attributes in process `syz.5.7715'. [ 1539.987985][T30468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7722'. [ 1540.090538][T30469] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1540.183392][T30469] syzkaller1: linktype set to 1 [ 1541.315512][T30490] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7730'. [ 1541.867496][T30503] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7732'. [ 1543.379000][T30528] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7743'. [ 1543.673429][T30528] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7743'. [ 1543.740678][T30531] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7743'. [ 1543.936886][T30538] netlink: 'syz.1.7746': attribute type 21 has an invalid length. [ 1545.481978][T30563] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.7752'. [ 1545.491775][T30556] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.7752'. [ 1545.562403][T30556] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.7752'. [ 1545.669420][T30561] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7754'. [ 1546.190632][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.197102][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.355193][T30583] netlink: 'syz.2.7761': attribute type 21 has an invalid length. [ 1548.483874][T30605] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7769'. [ 1548.972269][T30625] netlink: 'syz.3.7776': attribute type 29 has an invalid length. [ 1549.033306][T30628] netlink: 'syz.3.7776': attribute type 29 has an invalid length. [ 1549.071640][T30625] netlink: 'syz.3.7776': attribute type 29 has an invalid length. [ 1549.126344][T30628] netlink: 'syz.3.7776': attribute type 29 has an invalid length. [ 1549.614289][T30645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7784'. [ 1550.362544][T30674] openvswitch: netlink: nsh attribute has 8 unknown bytes. [ 1550.471657][T30677] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7795'. [ 1550.517972][T30673] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7794'. [ 1551.706506][T30721] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.7810'. [ 1552.248536][T30737] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.7815'. [ 1552.292479][T30735] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7813'. [ 1552.338225][T30740] netlink: 'syz.2.7816': attribute type 33 has an invalid length. [ 1552.358153][T30740] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7816'. [ 1552.515534][T30742] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.7817'. [ 1552.696602][T30745] netlink: 'syz.1.7819': attribute type 3 has an invalid length. [ 1552.723234][T30745] netlink: 'syz.1.7819': attribute type 6 has an invalid length. [ 1552.743212][T30745] netlink: 'syz.1.7819': attribute type 8 has an invalid length. [ 1552.750990][T30745] netlink: 'syz.1.7819': attribute type 10 has an invalid length. [ 1552.807151][T30745] netlink: 'syz.1.7819': attribute type 11 has an invalid length. [ 1552.823510][T30745] netlink: 198236 bytes leftover after parsing attributes in process `syz.1.7819'. [ 1553.598173][T30762] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7825'. [ 1554.233672][T30780] validate_nla: 2 callbacks suppressed [ 1554.233693][T30780] netlink: 'syz.3.7830': attribute type 12 has an invalid length. [ 1554.287716][T30780] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7830'. [ 1554.620975][T30790] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7832'. [ 1555.281491][T30812] netlink: 'syz.0.7840': attribute type 11 has an invalid length. [ 1555.387708][T30812] netlink: 'syz.0.7840': attribute type 11 has an invalid length. [ 1557.113928][T30847] netlink: 'syz.0.7855': attribute type 2 has an invalid length. [ 1557.121719][T30847] netlink: 'syz.0.7855': attribute type 1 has an invalid length. [ 1557.183983][T30847] __nla_validate_parse: 1 callbacks suppressed [ 1557.184003][T30847] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7855'. [ 1558.115061][T30873] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7864'. [ 1558.389073][T30879] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7866'. [ 1558.541037][T30882] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7867'. [ 1559.397373][T30899] lo speed is unknown, defaulting to 1000 [ 1559.424203][T30899] lo speed is unknown, defaulting to 1000 [ 1559.634028][T30900] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7872'. [ 1560.070354][T30919] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7879'. [ 1560.104556][T30921] netlink: 'syz.3.7880': attribute type 6 has an invalid length. [ 1561.455026][T30948] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7887'. [ 1562.057870][T30955] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.7891'. [ 1564.625875][T31008] netlink: 'syz.3.7907': attribute type 6 has an invalid length. [ 1564.744157][T31006] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7906'. [ 1565.154592][T31026] netlink: 324 bytes leftover after parsing attributes in process `syz.2.7910'. [ 1565.313597][T31028] syzkaller0: entered promiscuous mode [ 1565.393111][T31028] syzkaller0: entered allmulticast mode [ 1566.324198][T31040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7917'. [ 1566.501118][T31039] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7915'. [ 1566.929599][ T5872] Bluetooth: hci2: Malformed Event: 0x02 [ 1567.734737][T31070] netlink: 'syz.2.7925': attribute type 6 has an invalid length. [ 1567.978213][T31065] netlink: set zone limit has 4 unknown bytes [ 1568.573995][T31084] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.7930'. [ 1570.061552][T31124] netlink: 'syz.0.7943': attribute type 6 has an invalid length. [ 1570.388864][T31131] netlink: 'syz.3.7945': attribute type 15 has an invalid length. [ 1570.443693][T31131] netlink: 11318 bytes leftover after parsing attributes in process `syz.3.7945'. [ 1571.545980][T31133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7946'. [ 1572.364876][T31159] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7954'. [ 1573.726241][T31186] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7962'. [ 1574.594630][T31195] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7966'. [ 1574.954433][T31207] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7971'. [ 1575.362875][T31215] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7973'. [ 1576.095340][T31224] netlink: 'syz.5.7977': attribute type 33 has an invalid length. [ 1576.105341][T31224] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7977'. [ 1576.454239][T31239] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7981'. [ 1576.479038][T31235] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.7982'. [ 1576.754644][T31242] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7985'. [ 1576.770526][T31244] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7984'. [ 1577.656672][T31263] netlink: 'syz.1.7992': attribute type 6 has an invalid length. [ 1578.357985][T31280] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7998'. [ 1578.929987][T31306] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8006'. [ 1579.000015][T31303] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8005'. [ 1579.198839][T31313] openvswitch: netlink: Key type 8208 is out of range max 32 [ 1579.361110][T31321] netlink: 'syz.3.8010': attribute type 6 has an invalid length. [ 1579.403734][T31317] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8011'. [ 1580.408002][T31351] netlink: 'syz.0.8020': attribute type 3 has an invalid length. [ 1580.443087][T31351] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.8020'. [ 1580.705361][T31360] netlink: 'syz.1.8022': attribute type 2 has an invalid length. [ 1580.716564][T31360] netlink: 'syz.1.8022': attribute type 8 has an invalid length. [ 1581.024759][T31368] netlink: 'syz.5.8025': attribute type 2 has an invalid length. [ 1581.653974][T31378] __nla_validate_parse: 2 callbacks suppressed [ 1581.653999][T31378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8028'. [ 1581.988529][T31385] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.8031'. [ 1582.933122][T31410] netlink: 'syz.0.8038': attribute type 6 has an invalid length. [ 1589.724091][T31435] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8050'. [ 1589.751082][T31435] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8050'. [ 1590.031242][T31438] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1590.576818][T31444] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8047'. [ 1590.650846][T31444] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8047'. [ 1592.699675][T31489] ================================================================== [ 1592.707838][T31489] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 1592.715800][T31489] Read of size 1 at addr ffff88804a6c0bb0 by task syz.3.8068/31489 [ 1592.723824][T31489] [ 1592.726212][T31489] CPU: 0 UID: 0 PID: 31489 Comm: syz.3.8068 Not tainted syzkaller #0 PREEMPT(full) [ 1592.726240][T31489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1592.726254][T31489] Call Trace: [ 1592.726266][T31489] [ 1592.726279][T31489] dump_stack_lvl+0x189/0x250 [ 1592.726316][T31489] ? __virt_addr_valid+0x1c8/0x5c0 [ 1592.726354][T31489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1592.726379][T31489] ? __virt_addr_valid+0x1c8/0x5c0 [ 1592.726411][T31489] ? lock_release+0x4b/0x3e0 [ 1592.726481][T31489] ? __virt_addr_valid+0x4a5/0x5c0 [ 1592.726527][T31489] print_report+0xca/0x240 [ 1592.726556][T31489] ? xfrm_state_find+0x2cf2/0x5400 [ 1592.726587][T31489] kasan_report+0x118/0x150 [ 1592.726638][T31489] ? xfrm_state_find+0x2cf2/0x5400 [ 1592.726721][T31489] xfrm_state_find+0x2cf2/0x5400 [ 1592.726870][T31489] ? xfrm_state_find+0x1da/0x5400 [ 1592.726951][T31489] ? __pfx_xfrm_state_find+0x10/0x10 [ 1592.726982][T31489] ? trace_call_bpf+0xb7/0x850 [ 1592.727033][T31489] ? __pfx_trace_call_bpf+0x10/0x10 [ 1592.727097][T31489] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 1592.727131][T31489] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 1592.727248][T31489] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 1592.727284][T31489] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 1592.727320][T31489] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 1592.727368][T31489] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 1592.727419][T31489] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 1592.727445][T31489] ? ip_route_output_flow+0x2a/0x150 [ 1592.727616][T31489] ? xfrm_expand_policies+0x41f/0x6a0 [ 1592.727683][T31489] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 1592.727757][T31489] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 1592.727845][T31489] xfrm_lookup_route+0x3c/0x1c0 [ 1592.727892][T31489] __ip_queue_xmit+0xa08/0x1b00 [ 1592.727941][T31489] ? __ip_queue_xmit+0x63/0x1b00 [ 1592.727988][T31489] ? __pfx_ip_queue_xmit+0x10/0x10 [ 1592.728016][T31489] __tcp_transmit_skb+0x2215/0x3680 [ 1592.728151][T31489] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1592.728214][T31489] ? lockdep_hardirqs_on+0x9c/0x150 [ 1592.728265][T31489] ? tcp_small_queue_check+0x1c1/0x3b0 [ 1592.728309][T31489] tcp_write_xmit+0x1862/0x67f0 [ 1592.728454][T31489] ? __pfx__copy_from_iter+0x10/0x10 [ 1592.728553][T31489] tcp_sendmsg_locked+0x2b9f/0x5620 [ 1592.728826][T31489] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1592.728853][T31489] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1592.728898][T31489] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1592.728992][T31489] tcp_sendmsg+0x2f/0x50 [ 1592.729045][T31489] __sock_sendmsg+0x19c/0x270 [ 1592.729095][T31489] ____sys_sendmsg+0x505/0x830 [ 1592.729150][T31489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1592.729219][T31489] ? import_iovec+0x74/0xa0 [ 1592.729268][T31489] ___sys_sendmsg+0x21f/0x2a0 [ 1592.729309][T31489] ? __pfx____sys_sendmsg+0x10/0x10 [ 1592.729428][T31489] ? __fget_files+0x2a/0x420 [ 1592.729554][T31489] ? __fget_files+0x2a/0x420 [ 1592.729589][T31489] ? __fget_files+0x3a0/0x420 [ 1592.729678][T31489] __x64_sys_sendmsg+0x19b/0x260 [ 1592.729720][T31489] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1592.729793][T31489] ? rcu_is_watching+0x15/0xb0 [ 1592.729844][T31489] ? do_syscall_64+0xbe/0x3b0 [ 1592.729897][T31489] do_syscall_64+0xfa/0x3b0 [ 1592.729937][T31489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.729958][T31489] ? asm_common_interrupt+0x26/0x40 [ 1592.729978][T31489] ? clear_bhb_loop+0x60/0xb0 [ 1592.730020][T31489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.730043][T31489] RIP: 0033:0x7f5949d8ebe9 [ 1592.730070][T31489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1592.730089][T31489] RSP: 002b:00007f594ac8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1592.730113][T31489] RAX: ffffffffffffffda RBX: 00007f5949fc5fa0 RCX: 00007f5949d8ebe9 [ 1592.730130][T31489] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000005 [ 1592.730145][T31489] RBP: 00007f5949e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1592.730160][T31489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1592.730175][T31489] R13: 00007f5949fc6038 R14: 00007f5949fc5fa0 R15: 00007fff032c1788 [ 1592.730260][T31489] [ 1592.730268][T31489] [ 1593.138202][T31489] Allocated by task 30284: [ 1593.142634][T31489] kasan_save_track+0x3e/0x80 [ 1593.147339][T31489] __kasan_slab_alloc+0x6c/0x80 [ 1593.152215][T31489] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1593.157695][T31489] xfrm_state_alloc+0x24/0x2f0 [ 1593.162484][T31489] __find_acq_core+0x8a7/0x1c00 [ 1593.167371][T31489] xfrm_find_acq+0x78/0xa0 [ 1593.172065][T31489] xfrm_alloc_userspi+0x6b3/0xc90 [ 1593.177117][T31489] xfrm_user_rcv_msg+0x7a0/0xab0 [ 1593.182077][T31489] netlink_rcv_skb+0x208/0x470 [ 1593.186867][T31489] xfrm_netlink_rcv+0x79/0x90 [ 1593.191570][T31489] netlink_unicast+0x82c/0x9e0 [ 1593.196366][T31489] netlink_sendmsg+0x805/0xb30 [ 1593.201157][T31489] __sock_sendmsg+0x21c/0x270 [ 1593.205850][T31489] ____sys_sendmsg+0x505/0x830 [ 1593.210630][T31489] ___sys_sendmsg+0x21f/0x2a0 [ 1593.215324][T31489] __x64_sys_sendmsg+0x19b/0x260 [ 1593.220280][T31489] do_syscall_64+0xfa/0x3b0 [ 1593.224805][T31489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.230712][T31489] [ 1593.233053][T31489] Freed by task 5853: [ 1593.237050][T31489] kasan_save_track+0x3e/0x80 [ 1593.241853][T31489] kasan_save_free_info+0x46/0x50 [ 1593.246984][T31489] __kasan_slab_free+0x5b/0x80 [ 1593.251770][T31489] kmem_cache_free+0x18f/0x400 [ 1593.256553][T31489] xfrm_state_gc_task+0x52d/0x6b0 [ 1593.261605][T31489] process_scheduled_works+0xae1/0x17b0 [ 1593.267167][T31489] worker_thread+0x8a0/0xda0 [ 1593.271775][T31489] kthread+0x711/0x8a0 [ 1593.275863][T31489] ret_from_fork+0x3f9/0x770 [ 1593.280467][T31489] ret_from_fork_asm+0x1a/0x30 [ 1593.285268][T31489] [ 1593.287608][T31489] The buggy address belongs to the object at ffff88804a6c0880 [ 1593.287608][T31489] which belongs to the cache xfrm_state of size 928 [ 1593.301604][T31489] The buggy address is located 816 bytes inside of [ 1593.301604][T31489] freed 928-byte region [ffff88804a6c0880, ffff88804a6c0c20) [ 1593.315440][T31489] [ 1593.317785][T31489] The buggy address belongs to the physical page: [ 1593.324224][T31489] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804a6c2200 pfn:0x4a6c0 [ 1593.334336][T31489] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1593.342863][T31489] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1593.350425][T31489] page_type: f5(slab) [ 1593.354454][T31489] raw: 00fff00000000040 ffff888143692140 dead000000000122 0000000000000000 [ 1593.363061][T31489] raw: ffff88804a6c2200 00000000800f0008 00000000f5000000 0000000000000000 [ 1593.371664][T31489] head: 00fff00000000040 ffff888143692140 dead000000000122 0000000000000000 [ 1593.380352][T31489] head: ffff88804a6c2200 00000000800f0008 00000000f5000000 0000000000000000 [ 1593.389058][T31489] head: 00fff00000000002 ffffea000129b001 00000000ffffffff 00000000ffffffff [ 1593.397750][T31489] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1593.406442][T31489] page dumped because: kasan: bad access detected [ 1593.412883][T31489] page_owner tracks the page as allocated [ 1593.418609][T31489] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 28600, tgid 28599 (syz.0.7122), ts 1436906549656, free_ts 1436870218700 [ 1593.438278][T31489] post_alloc_hook+0x240/0x2a0 [ 1593.443093][T31489] get_page_from_freelist+0x21e4/0x22c0 [ 1593.448696][T31489] __alloc_frozen_pages_noprof+0x181/0x370 [ 1593.454525][T31489] alloc_pages_mpol+0x232/0x4a0 [ 1593.459415][T31489] allocate_slab+0x8a/0x370 [ 1593.463939][T31489] ___slab_alloc+0xbeb/0x1410 [ 1593.468670][T31489] kmem_cache_alloc_noprof+0x283/0x3c0 [ 1593.474164][T31489] xfrm_state_alloc+0x24/0x2f0 [ 1593.478957][T31489] xfrm_add_sa+0x17d1/0x4070 [ 1593.483568][T31489] xfrm_user_rcv_msg+0x7a0/0xab0 [ 1593.488528][T31489] netlink_rcv_skb+0x208/0x470 [ 1593.493323][T31489] xfrm_netlink_rcv+0x79/0x90 [ 1593.498028][T31489] netlink_unicast+0x82c/0x9e0 [ 1593.502814][T31489] netlink_sendmsg+0x805/0xb30 [ 1593.507600][T31489] __sock_sendmsg+0x21c/0x270 [ 1593.512318][T31489] ____sys_sendmsg+0x505/0x830 [ 1593.517103][T31489] page last free pid 28603 tgid 28603 stack trace: [ 1593.523614][T31489] __free_frozen_pages+0xbc4/0xd30 [ 1593.528758][T31489] free_large_kmalloc+0x13a/0x1f0 [ 1593.533804][T31489] device_release+0x99/0x1c0 [ 1593.538507][T31489] kobject_put+0x22b/0x480 [ 1593.542945][T31489] netdev_run_todo+0xd2e/0xea0 [ 1593.547757][T31489] tun_chr_close+0x13c/0x1c0 [ 1593.552391][T31489] __fput+0x44c/0xa70 [ 1593.556396][T31489] task_work_run+0x1d1/0x260 [ 1593.561119][T31489] exit_to_user_mode_loop+0xec/0x110 [ 1593.566427][T31489] do_syscall_64+0x2bd/0x3b0 [ 1593.571042][T31489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.576949][T31489] [ 1593.579283][T31489] Memory state around the buggy address: [ 1593.584922][T31489] ffff88804a6c0a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1593.593003][T31489] ffff88804a6c0b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1593.601090][T31489] >ffff88804a6c0b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1593.609168][T31489] ^ [ 1593.614818][T31489] ffff88804a6c0c00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 1593.622890][T31489] ffff88804a6c0c80: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 1593.630963][T31489] ================================================================== [ 1593.713579][T31489] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1593.720946][T31489] CPU: 1 UID: 0 PID: 31489 Comm: syz.3.8068 Not tainted syzkaller #0 PREEMPT(full) [ 1593.730362][T31489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1593.740463][T31489] Call Trace: [ 1593.743777][T31489] [ 1593.746745][T31489] dump_stack_lvl+0x99/0x250 [ 1593.751397][T31489] ? __asan_memcpy+0x40/0x70 [ 1593.756038][T31489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1593.761299][T31489] ? __pfx__printk+0x10/0x10 [ 1593.765993][T31489] vpanic+0x281/0x750 [ 1593.770017][T31489] ? preempt_schedule+0xae/0xc0 [ 1593.774925][T31489] ? __pfx_vpanic+0x10/0x10 [ 1593.779470][T31489] ? preempt_schedule_common+0x83/0xd0 [ 1593.784980][T31489] ? preempt_schedule+0xae/0xc0 [ 1593.789973][T31489] ? __pfx_preempt_schedule+0x10/0x10 [ 1593.795440][T31489] panic+0xb9/0xc0 [ 1593.799215][T31489] ? __pfx_panic+0x10/0x10 [ 1593.803699][T31489] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1593.809679][T31489] ? xfrm_state_find+0x2cf2/0x5400 [ 1593.814846][T31489] check_panic_on_warn+0x89/0xb0 [ 1593.819837][T31489] ? xfrm_state_find+0x2cf2/0x5400 [ 1593.825002][T31489] end_report+0x78/0x160 [ 1593.829299][T31489] kasan_report+0x129/0x150 [ 1593.833877][T31489] ? xfrm_state_find+0x2cf2/0x5400 [ 1593.839087][T31489] xfrm_state_find+0x2cf2/0x5400 [ 1593.844145][T31489] ? xfrm_state_find+0x1da/0x5400 [ 1593.849237][T31489] ? __pfx_xfrm_state_find+0x10/0x10 [ 1593.854559][T31489] ? trace_call_bpf+0xb7/0x850 [ 1593.859388][T31489] ? __pfx_trace_call_bpf+0x10/0x10 [ 1593.864666][T31489] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 1593.870877][T31489] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 1593.876728][T31489] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 1593.882676][T31489] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 1593.888617][T31489] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 1593.895256][T31489] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 1593.901204][T31489] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 1593.907301][T31489] ? ip_route_output_flow+0x2a/0x150 [ 1593.912738][T31489] ? xfrm_expand_policies+0x41f/0x6a0 [ 1593.918165][T31489] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 1593.923612][T31489] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 1593.929496][T31489] xfrm_lookup_route+0x3c/0x1c0 [ 1593.934391][T31489] __ip_queue_xmit+0xa08/0x1b00 [ 1593.939289][T31489] ? __ip_queue_xmit+0x63/0x1b00 [ 1593.944272][T31489] ? __pfx_ip_queue_xmit+0x10/0x10 [ 1593.949417][T31489] __tcp_transmit_skb+0x2215/0x3680 [ 1593.954775][T31489] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1593.960416][T31489] ? lockdep_hardirqs_on+0x9c/0x150 [ 1593.965666][T31489] ? tcp_small_queue_check+0x1c1/0x3b0 [ 1593.971166][T31489] tcp_write_xmit+0x1862/0x67f0 [ 1593.976141][T31489] ? __pfx__copy_from_iter+0x10/0x10 [ 1593.981514][T31489] tcp_sendmsg_locked+0x2b9f/0x5620 [ 1593.986937][T31489] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1593.992510][T31489] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1593.997928][T31489] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1594.003378][T31489] tcp_sendmsg+0x2f/0x50 [ 1594.007657][T31489] __sock_sendmsg+0x19c/0x270 [ 1594.012386][T31489] ____sys_sendmsg+0x505/0x830 [ 1594.017201][T31489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1594.022560][T31489] ? import_iovec+0x74/0xa0 [ 1594.027117][T31489] ___sys_sendmsg+0x21f/0x2a0 [ 1594.031850][T31489] ? __pfx____sys_sendmsg+0x10/0x10 [ 1594.037155][T31489] ? __fget_files+0x2a/0x420 [ 1594.041829][T31489] ? __fget_files+0x2a/0x420 [ 1594.046453][T31489] ? __fget_files+0x3a0/0x420 [ 1594.051204][T31489] __x64_sys_sendmsg+0x19b/0x260 [ 1594.056183][T31489] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1594.061710][T31489] ? rcu_is_watching+0x15/0xb0 [ 1594.066532][T31489] ? do_syscall_64+0xbe/0x3b0 [ 1594.071267][T31489] do_syscall_64+0xfa/0x3b0 [ 1594.075815][T31489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.081906][T31489] ? asm_common_interrupt+0x26/0x40 [ 1594.087131][T31489] ? clear_bhb_loop+0x60/0xb0 [ 1594.091851][T31489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.097773][T31489] RIP: 0033:0x7f5949d8ebe9 [ 1594.102215][T31489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1594.121845][T31489] RSP: 002b:00007f594ac8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1594.130293][T31489] RAX: ffffffffffffffda RBX: 00007f5949fc5fa0 RCX: 00007f5949d8ebe9 [ 1594.138295][T31489] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000005 [ 1594.146291][T31489] RBP: 00007f5949e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1594.154298][T31489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1594.162295][T31489] R13: 00007f5949fc6038 R14: 00007f5949fc5fa0 R15: 00007fff032c1788 [ 1594.170349][T31489] [ 1594.173736][T31489] Kernel Offset: disabled [ 1594.178085][T31489] Rebooting in 86400 seconds..