last executing test programs: 10.049278195s ago: executing program 2 (id=1361): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8941, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000580)="27050200160014000600002fb96dbcf706e105000700810000008100", 0x1c}, {&(0x7f0000000700)="cb4e64b0af329873eef1", 0xa}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="5134b68297978f3a8271e5c9de68", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 9.631312289s ago: executing program 2 (id=1368): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x11, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82030, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000005c0), 0x2}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='.//\x00\x00\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000010000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="18500000000000009520dd7dd8545f5ee100000000000013"], &(0x7f0000000580)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r2]}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000dc0)=""/4096, 0x1000}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRESDEC=0x0], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x1945}, 0x0, 0x0, 0x0, 0x8, 0x3, 0x7fffffff, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x17}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x253}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x20598627, 0x830d}, 0x80, 0x6, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.231193386s ago: executing program 2 (id=1373): socket$kcm(0xa, 0x2, 0x73) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x51800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0xa, 0x0, 0x0, 0xc37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x40) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54090, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000340), 0x4}, 0x108a, 0x0, 0x0, 0x2, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffef, 0xffffffffffffffff, 0xa) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r0}, 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ee3231c08cbf9064fcf27149ef949f16c4a820250992ad9dcc3c8a6926d518e5c3"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x393}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000000400000008000000"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random}) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x1f, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x40050) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, &(0x7f0000000180), &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r4, r4, r4, r5, r4, r4], 0x0, 0x10, 0x101}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r7], 0x12) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@cgroup, 0xf, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000005c0)=[0x0], &(0x7f00000006c0), &(0x7f0000000380)=[0x0, 0x0, 0x0]}, 0x40) 8.836763704s ago: executing program 2 (id=1376): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r1 = syz_clone(0x0, &(0x7f0000000100)="abf4bce6a77668e8fcaf54b701b93254e816068762c6efa90e054786c147b832b22dd5345b8d5a6f1c44c2", 0x2b, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="c42bb30126085fed7ef0837431dea983cfdd54669d5295baf48fccbeba3b5b7505101607b3c6a3764481db8fde7216e65d30593dadc3182c1bfa4842d4934f6cd4ec291018b7e8531e5617353ffb38343821d5dcdd719879fed3a7d9") write$cgroup_pid(r0, &(0x7f0000000240)=r1, 0x12) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1000000018f42b"], 0x10}}, 0x8800) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x24, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20040840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fc5d5cfabd095757f800000085000000930000000a616f95000000007788f1e457d930bb4c4b2d34a10d3cad1399124af673004f8e4b93"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) 8.507019554s ago: executing program 2 (id=1378): r0 = getpid() r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x81}, 0x11efa, 0x5, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x6, 0x0, 0xa4ff) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8902, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1006, &(0x7f0000002080)=""/4102}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 8.049277667s ago: executing program 2 (id=1384): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8005, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2a460, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1946}, 0x0, 0x0, 0x0, 0x1, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0000000000000004a6000003"], 0x50) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d712d2d"], 0xe0}], 0x1}, 0x40040) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x9, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0xe, 0x0, 0x0, 0x9, 0x3}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x4, 0x9}, @volatile={0xe}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xd}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0x5, 0x812}, {0x5, 0x4}, {0x0, 0x53}]}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x72, 0x0, 0x6d, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x5f, 0x30, 0x30, 0x0, 0x0, 0x30, 0x2e]}}, &(0x7f0000000600)=""/45, 0xad, 0x2d, 0x0, 0x6, 0x10000}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@lld}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0xf2, &(0x7f0000000680)=""/242, 0xc3300, 0x41, '\x00', r5, 0x0, r6, 0x8, &(0x7f00000008c0)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x19160, r0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000640)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92F\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000060a0b040000000000000000020500000000050000e611783d7c8d6c75c2637cfc6e11db245ccd623ed297fa1652ff4baa52d9385966a25a5a1701d024c7bb319efaf200000006000000000000000000005b18dc625df58b8874fa672dd9ab2b74fab3b641b57ff82a223c9fcabbc26ea4d07b68c7fac6dff8dc66851d8959193396e8888bc2ac28ccfc1301dd9cd15ea7eaf164f39f99689a2ec3f27ea1da1c62e94f"], 0x3c}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) socket$nl_rdma(0x10, 0x3, 0x14) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@gettclass={0x0, 0x2a, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x8, 0xa}, {0x6, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x6c}, 0x1, 0x0, 0x0, 0x404c885}, 0x0) 3.835530565s ago: executing program 4 (id=1407): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x4, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x5, 0x0) (async) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x102) (async) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x102) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000180), 0x43) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x35}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 3.50498313s ago: executing program 3 (id=1412): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x52, 0x11, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xf7, 0x80aea}, 0x14105, 0x2e, 0x93c, 0x6, 0x7, 0x7, 0xe8c, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000340)="5ebf5032945d932cfba39f6f37736fc80100000080", 0x15}, {&(0x7f0000000500)="7c71f7bd7219573101e1d7518d84bd247a49c5876d92a6b314fc3522c20dc2ef75fa6fe7869fdf411b7c58d2a74928bc9204444afe5aebcd44752b8a20b0d9e8f600c0927f485e8abb399769515ce849495b031a38103e9e584e51caae2203b2a422d5ba15ccb940c566924d517e1248b0e6d90fdca0b24e", 0x78}, {&(0x7f0000000380)="54c0c510f3b9fb2bac375a26d1f1f148afea0fb146a6acd91dea54f6ae731dc2239dcc25a7a6d0", 0x27}], 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x40}, 0x20000000) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1946}, 0x0, 0x3, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1b, &(0x7f0000000040), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000020000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x20000040) r7 = socket(0x1d, 0x2, 0x6) setsockopt$sock_attach_bpf(r7, 0x84, 0x6e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffbfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.245103665s ago: executing program 3 (id=1415): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x13, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x967, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.046917348s ago: executing program 3 (id=1416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_OSF_TTL={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}}, 0x14}}, 0x4800) 2.973434391s ago: executing program 1 (id=1417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0xb, &(0x7f0000000000), &(0x7f00000002c0)="330e44047140d06a2b4769"}, 0x50) socketpair(0x1, 0x1, 0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) 2.795070428s ago: executing program 3 (id=1419): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000006000000000000000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000ed, 0x1af1ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8000) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x0, 0x1}, 0x18208, 0x3, 0x0, 0x0, 0x1000, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x15, 0x5, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2, 0xfffffffffffffffc}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xc, &(0x7f0000000100)=r5, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) 2.707955868s ago: executing program 4 (id=1421): socketpair(0x22, 0x2, 0x2, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000003a000103a5bd7000fcffffff05"], 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x20004800) sendmsg$kcm(r0, &(0x7f0000000a40)={&(0x7f0000000540)=@in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000680)="58304569ff22960003911b66ef539e8fadfd9d5223bd869f4fa304b7e25ba898ddd07c0ecff0ed479b382a5addebf579932abd9b81c2a869074713cfa9e8b89490edd067d08c8a0395338b87a7a613a6e7944baa385abd3f7ad249445f785cd0c63236c396267cdfa1d7d07e4870a1bc70ef3fade13229dfb165b616a4bf776cdf2e522ea86fa3dab066995fd78ee51793de457deb659914728d3ec63e3dfe2773a6c889149ca37e2b7e87bfa3749ee916750e00d4eedcd3c9da223bb8970697a36d3b69", 0xc4}, {&(0x7f0000000780)="d37f3a6100e5ad57aa781409fe40a70b2b193b5d62ed34041eaced163e222084854a012ace69b9d35abe8991c00fe40dcf44487764aea9f74a94d87296ddf48dfb6d92ae42e5e77d693860d9e4700e135c72e18172ef4257ac02dbee", 0x5c}, {&(0x7f0000000800)="ba6de84880ddc19da03e5e9f209b88860b78970e244b95c8d0c3aa8e7d8ee8d6bbb9eb7a0fec85ac64d97d616280456299e76e89d56cd95b9494594be66d5fb429b6710189667d24cb2db2eaaffddfce9133488286f92b568159762336c83d52639b2d53b25eff3de7098a2e13e87df58ed98f20081172c3faaf38dc5cb0f3b77222c3247513032cd5e4972893ec27f9d27cf8213a7b2ae4e5a26c93469a9d5d74408c1943851521b7e9ae3eab460dd45adc33c5f88c80d94bed3d4c99e432be7b1ae1cc3493da958003e6e169b79eeb5d5584902c16ca5a0bd6adf52ad18cf7b4d043ea5b4eb4e86ea000035f9eff4e09f6", 0xf2}, {&(0x7f0000000900)="a1996654", 0x4}, {&(0x7f0000000940)="12d2e0928897c0e466aeb2dafa07080353e461883f5dd909ebd73732ad9ca463765d2a72d1f72f9e59a9ee227392b7035af9eebfa2f6d702bac3d1c671bc0ac2ca61a3db62", 0x45}], 0x5}, 0x81) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000040)="3708fa406eb34cc75cfd49185b16fb5deb7334718b2029f815ef23b58823f4f6e0f872184108569646f924aed21661d937de85c903fa2e88651f4da9729b446ee9a060426f65e8ee2a57935ae91e409f4a4b536b8dfac19a5d70ceb3daaddd45d15391469bc6566f65a3cc506e7c47704a4702828d141b81ee28a7c3f61aa0f63322420771e4d154a6bc4426dc95456dd131d056ee26c43b5bed41f3298356718278dc074296b14c3dd04049634e", 0xae}, {&(0x7f0000000100)="5cefd5ecc93e11ef0ec3e10892f2aa61bf31fad0ab0c34db3bd2ed70942c2126ba8bf1cd8e97116c86acded06a783a381146b3ec43de0912805e1ce25f90184cf9656bde2354f5afde7d95bed6a8b1c5ad3e39a2a95046958dc179374697c5c88f5f9e47d450a187ed4bcba9ccf69f9f642e24d49f8f582a22ae674d119cdd6849674c4230e99313fffdced5cd188cb6e35c3446a884d00275de785a0e356700f5b931c7ff04d308d90c056109de6944e31b3cff9792b8ff4a07707862657ede7bced7337ca44d697937f2a43399752ec985b1748be734cf6331efa0fd038f1a4a0161", 0xe3}, {&(0x7f0000000200)="b9fab7ed8e2831ef79138621", 0xc}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000000240)="b76ff534b0724d714cdbbf7cebeed09bd12480aad2302b3e6ed28aff9be95229d10f3081c1792ec2486b827202e9393a18f8d6d6c42e5c40d0fc685bb217ebf63cb676fdd616052effba7cc92a60baee47736d48999277a31fe22e4dc60da902defa6bfe56898c7c377affebbd3011a78d55", 0x72}, {&(0x7f00000002c0)="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", 0xfd}, {&(0x7f00000003c0)="28ac0e10b7bab24788907130714ea14da8e89827921e4fe5954e4c1f35b570a17813eb6bca21497e6b76cb0d89afb2e8d53dee97e570b5ec249de436d879f5bcf46a417103827cd08b9c898564b8506862da6820e3179b3e0ba393767f5f46bd2b80f39e9693d485db337ed30eb6b2f93677a84bfec7357ba060c83dd1fe462aebfbf152025337a140cce8d0c273a612d6503ac4a8b66e872b69701469449c72f357806ce8310db2f8fb21798364", 0xae}], 0x7}, 0x0) 2.645533293s ago: executing program 1 (id=1422): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="4401000010001307fefffffffcdbdf2564010101000000000000000000000000200100000000000000000000000000010c0000004e2100020a00a7436c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000008000043050000000000000400000000000000ffffffffffffff7f000000000000000000000000000000000200000000000000080000002cbd70000335000002"], 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000a000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) sendmsg$tipc(r1, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x3, 0x2}}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="b551d22b60609a3ac6b50045ede982c3fd1dfebf8b46e8ac52e4c540dd5da1765c8439e6924415853c494636e6a80163de0598f6df223f9f84a4ac3c3446d03281982a4fad6d7f3e2dd70dbfc268149bdb436915", 0x54}, {&(0x7f0000000240)="55a08b495f369be96d36ad89b93d7f8890cee154da8f5dd73af63eff75b34af724ac352de4614252f7635175246b7baedb9cad3ada25096f6233111c95fc8f2365202c0a93b1d6236181d10ee786b379f18103d13acba64ef40310751991410e8fa4c02adf06b80e5caef5296d8ebeba278cf19a3b9867416738766cc5b31eb1dee5c6a6b5e6233ec29b7db7ef8d8ec6e0e886919181d5263ae19d628793e76e8ecf45fcaf7b87f827c8dd1b429ca3dcc1d365c90d1657868078acdfb48dad0cd20443135f075f734902b9787b34", 0xce}], 0x2}, 0x24044840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0xa8, 0x0, 0x1, 0x505, 0x0, 0x0, {0x7}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x38}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0xa8}}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xb, 0x3, 0xd5, 0x9, 0x0, 0x9, 0x2c21, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000001c0), 0x9}, 0xe129de113a84fa7d, 0x8, 0x9, 0x0, 0x6, 0x81, 0x5, 0x0, 0x6d, 0x0, 0x7fffffffffffffff}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114103, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4020000000000006111640000000000850000001c00"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f00000012c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xdf, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb", 0x0, 0x8, 0x60000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="18040000000000000000000000000000180000000000000000000000000000003c4401000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) getpid() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe7d) r7 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24004001) 2.549481735s ago: executing program 0 (id=1423): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0xa, 0x2, 0x88) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x44044) (async) socket$kcm(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000008082295", @ANYRES8=r0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x9d, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f20e94d079f199b8a1fb521f3756a955ecdf157902f64d1c3c941187f21467c767be90f8829742af2bc17d5721b550573478b6b8282040c5a3747186fdbb5cd07a005be37af4306c2444dad7bc6bee8ca671654ba67b740554a723ad450d2fe05e561efd5b5fd646a06d273ca188f346864bb2a4ba3f2ea1dfb3a21122eae0d8b60fad85a08720d94453f17dff13d4b", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 2.161232083s ago: executing program 4 (id=1424): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2080}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000007c0)='snd_soc_dapm_path\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\t\x00\x00\x00\t\x00\x00\x00\t\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000ed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f00000001c0), 0x0}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200040c4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESOCT=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = socket$kcm(0x10, 0x400000007, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabc"], 0xfe33) getpid() bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89fb, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000080000000000000000008085100000010000009500000000000000180000000001000000000000022020207b1af8ff000000001f0200000000000007010000f8ffffffb71c000008000000b703000000000028850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00'}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80440, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0, 0x1}, 0x100, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="7cce8f55c79cea3cb82ade967d439a375559411c2e6c80d17e0e98321ad1d09f59af35c4eb7a8a1ad3db37903ef0a9c057fb0f7318ef783432e90f27dcd8335438741197"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0xfffffefd, 0x0, 0x41000, 0x38, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 2.023343549s ago: executing program 0 (id=1425): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x28, 0x0, &(0x7f0000000880)="f8ad1dcc02cb29dcc8003200810066a286ddc6617f503e7457188353133a3d4070574ac945c1be1c", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x8, 0x5, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a320000000040000380080002402000000008000140000000002c0003801400010070696d36726567310000000000000000140001007665745b305f746f5f626f6e6400000048000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000001c00038018000380140001"], 0xfc}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x8, 0x0, 0x5, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x4008, 0x0, 0x202, 0x0, 0x3fe, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94) (async, rerun: 32) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r6 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000000)) (rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socket$nl_rdma(0x10, 0x3, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) 1.879581372s ago: executing program 1 (id=1426): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a0016000900142603600e120800090000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x11) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x8000000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000280), 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r2, &(0x7f0000000380)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x2711}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)="ba66c9184ae9ba6e8c702ef8dc2e48139acdae3f19c70814b1fa7800d80fecc9516dc22261f3c9021a019ae103dfd7db8174bb44531907ba50f96c289b753b1bab18d49dba86f2f82eceb970f21525dbba29729def573fd43e972a59cdbd93165fab5b547336574a9193d10a5d0f320cb21bb9685ab2fcc8ce6c8aae6996a836c4e0937745e3271d2bae06612b204e84036856d470c34fd7b4ade766b70ae2091d3a0520e3db84afac6613cde195f0cb778c64ef1f30028bfd4c5de76e4039a83a8ae17a90bbd121dd33f17e3a408f", 0xcf}, {&(0x7f0000000300)="2f04d629beabfefb32e4f4a6926490efff92cee6bde4176f2680164aa5d91e78627efc989b6ad61615b273c8315c76e8b878c8b6ec3eec9837a2c8f8578cbf7c2a75f6b682e1f8c67c964c0bb3b431fa2bfc2628fd644bcefe81bff88b735b458067e66d0b04", 0x66}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="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", 0x1000}], 0x4}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x17, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x88}}}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.861859924s ago: executing program 0 (id=1427): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x52, 0x11, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xf7, 0x80aea}, 0x14105, 0x2e, 0x93c, 0x6, 0x7, 0x7, 0xe8c, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000340)="5ebf5032945d932cfba39f6f37736fc80100000080", 0x15}, {&(0x7f0000000500)="7c71f7bd7219573101e1d7518d84bd247a49c5876d92a6b314fc3522c20dc2ef75fa6fe7869fdf411b7c58d2a74928bc9204444afe5aebcd44752b8a20b0d9e8f600c0927f485e8abb399769515ce849495b031a38103e9e584e51caae2203b2a422d5ba15ccb940c566924d517e1248b0e6d90fdca0b24e", 0x78}, {&(0x7f0000000380)="54c0c510f3b9fb2bac375a26d1f1f148afea0fb146a6acd91dea54f6ae731dc2239dcc25a7a6d0", 0x27}], 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x40}, 0x20000000) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1946}, 0x0, 0x3, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1b, &(0x7f0000000040), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000020000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x20000040) r7 = socket(0x1d, 0x2, 0x6) setsockopt$sock_attach_bpf(r7, 0x84, 0x6e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffbfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.810905777s ago: executing program 3 (id=1428): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async, rerun: 32) r4 = socket(0x10, 0x80002, 0x0) (rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x60, &(0x7f0000001680)={&(0x7f00000003c0)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0x6}, {0x73, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x3, 0x2, {0x4, 0x0, 0xe4ffffff}}, @TCA_DEF_PARMS={0x0, 0x2, {0x2, 0x5, 0x2, 0x600, 0x10}}, @TCA_DEF_DATA={0x0, 0x3, '\x00'}, @TCA_DEF_PARMS={0x0, 0x2, {0x7ff, 0x1, 0x2, 0x4, 0x10001}}, @TCA_DEF_PARMS={0x0, 0x2, {0x2980000, 0x7, 0x0, 0x70c, 0x5}}, @TCA_DEF_PARMS={0x0, 0x2, {0x800, 0x8, 0x8, 0xc, 0xfffffffd}}]}, {0x59}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 1.660002587s ago: executing program 4 (id=1429): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1802000040000000000000000000000085000000a400000095"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x1f00, 0x2b, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@generic={0x79, 0x0, 0x0, 0xe7}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.495997445s ago: executing program 0 (id=1430): socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x5, 0x84) r0 = socket(0x840000000002, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2001, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x3, 0x0, 0x8, 0x3fe, 0x7ffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x30, 0x7, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000280)=[0x0], 0x0, 0x9c, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f0000000340), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r5}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x22, 0x2, 0x21) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000000000203000000000000000000000900000000"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={0x0, 0x430}}, 0x40000) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1947}, 0x0, 0x0, 0x0, 0x8, 0x40103fe, 0x7, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0xfd, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x8, 0x1ef7}, 0x19eb2, 0x2, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) 1.26026393s ago: executing program 4 (id=1431): socket$kcm(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = getpid() syz_open_procfs$namespace(r0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@fallback, 0xffffffffffffffff, 0x18, 0x1a, 0xffffffffffffffff, @void, @value=r1}, 0x20) (async) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100, 0x0, 0x0, 0x0, 0xab93}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000f00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) (async) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) fstat(0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x9, 0x0, 0x0, 0xf, 0x1, [], "cb"}]}}, &(0x7f0000000a00)=""/193, 0x2a, 0xc1, 0x0, 0x7}, 0x28) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000089a33f76", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.191238999s ago: executing program 1 (id=1432): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000240)={0xa, 0x4e24, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x42}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x7e2fd684}}], 0x30}, 0x4004) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x82900, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x2, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x2e, 0x30, 0x2e, 0x2e, 0x2e, 0x5f]}}, &(0x7f0000000140)=""/231, 0x2c, 0xe7, 0x0, 0x0, 0x10000}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, 0xffffffffffffffff}, 0x4) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2e, &(0x7f0000000640), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0x1, 0x0}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x20, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40448d3}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x5, 0x0, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffffc}], &(0x7f0000000040)='syzkaller\x00', 0x400, 0x6c, &(0x7f0000000080)=""/108, 0x41000, 0x59, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000002c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r2, 0x1], &(0x7f0000000400), 0x10, 0x4}, 0x94) 785.325578ms ago: executing program 3 (id=1433): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, 0x0, 0x42) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="540100001000010029bd700000000000fe880000000000000000000000000101ac1414bb0000bd000000000000000000000000000000ffdf0200000064000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000ac14143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000010000000000000008000000000002000000000000000000000700000002000000ffffffff0100000002000506d500000000000000480002006362632861657329000000"], 0x154}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x32}}) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x10828, 0x0, 0x0, 0x2, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x14030, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x1bc, 0x1, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_CT={0x40, 0xb, 0x0, 0x1, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xa0eb396f}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}]}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x2}}, @NFQA_CT={0xb0, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1000}]}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}]}]}, @NFQA_PAYLOAD={0x4d, 0xa, "32d0eb859a8e66376d9a912ef2ad13fd3e22e63ec74ac03eaea597e2c24676266cfda595159a0edb53950c8d6015340f582f75f1e7831a83f8bf0b9581d462f08a87849d9b2786e5ae"}, @NFQA_VLAN={0x54, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1a2e}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xd7}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5994}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xd}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$bpf(0x0, &(0x7f0000000240)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0), 0x41, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006200)=ANY=[@ANYBLOB="b8000000150001fe"], 0xb8}}, 0x0) 767.481188ms ago: executing program 1 (id=1434): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000019000000760000000000000027007fffffff00009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfffffffffffffeee}, 0x23) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8 1 [ 85.838987][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.848267][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.857540][ T5876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.875312][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.894509][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.918427][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.933463][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.945083][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.952685][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.960965][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.963994][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.969281][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.975622][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.985158][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.999009][ T5869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.006917][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.007075][ T5878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.024636][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.026055][ T5878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.036615][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.047017][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.054781][ T5878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.076034][ T5878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.084002][ T5878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.684288][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 86.771523][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 86.919550][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 86.982258][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 87.243698][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 87.263619][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.271789][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.283823][ T5863] bridge_slave_0: entered allmulticast mode [ 87.292195][ T5863] bridge_slave_0: entered promiscuous mode [ 87.312840][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.320089][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.327767][ T5865] bridge_slave_0: entered allmulticast mode [ 87.335387][ T5865] bridge_slave_0: entered promiscuous mode [ 87.350418][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.357610][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.364963][ T5863] bridge_slave_1: entered allmulticast mode [ 87.372276][ T5863] bridge_slave_1: entered promiscuous mode [ 87.391097][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.398360][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.405702][ T5865] bridge_slave_1: entered allmulticast mode [ 87.412902][ T5865] bridge_slave_1: entered promiscuous mode [ 87.525911][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.552374][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.576044][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.583480][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.590937][ T5880] bridge_slave_0: entered allmulticast mode [ 87.598447][ T5880] bridge_slave_0: entered promiscuous mode [ 87.607142][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.614367][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.621615][ T5880] bridge_slave_1: entered allmulticast mode [ 87.629220][ T5880] bridge_slave_1: entered promiscuous mode [ 87.639445][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.673697][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.683086][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.690537][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.697835][ T5862] bridge_slave_0: entered allmulticast mode [ 87.705816][ T5862] bridge_slave_0: entered promiscuous mode [ 87.714464][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.722322][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.729757][ T5862] bridge_slave_1: entered allmulticast mode [ 87.737733][ T5862] bridge_slave_1: entered promiscuous mode [ 87.840407][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.852664][ T5865] team0: Port device team_slave_0 added [ 87.894412][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.907555][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.918496][ T5865] team0: Port device team_slave_1 added [ 87.951700][ T5863] team0: Port device team_slave_0 added [ 87.960838][ T5863] team0: Port device team_slave_1 added [ 87.969387][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.005960][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.013141][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.020855][ T5874] bridge_slave_0: entered allmulticast mode [ 88.028443][ T5874] bridge_slave_0: entered promiscuous mode [ 88.035021][ T5866] Bluetooth: hci2: command tx timeout [ 88.081752][ T5880] team0: Port device team_slave_0 added [ 88.089462][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.097149][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.104737][ T5874] bridge_slave_1: entered allmulticast mode [ 88.112001][ T5874] bridge_slave_1: entered promiscuous mode [ 88.117994][ T5866] Bluetooth: hci3: command tx timeout [ 88.118301][ T5866] Bluetooth: hci1: command tx timeout [ 88.129180][ T5877] Bluetooth: hci0: command tx timeout [ 88.170615][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.177853][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.197020][ T5866] Bluetooth: hci4: command tx timeout [ 88.203996][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.222841][ T5880] team0: Port device team_slave_1 added [ 88.242590][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.249841][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.276148][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.289318][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.296382][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.322486][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.336546][ T5862] team0: Port device team_slave_0 added [ 88.342938][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.350013][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.376322][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.402791][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.416185][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.433518][ T5862] team0: Port device team_slave_1 added [ 88.532003][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.539149][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.566218][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.579185][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.586376][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.612615][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.627035][ T5874] team0: Port device team_slave_0 added [ 88.633889][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.641432][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.667688][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.737139][ T5874] team0: Port device team_slave_1 added [ 88.756503][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.763499][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.790424][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.816469][ T5865] hsr_slave_0: entered promiscuous mode [ 88.823154][ T5865] hsr_slave_1: entered promiscuous mode [ 88.864337][ T5880] hsr_slave_0: entered promiscuous mode [ 88.870812][ T5880] hsr_slave_1: entered promiscuous mode [ 88.877580][ T5880] debugfs: 'hsr0' already exists in 'hsr' [ 88.883440][ T5880] Cannot create hsr debugfs directory [ 88.899413][ T5863] hsr_slave_0: entered promiscuous mode [ 88.906177][ T5863] hsr_slave_1: entered promiscuous mode [ 88.912526][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 88.918479][ T5863] Cannot create hsr debugfs directory [ 88.992454][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.999859][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.027083][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.040495][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.047884][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.073941][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.151016][ T5862] hsr_slave_0: entered promiscuous mode [ 89.157693][ T5862] hsr_slave_1: entered promiscuous mode [ 89.163805][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 89.169704][ T5862] Cannot create hsr debugfs directory [ 89.384048][ T5874] hsr_slave_0: entered promiscuous mode [ 89.390592][ T5874] hsr_slave_1: entered promiscuous mode [ 89.397587][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 89.403346][ T5874] Cannot create hsr debugfs directory [ 89.769114][ T5880] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.790220][ T5880] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.823320][ T5880] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.859263][ T5880] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.931705][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.956079][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.980085][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.009172][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.066190][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.086355][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.110183][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.117456][ T5866] Bluetooth: hci2: command tx timeout [ 90.142660][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.194738][ T5877] Bluetooth: hci3: command tx timeout [ 90.194762][ T5878] Bluetooth: hci1: command tx timeout [ 90.206215][ T5866] Bluetooth: hci0: command tx timeout [ 90.240754][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.257377][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.275349][ T5877] Bluetooth: hci4: command tx timeout [ 90.309595][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.337089][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.352841][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.366782][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.427240][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.434568][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.469366][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.476674][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.506524][ T5874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.518109][ T5874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.532020][ T5874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.571917][ T5874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.656550][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.701929][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.779677][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.801783][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.833483][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.840736][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.863390][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.881461][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.888692][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.933899][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.941162][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.952017][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.959261][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.069476][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.105827][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.113051][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.168403][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.222135][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.229396][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.281324][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.402950][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.431964][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.460764][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.468021][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.491683][ T5880] veth0_vlan: entered promiscuous mode [ 91.530510][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.537734][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.630838][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.661714][ T5880] veth1_vlan: entered promiscuous mode [ 91.751192][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.830218][ T5880] veth0_macvtap: entered promiscuous mode [ 91.858301][ T5880] veth1_macvtap: entered promiscuous mode [ 91.999132][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.029661][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.058289][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.064637][ T982] cfg80211: failed to load regulatory.db [ 92.090248][ T5865] veth0_vlan: entered promiscuous mode [ 92.147226][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.173909][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.195847][ T5877] Bluetooth: hci2: command tx timeout [ 92.218256][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.240466][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.262567][ T5865] veth1_vlan: entered promiscuous mode [ 92.274335][ T5877] Bluetooth: hci3: command tx timeout [ 92.279797][ T5877] Bluetooth: hci0: command tx timeout [ 92.281085][ T5866] Bluetooth: hci1: command tx timeout [ 92.340425][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.354447][ T5866] Bluetooth: hci4: command tx timeout [ 92.465744][ T5863] veth0_vlan: entered promiscuous mode [ 92.475232][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.479594][ T5862] veth0_vlan: entered promiscuous mode [ 92.495609][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.530067][ T5865] veth0_macvtap: entered promiscuous mode [ 92.560882][ T5865] veth1_macvtap: entered promiscuous mode [ 92.570121][ T5863] veth1_vlan: entered promiscuous mode [ 92.579512][ T5862] veth1_vlan: entered promiscuous mode [ 92.602185][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.611517][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.658327][ T5874] veth0_vlan: entered promiscuous mode [ 92.678818][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.716616][ T5863] veth0_macvtap: entered promiscuous mode [ 92.730311][ T5880] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.737963][ T5874] veth1_vlan: entered promiscuous mode [ 92.769955][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.781389][ T5863] veth1_macvtap: entered promiscuous mode [ 92.850559][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.876662][ T5862] veth0_macvtap: entered promiscuous mode [ 92.891635][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.910078][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.923765][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.945379][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.969034][ T5862] veth1_macvtap: entered promiscuous mode [ 92.982005][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.040377][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.053030][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.067250][ T5874] veth0_macvtap: entered promiscuous mode [ 93.101536][ T5874] veth1_macvtap: entered promiscuous mode [ 93.132560][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.150453][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.214102][ C0] hrtimer: interrupt took 34523 ns [ 93.252660][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.328532][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.332522][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.363971][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.370684][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.415130][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.423963][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.451062][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.508953][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.525676][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.599851][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.613315][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.630627][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.651716][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.724029][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.756872][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.804862][ T2897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.826839][ T2897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.978389][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.033620][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.195762][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.238895][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.349350][ T5866] Bluetooth: hci2: command tx timeout [ 94.355774][ T5866] Bluetooth: hci0: command tx timeout [ 94.361629][ T5866] Bluetooth: hci3: command tx timeout [ 94.367171][ T5866] Bluetooth: hci1: command tx timeout [ 94.406773][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.427084][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.504987][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.512872][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.544398][ T5878] Bluetooth: hci4: command tx timeout [ 94.621751][ T5994] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.085086][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'. [ 95.150573][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 95.268636][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.284627][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.582796][ T5996] syz.4.5 (5996) used greatest stack depth: 15768 bytes left [ 95.770056][ T6011] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 95.819752][ T6011] unsupported nlmsg_type 40 [ 96.877135][ T6032] netlink: 17 bytes leftover after parsing attributes in process `syz.2.13'. [ 96.938279][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 96.956789][ T6032] netlink: zone id is out of range [ 96.961987][ T6032] netlink: zone id is out of range [ 97.055616][ T6035] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15'. [ 97.068558][ T6032] netlink: zone id is out of range [ 97.091146][ T6032] netlink: zone id is out of range [ 97.160162][ T6032] netlink: zone id is out of range [ 97.200056][ T6032] netlink: zone id is out of range [ 97.328432][ T6032] netlink: zone id is out of range [ 97.496711][ T6032] netlink: zone id is out of range [ 97.501932][ T6032] netlink: zone id is out of range [ 97.590876][ T6032] netlink: zone id is out of range [ 97.835664][ T6050] ======================================================= [ 97.835664][ T6050] WARNING: The mand mount option has been deprecated and [ 97.835664][ T6050] and is ignored by this kernel. Remove the mand [ 97.835664][ T6050] option from the mount to silence this warning. [ 97.835664][ T6050] ======================================================= [ 97.885021][ T6047] netlink: 180 bytes leftover after parsing attributes in process `syz.4.18'. [ 98.236192][ T6053] netlink: 'syz.0.19': attribute type 21 has an invalid length. [ 98.431739][ T6052] netlink: 'syz.1.17': attribute type 1 has an invalid length. [ 98.702882][ T6052] netlink: 'syz.1.17': attribute type 2 has an invalid length. [ 98.826809][ T6059] C: renamed from team_slave_0 (while UP) [ 98.859935][ T6059] netlink: 'syz.3.21': attribute type 3 has an invalid length. [ 98.952488][ T6059] netlink: 152 bytes leftover after parsing attributes in process `syz.3.21'. [ 99.106529][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 99.254557][ T6068] Illegal XDP return value 4294967274 on prog (id 17) dev N/A, expect packet loss! [ 100.100783][ T6090] netlink: 20 bytes leftover after parsing attributes in process `syz.3.33'. [ 100.209099][ T6089] syz.1.32: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 100.294689][ T6089] CPU: 0 UID: 0 PID: 6089 Comm: syz.1.32 Not tainted syzkaller #0 PREEMPT(full) [ 100.294719][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 100.294738][ T6089] Call Trace: [ 100.294751][ T6089] [ 100.294765][ T6089] dump_stack_lvl+0x189/0x250 [ 100.294831][ T6089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.294869][ T6089] ? __pfx__printk+0x10/0x10 [ 100.294914][ T6089] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 100.294947][ T6089] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 100.294996][ T6089] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 100.295055][ T6089] warn_alloc+0x214/0x310 [ 100.295098][ T6089] ? stack_depot_save_flags+0x41b/0x860 [ 100.295143][ T6089] ? __pfx_warn_alloc+0x10/0x10 [ 100.295192][ T6089] ? kasan_save_track+0x4f/0x80 [ 100.295236][ T6089] ? xskq_create+0x56/0x170 [ 100.295259][ T6089] ? xsk_init_queue+0xb0/0x110 [ 100.295279][ T6089] ? xsk_setsockopt+0x57b/0x8d0 [ 100.295300][ T6089] ? do_sock_setsockopt+0x179/0x1b0 [ 100.295328][ T6089] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 100.295356][ T6089] ? do_syscall_64+0xfa/0x3b0 [ 100.295382][ T6089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.295451][ T6089] __vmalloc_node_range_noprof+0x125/0x12f0 [ 100.295642][ T6089] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 100.295703][ T6089] ? __kasan_kmalloc+0x93/0xb0 [ 100.295752][ T6089] vmalloc_user_noprof+0xad/0xf0 [ 100.295783][ T6089] ? xskq_create+0xbf/0x170 [ 100.295823][ T6089] xskq_create+0xbf/0x170 [ 100.295875][ T6089] xsk_init_queue+0xb0/0x110 [ 100.295926][ T6089] xsk_setsockopt+0x57b/0x8d0 [ 100.295975][ T6089] ? __pfx_xsk_setsockopt+0x10/0x10 [ 100.296010][ T6089] ? __pfx_aa_sk_perm+0x10/0x10 [ 100.296072][ T6089] ? __fget_files+0x2a/0x420 [ 100.296095][ T6089] ? aa_sock_opt_perm+0xff/0x1b0 [ 100.296149][ T6089] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 100.296177][ T6089] ? __pfx_xsk_setsockopt+0x10/0x10 [ 100.296221][ T6089] do_sock_setsockopt+0x179/0x1b0 [ 100.296287][ T6089] __x64_sys_setsockopt+0x13f/0x1b0 [ 100.296358][ T6089] do_syscall_64+0xfa/0x3b0 [ 100.296387][ T6089] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.296420][ T6089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.296444][ T6089] ? clear_bhb_loop+0x60/0xb0 [ 100.296492][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.296514][ T6089] RIP: 0033:0x7f4b7c78eec9 [ 100.296550][ T6089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.296567][ T6089] RSP: 002b:00007f4b7d6c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 100.296589][ T6089] RAX: ffffffffffffffda RBX: 00007f4b7c9e5fa0 RCX: 00007f4b7c78eec9 [ 100.296605][ T6089] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 100.296617][ T6089] RBP: 00007f4b7c811f91 R08: 0000000000000004 R09: 0000000000000000 [ 100.296630][ T6089] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 100.296643][ T6089] R13: 00007f4b7c9e6038 R14: 00007f4b7c9e5fa0 R15: 00007fff886c8958 [ 100.296752][ T6089] [ 100.664527][ T6089] Mem-Info: [ 100.679164][ T6089] active_anon:5456 inactive_anon:0 isolated_anon:0 [ 100.679164][ T6089] active_file:3017 inactive_file:39878 isolated_file:0 [ 100.679164][ T6089] unevictable:768 dirty:1591 writeback:0 [ 100.679164][ T6089] slab_reclaimable:10652 slab_unreclaimable:95058 [ 100.679164][ T6089] mapped:29183 shmem:1356 pagetables:1094 [ 100.679164][ T6089] sec_pagetables:0 bounce:0 [ 100.679164][ T6089] kernel_misc_reclaimable:0 [ 100.679164][ T6089] free:1329603 free_pcp:17553 free_cma:0 [ 100.825762][ T6089] Node 0 active_anon:21724kB inactive_anon:0kB active_file:12068kB inactive_file:159308kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116732kB dirty:6348kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11696kB pagetables:4208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 100.858941][ T6089] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 100.889253][ T6089] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 100.922072][ T6089] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 100.945446][ T6089] Node 0 DMA32 free:1414860kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21676kB inactive_anon:0kB active_file:12068kB inactive_file:157740kB unevictable:1536kB writepending:6340kB present:3129332kB managed:2557364kB mlocked:0kB bounce:0kB free_pcp:49704kB local_pcp:33492kB free_cma:0kB [ 101.014276][ T6089] lowmem_reserve[]: 0 0 1 1 1 [ 101.021540][ T6089] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:8kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 101.204352][ T6089] lowmem_reserve[]: 0 0 0 0 0 [ 101.209187][ T6089] Node 1 Normal free:3888212kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20992kB local_pcp:10784kB free_cma:0kB [ 101.309759][ T6089] lowmem_reserve[]: 0 0 0 0 0 [ 101.339972][ T6089] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 101.357433][ T6089] Node 0 DMA32: 630*4kB (UME) 106*8kB (UME) 13*16kB (UM) 2*32kB (UM) 4*64kB (UME) 2*128kB (UM) 3*256kB (UME) 1*512kB (U) 1*1024kB (U) 7*2048kB (ME) 341*4096kB (M) = 1417528kB [ 101.381564][ T6095] netlink: 48 bytes leftover after parsing attributes in process `syz.0.35'. [ 101.441825][ T6089] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 101.455364][ T6089] Node 1 Normal: 209*4kB (UME) 50*8kB (UME) 38*16kB (UME) 73*32kB (UME) 22*64kB (UME) 9*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3888212kB [ 101.482374][ T6089] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.503303][ T6089] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.513601][ T6089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.531000][ T6089] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.541248][ T6089] 44247 total pagecache pages [ 101.546550][ T6089] 0 pages in swap cache [ 101.551124][ T6089] Free swap = 124996kB [ 101.556063][ T6089] Total swap = 124996kB [ 101.560440][ T6089] 2097051 pages RAM [ 101.565386][ T6089] 0 pages HighMem/MovableOnly [ 101.570696][ T6089] 425684 pages reserved [ 101.582561][ T6089] 0 pages cma reserved [ 102.127231][ T6112] syz.4.39 uses obsolete (PF_INET,SOCK_PACKET) [ 102.443991][ T6117] netlink: 196 bytes leftover after parsing attributes in process `syz.3.40'. [ 102.576757][ T6119] netlink: 160 bytes leftover after parsing attributes in process `syz.0.41'. [ 102.606334][ T6114] netlink: 132 bytes leftover after parsing attributes in process `syz.3.40'. [ 102.783584][ T6122] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.42'. [ 106.154985][ T6136] delete_channel: no stack [ 107.312946][ T6159] xt_l2tp: invalid flags combination: 0 [ 107.388485][ T6161] warning: `syz.4.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.465539][ T6163] netlink: 'syz.4.54': attribute type 10 has an invalid length. [ 107.497850][ T6164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.55'. [ 107.526777][ T6166] netlink: 72 bytes leftover after parsing attributes in process `syz.4.54'. [ 107.607401][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.54'. [ 107.697073][ T6166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.54'. [ 108.171312][ T6161] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 108.258561][ T6163] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 108.344259][ T6179] ref_ctr_offset mismatch. inode: 0x57 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 108.430834][ T6176] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.59'. [ 108.492447][ T6176] net_ratelimit: 79 callbacks suppressed [ 108.492519][ T6176] netlink: zone id is out of range [ 108.516012][ T6188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.62'. [ 108.532679][ T6188] openvswitch: netlink: Flow key attr not present in new flow. [ 108.533279][ T6185] netlink: 'syz.3.60': attribute type 2 has an invalid length. [ 108.574889][ T6176] netlink: get zone limit has 8 unknown bytes [ 108.583074][ T6185] netlink: 'syz.3.60': attribute type 8 has an invalid length. [ 108.642686][ T6192] netlink: 'syz.4.63': attribute type 10 has an invalid length. [ 108.668849][ T6192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.680589][ T6185] netlink: 132 bytes leftover after parsing attributes in process `syz.3.60'. [ 108.725372][ T6192] team0: Port device bond0 added [ 108.748772][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.782290][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.883812][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.911479][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.653191][ T6217] netlink: 'syz.1.71': attribute type 10 has an invalid length. [ 109.832920][ T6222] Zero length message leads to an empty skb [ 109.905672][ T6223] C: renamed from team_slave_0 (while UP) [ 109.913521][ T6226] netlink: 32 bytes leftover after parsing attributes in process `syz.2.74'. [ 109.923584][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.74'. [ 109.945570][ T6223] netlink: 'syz.0.73': attribute type 3 has an invalid length. [ 109.953201][ T6223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.73'. [ 110.426144][ T6236] caif0: entered promiscuous mode [ 110.443907][ T6236] caif0: entered allmulticast mode [ 112.070822][ T1322] wlan1: Trigger new scan to find an IBSS to join [ 112.085084][ T6254] netlink: 'syz.2.79': attribute type 10 has an invalid length. [ 112.669660][ T6254] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 112.995734][ T6271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.081026][ T6271] __nla_validate_parse: 3 callbacks suppressed [ 113.081046][ T6271] netlink: 64 bytes leftover after parsing attributes in process `syz.0.85'. [ 113.166663][ T6274] netlink: 'syz.4.84': attribute type 21 has an invalid length. [ 113.204578][ T6274] netlink: 132 bytes leftover after parsing attributes in process `syz.4.84'. [ 113.207237][ T6271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.85'. [ 113.598643][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 114.638998][ T6312] hsr0 speed is unknown, defaulting to 1000 [ 114.646981][ T6312] hsr0 speed is unknown, defaulting to 1000 [ 114.670080][ T6312] hsr0 speed is unknown, defaulting to 1000 [ 114.854575][ T6312] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 114.995748][ T6324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.273857][ T6312] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 115.460777][ T6337] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.481186][ T6312] hsr0 speed is unknown, defaulting to 1000 [ 115.619164][ T6312] hsr0 speed is unknown, defaulting to 1000 [ 115.656215][ T6312] hsr0 speed is unknown, defaulting to 1000 [ 115.704622][ T6312] hsr0 speed is unknown, defaulting to 1000 [ 115.763835][ T6335] netlink: 'syz.4.103': attribute type 10 has an invalid length. [ 115.781698][ T6312] hsr0 speed is unknown, defaulting to 1000 [ 116.560172][ T6349] netlink: 'syz.1.106': attribute type 6 has an invalid length. [ 116.679714][ T6349] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.106'. [ 117.748620][ T6362] netlink: 7 bytes leftover after parsing attributes in process `syz.3.109'. [ 117.842981][ T6362] netlink: 7 bytes leftover after parsing attributes in process `syz.3.109'. [ 118.509985][ T6388] netlink: 'syz.2.117': attribute type 39 has an invalid length. [ 118.679720][ T6385] netlink: 64 bytes leftover after parsing attributes in process `syz.0.115'. [ 118.746805][ T6393] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.118'. [ 119.000979][ T6404] netlink: 388 bytes leftover after parsing attributes in process `syz.0.120'. [ 119.132995][ T6407] netlink: 'syz.3.121': attribute type 37 has an invalid length. [ 119.196607][ T6407] netlink: 24 bytes leftover after parsing attributes in process `syz.3.121'. [ 119.312168][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.124'. [ 119.601326][ T6427] netlink: 'syz.4.127': attribute type 1 has an invalid length. [ 119.663345][ T6427] netlink: 'syz.4.127': attribute type 4 has an invalid length. [ 119.706987][ T6427] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.127'. [ 120.226720][ T6438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.129'. [ 121.797963][ T6459] IPv6: Can't replace route, no match found [ 122.425795][ T6470] netlink: 276 bytes leftover after parsing attributes in process `syz.1.138'. [ 123.162747][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 123.577520][ T6491] netlink: 'syz.3.144': attribute type 1 has an invalid length. [ 123.588193][ T6491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.062831][ T6502] netlink: 10 bytes leftover after parsing attributes in process `syz.3.147'. [ 124.661193][ T6537] ªªªªªª: renamed from vlan0 (while UP) [ 124.689728][ T6537] netlink: 'syz.1.158': attribute type 3 has an invalid length. [ 124.842718][ T6545] netlink: 'syz.4.161': attribute type 28 has an invalid length. [ 125.478849][ T6561] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.165'. [ 126.581468][ T6604] hsr0 speed is unknown, defaulting to 1000 [ 126.712101][ T6612] netlink: 'syz.1.179': attribute type 10 has an invalid length. [ 126.749810][ T6612] netlink: 'syz.1.179': attribute type 16 has an invalid length. [ 126.765481][ T6612] netlink: 156 bytes leftover after parsing attributes in process `syz.1.179'. [ 127.853325][ T6631] hsr0 speed is unknown, defaulting to 1000 [ 128.404235][ T6646] netlink: 'syz.2.187': attribute type 29 has an invalid length. [ 128.455654][ T6645] netlink: 'syz.2.187': attribute type 29 has an invalid length. [ 128.551859][ T6646] netlink: 'syz.2.187': attribute type 29 has an invalid length. [ 128.575952][ T6651] netlink: 68 bytes leftover after parsing attributes in process `syz.1.188'. [ 128.606149][ T6645] netlink: 'syz.2.187': attribute type 29 has an invalid length. [ 128.815513][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'. [ 128.830438][ T6659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.280007][ T6679] netlink: 'syz.1.195': attribute type 41 has an invalid length. [ 129.342003][ T6681] netlink: 10 bytes leftover after parsing attributes in process `syz.2.196'. [ 129.470744][ T6683] netlink: 'syz.3.197': attribute type 1 has an invalid length. [ 129.712443][ T30] audit: type=1107 audit(1759479178.449:2): pid=6692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÙvØÈU”èˆë¸&$:4R‹Ý–ÉóU0¹èžæ»ßýÉ…k@ïeÛHNñ‘„&ëDõ`„o˜éŸæòswë×…µ†ºórÍòWt [ 129.712443][ T30] ‚.ù*ëö¯‘ß§òr8,ÿbWšÌŸ¿é„Kš^…ó~Áüì!ê {I++ª…¶3 ³‘P爜ÛÞ2$Ä8у”wà OáEÁ©· [ 129.712443][ T30] \#cÕß¶_`’¢èË®¿ŒàŠL%sH^á5†Ü:ÞŽoN€g!—R^®5Úz ¦y32x:+øb¹…‘ΖÛ]_ÿ~T:£’)·Ðçºß' [ 129.776320][ T6697] netlink: 'syz.1.200': attribute type 12 has an invalid length. [ 129.785577][ T6697] netlink: 172 bytes leftover after parsing attributes in process `syz.1.200'. [ 129.978167][ T6701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.137163][ T6707] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.203'. [ 130.153291][ T6706] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.203'. [ 130.804879][ T6727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.209'. [ 131.068666][ T6733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.211'. [ 131.191550][ T6746] netlink: 'syz.4.215': attribute type 19 has an invalid length. [ 131.263776][ T6746] netlink: 40 bytes leftover after parsing attributes in process `syz.4.215'. [ 131.278107][ T6734] delete_channel: no stack [ 132.198664][ T6789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.256985][ T6790] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 132.523004][ T6793] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.223'. [ 132.704921][ T6798] netlink: 'syz.4.227': attribute type 27 has an invalid length. [ 132.714562][ T6795] netlink: 'syz.3.225': attribute type 10 has an invalid length. [ 132.722355][ T6795] netlink: 55 bytes leftover after parsing attributes in process `syz.3.225'. [ 132.750703][ T6798] netlink: 164 bytes leftover after parsing attributes in process `syz.4.227'. [ 133.277285][ T6813] netlink: 'syz.1.229': attribute type 2 has an invalid length. [ 133.318138][ T6813] netlink: 'syz.1.229': attribute type 8 has an invalid length. [ 134.020432][ T6824] hsr0 speed is unknown, defaulting to 1000 [ 135.777689][ T6874] __nla_validate_parse: 3 callbacks suppressed [ 135.777710][ T6874] netlink: 1372 bytes leftover after parsing attributes in process `syz.2.248'. [ 135.916145][ T6876] netlink: 'syz.1.249': attribute type 13 has an invalid length. [ 136.146142][ T6896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.255'. [ 136.272052][ T6904] netlink: 'syz.1.257': attribute type 10 has an invalid length. [ 136.310853][ T6904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.323590][ T6904] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 136.349936][ T6904] netlink: 'syz.1.257': attribute type 10 has an invalid length. [ 136.361374][ T6904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.257'. [ 136.372459][ T6904] batadv0: entered promiscuous mode [ 136.381783][ T6904] batadv0: entered allmulticast mode [ 136.398508][ T6904] bond0: (slave batadv0): Releasing backup interface [ 136.504933][ T6904] bridge0: port 3(batadv0) entered blocking state [ 136.520096][ T6904] bridge0: port 3(batadv0) entered disabled state [ 136.897282][ T6914] netlink: 44 bytes leftover after parsing attributes in process `syz.2.260'. [ 137.001930][ T6916] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.261'. [ 137.036062][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 137.045892][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 137.482492][ T6928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.265'. [ 137.518098][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.265'. [ 138.018923][ T6939] netlink: 124 bytes leftover after parsing attributes in process `syz.0.267'. [ 138.058741][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 138.125207][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.131777][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.666571][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'. [ 139.002705][ T6971] netlink: 'syz.2.275': attribute type 10 has an invalid length. [ 139.052399][ T6971] team0: Port device geneve1 added [ 139.111228][ T6971] netlink: 'syz.2.275': attribute type 17 has an invalid length. [ 139.151236][ T6971] netlink: 'syz.2.275': attribute type 3 has an invalid length. [ 141.512127][ T7015] netlink: 'syz.4.285': attribute type 2 has an invalid length. [ 141.520148][ T7015] __nla_validate_parse: 5 callbacks suppressed [ 141.520165][ T7015] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.285'. [ 141.548197][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.285'. [ 141.586342][ T7009] hsr0 speed is unknown, defaulting to 1000 [ 142.032664][ T7022] netlink: 17 bytes leftover after parsing attributes in process `syz.3.286'. [ 142.062344][ T7022] netlink: zone id is out of range [ 142.068157][ T7022] netlink: zone id is out of range [ 142.073326][ T7022] netlink: zone id is out of range [ 142.083378][ T7022] netlink: zone id is out of range [ 142.088989][ T7022] netlink: zone id is out of range [ 142.094985][ T7022] netlink: zone id is out of range [ 142.100131][ T7022] netlink: zone id is out of range [ 142.105762][ T7022] netlink: zone id is out of range [ 142.110896][ T7022] netlink: zone id is out of range [ 142.116663][ T7022] netlink: zone id is out of range [ 142.229387][ T7025] netlink: 64 bytes leftover after parsing attributes in process `syz.4.287'. [ 142.336951][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.287'. [ 142.649804][ T7034] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.289'. [ 143.375602][ T7051] netlink: 'syz.1.293': attribute type 3 has an invalid length. [ 143.384604][ T7051] netlink: 32 bytes leftover after parsing attributes in process `syz.1.293'. [ 144.453858][ T7061] netlink: 20 bytes leftover after parsing attributes in process `syz.4.296'. [ 144.534446][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 144.702210][ T7069] netlink: 'syz.0.299': attribute type 10 has an invalid length. [ 145.215669][ T7078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.299'. [ 145.996538][ T7083] netlink: 'syz.0.302': attribute type 10 has an invalid length. [ 147.489382][ T7102] __nla_validate_parse: 2 callbacks suppressed [ 147.489405][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'. [ 148.351715][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.362007][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.438731][ T7083] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.446408][ T7083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.455473][ T7083] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.463142][ T7083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.525720][ T7083] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 148.617971][ T7084] netlink: 132 bytes leftover after parsing attributes in process `syz.0.302'. [ 148.632940][ T7092] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 148.644724][ T7092] syzkaller1: linktype set to 272 [ 148.713720][ T7101] netlink: 60 bytes leftover after parsing attributes in process `syz.1.305'. [ 149.086120][ T7094] hsr0 speed is unknown, defaulting to 1000 [ 149.176093][ T7109] netlink: 156 bytes leftover after parsing attributes in process `syz.2.306'. [ 149.408380][ T7115] netlink: 20 bytes leftover after parsing attributes in process `syz.4.309'. [ 149.438997][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.309'. [ 149.911380][ T7126] netlink: 'syz.4.312': attribute type 10 has an invalid length. [ 150.018143][ T7127] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 150.878961][ T7154] netlink: 68 bytes leftover after parsing attributes in process `syz.2.322'. [ 150.912312][ T7154] netlink: 65448 bytes leftover after parsing attributes in process `syz.2.322'. [ 151.003780][ T7164] netlink: 68 bytes leftover after parsing attributes in process `syz.2.322'. [ 151.091151][ T30] audit: type=1107 audit(1759479199.839:3): pid=7166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='f?-cj' [ 152.174825][ T7176] netlink: 'syz.0.328': attribute type 10 has an invalid length. [ 152.227500][ T7176] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.328'. [ 152.502396][ T7182] netlink: 'syz.1.331': attribute type 3 has an invalid length. [ 152.666174][ T7182] __nla_validate_parse: 1 callbacks suppressed [ 152.666223][ T7182] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.331'. [ 153.201841][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.333'. [ 153.313111][ T7207] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.337'. [ 153.633270][ T7219] netlink: 60 bytes leftover after parsing attributes in process `syz.2.339'. [ 153.643126][ T7211] netlink: 60 bytes leftover after parsing attributes in process `syz.2.339'. [ 153.657409][ T7219] netlink: 60 bytes leftover after parsing attributes in process `syz.2.339'. [ 153.764898][ T7220] netlink: 2515 bytes leftover after parsing attributes in process `syz.1.341'. [ 153.911673][ T7228] syz_tun: refused to change device tx_queue_len [ 154.070284][ T7250] netlink: 'syz.1.348': attribute type 10 has an invalid length. [ 154.173217][ T7250] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.187780][ T7250] bond0: (slave team0): Enslaving as an active interface with an up link [ 154.344528][ T7263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.352'. [ 154.405498][ T7251] : entered promiscuous mode [ 154.913268][ T7269] netlink: 'syz.2.354': attribute type 13 has an invalid length. [ 154.960471][ T7269] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.354'. [ 155.330090][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 155.613672][ T7292] net_ratelimit: 75 callbacks suppressed [ 155.613691][ T7292] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 155.722464][ T7288] : entered promiscuous mode [ 155.955326][ T7301] netlink: 'syz.2.368': attribute type 10 has an invalid length. [ 155.985162][ T7301] syz_tun: entered promiscuous mode [ 156.060118][ T7301] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 156.351353][ T7316] netlink: 'syz.0.370': attribute type 1 has an invalid length. [ 156.395173][ T7316] netlink: 'syz.0.370': attribute type 1 has an invalid length. [ 157.588996][ T7339] netlink: 'syz.4.376': attribute type 21 has an invalid length. [ 157.597358][ T7339] netlink: 'syz.4.376': attribute type 1 has an invalid length. [ 157.856984][ T7351] __nla_validate_parse: 3 callbacks suppressed [ 157.857020][ T7351] netlink: 772 bytes leftover after parsing attributes in process `syz.3.380'. [ 158.069924][ T7358] netlink: 'syz.0.382': attribute type 1 has an invalid length. [ 158.105752][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 158.702869][ T7372] netlink: 'syz.0.385': attribute type 23 has an invalid length. [ 158.728410][ T7374] netlink: 'syz.2.386': attribute type 6 has an invalid length. [ 158.889637][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 158.905245][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 159.764433][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'. [ 159.868709][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 161.130792][ T7452] netlink: 'syz.2.406': attribute type 3 has an invalid length. [ 161.174814][ T7452] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.406'. [ 161.700042][ T7469] netlink: 'syz.1.410': attribute type 10 has an invalid length. [ 161.761240][ T7469] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.771788][ T7469] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.077192][ T7469] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.084535][ T7469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.092178][ T7469] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.099483][ T7469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.138569][ T7469] team0: Port device bridge0 added [ 162.313675][ T7476] xt_socket: unknown flags 0x6 [ 162.382938][ T7489] netlink: 80 bytes leftover after parsing attributes in process `syz.2.413'. [ 163.392835][ T7498] sctp: [Deprecated]: syz.2.417 (pid 7498) Use of int in maxseg socket option. [ 163.392835][ T7498] Use struct sctp_assoc_value instead [ 164.548476][ T7485] mac80211_hwsim hwsim7 .3ãc¤±: renamed from wlan1 [ 164.628689][ T7510] netlink: 56 bytes leftover after parsing attributes in process `syz.2.421'. [ 164.797660][ T7521] netlink: 'syz.2.425': attribute type 10 has an invalid length. [ 165.327591][ T7521] team0 (unregistering): Port device team_slave_0 removed [ 165.389177][ T7521] team0 (unregistering): Port device team_slave_1 removed [ 165.423087][ T7521] team0 (unregistering): Port device geneve1 removed [ 165.771183][ T7548] syzkaller0: entered promiscuous mode [ 165.794636][ T7548] syzkaller0: entered allmulticast mode [ 165.832158][ T7545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.932781][ T7570] netlink: 236 bytes leftover after parsing attributes in process `syz.3.436'. [ 166.000010][ T5878] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 166.014290][ T7570] netlink: 236 bytes leftover after parsing attributes in process `syz.3.436'. [ 166.433830][ T7587] netlink: 'syz.3.440': attribute type 2 has an invalid length. [ 166.475569][ T7587] netlink: 44 bytes leftover after parsing attributes in process `syz.3.440'. [ 166.811173][ T7595] netlink: 'syz.3.443': attribute type 6 has an invalid length. [ 166.878777][ T7595] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.443'. [ 167.124699][ T7603] netlink: 'syz.2.445': attribute type 6 has an invalid length. [ 167.132410][ T7603] netlink: 164 bytes leftover after parsing attributes in process `syz.2.445'. [ 167.290886][ T7609] netlink: 40 bytes leftover after parsing attributes in process `syz.4.446'. [ 167.302587][ T7613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.328879][ T7609] netlink: 180 bytes leftover after parsing attributes in process `syz.4.446'. [ 167.552954][ T7619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.449'. [ 167.589343][ T7621] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.450'. [ 169.071286][ T7657] hsr_slave_0: left promiscuous mode [ 169.133658][ T7657] hsr_slave_1: left promiscuous mode [ 169.290163][ T7663] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 169.443019][ T7668] netlink: 'syz.2.462': attribute type 5 has an invalid length. [ 169.760464][ T7678] sit0: entered promiscuous mode [ 170.494850][ T7684] hsr0 speed is unknown, defaulting to 1000 [ 171.099891][ T7698] __nla_validate_parse: 6 callbacks suppressed [ 171.099909][ T7698] netlink: 324 bytes leftover after parsing attributes in process `syz.3.469'. [ 171.451675][ T7714] netlink: 'syz.3.474': attribute type 29 has an invalid length. [ 171.507135][ T7716] netlink: 'syz.3.474': attribute type 29 has an invalid length. [ 171.572665][ T7719] netlink: 'syz.2.475': attribute type 10 has an invalid length. [ 171.617733][ T7719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.636617][ T7720] netlink: 'syz.2.475': attribute type 10 has an invalid length. [ 171.668271][ T7719] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 171.668340][ T7720] netlink: 40 bytes leftover after parsing attributes in process `syz.2.475'. [ 171.706906][ T7723] delete_channel: no stack [ 171.721551][ T7723] delete_channel: no stack [ 171.751230][ T7720] batadv0: entered promiscuous mode [ 171.780731][ T7720] batadv0: entered allmulticast mode [ 171.826693][ T7720] bond0: (slave batadv0): Releasing backup interface [ 171.921950][ T7720] bridge0: port 3(batadv0) entered blocking state [ 171.964633][ T7720] bridge0: port 3(batadv0) entered disabled state [ 172.106374][ T7737] netlink: 60 bytes leftover after parsing attributes in process `syz.4.479'. [ 172.125100][ T7730] netlink: 60 bytes leftover after parsing attributes in process `syz.4.479'. [ 172.157555][ T7737] netlink: 60 bytes leftover after parsing attributes in process `syz.4.479'. [ 172.170829][ T6779] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 172.180394][ T6779] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 172.189139][ T7730] netlink: 'syz.4.479': attribute type 5 has an invalid length. [ 172.207386][ T7739] C: renamed from team_slave_0 [ 172.227549][ T7739] netlink: 'syz.2.481': attribute type 4 has an invalid length. [ 172.256996][ T7739] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 172.282075][ T7730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.479'. [ 172.772768][ T7752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.812694][ T7752] netlink: 112 bytes leftover after parsing attributes in process `syz.1.486'. [ 173.353698][ T7769] netlink: 60 bytes leftover after parsing attributes in process `syz.4.490'. [ 173.383148][ T7767] netlink: 60 bytes leftover after parsing attributes in process `syz.4.490'. [ 173.436137][ T7776] netlink: 60 bytes leftover after parsing attributes in process `syz.1.491'. [ 173.855924][ T7787] netlink: 'syz.4.496': attribute type 39 has an invalid length. [ 174.537231][ T7820] netlink: 'syz.1.501': attribute type 10 has an invalid length. [ 175.317432][ T7820] bond0: (slave team0): Releasing backup interface [ 175.456229][ T7820] team0 (unregistering): Port device team_slave_0 removed [ 175.530735][ T7820] team0 (unregistering): Port device team_slave_1 removed [ 175.610660][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.618539][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.707509][ T7820] team0 (unregistering): Port device bridge0 removed [ 175.978192][ T7846] hsr0 speed is unknown, defaulting to 1000 [ 176.450253][ T7882] __nla_validate_parse: 6 callbacks suppressed [ 176.450272][ T7882] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.518'. [ 176.716278][ T7891] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.520'. [ 176.736295][ T7894] netlink: 10 bytes leftover after parsing attributes in process `syz.3.522'. [ 176.861182][ T7894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.522'. [ 177.180118][ T7922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.194532][ T7914] lo: entered allmulticast mode [ 177.208764][ T7914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.402974][ T7922] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.530'. [ 178.073484][ T7920] netlink: 'syz.2.528': attribute type 4 has an invalid length. [ 178.098744][ T7920] netlink: 152 bytes leftover after parsing attributes in process `syz.2.528'. [ 178.238223][ T7920] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 178.800781][ T7941] netlink: 'syz.0.533': attribute type 2 has an invalid length. [ 178.978329][ T7953] netlink: 'syz.3.537': attribute type 17 has an invalid length. [ 179.000804][ T7953] netlink: 'syz.3.537': attribute type 41 has an invalid length. [ 179.015948][ T7953] netlink: 152 bytes leftover after parsing attributes in process `syz.3.537'. [ 179.191590][ T7967] bpf: Bad value for 'mode' [ 179.307335][ T7967] netlink: 124 bytes leftover after parsing attributes in process `syz.3.540'. [ 179.386963][ T7967] netlink: 44 bytes leftover after parsing attributes in process `syz.3.540'. [ 179.924838][ T7970] : entered promiscuous mode [ 180.202345][ T7982] netlink: 72 bytes leftover after parsing attributes in process `syz.1.545'. [ 180.290596][ T7982] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 180.412618][ T7992] caif0: entered promiscuous mode [ 180.425569][ T7992] caif0: entered allmulticast mode [ 180.745538][ T8002] €Â0: renamed from bond_slave_1 (while UP) [ 180.794162][ T8003] netlink: 'syz.1.549': attribute type 21 has an invalid length. [ 180.970481][ T8014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.448308][ T8023] : entered promiscuous mode [ 181.950467][ T8042] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 182.135346][ T8053] __nla_validate_parse: 1 callbacks suppressed [ 182.135367][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.564'. [ 182.185576][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.564'. [ 182.231053][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 182.818352][ T8072] netlink: 'syz.0.569': attribute type 16 has an invalid length. [ 182.859375][ T8072] netlink: 132 bytes leftover after parsing attributes in process `syz.0.569'. [ 183.306793][ T8089] netlink: 'syz.3.573': attribute type 16 has an invalid length. [ 183.335839][ T8089] netlink: 'syz.3.573': attribute type 17 has an invalid length. [ 184.437608][ T8089] caif0: left promiscuous mode [ 184.442501][ T8089] caif0: left allmulticast mode [ 184.451925][ T8089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.797582][ T8127] netlink: 'syz.3.583': attribute type 2 has an invalid length. [ 184.805958][ T8127] netlink: 'syz.3.583': attribute type 1 has an invalid length. [ 184.813842][ T8127] netlink: 132 bytes leftover after parsing attributes in process `syz.3.583'. [ 184.976247][ T8132] netlink: 'syz.1.584': attribute type 10 has an invalid length. [ 185.019362][ T8132] veth1_vlan: entered allmulticast mode [ 185.520742][ T8153] netlink: 48 bytes leftover after parsing attributes in process `syz.1.590'. [ 185.996143][ T8164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.594'. [ 186.065573][ T8164] netlink: 48 bytes leftover after parsing attributes in process `syz.4.594'. [ 186.739986][ T8192] netlink: 'syz.2.603': attribute type 27 has an invalid length. [ 186.823539][ T8192] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.603'. [ 186.872460][ T8183] : entered promiscuous mode [ 186.899843][ T8194] netlink: 132 bytes leftover after parsing attributes in process `syz.2.603'. [ 186.980560][ T8197] netlink: 'syz.0.604': attribute type 4 has an invalid length. [ 186.998372][ T8197] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 188.678884][ T8267] __nla_validate_parse: 1 callbacks suppressed [ 188.678907][ T8267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.620'. [ 188.934781][ T8278] pim6reg1: entered promiscuous mode [ 188.940677][ T8278] pim6reg1: entered allmulticast mode [ 189.100265][ T8284] netlink: 'syz.0.627': attribute type 28 has an invalid length. [ 189.115400][ T8284] netlink: 'syz.0.627': attribute type 3 has an invalid length. [ 189.123402][ T8284] netlink: 132 bytes leftover after parsing attributes in process `syz.0.627'. [ 189.193290][ T8286] netlink: 'syz.4.626': attribute type 10 has an invalid length. [ 189.342041][ T8288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.167167][ T8289] netlink: 1 bytes leftover after parsing attributes in process `syz.4.626'. [ 190.760140][ T8317] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 190.971693][ T8332] netlink: 'syz.4.641': attribute type 10 has an invalid length. [ 191.069034][ T8332] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 191.210396][ T8342] netlink: 'syz.3.643': attribute type 4 has an invalid length. [ 191.584783][ T8360] netlink: 'syz.0.648': attribute type 10 has an invalid length. [ 191.610360][ T8360] netlink: 'syz.0.648': attribute type 2 has an invalid length. [ 191.828727][ T8371] netlink: 13 bytes leftover after parsing attributes in process `syz.2.650'. [ 191.847017][ T8370] netlink: 48 bytes leftover after parsing attributes in process `syz.0.651'. [ 191.920689][ T8370] netlink: 'syz.0.651': attribute type 40 has an invalid length. [ 192.008252][ T8370] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.109057][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'. [ 192.743814][ T8415] netlink: 'syz.4.664': attribute type 39 has an invalid length. [ 192.909638][ T8425] netlink: 'syz.2.666': attribute type 4 has an invalid length. [ 193.061338][ T8425] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.666'. [ 193.354332][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.669'. [ 193.363413][ T8443] openvswitch: netlink: Flow actions attr not present in new flow. [ 193.757962][ T8449] hsr0 speed is unknown, defaulting to 1000 [ 193.956661][ T8456] raw_sendmsg: syz.1.676 forgot to set AF_INET. Fix it! [ 194.380225][ T8461] netlink: 'syz.4.677': attribute type 10 has an invalid length. [ 194.513811][ T8461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.540189][ T8461] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 194.642767][ T8470] netlink: 60 bytes leftover after parsing attributes in process `syz.1.679'. [ 196.253525][ T8488] hsr0 speed is unknown, defaulting to 1000 [ 196.476968][ T8501] netlink: 'syz.4.689': attribute type 10 has an invalid length. [ 196.521866][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.4.689'. [ 196.593007][ T8501] dummy0: entered promiscuous mode [ 196.615162][ T8501] dummy0: entered allmulticast mode [ 196.678501][ T8501] bond0: (slave dummy0): Releasing backup interface [ 196.722258][ T8504] netlink: 'syz.3.688': attribute type 39 has an invalid length. [ 196.758941][ T8501] bridge0: port 3(dummy0) entered blocking state [ 196.770671][ T8501] bridge0: port 3(dummy0) entered disabled state [ 197.975315][ T8523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.695'. [ 198.024400][ T8523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.695'. [ 198.123618][ T8526] netlink: 20 bytes leftover after parsing attributes in process `syz.1.694'. [ 198.149702][ T8526] netlink: 'syz.1.694': attribute type 10 has an invalid length. [ 198.175599][ T8526] netlink: 55 bytes leftover after parsing attributes in process `syz.1.694'. [ 199.420598][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'. [ 199.583284][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.590469][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.033258][ T8564] veth1_macvtap: left promiscuous mode [ 200.064273][ T8564] macsec0: entered promiscuous mode [ 200.069562][ T8564] macsec0: entered allmulticast mode [ 200.305011][ T8572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.320613][ T8572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.500941][ T8580] netlink: 'syz.2.711': attribute type 10 has an invalid length. [ 200.541135][ T8580] netlink: 40 bytes leftover after parsing attributes in process `syz.2.711'. [ 200.562373][ T8580] veth0_vlan: entered allmulticast mode [ 200.577154][ T8580] bridge0: port 4(veth0_vlan) entered blocking state [ 200.584777][ T8580] bridge0: port 4(veth0_vlan) entered disabled state [ 200.666968][ T8580] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 200.931193][ T8580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.711'. [ 200.991216][ T8589] netlink: 1 bytes leftover after parsing attributes in process `syz.1.713'. [ 201.076068][ T8591] netlink: 277 bytes leftover after parsing attributes in process `syz.1.713'. [ 201.548526][ T8605] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.719'. [ 202.032951][ T8627] netlink: 'syz.0.724': attribute type 10 has an invalid length. [ 202.109222][ T8630] netlink: 'syz.1.725': attribute type 16 has an invalid length. [ 202.141588][ T8630] netlink: 48 bytes leftover after parsing attributes in process `syz.1.725'. [ 202.247261][ T8627] team0: Device ipvlan1 failed to register rx_handler [ 202.264826][ T8633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.300886][ T8614] netlink: 64 bytes leftover after parsing attributes in process `syz.3.720'. [ 202.547617][ T8638] netlink: 164 bytes leftover after parsing attributes in process `syz.1.726'. [ 202.748624][ T8656] netlink: 'syz.1.730': attribute type 39 has an invalid length. [ 202.976831][ T8664] netlink: 'syz.4.732': attribute type 10 has an invalid length. [ 203.163901][ T8647] syzkaller0: entered promiscuous mode [ 203.218635][ T8647] syzkaller0: entered allmulticast mode [ 203.297380][ T8664] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.305365][ T8664] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.486529][ T8664] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.493858][ T8664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.501533][ T8664] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.508799][ T8664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.667616][ T8664] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 203.857149][ T8676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.889076][ T8715] netlink: 36 bytes leftover after parsing attributes in process `syz.4.745'. [ 206.116904][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 206.138032][ T8740] netlink: 104 bytes leftover after parsing attributes in process `syz.2.750'. [ 206.158128][ T8743] netlink: 'syz.4.751': attribute type 10 has an invalid length. [ 206.184990][ T8743] veth1_macvtap: left promiscuous mode [ 206.212465][ T8746] netlink: 'syz.4.751': attribute type 3 has an invalid length. [ 206.289810][ T8746] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.751'. [ 206.486733][ T8752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.754'. [ 206.505117][ T8751] netlink: 'syz.4.755': attribute type 5 has an invalid length. [ 206.567094][ T8754] netlink: 'syz.2.754': attribute type 10 has an invalid length. [ 207.047997][ T8765] netlink: 'syz.3.758': attribute type 9 has an invalid length. [ 207.060312][ T8765] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.758'. [ 207.537620][ T8775] netlink: 'syz.1.761': attribute type 10 has an invalid length. [ 207.610672][ T8775] syz_tun: entered promiscuous mode [ 207.695598][ T8775] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 207.762797][ T8791] netlink: 'syz.3.766': attribute type 22 has an invalid length. [ 207.799045][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 208.636716][ T8804] netlink: 'syz.0.769': attribute type 21 has an invalid length. [ 208.668735][ T8804] netlink: 128 bytes leftover after parsing attributes in process `syz.0.769'. [ 208.694535][ T8804] netlink: 'syz.0.769': attribute type 5 has an invalid length. [ 208.717592][ T8804] netlink: 'syz.0.769': attribute type 6 has an invalid length. [ 208.741321][ T8804] netlink: 3 bytes leftover after parsing attributes in process `syz.0.769'. [ 208.801301][ T8810] netlink: 200 bytes leftover after parsing attributes in process `syz.4.771'. [ 209.605747][ T8823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.451540][ T8859] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 211.074593][ T8883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.163123][ T8886] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 211.304451][ T8892] __nla_validate_parse: 7 callbacks suppressed [ 211.304507][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.795'. [ 211.321298][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.795'. [ 212.193846][ T5869] Bluetooth: hci3: command 0x0406 tx timeout [ 212.200584][ T5869] Bluetooth: hci2: command 0x0406 tx timeout [ 212.207425][ T5869] Bluetooth: hci0: command 0x0406 tx timeout [ 212.217482][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 212.224835][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 212.592782][ T8917] syzkaller0: entered promiscuous mode [ 212.608302][ T8917] syzkaller0: entered allmulticast mode [ 213.403948][ T8939] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.808'. [ 213.418063][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'. [ 213.599474][ T8947] validate_nla: 7 callbacks suppressed [ 213.599494][ T8947] netlink: 'syz.1.810': attribute type 10 has an invalid length. [ 215.532263][ T8976] netlink: 'syz.2.817': attribute type 3 has an invalid length. [ 215.540145][ T8976] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.817'. [ 215.586476][ T8976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.817'. [ 215.714724][ T8986] netlink: 'syz.4.819': attribute type 10 has an invalid length. [ 215.804246][ T8986] netlink: 40 bytes leftover after parsing attributes in process `syz.4.819'. [ 215.853824][ T8986] team0: entered promiscuous mode [ 215.859152][ T8986] team_slave_0: entered promiscuous mode [ 215.868933][ T8986] team_slave_1: entered promiscuous mode [ 215.883734][ T8986] bond0: entered promiscuous mode [ 215.912343][ T8986] bond_slave_0: entered promiscuous mode [ 215.919858][ T8986] bond_slave_1: entered promiscuous mode [ 215.927946][ T8986] mac80211_hwsim hwsim7 .3ãc¤±: entered promiscuous mode [ 215.940415][ T8986] batadv0: entered promiscuous mode [ 215.946421][ T8986] bridge0: entered promiscuous mode [ 215.952409][ T8986] team0: entered allmulticast mode [ 215.962564][ T8986] team_slave_0: entered allmulticast mode [ 216.000840][ T8986] team_slave_1: entered allmulticast mode [ 216.024091][ T8986] bond0: entered allmulticast mode [ 216.045324][ T8986] bond_slave_0: entered allmulticast mode [ 216.084154][ T8986] bond_slave_1: entered allmulticast mode [ 216.110015][ T8986] mac80211_hwsim hwsim7 .3ãc¤±: entered allmulticast mode [ 216.121356][ T8986] batadv0: entered allmulticast mode [ 216.126837][ T8986] bridge0: entered allmulticast mode [ 216.160386][ T8986] bridge0: port 4(team0) entered blocking state [ 216.171284][ T8986] bridge0: port 4(team0) entered disabled state [ 216.180753][ T8986] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 216.279838][ T8996] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.821'. [ 216.905352][ T9033] netlink: 2 bytes leftover after parsing attributes in process `syz.0.830'. [ 216.957294][ T9033] netlink: 2 bytes leftover after parsing attributes in process `syz.0.830'. [ 217.206331][ T9045] netlink: 'syz.2.833': attribute type 1 has an invalid length. [ 217.293096][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'. [ 217.397591][ T9050] netlink: 60 bytes leftover after parsing attributes in process `syz.2.833'. [ 217.443121][ T9045] netlink: 60 bytes leftover after parsing attributes in process `syz.2.833'. [ 217.486626][ T9045] netlink: 60 bytes leftover after parsing attributes in process `syz.2.833'. [ 217.553969][ T9043] delete_channel: no stack [ 217.872741][ T9067] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.838'. [ 218.085682][ T9074] netlink: 'syz.4.839': attribute type 13 has an invalid length. [ 218.094528][ T9074] netlink: 'syz.4.839': attribute type 17 has an invalid length. [ 218.841362][ T9074] team0: left promiscuous mode [ 218.904190][ T9074] team_slave_0: left promiscuous mode [ 218.952140][ T9074] team_slave_1: left promiscuous mode [ 219.006833][ T9074] bond0: left promiscuous mode [ 219.011682][ T9074] bond_slave_0: left promiscuous mode [ 219.132412][ T9074] bond_slave_1: left promiscuous mode [ 219.270686][ T9074] mac80211_hwsim hwsim7 .3ãc¤±: left promiscuous mode [ 219.313564][ T9074] batadv0: left promiscuous mode [ 219.320084][ T9074] bridge0: left promiscuous mode [ 219.325940][ T9074] team0: left allmulticast mode [ 219.331172][ T9074] team_slave_0: left allmulticast mode [ 219.339958][ T9074] team_slave_1: left allmulticast mode [ 219.346639][ T9074] bond0: left allmulticast mode [ 219.351666][ T9074] bond_slave_0: left allmulticast mode [ 219.361833][ T9074] bond_slave_1: left allmulticast mode [ 219.384295][ T9074] mac80211_hwsim hwsim7 .3ãc¤±: left allmulticast mode [ 219.421081][ T9074] batadv0: left allmulticast mode [ 219.441488][ T9074] bridge0: left allmulticast mode [ 219.482870][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.843'. [ 219.518909][ T9074] bridge0: port 3(dummy0) entered blocking state [ 219.526287][ T9074] bridge0: port 3(dummy0) entered forwarding state [ 219.576858][ T9074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.622249][ T9078] netlink: 'syz.0.841': attribute type 9 has an invalid length. [ 219.642348][ T9078] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.841'. [ 219.659162][ T9091] netlink: 'syz.1.845': attribute type 2 has an invalid length. [ 219.675947][ T9091] netlink: 'syz.1.845': attribute type 1 has an invalid length. [ 219.683959][ T9091] netlink: 'syz.1.845': attribute type 2 has an invalid length. [ 219.714815][ T9091] netlink: 'syz.1.845': attribute type 1 has an invalid length. [ 220.027875][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 220.775341][ T9121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.939191][ T9121] netlink: 'syz.2.853': attribute type 39 has an invalid length. [ 221.303846][ T9133] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 221.395875][ T9144] netlink: 'syz.2.860': attribute type 10 has an invalid length. [ 221.610801][ T9130] delete_channel: no stack [ 221.841816][ T6776] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.871578][ T6776] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.904113][ T6776] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.946874][ T6776] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.134868][ T9159] __nla_validate_parse: 2 callbacks suppressed [ 222.134888][ T9159] netlink: 676 bytes leftover after parsing attributes in process `syz.4.862'. [ 222.194722][ T9159] netlink: 676 bytes leftover after parsing attributes in process `syz.4.862'. [ 222.350077][ T5874] bond0: (slave syz_tun): Releasing backup interface [ 222.484891][ T9177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.949183][ T9193] netlink: 'syz.0.872': attribute type 10 has an invalid length. [ 222.976727][ T9193] netlink: 40 bytes leftover after parsing attributes in process `syz.0.872'. [ 223.005209][ T9193] veth0_vlan: entered allmulticast mode [ 223.025015][ T9193] bridge0: port 3(veth0_vlan) entered blocking state [ 223.042787][ T9193] bridge0: port 3(veth0_vlan) entered disabled state [ 223.079987][ T9193] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 223.473255][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.496118][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.505460][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.513971][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.530314][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.641162][ T9217] hsr0 speed is unknown, defaulting to 1000 [ 223.642373][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 223.681824][ T9222] hsr0 speed is unknown, defaulting to 1000 [ 223.709603][ T9217] netlink: 'syz.4.881': attribute type 23 has an invalid length. [ 224.420972][ T9244] netlink: 'syz.0.887': attribute type 1 has an invalid length. [ 224.593736][ T9248] netlink: 132 bytes leftover after parsing attributes in process `syz.4.889'. [ 224.758596][ T9254] validate_nla: 2 callbacks suppressed [ 224.758616][ T9254] netlink: 'syz.3.890': attribute type 37 has an invalid length. [ 225.050451][ T9222] chnl_net:caif_netlink_parms(): no params data found [ 225.077141][ T5872] Bluetooth: hci1: ISO packet for unknown connection handle 62 [ 225.449391][ T9258] Ÿë: port 1(veth0_to_team) entered blocking state [ 225.469256][ T9258] Ÿë: port 1(veth0_to_team) entered disabled state [ 225.506473][ T9258] veth0_to_team: entered allmulticast mode [ 225.515698][ T9273] openvswitch: netlink: Multiple metadata blocks provided [ 225.534881][ T9258] veth0_to_team: entered promiscuous mode [ 225.560461][ T5872] Bluetooth: hci3: command tx timeout [ 225.687633][ T9284] netlink: 2 bytes leftover after parsing attributes in process `syz.0.894'. [ 225.741907][ T9222] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.751595][ T9222] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.760244][ T9222] bridge_slave_0: entered allmulticast mode [ 225.769657][ T9222] bridge_slave_0: entered promiscuous mode [ 225.782141][ T9222] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.789902][ T9222] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.798218][ T9222] bridge_slave_1: entered allmulticast mode [ 225.811547][ T9222] bridge_slave_1: entered promiscuous mode [ 226.142797][ T9222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.198208][ T9222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.613842][ T9222] team0: Port device team_slave_0 added [ 226.627455][ T9222] team0: Port device team_slave_1 added [ 226.743493][ T9222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.771717][ T9222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.813756][ T9222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.856864][ T9222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.865842][ T9222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.896447][ T9222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.031406][ T9326] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 227.068289][ T9222] hsr_slave_0: entered promiscuous mode [ 227.109274][ T9222] hsr_slave_1: entered promiscuous mode [ 227.124960][ T9222] debugfs: 'hsr0' already exists in 'hsr' [ 227.130988][ T9222] Cannot create hsr debugfs directory [ 227.210595][ T9335] netlink: 132 bytes leftover after parsing attributes in process `syz.1.907'. [ 227.639036][ T5872] Bluetooth: hci3: command tx timeout [ 227.747672][ T9349] netlink: 'syz.4.912': attribute type 8 has an invalid length. [ 227.771360][ T9349] netlink: 132 bytes leftover after parsing attributes in process `syz.4.912'. [ 227.870036][ T9349] netlink: 152 bytes leftover after parsing attributes in process `syz.4.912'. [ 227.882148][ T9356] netlink: 60 bytes leftover after parsing attributes in process `syz.1.914'. [ 228.110476][ T9363] netlink: 60 bytes leftover after parsing attributes in process `syz.4.916'. [ 228.133148][ T9359] netlink: 60 bytes leftover after parsing attributes in process `syz.4.916'. [ 228.176384][ T9369] netlink: 60 bytes leftover after parsing attributes in process `syz.4.916'. [ 228.437025][ T9222] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 228.466299][ T9222] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 228.499378][ T9222] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 228.543290][ T9222] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 228.785116][ T9222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.857999][ T9222] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.893080][ T6775] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.900421][ T6775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.982000][ T8499] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.989281][ T8499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.132384][ T9399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.924'. [ 229.418867][ T9222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.479108][ T9222] veth0_vlan: entered promiscuous mode [ 229.547907][ T9222] veth1_vlan: entered promiscuous mode [ 229.621712][ T9222] veth0_macvtap: entered promiscuous mode [ 229.663646][ T9222] veth1_macvtap: entered promiscuous mode [ 229.714803][ T5872] Bluetooth: hci3: command tx timeout [ 229.730859][ T9222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.761112][ T9414] openvswitch: netlink: EtherType 50a is less than min 600 [ 229.761640][ T9222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.783148][ T8499] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.823515][ T8499] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.847039][ T8499] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.878434][ T8499] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.266995][ T8499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.301560][ T9419] netlink: 'syz.0.929': attribute type 10 has an invalid length. [ 230.318606][ T8499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.380858][ T9419] veth0_vlan: left allmulticast mode [ 230.498930][ T9419] veth0_vlan: left promiscuous mode [ 230.519663][ T9419] veth0_vlan: entered promiscuous mode [ 230.553634][ T9419] team0: Device veth0_vlan failed to register rx_handler [ 230.696936][ T8958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.724621][ T8958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.928071][ T9432] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.871'. [ 231.036456][ T9436] netlink: 'syz.1.934': attribute type 2 has an invalid length. [ 231.047312][ T9436] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.934'. [ 231.370316][ T9447] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 231.445662][ T9441] netlink: 'syz.1.936': attribute type 3 has an invalid length. [ 231.807825][ T5872] Bluetooth: hci3: command tx timeout [ 232.014159][ T9441] hsr0 speed is unknown, defaulting to 1000 [ 232.862087][ T9470] netlink: 'syz.4.943': attribute type 3 has an invalid length. [ 234.999384][ T9496] __nla_validate_parse: 1 callbacks suppressed [ 234.999405][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'. [ 235.570157][ T9507] netlink: 'syz.0.954': attribute type 2 has an invalid length. [ 235.587541][ T9507] netlink: 51 bytes leftover after parsing attributes in process `syz.0.954'. [ 236.188852][ T9507] hsr0 speed is unknown, defaulting to 1000 [ 236.358415][ T9525] netlink: 1 bytes leftover after parsing attributes in process `syz.3.958'. [ 237.556763][ T9576] netlink: 'syz.2.971': attribute type 29 has an invalid length. [ 238.997219][ T9616] syzkaller0: entered promiscuous mode [ 239.002849][ T9616] syzkaller0: entered allmulticast mode [ 240.844764][ T9658] netlink: 'syz.4.991': attribute type 21 has an invalid length. [ 242.958682][ T9658] netlink: 'syz.4.991': attribute type 6 has an invalid length. [ 243.013642][ T9658] netlink: 132 bytes leftover after parsing attributes in process `syz.4.991'. [ 243.069600][ T9668] netlink: 'syz.1.993': attribute type 4 has an invalid length. [ 243.085640][ T9668] netlink: 152 bytes leftover after parsing attributes in process `syz.1.993'. [ 243.114392][ T9668] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 243.376090][ T9681] netlink: 'syz.0.994': attribute type 21 has an invalid length. [ 243.536206][ T9686] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.998'. [ 243.885728][ T9705] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1004'. [ 243.995027][ T9700] : entered promiscuous mode [ 244.612119][ T9723] TCP: TCP_TX_DELAY enabled [ 244.806013][ T9735] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1013'. [ 244.903753][ T9729] netlink: 'syz.2.1009': attribute type 10 has an invalid length. [ 245.440413][ T9729] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 246.036076][ T9753] tmpfs: Bad value for 'mode' [ 246.042008][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1017'. [ 246.184850][ T9769] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1021'. [ 246.339670][ T9769] batadv_slave_1: entered promiscuous mode [ 246.624276][ T5872] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 246.981373][ T9778] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1025'. [ 247.016663][ T9780] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1026'. [ 248.302879][ T9815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.355920][ T9821] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 248.399965][ T9821] netlink: 'syz.3.1039': attribute type 10 has an invalid length. [ 248.431467][ T9821] geneve0: entered promiscuous mode [ 248.548998][ T9827] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1041'. [ 248.959965][ T9821] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 249.249517][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1045'. [ 249.342927][ T9847] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1046'. [ 249.458908][ T9859] netlink: 'syz.0.1049': attribute type 10 has an invalid length. [ 249.471942][ T9859] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.781324][ T9872] netlink: 'syz.2.1054': attribute type 39 has an invalid length. [ 249.853136][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'. [ 250.347130][ T9889] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1058'. [ 250.717668][ T9911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.052537][ T9916] netlink: 'syz.1.1065': attribute type 39 has an invalid length. [ 251.098376][ T9922] netlink: 'syz.2.1067': attribute type 6 has an invalid length. [ 251.138822][ T9923] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1068'. [ 251.221943][ T9922] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1067'. [ 251.957598][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'. [ 251.999337][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'. [ 252.759958][ T9939] netlink: 'syz.2.1072': attribute type 5 has an invalid length. [ 252.828226][ T9941] netlink: 'syz.1.1071': attribute type 29 has an invalid length. [ 252.838560][ T9941] netlink: 'syz.1.1071': attribute type 29 has an invalid length. [ 253.466472][ T9944] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1073'. [ 253.650304][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 254.101547][ T9971] netlink: 'syz.0.1079': attribute type 2 has an invalid length. [ 254.134296][ T9971] netlink: 'syz.0.1079': attribute type 2 has an invalid length. [ 254.144563][ T9971] netlink: 'syz.0.1079': attribute type 2 has an invalid length. [ 254.209969][ T9971] openvswitch: netlink: Missing key (keys=2000040, expected=2000) [ 254.773425][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 255.115131][ T9990] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1082'. [ 255.156497][ T9990] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 256.217901][T10032] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1095'. [ 256.289329][T10033] netlink: 'syz.3.1095': attribute type 7 has an invalid length. [ 258.188526][T10048] netlink: 'syz.2.1098': attribute type 1 has an invalid length. [ 258.248750][T10049] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1099'. [ 258.387144][T10050] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1099'. [ 258.540159][T10056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1100'. [ 258.549668][T10049] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1099'. [ 258.878831][T10065] netlink: 'syz.1.1105': attribute type 20 has an invalid length. [ 258.891904][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'. [ 258.906581][T10065] netlink: 'syz.1.1105': attribute type 21 has an invalid length. [ 258.915393][T10065] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1105'. [ 258.932263][T10065] netlink: 'syz.1.1105': attribute type 10 has an invalid length. [ 258.962809][T10063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1103'. [ 258.995634][T10063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1103'. [ 259.367474][T10073] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1106'. [ 259.569337][T10073] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 259.941156][T10083] netlink: 'syz.1.1110': attribute type 29 has an invalid length. [ 260.080148][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 260.409733][T10106] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1117'. [ 260.461300][T10106] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1117'. [ 260.905768][T10111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1118'. [ 261.021148][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.027897][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.502579][T10142] netlink: 'syz.2.1126': attribute type 11 has an invalid length. [ 261.532838][T10142] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1126'. [ 261.566480][T10142] C: renamed from team_slave_0 (while UP) [ 261.585919][T10142] netlink: 'syz.2.1126': attribute type 3 has an invalid length. [ 261.594459][T10142] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1126'. [ 261.619926][T10142] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 261.721861][T10142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.088881][T10163] netlink: 'syz.4.1131': attribute type 1 has an invalid length. [ 262.099771][T10163] netlink: 'syz.4.1131': attribute type 2 has an invalid length. [ 262.324430][T10168] netlink: 'syz.1.1132': attribute type 11 has an invalid length. [ 262.334998][T10159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.741371][T10179] netlink: 'syz.2.1136': attribute type 29 has an invalid length. [ 262.763579][T10179] netlink: 'syz.2.1136': attribute type 29 has an invalid length. [ 263.547134][T10209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.575169][T10202] netlink: 'syz.3.1144': attribute type 1 has an invalid length. [ 263.610025][T10212] netlink: 'syz.2.1146': attribute type 2 has an invalid length. [ 263.636758][T10212] netlink: 'syz.2.1146': attribute type 8 has an invalid length. [ 263.774680][T10219] netlink: 'syz.1.1148': attribute type 23 has an invalid length. [ 264.067549][T10244] __nla_validate_parse: 6 callbacks suppressed [ 264.067571][T10244] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1155'. [ 264.732676][T10253] hsr0 speed is unknown, defaulting to 1000 [ 264.922658][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1162'. [ 265.083365][ T5872] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 265.254674][T10295] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1167'. [ 265.292864][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1166'. [ 265.346235][T10292] validate_nla: 3 callbacks suppressed [ 265.346254][T10292] netlink: 'syz.3.1166': attribute type 10 has an invalid length. [ 265.375868][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1167'. [ 265.800573][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'. [ 265.815144][T10316] caif0: left promiscuous mode [ 265.825672][T10316] caif0: left allmulticast mode [ 265.831194][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'. [ 265.855055][T10316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 266.137039][T10332] openvswitch: netlink: Missing key (keys=1040, expected=10000000) [ 266.505844][T10346] netlink: 'syz.1.1182': attribute type 19 has an invalid length. [ 266.569053][T10349] delete_channel: no stack [ 266.775750][T10367] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1185'. [ 266.786370][T10358] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1185'. [ 266.842053][T10358] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1185'. [ 266.881547][T10369] netlink: 'syz.0.1188': attribute type 10 has an invalid length. [ 267.036275][T10333] delete_channel: no stack [ 267.155069][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 267.349526][T10381] netlink: 'syz.4.1192': attribute type 29 has an invalid length. [ 267.406553][T10385] netlink: 'syz.4.1192': attribute type 29 has an invalid length. [ 267.500513][T10389] netlink: 'syz.1.1193': attribute type 10 has an invalid length. [ 267.592961][T10393] netlink: 'syz.3.1191': attribute type 10 has an invalid length. [ 267.733110][T10395] netlink: 'syz.4.1194': attribute type 21 has an invalid length. [ 267.919792][ T5922] infiniband syz0: ib_query_port failed (-19) [ 267.939370][T10395] netlink: 'syz.4.1194': attribute type 6 has an invalid length. [ 268.481935][T10410] unsupported nla_type 256 [ 269.325731][T10425] __nla_validate_parse: 7 callbacks suppressed [ 269.325755][T10425] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1204'. [ 269.441357][T10429] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1206'. [ 269.472942][T10432] netlink: 'syz.3.1207': attribute type 39 has an invalid length. [ 269.738471][T10433] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1206'. [ 269.805351][T10433] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1206'. [ 270.471882][T10442] netlink: 'syz.3.1210': attribute type 39 has an invalid length. [ 270.973000][T10455] delete_channel: no stack [ 271.165768][T10464] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 271.202658][T10471] netlink: 'syz.3.1219': attribute type 2 has an invalid length. [ 271.216684][T10471] netlink: 'syz.3.1219': attribute type 2 has an invalid length. [ 271.413520][T10481] netlink: 'syz.1.1221': attribute type 21 has an invalid length. [ 271.467170][T10481] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1221'. [ 271.632526][T10488] netlink: 'syz.3.1224': attribute type 39 has an invalid length. [ 271.674161][T10492] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1222'. [ 271.752481][T10493] netlink: 'syz.1.1225': attribute type 10 has an invalid length. [ 271.772212][T10493] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1225'. [ 272.474359][T10505] syz.2.1228: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 272.500976][T10505] CPU: 1 UID: 0 PID: 10505 Comm: syz.2.1228 Not tainted syzkaller #0 PREEMPT(full) [ 272.501005][T10505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 272.501023][T10505] Call Trace: [ 272.501032][T10505] [ 272.501042][T10505] dump_stack_lvl+0x189/0x250 [ 272.501078][T10505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.501104][T10505] ? __pfx__printk+0x10/0x10 [ 272.501134][T10505] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 272.501160][T10505] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 272.501187][T10505] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 272.501216][T10505] warn_alloc+0x214/0x310 [ 272.501242][T10505] ? stack_depot_save_flags+0x40/0x860 [ 272.501269][T10505] ? __pfx_warn_alloc+0x10/0x10 [ 272.501295][T10505] ? kasan_save_track+0x4f/0x80 [ 272.501326][T10505] ? xskq_create+0x56/0x170 [ 272.501349][T10505] ? xsk_init_queue+0xb0/0x110 [ 272.501369][T10505] ? xsk_setsockopt+0x57b/0x8d0 [ 272.501389][T10505] ? do_sock_setsockopt+0x179/0x1b0 [ 272.501415][T10505] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 272.501441][T10505] ? do_syscall_64+0xfa/0x3b0 [ 272.501473][T10505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.501505][T10505] __vmalloc_node_range_noprof+0x125/0x12f0 [ 272.501570][T10505] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 272.501602][T10505] ? __kasan_kmalloc+0x93/0xb0 [ 272.501626][T10505] vmalloc_user_noprof+0xad/0xf0 [ 272.501649][T10505] ? xskq_create+0xbf/0x170 [ 272.501674][T10505] xskq_create+0xbf/0x170 [ 272.501703][T10505] xsk_init_queue+0xb0/0x110 [ 272.501738][T10505] xsk_setsockopt+0x57b/0x8d0 [ 272.501765][T10505] ? __pfx_xsk_setsockopt+0x10/0x10 [ 272.501788][T10505] ? __pfx_aa_sk_perm+0x10/0x10 [ 272.501817][T10505] ? __fget_files+0x2a/0x420 [ 272.501837][T10505] ? aa_sock_opt_perm+0xff/0x1b0 [ 272.501867][T10505] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 272.501894][T10505] ? __pfx_xsk_setsockopt+0x10/0x10 [ 272.501919][T10505] do_sock_setsockopt+0x179/0x1b0 [ 272.501955][T10505] __x64_sys_setsockopt+0x13f/0x1b0 [ 272.501992][T10505] do_syscall_64+0xfa/0x3b0 [ 272.502018][T10505] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.502043][T10505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.502063][T10505] ? clear_bhb_loop+0x60/0xb0 [ 272.502090][T10505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.502110][T10505] RIP: 0033:0x7efe67b8eec9 [ 272.502134][T10505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.502151][T10505] RSP: 002b:00007efe689fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 272.502172][T10505] RAX: ffffffffffffffda RBX: 00007efe67de6180 RCX: 00007efe67b8eec9 [ 272.502186][T10505] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c [ 272.502197][T10505] RBP: 00007efe67c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 272.502209][T10505] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 272.502222][T10505] R13: 00007efe67de6218 R14: 00007efe67de6180 R15: 00007ffdab75f6d8 [ 272.502260][T10505] [ 272.502268][T10505] Mem-Info: [ 272.807819][T10505] active_anon:4777 inactive_anon:0 isolated_anon:0 [ 272.807819][T10505] active_file:17989 inactive_file:39955 isolated_file:0 [ 272.807819][T10505] unevictable:768 dirty:137 writeback:0 [ 272.807819][T10505] slab_reclaimable:11490 slab_unreclaimable:114848 [ 272.807819][T10505] mapped:29175 shmem:1356 pagetables:1207 [ 272.807819][T10505] sec_pagetables:0 bounce:0 [ 272.807819][T10505] kernel_misc_reclaimable:0 [ 272.807819][T10505] free:1297262 free_pcp:14510 free_cma:0 [ 272.859473][T10505] Node 0 active_anon:19108kB inactive_anon:0kB active_file:71956kB inactive_file:159616kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116700kB dirty:548kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12896kB pagetables:4660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 272.941887][T10505] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 272.975777][T10505] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.005958][T10505] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 273.012441][T10505] Node 0 DMA32 free:1283920kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18680kB inactive_anon:0kB active_file:71956kB inactive_file:158048kB unevictable:1536kB writepending:548kB present:3129332kB managed:2557364kB mlocked:0kB bounce:0kB free_pcp:40008kB local_pcp:19272kB free_cma:0kB [ 273.147001][T10505] lowmem_reserve[]: 0 0 1 1 1 [ 273.179911][T10505] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 273.261984][T10515] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1231'. [ 273.263731][T10505] lowmem_reserve[]: 0 0 0 0 0 [ 273.288823][T10505] Node 1 Normal free:3890572kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18912kB local_pcp:10144kB free_cma:0kB [ 273.375764][T10505] lowmem_reserve[]: 0 0 0 0 0 [ 273.381285][T10505] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 273.402734][T10505] Node 0 DMA32: 1534*4kB (UM) 1083*8kB (UME) 766*16kB (UME) 763*32kB (UME) 371*64kB (UME) 315*128kB (UME) 182*256kB (UME) 95*512kB (UME) 22*1024kB (UME) 5*2048kB (UM) 254*4096kB (M) = 1283920kB [ 273.429567][T10505] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 273.451466][T10505] Node 1 Normal: 207*4kB (UME) 50*8kB (UME) 38*16kB (UME) 129*32kB (UME) 31*64kB (UME) 9*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3890572kB [ 273.478307][T10505] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.490826][T10505] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 273.503108][T10505] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.531486][T10505] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 273.575506][T10505] 59296 total pagecache pages [ 273.580269][T10505] 0 pages in swap cache [ 273.614166][T10505] Free swap = 124996kB [ 273.623536][T10505] Total swap = 124996kB [ 273.631959][T10505] 2097051 pages RAM [ 273.652160][T10505] 0 pages HighMem/MovableOnly [ 273.662845][T10505] 425684 pages reserved [ 273.673010][T10505] 0 pages cma reserved [ 273.793650][T10532] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 273.892531][T10530] netlink: 'syz.0.1236': attribute type 10 has an invalid length. [ 273.946763][T10532] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.1236'. [ 274.239049][T10530] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 274.423596][T10548] netlink: 'syz.4.1240': attribute type 39 has an invalid length. [ 274.762159][T10538] netlink: 'syz.3.1238': attribute type 11 has an invalid length. [ 274.793563][T10538] netlink: 'syz.3.1238': attribute type 11 has an invalid length. [ 275.289723][T10588] netlink: 'syz.1.1245': attribute type 21 has an invalid length. [ 275.524465][T10597] netlink: 'syz.0.1251': attribute type 39 has an invalid length. [ 276.386694][T10600] dummy0: mtu less than device minimum [ 277.107134][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1261'. [ 277.123526][T10632] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1261'. [ 277.167101][T10642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1264'. [ 277.272996][T10647] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1265'. [ 278.109354][T10665] netlink: 'syz.0.1269': attribute type 39 has an invalid length. [ 278.297227][T10669] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 278.646586][T10681] netlink: 'syz.2.1276': attribute type 2 has an invalid length. [ 278.655918][T10681] netlink: 'syz.2.1276': attribute type 5 has an invalid length. [ 278.818890][T10689] netlink: 'syz.3.1279': attribute type 6 has an invalid length. [ 280.261474][T10709] netlink: 'syz.1.1284': attribute type 39 has an invalid length. [ 281.542922][T10740] netlink: 'syz.3.1294': attribute type 39 has an invalid length. [ 282.595791][T10763] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1300'. [ 282.631213][T10761] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1300'. [ 283.152046][T10773] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1305'. [ 283.446864][T10784] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1306'. [ 283.520336][T10786] netlink: 408 bytes leftover after parsing attributes in process `syz.1.1308'. [ 283.882024][T10798] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1310'. [ 284.261693][T10811] netlink: 'syz.4.1316': attribute type 39 has an invalid length. [ 285.371437][T10846] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1326'. [ 286.178030][T10856] bridge_slave_1: left allmulticast mode [ 286.188966][T10858] netlink: 'syz.1.1329': attribute type 39 has an invalid length. [ 286.203634][T10856] bridge_slave_1: left promiscuous mode [ 286.210544][T10856] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.230648][T10856] bridge_slave_0: left allmulticast mode [ 286.236685][T10856] bridge_slave_0: left promiscuous mode [ 286.243731][T10856] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.352524][T10866] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1328'. [ 286.474712][T10874] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1332'. [ 286.487952][T10868] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1332'. [ 287.230011][T10919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.265800][T10927] rdma_rxe: rxe_newlink: failed to add vcan0 [ 288.259803][T10956] netlink: 'syz.1.1357': attribute type 2 has an invalid length. [ 288.268275][T10956] netlink: 'syz.1.1357': attribute type 8 has an invalid length. [ 288.276794][T10956] __nla_validate_parse: 1 callbacks suppressed [ 288.276839][T10956] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1357'. [ 288.356548][T10966] netlink: 'syz.3.1359': attribute type 4 has an invalid length. [ 288.365159][T10966] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.1359'. [ 288.381250][T10966] netlink: 'syz.3.1359': attribute type 3 has an invalid length. [ 288.389344][T10966] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1359'. [ 288.434845][T10967] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1358'. [ 289.690597][T11020] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1374'. [ 289.837233][T11026] netlink: 'syz.4.1377': attribute type 2 has an invalid length. [ 289.861270][T11026] netlink: 'syz.4.1377': attribute type 8 has an invalid length. [ 289.872798][T11026] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1377'. [ 290.171594][T11042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1379'. [ 290.203369][T11042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1379'. [ 290.307742][T11044] netlink: 'syz.0.1382': attribute type 7 has an invalid length. [ 290.629794][T11060] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1385'. [ 290.739713][T11062] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1386'. [ 290.810149][T11062] netlink: 'syz.0.1386': attribute type 10 has an invalid length. [ 290.876560][T11062] veth1_vlan: entered allmulticast mode [ 290.945578][T11062] team0: Device veth1_vlan failed to register rx_handler [ 291.293971][T11082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.356550][T11115] netlink: 'syz.3.1399': attribute type 39 has an invalid length. [ 293.767890][T11122] __nla_validate_parse: 3 callbacks suppressed [ 293.767918][T11122] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1401'. [ 294.672256][T11136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1405'. [ 294.703194][T11136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1405'. [ 294.910684][T11147] netlink: 'syz.1.1408': attribute type 6 has an invalid length. [ 294.946709][T11147] netlink: 'syz.1.1408': attribute type 10 has an invalid length. [ 295.095289][T11160] netlink: 'syz.3.1412': attribute type 39 has an invalid length. [ 295.340600][T11165] netlink: 'syz.1.1414': attribute type 10 has an invalid length. [ 295.356060][ T5872] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 295.696217][T11174] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1420'. [ 295.843668][T11182] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1422'. [ 296.766139][T11201] netlink: 'syz.0.1427': attribute type 39 has an invalid length. [ 297.556986][T11211] delete_channel: no stack [ 297.767412][T11226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1433'. [ 297.919615][T11226] Â: renamed from pim6reg1 [ 298.469889][T11240] netlink: 'syz.4.1437': attribute type 21 has an invalid length. [ 298.477932][T11240] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1437'. [ 298.481715][ C1] ================================================================== [ 298.495077][ C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0 [ 298.503198][ C1] Write of size 8 at addr ffff888024a2d130 by task syz.2.1376/11028 [ 298.511211][ C1] [ 298.513603][ C1] CPU: 1 UID: 0 PID: 11028 Comm: syz.2.1376 Not tainted syzkaller #0 PREEMPT(full) [ 298.513631][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 298.513646][ C1] Call Trace: [ 298.513655][ C1] [ 298.513664][ C1] dump_stack_lvl+0x189/0x250 [ 298.513693][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 298.513720][ C1] ? rcu_is_watching+0x15/0xb0 [ 298.513740][ C1] ? __kasan_check_byte+0x12/0x40 [ 298.513762][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.513786][ C1] ? rcu_is_watching+0x15/0xb0 [ 298.513804][ C1] ? lock_release+0x4b/0x3e0 [ 298.513836][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 298.513861][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 298.513890][ C1] print_report+0xca/0x240 [ 298.513911][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 298.513936][ C1] kasan_report+0x118/0x150 [ 298.513956][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 298.513987][ C1] __xfrm_state_delete+0x696/0xca0 [ 298.514020][ C1] xfrm_timer_handler+0x18f/0xa00 [ 298.514051][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 298.514076][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 298.514101][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.514126][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 298.514160][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 298.514188][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 298.514216][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 298.514243][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 298.514276][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 298.514295][ C1] ? read_tsc+0x9/0x20 [ 298.514326][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 298.514351][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 298.514376][ C1] handle_softirqs+0x283/0x870 [ 298.514399][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 298.514422][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 298.514449][ C1] __irq_exit_rcu+0xca/0x1f0 [ 298.514469][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 298.514495][ C1] irq_exit_rcu+0x9/0x30 [ 298.514513][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 298.514538][ C1] [ 298.514545][ C1] [ 298.514554][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 298.514576][ C1] RIP: 0010:lock_release+0x2b5/0x3e0 [ 298.514608][ C1] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 cb 68 03 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 298.514626][ C1] RSP: 0018:ffffc9000d536cd0 EFLAGS: 00000206 [ 298.514647][ C1] RAX: 41cc43ca8aa99c00 RBX: 0000000000000202 RCX: 41cc43ca8aa99c00 [ 298.514664][ C1] RDX: 0000000000000000 RSI: ffffffff8dbaa5db RDI: ffffffff8be34480 [ 298.514679][ C1] RBP: ffff888056ff46f0 R08: ffffc9000d537c40 R09: 0000000000000000 [ 298.514694][ C1] R10: ffffc9000d536e58 R11: fffff52001aa6dcd R12: 0000000000000000 [ 298.514709][ C1] R13: 0000000000000000 R14: ffffffff8e13a160 R15: ffff888056ff3c00 [ 298.514737][ C1] ? unwind_next_frame+0xa5/0x2390 [ 298.514764][ C1] ? unwind_next_frame+0xa5/0x2390 [ 298.514787][ C1] unwind_next_frame+0x19a9/0x2390 [ 298.514813][ C1] ? unwind_next_frame+0xa5/0x2390 [ 298.514837][ C1] ? do_group_exit+0x21c/0x2d0 [ 298.514867][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.514895][ C1] arch_stack_walk+0x11c/0x150 [ 298.514923][ C1] ? get_signal+0x1286/0x1340 [ 298.514945][ C1] stack_trace_save+0x9c/0xe0 [ 298.514969][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 298.515001][ C1] save_stack+0xf5/0x1f0 [ 298.515033][ C1] ? __pfx_save_stack+0x10/0x10 [ 298.515062][ C1] ? free_unref_folios+0xdbd/0x1520 [ 298.515084][ C1] ? folios_put_refs+0x559/0x640 [ 298.515110][ C1] ? shmem_undo_range+0x49e/0x14b0 [ 298.515139][ C1] ? shmem_evict_inode+0x272/0xa70 [ 298.515171][ C1] ? evict+0x504/0x9c0 [ 298.515198][ C1] ? __dentry_kill+0x209/0x660 [ 298.515221][ C1] ? dput+0x19f/0x2b0 [ 298.515242][ C1] ? __fput+0x68e/0xa70 [ 298.515266][ C1] ? task_work_run+0x1d1/0x260 [ 298.515293][ C1] ? do_exit+0x6b5/0x2300 [ 298.515318][ C1] ? do_group_exit+0x21c/0x2d0 [ 298.515350][ C1] ? page_ext_put+0x97/0xc0 [ 298.515371][ C1] __reset_page_owner+0x71/0x1f0 [ 298.515405][ C1] free_unref_folios+0xdbd/0x1520 [ 298.515434][ C1] ? folios_put_refs+0x299/0x640 [ 298.515464][ C1] folios_put_refs+0x559/0x640 [ 298.515498][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 298.515528][ C1] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 298.515561][ C1] shmem_undo_range+0x49e/0x14b0 [ 298.515598][ C1] ? perf_trace_lock+0xec/0x3b0 [ 298.515619][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 298.515647][ C1] ? perf_trace_lock+0xec/0x3b0 [ 298.515682][ C1] ? perf_trace_lock+0xec/0x3b0 [ 298.515728][ C1] shmem_evict_inode+0x272/0xa70 [ 298.515754][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 298.515775][ C1] ? inode_wait_for_writeback+0xf9/0x290 [ 298.515803][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 298.515826][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 298.515853][ C1] ? evict+0x4d1/0x9c0 [ 298.515885][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 298.515914][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 298.515937][ C1] evict+0x504/0x9c0 [ 298.515970][ C1] ? __pfx_evict+0x10/0x10 [ 298.515999][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 298.516026][ C1] ? _raw_spin_unlock+0x28/0x50 [ 298.516048][ C1] ? iput+0x6d8/0x9d0 [ 298.516075][ C1] __dentry_kill+0x209/0x660 [ 298.516099][ C1] ? dput+0x37/0x2b0 [ 298.516121][ C1] dput+0x19f/0x2b0 [ 298.516143][ C1] __fput+0x68e/0xa70 [ 298.516183][ C1] task_work_run+0x1d1/0x260 [ 298.516213][ C1] ? __pfx_task_work_run+0x10/0x10 [ 298.516248][ C1] do_exit+0x6b5/0x2300 [ 298.516283][ C1] ? __pfx_do_exit+0x10/0x10 [ 298.516319][ C1] do_group_exit+0x21c/0x2d0 [ 298.516346][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.516374][ C1] get_signal+0x1286/0x1340 [ 298.516406][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 298.516442][ C1] ? perf_trace_preemptirq_template+0x280/0x340 [ 298.516472][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 298.516513][ C1] ? local_irq_enable_exit_to_user+0x5/0x10 [ 298.516547][ C1] irqentry_exit_to_user_mode+0x81/0x120 [ 298.516575][ C1] exc_general_protection+0x171/0x200 [ 298.516615][ C1] ? exc_page_fault+0x9f/0xf0 [ 298.516641][ C1] asm_exc_general_protection+0x26/0x30 [ 298.516661][ C1] RIP: 0033:0x7efe67b8eed1 [ 298.516679][ C1] Code: Unable to access opcode bytes at 0x7efe67b8eea7. [ 298.516690][ C1] RSP: 002b:0000200000000120 EFLAGS: 00010217 [ 298.516708][ C1] RAX: 0000000000000000 RBX: 00007efe67de5fa0 RCX: 00007efe67b8eec9 [ 298.516723][ C1] RDX: 0000200000000140 RSI: 0000200000000120 RDI: 0000000000000000 [ 298.516738][ C1] RBP: 00007efe67c11f91 R08: 00002000000001c0 R09: 00002000000001c0 [ 298.516753][ C1] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 298.516766][ C1] R13: 00007efe67de6038 R14: 00007efe67de5fa0 R15: 00007ffdab75f6d8 [ 298.516792][ C1] [ 298.516799][ C1] [ 299.193142][ C1] Allocated by task 10188: [ 299.197556][ C1] kasan_save_track+0x3e/0x80 [ 299.202270][ C1] __kasan_slab_alloc+0x6c/0x80 [ 299.207122][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 299.212592][ C1] xfrm_state_alloc+0x24/0x2f0 [ 299.217362][ C1] __find_acq_core+0x8a7/0x1c00 [ 299.222224][ C1] xfrm_find_acq+0x78/0xa0 [ 299.226641][ C1] xfrm_alloc_userspi+0x6b3/0xc90 [ 299.231693][ C1] xfrm_user_rcv_msg+0x7a3/0xab0 [ 299.236631][ C1] netlink_rcv_skb+0x208/0x470 [ 299.241411][ C1] xfrm_netlink_rcv+0x79/0x90 [ 299.246094][ C1] netlink_unicast+0x82c/0x9e0 [ 299.250863][ C1] netlink_sendmsg+0x805/0xb30 [ 299.255630][ C1] __sock_sendmsg+0x219/0x270 [ 299.260329][ C1] ____sys_sendmsg+0x505/0x830 [ 299.265128][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 299.269840][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 299.274794][ C1] do_syscall_64+0xfa/0x3b0 [ 299.279310][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.285205][ C1] [ 299.287622][ C1] Freed by task 9321: [ 299.291599][ C1] kasan_save_track+0x3e/0x80 [ 299.296287][ C1] kasan_save_free_info+0x46/0x50 [ 299.301345][ C1] __kasan_slab_free+0x5b/0x80 [ 299.306111][ C1] kmem_cache_free+0x18f/0x400 [ 299.310878][ C1] xfrm_state_gc_task+0x52d/0x6b0 [ 299.315906][ C1] process_scheduled_works+0xae1/0x17b0 [ 299.321459][ C1] worker_thread+0x8a0/0xda0 [ 299.326056][ C1] kthread+0x70e/0x8a0 [ 299.330134][ C1] ret_from_fork+0x436/0x7d0 [ 299.334732][ C1] ret_from_fork_asm+0x1a/0x30 [ 299.339505][ C1] [ 299.341867][ C1] The buggy address belongs to the object at ffff888024a2d100 [ 299.341867][ C1] which belongs to the cache xfrm_state of size 928 [ 299.355840][ C1] The buggy address is located 48 bytes inside of [ 299.355840][ C1] freed 928-byte region [ffff888024a2d100, ffff888024a2d4a0) [ 299.369562][ C1] [ 299.371919][ C1] The buggy address belongs to the physical page: [ 299.378349][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024a2ccc0 pfn:0x24a2c [ 299.388518][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 299.397040][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 299.404590][ C1] page_type: f5(slab) [ 299.408577][ C1] raw: 00fff00000000040 ffff888144ec3000 dead000000000122 0000000000000000 [ 299.417169][ C1] raw: ffff888024a2ccc0 00000000800f000c 00000000f5000000 0000000000000000 [ 299.425761][ C1] head: 00fff00000000040 ffff888144ec3000 dead000000000122 0000000000000000 [ 299.434436][ C1] head: ffff888024a2ccc0 00000000800f000c 00000000f5000000 0000000000000000 [ 299.443132][ C1] head: 00fff00000000002 ffffea0000928b01 00000000ffffffff 00000000ffffffff [ 299.451994][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 299.460675][ C1] page dumped because: kasan: bad access detected [ 299.467095][ C1] page_owner tracks the page as allocated [ 299.472814][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6525, tgid 6524 (syz.1.154), ts 124467792308, free_ts 124395241920 [ 299.492009][ C1] post_alloc_hook+0x240/0x2a0 [ 299.496808][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 299.502358][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 299.508174][ C1] alloc_pages_mpol+0x232/0x4a0 [ 299.513028][ C1] allocate_slab+0x8a/0x370 [ 299.517535][ C1] ___slab_alloc+0xbeb/0x1420 [ 299.522304][ C1] kmem_cache_alloc_noprof+0x283/0x3c0 [ 299.527771][ C1] xfrm_state_alloc+0x24/0x2f0 [ 299.532542][ C1] xfrm_add_sa+0x17d1/0x4070 [ 299.537140][ C1] xfrm_user_rcv_msg+0x7a3/0xab0 [ 299.542080][ C1] netlink_rcv_skb+0x208/0x470 [ 299.546850][ C1] xfrm_netlink_rcv+0x79/0x90 [ 299.551529][ C1] netlink_unicast+0x82c/0x9e0 [ 299.556299][ C1] netlink_sendmsg+0x805/0xb30 [ 299.561161][ C1] __sock_sendmsg+0x219/0x270 [ 299.565845][ C1] ____sys_sendmsg+0x505/0x830 [ 299.570622][ C1] page last free pid 6521 tgid 6518 stack trace: [ 299.576946][ C1] __free_frozen_pages+0xbc4/0xd30 [ 299.582061][ C1] stack_depot_save_flags+0x436/0x860 [ 299.587438][ C1] kasan_save_track+0x4f/0x80 [ 299.592127][ C1] __kasan_kmalloc+0x93/0xb0 [ 299.596722][ C1] __kmalloc_node_noprof+0x276/0x4e0 [ 299.602116][ C1] alloc_slab_obj_exts+0x39/0xa0 [ 299.607089][ C1] __memcg_slab_post_alloc_hook+0x31e/0x7f0 [ 299.613004][ C1] __kvmalloc_node_noprof+0x466/0x5f0 [ 299.618383][ C1] nf_tables_newset+0x132b/0x2530 [ 299.623466][ C1] nfnetlink_rcv+0x112f/0x2520 [ 299.628255][ C1] netlink_unicast+0x82c/0x9e0 [ 299.633027][ C1] netlink_sendmsg+0x805/0xb30 [ 299.637836][ C1] __sock_sendmsg+0x219/0x270 [ 299.642625][ C1] ____sys_sendmsg+0x505/0x830 [ 299.647419][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 299.652113][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 299.657097][ C1] [ 299.659447][ C1] Memory state around the buggy address: [ 299.665170][ C1] ffff888024a2d000: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 299.673323][ C1] ffff888024a2d080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 299.681393][ C1] >ffff888024a2d100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 299.689466][ C1] ^ [ 299.695102][ C1] ffff888024a2d180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 299.703162][ C1] ffff888024a2d200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 299.711222][ C1] ================================================================== [ 299.719442][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 299.726660][ C1] CPU: 1 UID: 0 PID: 11028 Comm: syz.2.1376 Not tainted syzkaller #0 PREEMPT(full) [ 299.736051][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 299.746204][ C1] Call Trace: [ 299.749500][ C1] [ 299.752351][ C1] dump_stack_lvl+0x99/0x250 [ 299.756961][ C1] ? __asan_memcpy+0x40/0x70 [ 299.761577][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.766784][ C1] ? __pfx__printk+0x10/0x10 [ 299.771392][ C1] vpanic+0x281/0x750 [ 299.775381][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 299.780591][ C1] ? __pfx_vpanic+0x10/0x10 [ 299.785103][ C1] ? irqentry_exit+0x74/0x90 [ 299.789706][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.794920][ C1] panic+0xb9/0xc0 [ 299.798649][ C1] ? __pfx_panic+0x10/0x10 [ 299.803076][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 299.808983][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 299.815330][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 299.820640][ C1] check_panic_on_warn+0x89/0xb0 [ 299.825642][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 299.830952][ C1] end_report+0x78/0x160 [ 299.835242][ C1] kasan_report+0x129/0x150 [ 299.839752][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 299.845062][ C1] __xfrm_state_delete+0x696/0xca0 [ 299.850196][ C1] xfrm_timer_handler+0x18f/0xa00 [ 299.855266][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 299.860907][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 299.866812][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.872045][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 299.877949][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 299.884292][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 299.889849][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 299.895403][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 299.900620][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 299.906346][ C1] ? read_tsc+0x9/0x20 [ 299.910434][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 299.916256][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 299.921377][ C1] handle_softirqs+0x283/0x870 [ 299.926153][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 299.930931][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 299.936229][ C1] __irq_exit_rcu+0xca/0x1f0 [ 299.940826][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 299.946126][ C1] irq_exit_rcu+0x9/0x30 [ 299.950376][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 299.956018][ C1] [ 299.958957][ C1] [ 299.961897][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 299.967885][ C1] RIP: 0010:lock_release+0x2b5/0x3e0 [ 299.973203][ C1] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 cb 68 03 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 299.992824][ C1] RSP: 0018:ffffc9000d536cd0 EFLAGS: 00000206 [ 299.998995][ C1] RAX: 41cc43ca8aa99c00 RBX: 0000000000000202 RCX: 41cc43ca8aa99c00 [ 300.006974][ C1] RDX: 0000000000000000 RSI: ffffffff8dbaa5db RDI: ffffffff8be34480 [ 300.014974][ C1] RBP: ffff888056ff46f0 R08: ffffc9000d537c40 R09: 0000000000000000 [ 300.022952][ C1] R10: ffffc9000d536e58 R11: fffff52001aa6dcd R12: 0000000000000000 [ 300.031017][ C1] R13: 0000000000000000 R14: ffffffff8e13a160 R15: ffff888056ff3c00 [ 300.039013][ C1] ? unwind_next_frame+0xa5/0x2390 [ 300.044150][ C1] ? unwind_next_frame+0xa5/0x2390 [ 300.049274][ C1] unwind_next_frame+0x19a9/0x2390 [ 300.054484][ C1] ? unwind_next_frame+0xa5/0x2390 [ 300.059603][ C1] ? do_group_exit+0x21c/0x2d0 [ 300.064380][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 300.070544][ C1] arch_stack_walk+0x11c/0x150 [ 300.075321][ C1] ? get_signal+0x1286/0x1340 [ 300.080037][ C1] stack_trace_save+0x9c/0xe0 [ 300.084724][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 300.090114][ C1] save_stack+0xf5/0x1f0 [ 300.094378][ C1] ? __pfx_save_stack+0x10/0x10 [ 300.099249][ C1] ? free_unref_folios+0xdbd/0x1520 [ 300.104489][ C1] ? folios_put_refs+0x559/0x640 [ 300.109443][ C1] ? shmem_undo_range+0x49e/0x14b0 [ 300.114561][ C1] ? shmem_evict_inode+0x272/0xa70 [ 300.119680][ C1] ? evict+0x504/0x9c0 [ 300.123759][ C1] ? __dentry_kill+0x209/0x660 [ 300.128526][ C1] ? dput+0x19f/0x2b0 [ 300.132514][ C1] ? __fput+0x68e/0xa70 [ 300.136673][ C1] ? task_work_run+0x1d1/0x260 [ 300.141445][ C1] ? do_exit+0x6b5/0x2300 [ 300.145784][ C1] ? do_group_exit+0x21c/0x2d0 [ 300.150561][ C1] ? page_ext_put+0x97/0xc0 [ 300.155070][ C1] __reset_page_owner+0x71/0x1f0 [ 300.160028][ C1] free_unref_folios+0xdbd/0x1520 [ 300.165064][ C1] ? folios_put_refs+0x299/0x640 [ 300.170034][ C1] folios_put_refs+0x559/0x640 [ 300.174900][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 300.180196][ C1] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 300.186546][ C1] shmem_undo_range+0x49e/0x14b0 [ 300.191501][ C1] ? perf_trace_lock+0xec/0x3b0 [ 300.196365][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 300.201838][ C1] ? perf_trace_lock+0xec/0x3b0 [ 300.206710][ C1] ? perf_trace_lock+0xec/0x3b0 [ 300.211587][ C1] shmem_evict_inode+0x272/0xa70 [ 300.216536][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 300.221826][ C1] ? inode_wait_for_writeback+0xf9/0x290 [ 300.227475][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 300.232943][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 300.239022][ C1] ? evict+0x4d1/0x9c0 [ 300.243148][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 300.248355][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 300.253823][ C1] evict+0x504/0x9c0 [ 300.257732][ C1] ? __pfx_evict+0x10/0x10 [ 300.262157][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 300.267368][ C1] ? _raw_spin_unlock+0x28/0x50 [ 300.272222][ C1] ? iput+0x6d8/0x9d0 [ 300.276214][ C1] __dentry_kill+0x209/0x660 [ 300.280811][ C1] ? dput+0x37/0x2b0 [ 300.284711][ C1] dput+0x19f/0x2b0 [ 300.288530][ C1] __fput+0x68e/0xa70 [ 300.292529][ C1] task_work_run+0x1d1/0x260 [ 300.297134][ C1] ? __pfx_task_work_run+0x10/0x10 [ 300.302273][ C1] do_exit+0x6b5/0x2300 [ 300.306445][ C1] ? __pfx_do_exit+0x10/0x10 [ 300.311074][ C1] do_group_exit+0x21c/0x2d0 [ 300.315679][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.320893][ C1] get_signal+0x1286/0x1340 [ 300.325417][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 300.330979][ C1] ? perf_trace_preemptirq_template+0x280/0x340 [ 300.337231][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 300.343414][ C1] ? local_irq_enable_exit_to_user+0x5/0x10 [ 300.349323][ C1] irqentry_exit_to_user_mode+0x81/0x120 [ 300.354970][ C1] exc_general_protection+0x171/0x200 [ 300.360365][ C1] ? exc_page_fault+0x9f/0xf0 [ 300.365050][ C1] asm_exc_general_protection+0x26/0x30 [ 300.370609][ C1] RIP: 0033:0x7efe67b8eed1 [ 300.375027][ C1] Code: Unable to access opcode bytes at 0x7efe67b8eea7. [ 300.382047][ C1] RSP: 002b:0000200000000120 EFLAGS: 00010217 [ 300.388129][ C1] RAX: 0000000000000000 RBX: 00007efe67de5fa0 RCX: 00007efe67b8eec9 [ 300.396731][ C1] RDX: 0000200000000140 RSI: 0000200000000120 RDI: 0000000000000000 [ 300.404708][ C1] RBP: 00007efe67c11f91 R08: 00002000000001c0 R09: 00002000000001c0 [ 300.412687][ C1] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 300.420675][ C1] R13: 00007efe67de6038 R14: 00007efe67de5fa0 R15: 00007ffdab75f6d8 [ 300.428667][ C1] [ 300.431975][ C1] Kernel Offset: disabled [ 300.436332][ C1] Rebooting in 86400 seconds..