last executing test programs: 3m57.608098874s ago: executing program 0 (id=825): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x3}, 0x2018, 0x1, 0x2, 0x0, 0x0, 0x81, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x700, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000ffe307000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) 3m57.338275175s ago: executing program 0 (id=827): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000400000001800000000000000000000002000000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) 3m57.225799961s ago: executing program 0 (id=828): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa4000000701000008b020007500feff0000820095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfa, &(0x7f0000000140)=""/250}, 0x94) 3m57.069172543s ago: executing program 0 (id=830): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1190e95fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a02413bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a202304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a99281000000059f425ec2f8580fe3c6f605f9a00e90ba71cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e0852c8e7536bd1f018fa6be1e4de61fdccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4065903124bff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a8640724a5f4e12ad99012a2e01ce79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae441e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe50151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa332482e6137e994d3f5259b7f51544cdc6d8cb4becc20dd3a57545b0c2621e4c5f94a23f73ee02c22ee7e27c2cc491a85947baac523c347c9b9ede5d6265997f2ad6e9719a"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000002c0), 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000001c0)=r3, 0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, r4, 0x1, 0x4}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r5}, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0xff, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x2e0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f008004000000e00001100630277", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 3m56.205240277s ago: executing program 0 (id=840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0xfffffffd, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x2000000, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m55.889454076s ago: executing program 0 (id=845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x15, 0x5, 0x0) socket$kcm(0x2, 0x2, 0x73) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc0000000001010400000000000000000a000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f"], 0xdc}}, 0x0) 3m55.485029515s ago: executing program 32 (id=845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x15, 0x5, 0x0) socket$kcm(0x2, 0x2, 0x73) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc0000000001010400000000000000000a000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f"], 0xdc}}, 0x0) 4.217133666s ago: executing program 3 (id=2742): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0xfffffffc, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x2236da8af44fb2cd) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000cb85f0b3d31a9100000000000000000000002aae3049ea1ae0f0bea79c926e52daca221cdd9920a641f117286dd87ca821a897e56636f4be3797364ed5d1e37c8dd6772fe8ea1fe527b539e0527098dd95c8", @ANYRES32=0x0, @ANYRES32, @ANYRES16], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x10020) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 3.986123554s ago: executing program 2 (id=2745): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d32, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x3, 0xfffffffe, 0x1, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x1a4, 0x10, 0x1, 0x70bd28, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x2, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x68, 0x2, {{'cbc(twofish)\x00'}, 0x100, "1a000b0000849a7390450024000000004403000000c3d6db74b3850000004000"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x1a4}}, 0x44050) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffa894792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff1eec72b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000080000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6e33ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b2724b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc53482"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0x11d, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000}, 0x50) 3.762299187s ago: executing program 2 (id=2747): perf_event_open(&(0x7f0000000480)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x7d}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffc0}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.685530613s ago: executing program 3 (id=2748): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000042000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000004040000000000000000000009030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) 3.536923515s ago: executing program 2 (id=2749): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xc}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007000000000000090000000004000000bb7f1a004d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) 3.476353558s ago: executing program 3 (id=2750): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x5}, 0x0, 0x2, 0xfffffffe, 0xa, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x20060000}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fstat(r3, 0x0) r6 = gettid() fstat(r2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f0000001800)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r1, 0xffffffffffffffff, r5, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x1c, 0x1, 0x1, [r5, r2, r1]}}], 0x120, 0x24048084}, 0x8080) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001ac1414bb00000000000000000000000000000000000000000000000100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d333000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="06"], 0x158}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x83, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a0000020000"], 0x64}, 0x1, 0x0, 0x0, 0x8051}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 3.350228013s ago: executing program 4 (id=2753): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000040)='syzkaller\x00', 0xd00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 3.314415111s ago: executing program 2 (id=2754): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x4001}, 0x4000810) r5 = socket(0xa, 0x2, 0x101) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x2000001e}}, 0x40) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f0000000340)={0xa, 0xa, 0x4, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="140000000000000029000000080000008900000000000000b1b5e89ae777da8c9044975fbf2288181cf3e1bf88a621eadb3f99cecbad974d48486d649343ef041adab50d4cc65c42"], 0x18}, 0x922bac8556bdad8e) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r7, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013000001000200000000000000000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a006080", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x73}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f1, &(0x7f0000000080)) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 3.205398922s ago: executing program 5 (id=2755): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000047"], 0x50) close(0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)="4cf4b3bb070000006498a73e7a40d3332affc350add5db7d79f84547ae6b180bde94dc317947a027288cffd345a13b46af596922a918d3639575490a15c02bbc4a81de8f5a5baa5ccb03194089d06a7d18da8bfbdf8363f433afe8ceac0ae8387fc586707c683d315a3eac0ac564515f58d6cdf63cfaf28e74", 0x79}], 0x1}, 0xa) recvmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000580)=""/80, 0x50}], 0x1, &(0x7f00000006c0)=""/177, 0xb1}, 0x40000022) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01004000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) 3.089578747s ago: executing program 4 (id=2757): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a"], 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0) r0 = syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x75, 0x1ef7}, 0x20, 0x4, 0x5, 0x0, 0x2, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0xfe33) sendmsg$tipc(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000040)="8d03cab9cb86bcdcffec", 0xa}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) r10 = socket$can_raw(0x1d, 0x3, 0x1) close(r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e"], 0x1c}}, 0x400c010) openat$cgroup_procs(r11, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) 3.019882496s ago: executing program 3 (id=2758): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0xfffffffc, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x2236da8af44fb2cd) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000cb85f0b3d31a9100000000000000000000002aae3049ea1ae0f0bea79c926e52daca221cdd9920a641f117286dd87ca821a897e56636f4be3797364ed5d1e37c8dd6772fe8ea1fe527b539e0527098dd95c8", @ANYRES32=0x0, @ANYRES32, @ANYRES16], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x10020) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 3.019080445s ago: executing program 1 (id=2759): r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/42, 0x2a}, {&(0x7f0000000180)=""/197, 0xc5}], 0x2, &(0x7f00000002c0)=""/11, 0xb}, 0x2000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xffffffffffffff10, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary="98"}]}]}, 0x2c}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000020000001e1cca5a0074f1c277633487e9f7f3103c050fdd8699655be59729017aa5d4a20568f83feedf515225425afc8c16e38dbc20dbfdc6c3115fed9fe3f8b733c43c20d2393119aab0ceb3954e65c6f53b37317882216c6c61bb5add2c8e80b128624bb5b5f527d4731197978fcd88caddc795eb432a9a302073e7599632035cf23e213da1cbb3f0729955c2c01226b77bbe6c735c7d459cd855a9"], 0x48) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000003700)=""/4087, 0xff7}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f00000006c0)=""/4083, 0xff3}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000004700)=""/4096, 0x1000}, {0x0}], 0x6}, 0x32120) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000017c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000006", @ANYRES64=r4, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8bb53ffb702000008000000b50200000000000085000000cb0000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x5}, 0xd6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113400000000008510000002000000850000006c00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000016c0)=ANY=[@ANYBLOB="fc0006000000010000007553c6bf0000000000002001000000000000000000000000000064010102000000000000000000000a002000000000000000e8ff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000040a000000000000000000000080400000000000000000080000000000000000010000030000000044000500fe880000000000000000000000000001000004d23c0000000a000000ffffffff00000000000000000000000000000000000308004900"/180], 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000040)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) 2.9377516s ago: executing program 5 (id=2760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0xfffffffd, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x4800, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.467057236s ago: executing program 5 (id=2761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet(0x2, 0x2, 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "0000400300070000201100000000001a"}}}]}, 0x48}}, 0x4000010) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf95}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000002c0)="4402c54490ffcb452dffb63c0f6875753ed5bdcd39f4ebf7c93ad7b510eed072f696982c82d8a20cc17093df6dd7a68e11d79a97d8c5801a5dfb4587c6f82ee1559ad8223fb31ed4adf0db756029a7e9760f56bd45a777960bf9c5af22c0af164180f83553fe34d2252b6460c542d1d13aa6160cee25c78de4ea03cb221ea3964630ada9383242c4455da46423120ee5ee04e9614ac9ab7a15fa07f993c7be4822069511ddfce12fe4e52fb5de108d107ce72e4950", 0xb5}, {&(0x7f0000000440)="aadbe948f423be6ef3482a92e9bdda311b18f54e5e8660eefd652691b8b4b5558b3d4b674a1f53900097272e9edf4872c7b1cb54c4114eb1557b62b5583e9de2bef622899f0503274e893b9260eff4cf3f4b82ba064d813a7bc8855a659bed57dcc762c274a4541bb775b99b803f15fd1fc6aa573894f9a97653b1445a705a7c59bbc91564392a68c7ec1046c781fdafadc88ee7d6d8dad355fe4acea9c95045c38832af80fe0b688c44e7ba692ed04903eb23e72fef3bb591d5ec356bc39c396795292904052d", 0xc7}], 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="0a0101027f000001000000007400000000000000000000000700000001444496f3ac1414bb00000002ac1414aa000000070a010100000000030a01010200005b187f000001ffff7fff0a0101010000000ce0000001000000096401010000000004890759e000000283172d64010101ac141438e0000001ac1e0101e0000002000000000014000000000000000000000001000000010000000000000011000000000000000000000001000000ac000000000000001c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="ac141418e0000002000000001400000000000000000000000200000000800000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ffffffff0a01010100000008"], 0x120}, 0x40004) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="6f2b4a857469d0c973c12fa53b2c262dff07bb8d503f0b60148d3614cafc2d677bf1a2fa0e3939aacefe2f50e0b868994bf90726873bc84e4468b42ec7592c61bc7a6ebe72038d955481187c60112161e5836b75c13a9e8d3e1279fcd613f938a851a158adaf2431e8d269e0ad102b12e6ec57c44eb8ee5ab2495b83b3041d182110f3a8299d57e2fa3295f157504063dc328c79a7c3981e7b6ff040a50efe42dc5cb9dd677e56627185a70d3ceb4b7b490bdbd7cea555bc3c68ec3d75bebe3b8286fbe59342eb076d29252699ee2dbc72f72489e935048dc672a7b2941478ff1f7b72cb6b09da5db509023e71099d9c9deece"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002000) (async) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x136}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socketpair(0x1, 0x1, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000160007012cbd7000fedbdf250b7c00000c00018008000100", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000030101020000000000000000020000080c0019800800020002020000300002802c0001"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x44000) 2.214765593s ago: executing program 2 (id=2762): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a00000002100010028bd700000000000e000000200000084ff00000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000010000000005000110000000000000000000000ffff00000000ff01000000000000000000000000000164010102000000000000000000000000fc0200000000000000000000000000003c0000004c"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.037304159s ago: executing program 3 (id=2763): socket$nl_netfilter(0x10, 0x3, 0xc) mount$bpf(0x200000000000, 0x0, 0x0, 0x198d044, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80, 0x0, 0xffffffa1}, 0x20000001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) perf_event_open(&(0x7f0000000dc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x80, 0x2, 0xfffffffe, 0x1, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x1, 0x2}, 0x1302, 0x2, 0xfffffffe, 0x8, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000"], 0x50) sendmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x80) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0x19c, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x3507, 0x2, 0x4, 0x0, 0x2c}, [@algo_crypt={0x60, 0x2, {{'cbc(twofish)\x00'}, 0xc0, "6e000bfff000002000ff8000000000000000000100001800"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x19c}, 0x1, 0xffffff80}, 0x44050) recvmsg$kcm(r2, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001d80)=[{0x0}, {0x0}], 0x2}, 0x102) 1.966288164s ago: executing program 4 (id=2764): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1f00000039000100faff07000400000001"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.92695782s ago: executing program 2 (id=2765): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x9, 0x1, 0x2, 0xfffff271, 0xfffc, 0x0, 0xff800000, 0x0, 0x20}, r2, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) close(r1) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r6, &(0x7f0000000100)={0x0, 0xfffffffffffffcb4, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x120) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040041}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000880) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a81400002a00070127bd700000000000017c00000c00028005007c8028000000040007000c"], 0x14a8}, 0x1, 0x0, 0x0, 0x800}, 0x4040) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x0, 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = syz_clone(0x40060000, &(0x7f0000000200)="11f0f2b8e7cdff99643a1d000e29c586600f3c1a16e99861a4b00f31d27525caa284b3aa31e3d76bdd1a107f8b5d57ca448e2f74a73e5e0116afd5dafc0970e8f8269dfbcb49d18b72bf6a5969881583c72aec9f95ab1eee050573153fe71519c60aa7ef9f707ef438af3bf2ddc69a761a919f3072be8b7e0d8e631623604b591805cb5c54086564b411e309e37d07c902cf71ee1bee036ec21922935ae8f60cceb704f9fbc6ca83f47403a2c80fbf5fc66994a0fe5f3e32c7eec7c7e29c10231699e0e0d784a9e4de27cf9a233e88363f73d65ce20bdfec905662", 0xdb, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="f683c24a825dc4a32a97384d0f9e5fe7ad98cf7b72d000697c44ee9690165d2486b1789816c7575b69961fce1b2bec1544d96ac5015615474555c49d2b8af97c6faef7332acc0190244fe9b1d072cb1245df7eac8c0fddc0cd6ccd27") perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x2, 0x0, 0x0, 0x0, 0x68883, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x22, 0x0, 0x0, 0x8, 0x3fe, 0x7fefffff, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000042e6b00000000000851000000200000085000000080000009500000700009500a50d000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) 1.78128577s ago: executing program 5 (id=2766): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2000000}, 0x94) 1.71369039s ago: executing program 1 (id=2767): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000800000000000085000000500000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000006c00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.612470338s ago: executing program 3 (id=2768): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x78, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffdd7, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x20008080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d1", 0x61}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000000000000000000000010000000000000000000000140000000000000000001aee354a1a03ef88711a1493a84e4100000200000000000000000000000002000000000000000000000011000000000000000000009e9f5848ecd8b5fe000100000000000000000000001100000000000000020000000100000000000000000000009df50000000000000000000007000000830300000396000f206a77bdd1a004189054e7704a000000"], 0xa0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x114, 0x2, 0x0, 0xfffffffffffffea7) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6685, 0x4c2811e7}, 0x828, 0x0, 0xfffffffc, 0x2, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10, 0x1, 0x200000000000006, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, r4, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) sendmsg$kcm(r5, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x703, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x400000, 0x4}, 0x80, 0x0}, 0x20040010) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000020301010000000000000000020000010900090000000007010000000800010001"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x801, 0x0, 0x0, 0x8, 0x9, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r9, 0x0, 0x0}, 0x20) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000303050000000000000021000a0000010c0002"], 0x20}, 0x1, 0x1000000, 0x0, 0x20000004}, 0x404) mount$bpf(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x139b031, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x202021, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffe, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 1.519135378s ago: executing program 5 (id=2769): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x142, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000008000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)={0x18, 0x56, 0x601, 0x3, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}, @typed={0x4, 0x19}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.429177842s ago: executing program 4 (id=2770): mkdir(&(0x7f0000001a80)='./file1\x00', 0x18b) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x1, 0x2}, 0x1302, 0x2, 0xfffffffe, 0x8, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006911240000000000851000d37f664f00850000734cb88769e202ba00a215df63c7cc6aac41ac231c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x20008041) (async) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x20008041) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) fstat(r6, &(0x7f00000001c0)) (async) fstat(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000002c0)) (async) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, 0x0) fstat(r0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1012001, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200ceb7", @ANYRESHEX=r7, @ANYBLOB=',uid=', @ANYRESHEX=r8, @ANYBLOB=',gid=', @ANYRESHEX=r9, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',obj_role=,euid=', @ANYRESDEC=r10, @ANYBLOB=',\x00']) fstat(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) fstat(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, 0x0) sendmsg$netlink(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000100000000001000000085ff00003b000000030000000000000008001c00c9000000e7fea8022b"], 0x28}, {&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x37c}, {&(0x7f0000000780)=ANY=[@ANYBLOB="106aa9e9d8ebe8a05d5109ab00000026"], 0x10}, {&(0x7f00000019c0)=ANY=[@ANYBLOB="9c0200001600080027bd7000fbdbdf25139be35c47562624892bbf6fc408f208f0c2da653064b6b6adb18e556b5e96a7b73b2882846a112e2c4be49383ddc82f89f11fed1e3a7f2deb91b1c9e81427bd3231c7c8577ff10608b1aac8a6d1a8fdf3a601eb1276c64a08fd2ffe28d1c092244cc9b6cc236208854887ad4d3621e5a7bdc8ead460ab8c5706a6edf73760241db5621b0e2d2bf7726d8448373af6c2fba77409493d6a54d03d0fb4c04de41dcaa0517948b3b0fde3051284c8127776dac039863bf63fe388591290d8782580be07b59382a7c474cd2f81ae9580df5e66b7d783cc0800f300", @ANYRES32=0x0, @ANYBLOB="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"], 0x29c}, {&(0x7f00000010c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r13, @ANYBLOB='\x00\x00'], 0x278}], 0x5, 0x0, 0x0, 0xb305e06daeb58237}, 0x0) fstat(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000005c0)) (async) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2800010, &(0x7f0000000640)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB=',wid=', @ANYRESHEX=r9, @ANYBLOB=',uid=', @ANYRESHEX=r11, @ANYBLOB=',mode=00000000000000000000010,mode=01777777777777777777776,uid=', @ANYRESHEX=r13, @ANYBLOB=',uid=', @ANYRESHEX=r14, @ANYBLOB=',uid=', @ANYRESHEX=r15, @ANYBLOB=',context=root,\x00']) (async) mount$bpf(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2800010, &(0x7f0000000640)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB=',wid=', @ANYRESHEX=r9, @ANYBLOB=',uid=', @ANYRESHEX=r11, @ANYBLOB=',mode=00000000000000000000010,mode=01777777777777777777776,uid=', @ANYRESHEX=r13, @ANYBLOB=',uid=', @ANYRESHEX=r14, @ANYBLOB=',uid=', @ANYRESHEX=r15, @ANYBLOB=',context=root,\x00']) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000001c80)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000004000000020000000000000085000000000000009500000000000000"], &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000004000000020000000000000085000000000000009500000000000000"], &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 1.402646152s ago: executing program 1 (id=2771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x98ad45ccb5c69825}, 0x0) 812.00153ms ago: executing program 1 (id=2772): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x11}, 0x94) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000240)="541abba06ba069c5490f31b0b27388d4c07daf7e058f07afc43dbc8f4af77b22745ee6d685f73af483d00a4ac62b06740f337ce9f32162f6b9b0abf3833f35c691b0af1fbfb0f5eef08c88495ff21a9ab6781d8229fba29d555c2c8446242f9197674f6c3bc22b6aed174edbe1cc88c657428718ccd4117c12ea5c209b15f22248f479273fa98be792d727a2c74e12ee09aba1078c31d38f82d463dedb9218", &(0x7f0000000300), 0x4}, 0x20) 725.350352ms ago: executing program 5 (id=2773): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x78, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffdd7, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x20008080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d1", 0x61}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000000000000000000000010000000000000000000000140000000000000000001aee354a1a03ef88711a1493a84e4100000200000000000000000000000002000000000000000000000011000000000000000000009e9f5848ecd8b5fe000100000000000000000000001100000000000000020000000100000000000000000000009df50000000000000000000007000000830300000396000f206a77bdd1a004189054e7704a000000"], 0xa0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x114, 0x2, 0x0, 0xfffffffffffffea7) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6685, 0x4c2811e7}, 0x828, 0x0, 0xfffffffc, 0x2, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10, 0x1, 0x200000000000006, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, r4, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) sendmsg$kcm(r5, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x703, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x400000, 0x4}, 0x80, 0x0}, 0x20040010) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000020301010000000000000000020000010900090000000007010000000800010001"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x801, 0x0, 0x0, 0x8, 0x9, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r9, 0x0, 0x0}, 0x20) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000303050000000000000021000a0000010c0002"], 0x20}, 0x1, 0x1000000, 0x0, 0x20000004}, 0x404) mount$bpf(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x139b031, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x202021, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffe, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 725.088388ms ago: executing program 4 (id=2774): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newspdinfo={0x1c, 0x24, 0x50d, 0x70bd2a, 0x25dfdbfb, 0x6, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000040) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002200)=""/4096, 0xffc0}], 0x1}, 0x40) close(0x3) 557.983585ms ago: executing program 1 (id=2775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a3100000000080004400000fff50900010073797a3000000000080003"], 0x64}}, 0x0) 413.398964ms ago: executing program 4 (id=2776): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000940000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0xa0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x1920000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="31000000010100000700002000080400", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000100"/28], 0x50) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000300080000000061302e002e5f00"], &(0x7f0000000300)=""/201, 0x20, 0xc9, 0x1, 0x8005}, 0x28) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0xfffffffffffff4c1, 0x1}, 0x20015a, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x12) syz_clone(0x2810880, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x7, &(0x7f0000000000), 0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2b, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="a40100001000010028bd700000000000ff020000000000000000000000000001ac14140d0000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000010000000032000000fe880000000000000000000000000001fefffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000090000000000000002000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000000000000000000000a0004002c00000000000000680002006362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100001a000b0000849a7390450024000000004403000000c3d6db74b38500000040004c001400686d61632873686132353629000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000a7b27dd7da7bcf143ae2c393d098536d5934c017341e9418e8cf7fba289c0ec84d865a61eadc3dcb41f7858d92e582c9f5bb4f1cc0fcf7a3b8c1b04d35a049783940471916571b1aea23a9ba49346bf30f025adfedf27f81989d57bdcb5db79667d3d11268611adf84d81776d046933752f730543835e3dc2db0c980b0f5cba6b32f05b04cd48a780c509f8900f6fde9d173a33a22c0e11904ea1f62ffa99a390ce796e2f7074aad7e69596dbf"], 0x1a4}}, 0x44050) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f00000005c0)=ANY=[@ANYRESHEX], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r1}, 0x94) 0s ago: executing program 1 (id=2777): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$kcm(0xa, 0x1, 0x106) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000340), 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) r5 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x114244, 0x0, 0x79, 0x8, 0x401, 0x7fffffff}, r5, 0xffffffffffffffff, r3, 0xa) perf_event_open(0x0, r5, 0x1, r3, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x400, 0x8}, 0x4044, 0x2, 0xffffffff, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)}, 0xfffffffffffffd6f) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10010, 0x2, 0xffffffff, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0xb, 0x0, 0x0, 0x0, 0x0, 0x82240, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x160, 0x5}, 0x0, 0x13, 0x0, 0x5, 0x7fff, 0x7fffffff, 0xc, 0x0, 0x8, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x80000, 0xd) setsockopt$sock_attach_bpf(r7, 0x29, 0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x4) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x2101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xfffffffffffffff3}, 0xa38, 0x0, 0x4, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x8902, &(0x7f0000000040)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f00000006c0)="737b82d731fece282a09d233b32bbd6fb08b6216f36076dec58ec8967e1a7a308f1fc0c925ee20eb6d5fb0ec230c32be76572eb4c48db3aadedb803d2cb631e82eb22e1c456ce264bc0792ed0cd5aa722b3ba2020541eeccc47c36aedde59532db61547f4d285810250d4608b99458fdceb23ba08bbb4fb9a0937323a17a842554f895ad225be05df676f5f7994614aa7fde63172d8a9cb942a98d166d9d77019c1f48493a77ac07077037cc3a953b0704f097d0e8f9ef1238cb0e97595256b2e240c07f66"}, 0x20) kernel console output (not intermixed with test programs): ributes in process `syz.2.1002'. [ 243.974793][ T9495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.007276][ T9495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.052942][ T134] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.076991][ T134] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.125359][ T1115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.158739][ T1115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.403440][ T9379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.424390][ T9753] ref_ctr_offset mismatch. inode: 0x101 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 244.443824][ T9379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.542416][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.556275][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.856673][ T9764] netlink: 'syz.3.1010': attribute type 7 has an invalid length. [ 244.891647][ T9764] netlink: 'syz.3.1010': attribute type 3 has an invalid length. [ 245.433985][ T9778] siw: device registration error -23 [ 245.482671][ T9779] netlink: 'syz.5.1014': attribute type 10 has an invalid length. [ 245.512548][ T9779] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1014'. [ 245.927872][ T9786] netlink: 'syz.1.1017': attribute type 10 has an invalid length. [ 245.985466][ T9786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.010648][ T9786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.061253][ T9786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.090990][ T9796] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1021'. [ 246.091157][ T9786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.136605][ T9791] netlink: 'syz.5.1020': attribute type 1 has an invalid length. [ 247.839423][ T9806] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1023'. [ 247.882892][ T9810] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1024'. [ 247.991265][ T9814] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1028'. [ 248.152829][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1031'. [ 248.260566][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1031'. [ 248.356003][ T9829] siw: device registration error -23 [ 248.370940][ T9827] netlink: 'syz.1.1034': attribute type 16 has an invalid length. [ 248.398923][ T9827] netlink: 'syz.1.1034': attribute type 17 has an invalid length. [ 248.470968][ T9834] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1035'. [ 248.758720][ T9840] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1036'. [ 249.283095][ T9850] netlink: 'syz.3.1037': attribute type 10 has an invalid length. [ 249.521145][ T9827] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.529002][ T9827] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.953439][ T9379] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.992883][ T9379] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.068897][ T9379] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.092002][ T9379] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.600994][ T9872] siw: device registration error -23 [ 250.663357][ T9873] netlink: 'syz.4.1046': attribute type 10 has an invalid length. [ 251.333933][ T9890] netlink: 'syz.1.1053': attribute type 10 has an invalid length. [ 251.351737][ T9890] geneve1: entered promiscuous mode [ 251.382052][ T9895] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1054'. [ 251.428553][ T9890] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 251.462248][ T9379] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.480805][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.516841][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.564653][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.839479][ T9914] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1060'. [ 251.902210][ T9918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1061'. [ 251.938548][ T9912] netlink: 'syz.2.1059': attribute type 6 has an invalid length. [ 251.979790][ T9912] netlink: 'syz.2.1059': attribute type 1 has an invalid length. [ 252.250057][ T9915] wg1 speed is unknown, defaulting to 1000 [ 252.334992][ T9932] netlink: 'syz.3.1067': attribute type 10 has an invalid length. [ 252.602633][ T9946] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 252.661308][ T9948] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 253.395850][ T9969] __nla_validate_parse: 4 callbacks suppressed [ 253.395872][ T9969] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1076'. [ 253.475067][ T9963] gretap0 speed is unknown, defaulting to 1000 [ 253.606469][ T9963] gretap0 speed is unknown, defaulting to 1000 [ 253.679734][ T9963] gretap0 speed is unknown, defaulting to 1000 [ 253.694909][ T9963] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 253.711062][ T9963] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 253.731877][ T9963] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 253.758242][ T9963] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 253.811688][ T9963] gretap0 speed is unknown, defaulting to 1000 [ 253.841082][ T9963] gretap0 speed is unknown, defaulting to 1000 [ 253.886557][ T9963] gretap0 speed is unknown, defaulting to 1000 [ 253.923196][ T9963] gretap0 speed is unknown, defaulting to 1000 [ 253.950366][ T9963] gretap0 speed is unknown, defaulting to 1000 [ 253.993175][ T9963] gretap0 speed is unknown, defaulting to 1000 [ 254.034507][ T9963] gretap0 speed is unknown, defaulting to 1000 [ 254.057426][ T9963] gretap0 speed is unknown, defaulting to 1000 [ 254.066917][ T9963] gretap0 speed is unknown, defaulting to 1000 [ 254.077237][ T9963] gretap0 speed is unknown, defaulting to 1000 [ 254.085860][ T9963] gretap0 speed is unknown, defaulting to 1000 [ 254.114022][ T9963] gretap0 speed is unknown, defaulting to 1000 [ 254.138888][ T9963] gretap0 speed is unknown, defaulting to 1000 [ 254.153335][ T9963] gretap0 speed is unknown, defaulting to 1000 [ 254.169276][ T9963] gretap0 speed is unknown, defaulting to 1000 [ 254.211099][ T9963] gretap0 speed is unknown, defaulting to 1000 [ 254.423773][ T9999] netlink: 'syz.4.1086': attribute type 16 has an invalid length. [ 254.437553][ T9999] netlink: 'syz.4.1086': attribute type 17 has an invalid length. [ 254.659913][T10009] netlink: 'syz.2.1090': attribute type 10 has an invalid length. [ 254.703642][T10011] netlink: 'syz.3.1089': attribute type 7 has an invalid length. [ 254.863793][T10015] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1091'. [ 254.938554][ T9999] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.957968][ T9999] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.553243][T10020] netlink: 'syz.1.1092': attribute type 10 has an invalid length. [ 255.581033][T10021] netlink: 'syz.5.1093': attribute type 10 has an invalid length. [ 255.658200][ T9999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.779729][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.787976][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.822820][ T9379] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.869890][ T9379] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.916841][ T9379] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.932697][T10023] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1094'. [ 255.967909][ T9379] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.991704][T10025] netlink: 'syz.3.1096': attribute type 5 has an invalid length. [ 256.011796][T10027] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1095'. [ 256.194806][T10035] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1099'. [ 256.254406][T10041] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1100'. [ 256.758133][T10050] tap1: tun_chr_ioctl cmd 1074025681 [ 256.889386][T10057] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1107'. [ 256.901966][T10061] netlink: 'syz.2.1108': attribute type 10 has an invalid length. [ 256.956413][T10057] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1107'. [ 257.093431][T10067] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1111'. [ 257.171022][T10073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1113'. [ 257.918807][T10098] netlink: 'syz.4.1122': attribute type 10 has an invalid length. [ 257.972250][T10098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.144675][T10102] netlink: 'syz.5.1123': attribute type 29 has an invalid length. [ 258.618211][T10123] openvswitch: netlink: EtherType 51c is less than min 600 [ 258.786148][ T48] tipc: Subscription rejected, illegal request [ 258.828260][T10133] __nla_validate_parse: 4 callbacks suppressed [ 258.828280][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'. [ 259.045007][T10141] team0: Device veth0_macvtap failed to register rx_handler [ 259.303109][T10156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.313523][T10156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.343699][T10156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.361389][T10156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.508125][T10159] validate_nla: 9 callbacks suppressed [ 259.508274][T10159] netlink: 'syz.2.1142': attribute type 10 has an invalid length. [ 259.646146][T10161] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1144'. [ 259.674419][T10163] nbd: must specify at least one socket [ 259.842795][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1147'. [ 260.028169][T10174] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1149'. [ 260.457596][T10191] nbd: must specify at least one socket [ 260.478448][T10189] netlink: 'syz.5.1155': attribute type 29 has an invalid length. [ 260.522797][T10189] netlink: 'syz.5.1155': attribute type 29 has an invalid length. [ 260.723436][T10201] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1159'. [ 260.767624][T10201] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1159'. [ 260.937379][T10211] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1163'. [ 261.156963][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1165'. [ 261.618758][T10236] netlink: 'syz.2.1170': attribute type 7 has an invalid length. [ 261.665322][T10236] netlink: 'syz.2.1170': attribute type 3 has an invalid length. [ 262.033360][T10255] netlink: 'syz.1.1180': attribute type 10 has an invalid length. [ 262.079930][ T1115] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.104402][ T1115] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.124742][T10254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1178'. [ 262.140673][ T1115] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.164867][ T1115] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.197460][T10258] bpf: Bad value for 'gid' [ 262.722213][T10283] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1188'. [ 264.013675][T10339] __nla_validate_parse: 4 callbacks suppressed [ 264.013696][T10339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1208'. [ 264.159700][T10342] netlink: 'syz.1.1209': attribute type 10 has an invalid length. [ 264.352625][T10352] netlink: 'syz.4.1214': attribute type 1 has an invalid length. [ 264.778703][T10367] netlink: 'syz.4.1221': attribute type 10 has an invalid length. [ 264.800075][T10367] geneve1: entered promiscuous mode [ 264.873470][T10367] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 264.904624][ T9379] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.938222][ T9379] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.960196][ T9379] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.969557][ T9379] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.089450][T10377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1226'. [ 265.111788][T10377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1226'. [ 265.262294][T10383] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1229'. [ 265.331795][T10390] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1232'. [ 265.402316][T10392] wg1 speed is unknown, defaulting to 1000 [ 265.447705][T10392] gretap0 speed is unknown, defaulting to 1000 [ 265.552669][T10402] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1235'. [ 265.759057][T10406] siw: device registration error -23 [ 266.146778][T10421] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1240'. [ 266.170652][T10421] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1240'. [ 266.471146][T10429] nbd: must specify a size in bytes for the device [ 266.553141][T10433] openvswitch: netlink: IP tunnel dst address not specified [ 266.758864][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1248'. [ 266.964128][T10449] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1251'. [ 267.786427][T10480] nbd: must specify a size in bytes for the device [ 268.824667][T10508] netlink: 'syz.3.1267': attribute type 21 has an invalid length. [ 268.930350][T10508] netlink: 'syz.3.1267': attribute type 20 has an invalid length. [ 269.223261][T10516] netlink: 'syz.2.1271': attribute type 2 has an invalid length. [ 269.611776][T10523] __nla_validate_parse: 3 callbacks suppressed [ 269.611798][T10523] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1274'. [ 269.635766][T10523] unsupported nlmsg_type 40 [ 269.746596][T10535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1276'. [ 269.906372][T10542] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1279'. [ 270.348298][T10556] netlink: 'syz.3.1282': attribute type 2 has an invalid length. [ 270.489401][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1284'. [ 270.581417][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1284'. [ 270.898436][T10578] netlink: 'syz.2.1286': attribute type 21 has an invalid length. [ 270.923407][T10578] netlink: 'syz.2.1286': attribute type 20 has an invalid length. [ 271.600034][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1292'. [ 271.636374][T10597] netlink: 'syz.2.1294': attribute type 2 has an invalid length. [ 271.822417][T10608] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1299'. [ 271.933481][T10606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1297'. [ 272.238485][T10624] netlink: 'syz.3.1306': attribute type 2 has an invalid length. [ 272.410198][T10628] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1308'. [ 272.687477][T10640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1313'. [ 273.079231][T10653] netlink: 'syz.5.1318': attribute type 29 has an invalid length. [ 273.097541][T10653] netlink: 'syz.5.1318': attribute type 29 has an invalid length. [ 273.378547][T10673] netlink: 'syz.3.1323': attribute type 10 has an invalid length. [ 273.799898][T10694] netlink: 'syz.4.1329': attribute type 7 has an invalid length. [ 274.911961][T10717] netlink: 'syz.4.1335': attribute type 13 has an invalid length. [ 274.938225][T10717] __nla_validate_parse: 1 callbacks suppressed [ 274.938243][T10717] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.1335'. [ 274.977460][T10717] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1335'. [ 275.683381][T10755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1343'. [ 275.721782][T10748] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1341'. [ 275.795022][T10759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1345'. [ 275.879769][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1346'. [ 276.098541][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1346'. [ 276.141278][T10761] netlink: 'syz.4.1346': attribute type 3 has an invalid length. [ 276.180150][T10761] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1346'. [ 276.420922][T10785] ref_ctr_offset mismatch. inode: 0x1de offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 276.520299][ T9375] tipc: Subscription rejected, illegal request [ 276.540221][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1355'. [ 276.728446][T10790] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1356'. [ 276.967832][T10790] bond0: (slave bond_slave_0): Releasing backup interface [ 277.637606][T10790] bond_slave_0: entered promiscuous mode [ 277.662556][T10790] bond_slave_0: entered allmulticast mode [ 278.054309][T10814] netlink: 'syz.2.1366': attribute type 10 has an invalid length. [ 279.164814][ T9389] tipc: Subscription rejected, illegal request [ 279.189434][T10847] netlink: 'syz.5.1373': attribute type 3 has an invalid length. [ 279.213510][T10847] netlink: 'syz.5.1373': attribute type 3 has an invalid length. [ 279.481651][T10855] netlink: 'syz.4.1375': attribute type 10 has an invalid length. [ 279.728484][T10855] bond0: (slave geneve1): Releasing backup interface [ 280.182886][ T1115] tipc: Subscription rejected, illegal request [ 280.229190][T10878] __nla_validate_parse: 5 callbacks suppressed [ 280.229210][T10878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1381'. [ 280.250259][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.287346][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.378498][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.429843][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.887237][T10893] netlink: 'syz.3.1384': attribute type 7 has an invalid length. [ 280.895021][T10893] netlink: 'syz.3.1384': attribute type 3 has an invalid length. [ 281.816973][T10932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1395'. [ 283.455491][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 283.774806][T10993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1404'. [ 283.934302][T11005] siw: device registration error -23 [ 283.968419][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 284.208626][T11015] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1413'. [ 284.408186][T11023] netlink: 'syz.5.1416': attribute type 46 has an invalid length. [ 284.440697][T11023] netlink: 'syz.5.1416': attribute type 28 has an invalid length. [ 285.652377][T11069] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1433'. [ 285.922340][T11075] netlink: 'syz.3.1431': attribute type 21 has an invalid length. [ 285.959435][T11075] netlink: 'syz.3.1431': attribute type 20 has an invalid length. [ 287.783110][ T9375] tipc: Subscription rejected, illegal request [ 287.840996][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1440'. [ 288.543535][T11114] netlink: 'syz.4.1444': attribute type 2 has an invalid length. [ 288.622986][T11114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.181178][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1447'. [ 290.239895][T11145] netlink: 'syz.4.1450': attribute type 21 has an invalid length. [ 290.275343][T11145] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.1450'. [ 290.501834][T11131] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1448'. [ 293.126633][T11169] netlink: 'syz.3.1463': attribute type 10 has an invalid length. [ 293.499699][T11177] netlink: 'syz.3.1466': attribute type 10 has an invalid length. [ 293.724985][T11183] netlink: 'syz.3.1468': attribute type 13 has an invalid length. [ 293.806546][T11183] gretap0: refused to change device tx_queue_len [ 293.843929][T11183] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 294.801600][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1477'. [ 295.084608][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1479'. [ 295.129981][ T9368] tipc: Subscription rejected, illegal request [ 295.149514][T11223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1482'. [ 295.176944][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1482'. [ 295.250661][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1483'. [ 295.552347][T11243] ±ÿÿÿÿa–ïD: renamed from lo [ 295.682384][T11249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1490'. [ 295.721927][T11249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1490'. [ 295.913409][T11254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1491'. [ 297.091028][T11282] netlink: 'syz.3.1497': attribute type 10 has an invalid length. [ 297.600121][T11305] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1505'. [ 298.010905][T11323] netlink: 'syz.2.1511': attribute type 21 has an invalid length. [ 298.057600][T11323] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1511'. [ 298.157299][T11328] netlink: 'syz.3.1510': attribute type 21 has an invalid length. [ 298.302341][T11328] netlink: 'syz.3.1510': attribute type 20 has an invalid length. [ 298.719596][T11348] openvswitch: netlink: Flow actions attr not present in new flow. [ 298.767360][T11343] netlink: 'syz.5.1517': attribute type 2 has an invalid length. [ 298.811369][T11345] netlink: 'syz.1.1518': attribute type 2 has an invalid length. [ 298.989639][T11355] FAULT_INJECTION: forcing a failure. [ 298.989639][T11355] name failslab, interval 1, probability 0, space 0, times 0 [ 299.047226][T11355] CPU: 1 UID: 0 PID: 11355 Comm: syz.3.1521 Not tainted syzkaller #0 PREEMPT(full) [ 299.047251][T11355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 299.047270][T11355] Call Trace: [ 299.047281][T11355] [ 299.047288][T11355] dump_stack_lvl+0xe8/0x150 [ 299.047321][T11355] should_fail_ex+0x412/0x560 [ 299.047352][T11355] should_failslab+0xa8/0x100 [ 299.047377][T11355] ? skb_clone+0x212/0x3a0 [ 299.047402][T11355] kmem_cache_alloc_noprof+0x87/0x650 [ 299.047426][T11355] ? __pfx_perf_trace_lock+0x10/0x10 [ 299.047455][T11355] skb_clone+0x212/0x3a0 [ 299.047494][T11355] __netlink_deliver_tap+0x404/0x850 [ 299.047534][T11355] ? netlink_deliver_tap+0x2e/0x1b0 [ 299.047559][T11355] netlink_deliver_tap+0x19c/0x1b0 [ 299.047582][T11355] netlink_unicast+0x730/0x8e0 [ 299.047615][T11355] netlink_sendmsg+0x813/0xb40 [ 299.047651][T11355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.047680][T11355] ? aa_sock_msg_perm+0xf1/0x1b0 [ 299.047706][T11355] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 299.047734][T11355] ____sys_sendmsg+0x972/0x9f0 [ 299.047758][T11355] ? __pfx_perf_trace_lock+0x10/0x10 [ 299.047788][T11355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.047825][T11355] ? import_iovec+0x73/0xa0 [ 299.047855][T11355] ___sys_sendmsg+0x2a5/0x360 [ 299.047878][T11355] ? __lock_acquire+0x6b5/0x2cf0 [ 299.047903][T11355] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.047957][T11355] ? __fget_files+0x2a/0x420 [ 299.047990][T11355] ? __fget_files+0x2a/0x420 [ 299.048008][T11355] ? __fget_files+0x3a0/0x420 [ 299.048042][T11355] __x64_sys_sendmsg+0x1bd/0x2a0 [ 299.048070][T11355] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.048107][T11355] ? __pfx_ksys_write+0x10/0x10 [ 299.048144][T11355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.048164][T11355] do_syscall_64+0x15f/0xf80 [ 299.048188][T11355] ? trace_irq_disable+0x3b/0x140 [ 299.048212][T11355] ? clear_bhb_loop+0x40/0x90 [ 299.048239][T11355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.048257][T11355] RIP: 0033:0x7fd8fbb9ce59 [ 299.048281][T11355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.048296][T11355] RSP: 002b:00007fd8fc980028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.048318][T11355] RAX: ffffffffffffffda RBX: 00007fd8fbe15fa0 RCX: 00007fd8fbb9ce59 [ 299.048331][T11355] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 299.048342][T11355] RBP: 00007fd8fc980090 R08: 0000000000000000 R09: 0000000000000000 [ 299.048353][T11355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.048363][T11355] R13: 00007fd8fbe16038 R14: 00007fd8fbe15fa0 R15: 00007ffe39719d28 [ 299.048400][T11355] [ 299.700866][T11369] netlink: 'syz.2.1526': attribute type 10 has an invalid length. [ 301.202542][T11410] wlan0: mtu greater than device maximum [ 301.320473][T11416] __nla_validate_parse: 7 callbacks suppressed [ 301.320494][T11416] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1540'. [ 301.401339][T11415] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1540'. [ 301.419125][T11419] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1541'. [ 302.252264][T11445] netlink: 'syz.1.1547': attribute type 5 has an invalid length. [ 302.302907][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1550'. [ 302.336248][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1550'. [ 302.392448][T11453] bridge0: entered allmulticast mode [ 302.428571][T11457] wlan0: mtu greater than device maximum [ 302.437212][T11458] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1552'. [ 302.473669][T11458] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1552'. [ 302.537919][T11458] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1552'. [ 302.990372][T11466] netlink: 'syz.5.1556': attribute type 7 has an invalid length. [ 303.242427][T11476] netlink: 'syz.5.1559': attribute type 10 has an invalid length. [ 303.726244][T11495] netlink: 'syz.1.1562': attribute type 7 has an invalid length. [ 303.737109][T11494] FAULT_INJECTION: forcing a failure. [ 303.737109][T11494] name failslab, interval 1, probability 0, space 0, times 0 [ 303.761497][T11495] netlink: 'syz.1.1562': attribute type 3 has an invalid length. [ 303.775496][T11494] CPU: 1 UID: 0 PID: 11494 Comm: syz.5.1563 Not tainted syzkaller #0 PREEMPT(full) [ 303.775521][T11494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 303.775544][T11494] Call Trace: [ 303.775551][T11494] [ 303.775559][T11494] dump_stack_lvl+0xe8/0x150 [ 303.775583][T11494] should_fail_ex+0x412/0x560 [ 303.775611][T11494] should_failslab+0xa8/0x100 [ 303.775633][T11494] ? skb_clone+0x212/0x3a0 [ 303.775656][T11494] kmem_cache_alloc_noprof+0x87/0x650 [ 303.775680][T11494] ? __netlink_lookup+0xc6/0x8b0 [ 303.775709][T11494] skb_clone+0x212/0x3a0 [ 303.775735][T11494] __netlink_deliver_tap+0x404/0x850 [ 303.775768][T11494] ? netlink_deliver_tap+0x2e/0x1b0 [ 303.775791][T11494] netlink_deliver_tap+0x19c/0x1b0 [ 303.775813][T11494] netlink_unicast+0x730/0x8e0 [ 303.775844][T11494] netlink_sendmsg+0x813/0xb40 [ 303.775875][T11494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.775900][T11494] ? aa_sock_msg_perm+0xf1/0x1b0 [ 303.775935][T11494] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 303.775961][T11494] ____sys_sendmsg+0x972/0x9f0 [ 303.775984][T11494] ? __might_fault+0xaf/0x130 [ 303.776011][T11494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.776042][T11494] ? import_iovec+0x73/0xa0 [ 303.776069][T11494] ___sys_sendmsg+0x2a5/0x360 [ 303.776090][T11494] ? __lock_acquire+0x6b5/0x2cf0 [ 303.776113][T11494] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.776170][T11494] ? __fget_files+0x2a/0x420 [ 303.776189][T11494] ? __fget_files+0x3a0/0x420 [ 303.776217][T11494] __x64_sys_sendmsg+0x1bd/0x2a0 [ 303.776242][T11494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 303.776264][T11494] ? perf_trace_preemptirq_template+0xb2/0x350 [ 303.776299][T11494] ? __pfx_ksys_write+0x10/0x10 [ 303.776330][T11494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.776349][T11494] do_syscall_64+0x15f/0xf80 [ 303.776371][T11494] ? trace_irq_disable+0x3b/0x140 [ 303.776400][T11494] ? clear_bhb_loop+0x40/0x90 [ 303.776422][T11494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.776439][T11494] RIP: 0033:0x7f3ad859ce59 [ 303.776456][T11494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.776470][T11494] RSP: 002b:00007f3ad9539028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.776494][T11494] RAX: ffffffffffffffda RBX: 00007f3ad8815fa0 RCX: 00007f3ad859ce59 [ 303.776506][T11494] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 303.776519][T11494] RBP: 00007f3ad9539090 R08: 0000000000000000 R09: 0000000000000000 [ 303.776530][T11494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.776540][T11494] R13: 00007f3ad8816038 R14: 00007f3ad8815fa0 R15: 00007fffae366d58 [ 303.776570][T11494] [ 304.840219][T11527] netlink: 'syz.1.1571': attribute type 21 has an invalid length. [ 304.875921][T11527] netlink: 'syz.1.1571': attribute type 20 has an invalid length. [ 306.473078][T11559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1583'. [ 307.168155][T11565] netlink: 'syz.1.1585': attribute type 21 has an invalid length. [ 307.256672][T11565] netlink: 'syz.1.1585': attribute type 20 has an invalid length. [ 307.295036][T11569] netlink: 'syz.5.1587': attribute type 7 has an invalid length. [ 307.709786][T11580] netlink: 'syz.3.1591': attribute type 10 has an invalid length. [ 307.796313][T11579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1592'. [ 307.972939][ T9380] tipc: Subscription rejected, illegal request [ 307.987135][T11592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1595'. [ 308.340554][T11606] netlink: 'syz.1.1597': attribute type 10 has an invalid length. [ 308.370365][T11606] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1597'. [ 308.398166][T11606] dummy0: entered promiscuous mode [ 308.404359][T11609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1600'. [ 308.422951][T11606] dummy0: entered allmulticast mode [ 308.472386][T11606] bridge0: port 3(dummy0) entered blocking state [ 308.485094][T11606] bridge0: port 3(dummy0) entered disabled state [ 308.507983][T11617] netlink: 'syz.5.1601': attribute type 7 has an invalid length. [ 308.550642][T11617] netlink: 'syz.5.1601': attribute type 3 has an invalid length. [ 309.321101][T11647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1611'. [ 309.358288][T11647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1611'. [ 310.593079][T11677] netlink: 4008 bytes leftover after parsing attributes in process `syz.1.1622'. [ 310.974091][T11677] wg1 speed is unknown, defaulting to 1000 [ 311.061493][T11677] gretap0 speed is unknown, defaulting to 1000 [ 312.152948][T11735] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1640'. [ 312.538884][T11747] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1643'. [ 312.650953][T11750] netlink: 'syz.4.1644': attribute type 10 has an invalid length. [ 312.671154][T11750] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1644'. [ 312.681781][T11750] dummy0: entered promiscuous mode [ 312.687668][T11750] dummy0: entered allmulticast mode [ 312.696387][T11750] bridge0: port 3(dummy0) entered blocking state [ 312.703332][T11750] bridge0: port 3(dummy0) entered disabled state [ 312.738525][T11753] netlink: 'syz.1.1645': attribute type 7 has an invalid length. [ 312.951230][T11755] netlink: 'syz.3.1646': attribute type 10 has an invalid length. [ 313.413479][T11770] netlink: 'syz.5.1651': attribute type 1 has an invalid length. [ 313.443502][T11770] netlink: 'syz.5.1651': attribute type 1 has an invalid length. [ 313.468055][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1651'. [ 313.498833][T11774] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1652'. [ 313.799995][T11782] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1656'. [ 314.175609][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 314.402840][T11798] netlink: 'syz.4.1662': attribute type 10 has an invalid length. [ 314.520237][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1661'. [ 314.570309][T11805] ref_ctr_offset mismatch. inode: 0x330 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 314.599952][T11803] netlink: 'syz.4.1663': attribute type 10 has an invalid length. [ 314.627707][T11803] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 314.667197][T11803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.801515][T11819] FAULT_INJECTION: forcing a failure. [ 314.801515][T11819] name failslab, interval 1, probability 0, space 0, times 0 [ 314.814818][T11819] CPU: 1 UID: 0 PID: 11819 Comm: syz.1.1668 Not tainted syzkaller #0 PREEMPT(full) [ 314.814842][T11819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 314.814853][T11819] Call Trace: [ 314.814861][T11819] [ 314.814868][T11819] dump_stack_lvl+0xe8/0x150 [ 314.814894][T11819] should_fail_ex+0x412/0x560 [ 314.814922][T11819] should_failslab+0xa8/0x100 [ 314.814949][T11819] __kmalloc_cache_noprof+0x88/0x660 [ 314.814974][T11819] ? kobject_uevent_env+0x28c/0x9e0 [ 314.814997][T11819] ? __pfx_dev_uevent_name+0x10/0x10 [ 314.815021][T11819] kobject_uevent_env+0x28c/0x9e0 [ 314.815050][T11819] nbd_config_put+0x14c/0x580 [ 314.815077][T11819] nbd_genl_connect+0x19d5/0x1cf0 [ 314.815095][T11819] ? __pfx___nla_validate_parse+0x10/0x10 [ 314.815130][T11819] ? __pfx_nbd_genl_connect+0x10/0x10 [ 314.815156][T11819] ? rcu_is_watching+0x15/0xb0 [ 314.815176][T11819] ? trace_kmalloc+0x2a/0xf0 [ 314.815201][T11819] ? __nla_parse+0x40/0x60 [ 314.815226][T11819] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 314.815245][T11819] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 314.815270][T11819] genl_family_rcv_msg_doit+0x22a/0x330 [ 314.815295][T11819] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 314.815324][T11819] ? __lock_acquire+0x6b5/0x2cf0 [ 314.815350][T11819] genl_rcv_msg+0x61c/0x7a0 [ 314.815374][T11819] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.815390][T11819] ? __pfx_nbd_genl_connect+0x10/0x10 [ 314.815421][T11819] netlink_rcv_skb+0x232/0x4b0 [ 314.815445][T11819] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.815464][T11819] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.815502][T11819] ? down_read+0x270/0x2e0 [ 314.815515][T11819] ? genl_rcv+0xd/0x40 [ 314.815534][T11819] genl_rcv+0x28/0x40 [ 314.815549][T11819] netlink_unicast+0x75c/0x8e0 [ 314.815580][T11819] netlink_sendmsg+0x813/0xb40 [ 314.815611][T11819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.815638][T11819] ? aa_sock_msg_perm+0xf1/0x1b0 [ 314.815668][T11819] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 314.815694][T11819] ____sys_sendmsg+0x972/0x9f0 [ 314.815719][T11819] ? __might_fault+0xaf/0x130 [ 314.815746][T11819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.815779][T11819] ? import_iovec+0x73/0xa0 [ 314.815805][T11819] ___sys_sendmsg+0x2a5/0x360 [ 314.815826][T11819] ? __lock_acquire+0x6b5/0x2cf0 [ 314.815849][T11819] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.815907][T11819] ? __fget_files+0x2a/0x420 [ 314.815926][T11819] ? __fget_files+0x3a0/0x420 [ 314.815956][T11819] __x64_sys_sendmsg+0x1bd/0x2a0 [ 314.815982][T11819] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 314.816003][T11819] ? perf_trace_preemptirq_template+0xb2/0x350 [ 314.816037][T11819] ? __pfx_ksys_write+0x10/0x10 [ 314.816069][T11819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.816089][T11819] do_syscall_64+0x15f/0xf80 [ 314.816111][T11819] ? trace_irq_disable+0x3b/0x140 [ 314.816134][T11819] ? clear_bhb_loop+0x40/0x90 [ 314.816156][T11819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.816172][T11819] RIP: 0033:0x7f3e9059ce59 [ 314.816189][T11819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.816203][T11819] RSP: 002b:00007f3e9142a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.816221][T11819] RAX: ffffffffffffffda RBX: 00007f3e90815fa0 RCX: 00007f3e9059ce59 [ 314.816233][T11819] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 314.816244][T11819] RBP: 00007f3e9142a090 R08: 0000000000000000 R09: 0000000000000000 [ 314.816255][T11819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.816265][T11819] R13: 00007f3e90816038 R14: 00007f3e90815fa0 R15: 00007ffe7cef74d8 [ 314.816295][T11819] [ 315.311377][T11824] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1671'. [ 315.388866][T11827] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1672'. [ 315.486497][T11831] netlink: 'syz.1.1674': attribute type 21 has an invalid length. [ 315.497270][T11831] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1674'. [ 316.702948][T11833] wg1 speed is unknown, defaulting to 1000 [ 316.790863][T11833] gretap0 speed is unknown, defaulting to 1000 [ 316.994751][T11855] netlink: 'syz.4.1683': attribute type 10 has an invalid length. [ 317.045687][T11855] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 317.157466][T11858] netlink: 'syz.3.1684': attribute type 1 has an invalid length. [ 317.195999][T11858] __nla_validate_parse: 1 callbacks suppressed [ 317.196016][T11858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1684'. [ 317.256911][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.263301][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.044519][T11867] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1687'. [ 318.402535][T11874] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1689'. [ 319.227344][T11881] validate_nla: 1 callbacks suppressed [ 319.227362][T11881] netlink: 'syz.3.1692': attribute type 11 has an invalid length. [ 319.549555][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.837925][T11891] wlan0: mtu greater than device maximum [ 319.995992][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.128596][T11899] netlink: 'syz.1.1697': attribute type 10 has an invalid length. [ 320.141912][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.271132][T11904] netlink: 'syz.3.1701': attribute type 16 has an invalid length. [ 320.366842][T11904] netlink: 'syz.3.1701': attribute type 3 has an invalid length. [ 320.501614][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.503284][T11904] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1701'. [ 320.534404][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.553643][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.567397][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.585136][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.599221][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.739878][T11914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1703'. [ 320.774092][T11912] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1702'. [ 320.974553][T11924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1705'. [ 321.278095][T11936] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1708'. [ 321.447131][T11940] wlan0: mtu greater than device maximum [ 321.643634][ T13] bridge0: port 3(dummy0) entered disabled state [ 321.768911][ T13] bridge_slave_1: left allmulticast mode [ 321.787886][ T13] bridge_slave_1: left promiscuous mode [ 321.822421][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.857801][ T13] bridge_slave_0: left allmulticast mode [ 321.876168][ T13] bridge_slave_0: left promiscuous mode [ 321.890198][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.179790][T11962] netlink: 'syz.2.1713': attribute type 10 has an invalid length. [ 322.735679][ T50] Bluetooth: hci3: command tx timeout [ 322.787920][ T9371] smbdirect: ib_dev[syz0] removed [ 322.953615][ T13] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 323.222604][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.242174][ T13] bond0 (unregistering): Released all slaves [ 323.265103][ T5732] gretap0 speed is unknown, defaulting to 1000 [ 323.307507][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 323.357146][T11996] wlan0: mtu greater than device maximum [ 323.374874][ T5732] infiniband syz0: ib_query_port failed (-19) [ 324.020294][T11907] wg1 speed is unknown, defaulting to 1000 [ 324.722305][T12026] netlink: 'syz.3.1726': attribute type 21 has an invalid length. [ 324.759997][T12026] netlink: 'syz.3.1726': attribute type 20 has an invalid length. [ 324.895430][ T50] Bluetooth: hci3: command tx timeout [ 325.291617][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1730'. [ 326.082274][T12054] netlink: 'syz.1.1734': attribute type 10 has an invalid length. [ 326.291866][T12064] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1737'. [ 326.301191][T12064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1737'. [ 326.310862][T12064] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1737'. [ 326.331773][T12064] netlink: 'syz.4.1737': attribute type 10 has an invalid length. [ 326.383457][T12067] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1737'. [ 326.402443][T12067] netlink: 'syz.4.1737': attribute type 1 has an invalid length. [ 326.440884][T12068] siw: device registration error -23 [ 326.584968][T12065] wlan0: mtu greater than device maximum [ 326.706272][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 326.975588][ T50] Bluetooth: hci3: command tx timeout [ 327.007480][T12075] ref_ctr_offset mismatch. inode: 0x501 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 327.130559][ T13] hsr_slave_0: left promiscuous mode [ 327.314384][ T13] hsr_slave_1: left promiscuous mode [ 327.678374][ T13] veth1_macvtap: left promiscuous mode [ 327.706485][ T13] veth0_macvtap: left promiscuous mode [ 327.720168][ T13] veth1_vlan: left promiscuous mode [ 327.762593][ T13] veth0_vlan: left promiscuous mode [ 328.177685][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1744'. [ 328.771814][T12115] netlink: 'syz.3.1748': attribute type 10 has an invalid length. [ 328.961435][ T13] team0 (unregistering): Port device team_slave_1 removed [ 328.990384][ T13] team0 (unregistering): Port device team_slave_0 removed [ 329.055337][ T5630] Bluetooth: hci3: command tx timeout [ 329.459949][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 329.535696][ T5630] Bluetooth: hci4: command 0x0406 tx timeout [ 329.693595][T12126] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1751'. [ 329.704402][T12126] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1751'. [ 329.852964][T11907] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.878946][T12132] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1752'. [ 329.885020][T11907] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.917077][T11907] bridge_slave_0: entered allmulticast mode [ 329.926141][T11907] bridge_slave_0: entered promiscuous mode [ 329.951543][T11907] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.970102][T11907] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.985675][T11907] bridge_slave_1: entered allmulticast mode [ 330.014108][T11907] bridge_slave_1: entered promiscuous mode [ 330.149165][T11907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.161044][T12139] siw: device registration error -23 [ 330.179495][T11907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.320193][T11907] team0: Port device team_slave_0 added [ 330.334381][T11907] team0: Port device team_slave_1 added [ 330.423700][T12141] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1756'. [ 330.550171][T11907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.562504][T11907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.654047][T11907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.702273][T11907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.740320][T11907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.801736][T11907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.920509][T12156] netlink: 'syz.1.1761': attribute type 10 has an invalid length. [ 331.174185][T11907] hsr_slave_0: entered promiscuous mode [ 331.197960][T11907] hsr_slave_1: entered promiscuous mode [ 331.239885][T11907] debugfs: 'hsr0' already exists in 'hsr' [ 331.256843][T11907] Cannot create hsr debugfs directory [ 331.565816][T12176] netlink: 'syz.2.1765': attribute type 10 has an invalid length. [ 331.839324][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 331.939821][T12183] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1768'. [ 332.064753][T12162] Set syz1 is full, maxelem 65536 reached [ 332.216513][T12192] siw: device registration error -23 [ 332.316301][T12200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1772'. [ 332.399745][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1772'. [ 332.461962][T12193] netlink: 'syz.1.1769': attribute type 2 has an invalid length. [ 332.933908][T12216] netlink: 'syz.4.1773': attribute type 10 has an invalid length. [ 333.377516][T12236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1778'. [ 333.630750][T12243] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1781'. [ 333.797238][T12249] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1784'. [ 333.999964][T12256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1785'. [ 334.049648][T11907] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 334.152029][T11907] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 334.169537][T11907] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 334.315089][T11907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 334.367668][T11907] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 334.430234][T11907] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 334.478049][T12259] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1786'. [ 334.504825][T11907] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 334.533522][T11907] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 334.810070][ T9377] tipc: Subscription rejected, illegal request [ 334.828829][T12265] wg1 speed is unknown, defaulting to 1000 [ 334.850469][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1790'. [ 335.200420][T11907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.310102][T11907] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.371978][ T9368] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.379263][ T9368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.522962][T12307] netlink: 'syz.1.1795': attribute type 10 has an invalid length. [ 335.700114][ T9377] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.707728][ T9377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.785537][T12307] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 337.167615][T12360] __nla_validate_parse: 1 callbacks suppressed [ 337.167634][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1805'. [ 337.739279][T12371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1807'. [ 337.765287][T11907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.814205][T12371] netlink: 'syz.3.1807': attribute type 3 has an invalid length. [ 337.994661][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.008383][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.039382][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.053552][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.064420][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.016140][T11907] veth0_vlan: entered promiscuous mode [ 339.072962][T11907] veth1_vlan: entered promiscuous mode [ 339.200384][T11907] veth0_macvtap: entered promiscuous mode [ 339.273058][T12376] wg1 speed is unknown, defaulting to 1000 [ 339.279862][T11907] veth1_macvtap: entered promiscuous mode [ 339.779270][T12434] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1818'. [ 339.840845][T11907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.860100][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1815'. [ 339.876381][T11907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.991806][ T9377] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.047464][ T9377] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.093392][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1820'. [ 340.109140][ T50] Bluetooth: hci2: command tx timeout [ 340.121056][ T9377] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.160324][ T9377] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.278844][ T50] Bluetooth: hci0: ISO packet for unknown connection handle 3110 [ 340.298271][ T9368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.370758][ T9368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.647174][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.663616][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.073073][T12480] wlan0: mtu greater than device maximum [ 341.169872][T12488] netlink: 'syz.3.1830': attribute type 10 has an invalid length. [ 341.261745][T12376] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.269179][T12376] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.276760][T12376] bridge_slave_0: entered allmulticast mode [ 341.306158][T12376] bridge_slave_0: entered promiscuous mode [ 341.321772][T12376] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.341394][T12376] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.359348][T12376] bridge_slave_1: entered allmulticast mode [ 341.393846][T12376] bridge_slave_1: entered promiscuous mode [ 341.462194][T12504] siw: device registration error -23 [ 341.575014][T12376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.587610][T12509] netlink: 'syz.4.1834': attribute type 7 has an invalid length. [ 341.599283][T12376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.893450][T12376] team0: Port device team_slave_0 added [ 341.941344][T12376] team0: Port device team_slave_1 added [ 342.009274][T12515] ref_ctr_offset mismatch. inode: 0x376 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 342.051245][T12376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.074029][T12376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.110300][T12376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.158372][T12376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.187100][ T50] Bluetooth: hci2: command tx timeout [ 342.202794][T12376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.256751][T12376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.477833][T12376] hsr_slave_0: entered promiscuous mode [ 342.512632][T12376] hsr_slave_1: entered promiscuous mode [ 342.541925][T12537] netlink: 'syz.1.1841': attribute type 10 has an invalid length. [ 342.554362][T12376] debugfs: 'hsr0' already exists in 'hsr' [ 342.571474][T12376] Cannot create hsr debugfs directory [ 342.627783][T12541] wlan0: mtu greater than device maximum [ 342.959714][T12549] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1845'. [ 343.083872][T12552] netlink: 'syz.1.1844': attribute type 7 has an invalid length. [ 343.115493][T12552] netlink: 'syz.1.1844': attribute type 3 has an invalid length. [ 343.445924][T12563] siw: device registration error -23 [ 343.838995][T12376] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.258942][ T50] Bluetooth: hci2: command tx timeout [ 345.313394][T12599] netlink: 'syz.4.1853': attribute type 10 has an invalid length. [ 345.530262][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1855'. [ 345.820513][T12618] netlink: 'syz.5.1856': attribute type 10 has an invalid length. [ 346.277580][T12376] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.337101][ T50] Bluetooth: hci2: command tx timeout [ 346.379455][T12614] netlink: 'syz.4.1854': attribute type 29 has an invalid length. [ 346.398427][T12618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.447084][T12618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.465677][T12618] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 346.491166][T12634] wlan0: mtu greater than device maximum [ 346.547416][T12376] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.881379][T12376] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.939900][T12649] siw: device registration error -23 [ 347.018751][T12653] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1864'. [ 347.922252][T12690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1868'. [ 348.007160][T12376] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 348.044697][T12694] netlink: 'syz.4.1870': attribute type 21 has an invalid length. [ 348.070055][T12694] netlink: 'syz.4.1870': attribute type 20 has an invalid length. [ 348.181605][T12376] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 348.189729][T12376] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 348.490602][T12376] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 348.517180][T12376] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 348.531253][T12376] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 348.540031][T12696] wlan0: mtu greater than device maximum [ 348.559654][T12376] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 348.599106][T12376] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 349.154985][T12376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.181761][T12376] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.211992][T12714] ref_ctr_offset mismatch. inode: 0x532 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 349.243168][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.250405][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.289061][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.296291][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.356373][T12722] netlink: 'syz.5.1877': attribute type 7 has an invalid length. [ 349.461197][T12725] siw: device registration error -23 [ 349.650555][T12733] wlan0: mtu greater than device maximum [ 349.663693][ T9380] tipc: Subscription rejected, illegal request [ 349.704107][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1882'. [ 350.866124][T12759] netlink: 'syz.3.1891': attribute type 10 has an invalid length. [ 351.092280][T12768] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.1893'. [ 351.243340][T12376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.363585][T12778] siw: device registration error -23 [ 351.482388][T12376] veth0_vlan: entered promiscuous mode [ 351.661048][T12376] veth1_vlan: entered promiscuous mode [ 352.118788][T12376] veth0_macvtap: entered promiscuous mode [ 352.145057][T12376] veth1_macvtap: entered promiscuous mode [ 352.195999][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1905'. [ 352.246492][T12376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.311696][T12376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.347831][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.377380][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.405594][T12816] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1906'. [ 352.432128][ T134] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.435380][T12816] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1906'. [ 352.488788][ T134] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.584034][T12821] ref_ctr_offset mismatch. inode: 0x7c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 352.753743][T12824] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 352.765362][ T9368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.785520][T12825] netlink: 'syz.4.1910': attribute type 10 has an invalid length. [ 352.798381][ T9368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.837837][T12825] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 352.940232][ T9380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.954839][ T9380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.085330][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1913'. [ 353.132583][T12834] siw: device registration error -23 [ 353.479330][T12853] FAULT_INJECTION: forcing a failure. [ 353.479330][T12853] name failslab, interval 1, probability 0, space 0, times 0 [ 353.555454][T12853] CPU: 0 UID: 0 PID: 12853 Comm: syz.2.1917 Not tainted syzkaller #0 PREEMPT(full) [ 353.555488][T12853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 353.555499][T12853] Call Trace: [ 353.555507][T12853] [ 353.555514][T12853] dump_stack_lvl+0xe8/0x150 [ 353.555623][T12853] should_fail_ex+0x412/0x560 [ 353.555778][T12853] should_failslab+0xa8/0x100 [ 353.555824][T12853] ? skb_clone+0x212/0x3a0 [ 353.555920][T12853] kmem_cache_alloc_noprof+0x87/0x650 [ 353.555952][T12853] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 353.556009][T12853] skb_clone+0x212/0x3a0 [ 353.556039][T12853] __netlink_deliver_tap+0x404/0x850 [ 353.556142][T12853] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.556168][T12853] netlink_deliver_tap+0x19c/0x1b0 [ 353.556193][T12853] netlink_sendskb+0x68/0x140 [ 353.556218][T12853] netlink_rcv_skb+0x2b6/0x4b0 [ 353.556243][T12853] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.556265][T12853] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.556312][T12853] ? down_read+0x270/0x2e0 [ 353.556387][T12853] ? genl_rcv+0xd/0x40 [ 353.556408][T12853] genl_rcv+0x28/0x40 [ 353.556424][T12853] netlink_unicast+0x75c/0x8e0 [ 353.556462][T12853] netlink_sendmsg+0x813/0xb40 [ 353.556499][T12853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.556528][T12853] ? aa_sock_msg_perm+0xf1/0x1b0 [ 353.556627][T12853] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 353.556674][T12853] ____sys_sendmsg+0x972/0x9f0 [ 353.556748][T12853] ? __might_fault+0xaf/0x130 [ 353.556786][T12853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.556825][T12853] ? import_iovec+0x73/0xa0 [ 353.556904][T12853] ___sys_sendmsg+0x2a5/0x360 [ 353.556927][T12853] ? __lock_acquire+0x6b5/0x2cf0 [ 353.556953][T12853] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.557031][T12853] ? __fget_files+0x2a/0x420 [ 353.557066][T12853] ? __fget_files+0x3a0/0x420 [ 353.557103][T12853] __x64_sys_sendmsg+0x1bd/0x2a0 [ 353.557132][T12853] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.557154][T12853] ? perf_trace_preemptirq_template+0xb2/0x350 [ 353.557209][T12853] ? __pfx_ksys_write+0x10/0x10 [ 353.557248][T12853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.557286][T12853] do_syscall_64+0x15f/0xf80 [ 353.557357][T12853] ? trace_irq_disable+0x3b/0x140 [ 353.557382][T12853] ? clear_bhb_loop+0x40/0x90 [ 353.557407][T12853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.557425][T12853] RIP: 0033:0x7f6c9719ce59 [ 353.557443][T12853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.557456][T12853] RSP: 002b:00007f6c97fbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.557476][T12853] RAX: ffffffffffffffda RBX: 00007f6c97415fa0 RCX: 00007f6c9719ce59 [ 353.557488][T12853] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 353.557499][T12853] RBP: 00007f6c97fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 353.557510][T12853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 353.557520][T12853] R13: 00007f6c97416038 R14: 00007f6c97415fa0 R15: 00007ffecd5156b8 [ 353.557558][T12853] [ 354.007023][T12861] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1919'. [ 354.223830][T12866] netlink: 'syz.1.1923': attribute type 10 has an invalid length. [ 354.330871][T12876] netlink: 'syz.4.1926': attribute type 10 has an invalid length. [ 354.487149][T12882] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1931'. [ 354.687146][T12890] netlink: 'syz.1.1934': attribute type 7 has an invalid length. [ 355.155467][ T5630] Bluetooth: hci0: command 0x0406 tx timeout [ 356.040376][T12923] netlink: 'syz.3.1948': attribute type 10 has an invalid length. [ 356.061713][T12929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1949'. [ 356.071117][T12923] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1948'. [ 356.470892][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1953'. [ 356.677913][T12940] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1955'. [ 357.212301][T12948] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1958'. [ 357.381421][T12948] tap1: tun_chr_ioctl cmd 2147767521 [ 357.389077][T12949] netlink: 'syz.1.1957': attribute type 2 has an invalid length. [ 357.399801][T12949] netlink: 'syz.1.1957': attribute type 1 has an invalid length. [ 357.413106][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1957'. [ 357.850510][T12925] wg1 speed is unknown, defaulting to 1000 [ 358.284028][T12963] netlink: 'syz.4.1963': attribute type 6 has an invalid length. [ 358.292464][T12963] netlink: 3936 bytes leftover after parsing attributes in process `syz.4.1963'. [ 358.304765][T12963] netlink: 'syz.4.1963': attribute type 1 has an invalid length. [ 358.517731][T12976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1968'. [ 358.546624][T12982] netlink: 'syz.1.1969': attribute type 21 has an invalid length. [ 358.571040][T12982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 358.578436][T12982] IPv6: NLM_F_CREATE should be set when creating new route [ 358.585756][T12982] IPv6: NLM_F_CREATE should be set when creating new route [ 358.593056][T12982] IPv6: NLM_F_CREATE should be set when creating new route [ 358.602572][T12982] netlink: 'syz.1.1969': attribute type 21 has an invalid length. [ 358.613283][T12982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 358.787663][T12963] wg1 speed is unknown, defaulting to 1000 [ 359.004485][T12987] netlink: 16348 bytes leftover after parsing attributes in process `syz.5.1972'. [ 359.372082][ T9368] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.483945][T12999] netlink: 'syz.4.1978': attribute type 10 has an invalid length. [ 359.728244][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 359.749901][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 359.763270][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 359.773541][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 359.786124][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 359.811452][ T9368] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.046779][ T9368] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.084722][T13023] netlink: 'syz.5.1984': attribute type 10 has an invalid length. [ 360.122862][T13023] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1984'. [ 360.219450][ T9368] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.324538][T13023] dummy0: entered promiscuous mode [ 360.338988][T13023] dummy0: entered allmulticast mode [ 360.390666][T13023] bridge0: port 3(dummy0) entered blocking state [ 360.410514][T13023] bridge0: port 3(dummy0) entered disabled state [ 360.464606][T13023] bridge0: port 3(dummy0) entered blocking state [ 360.471311][T13023] bridge0: port 3(dummy0) entered forwarding state [ 361.108782][T13054] netlink: 'syz.4.1992': attribute type 3 has an invalid length. [ 361.323687][T13066] netlink: 'syz.1.1994': attribute type 4 has an invalid length. [ 361.373688][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1994'. [ 361.619509][T13070] netlink: 'syz.5.1996': attribute type 6 has an invalid length. [ 361.646053][T13070] netlink: 3936 bytes leftover after parsing attributes in process `syz.5.1996'. [ 361.674480][ T9368] bridge_slave_1: left allmulticast mode [ 361.700289][ T9368] bridge_slave_1: left promiscuous mode [ 361.723297][ T9368] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.727298][T13070] netlink: 'syz.5.1996': attribute type 1 has an invalid length. [ 361.805150][ T9368] bridge_slave_0: left allmulticast mode [ 361.835852][ T5630] block nbd29: Receive control failed (result -107) [ 361.839724][ T9368] bridge_slave_0: left promiscuous mode [ 361.861153][ T5630] Bluetooth: hci2: command tx timeout [ 361.867437][T13070] nbd29: detected capacity change from 0 to 339754496 [ 361.878374][ T9368] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.891903][ T9499] block nbd29: Dead connection, failed to find a fallback [ 361.909326][ T9499] block nbd29: shutting down sockets [ 361.919751][ T9499] blk_print_req_error: 24 callbacks suppressed [ 361.919807][ T9499] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 361.936661][ T9499] buffer_io_error: 23 callbacks suppressed [ 361.936675][ T9499] Buffer I/O error on dev nbd29, logical block 0, async page read [ 361.952900][ T9499] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 361.963027][ T9499] Buffer I/O error on dev nbd29, logical block 0, async page read [ 361.971130][ T9499] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 361.980464][ T9499] Buffer I/O error on dev nbd29, logical block 0, async page read [ 361.994536][ T9499] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 362.004355][ T9499] Buffer I/O error on dev nbd29, logical block 0, async page read [ 362.034987][ T9499] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 362.048214][ T9499] Buffer I/O error on dev nbd29, logical block 0, async page read [ 362.089838][ T9499] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 362.104711][T13088] netlink: 'syz.4.1999': attribute type 2 has an invalid length. [ 362.131095][ T9499] Buffer I/O error on dev nbd29, logical block 0, async page read [ 362.156580][ T9499] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 362.180156][ T9499] Buffer I/O error on dev nbd29, logical block 0, async page read [ 362.207105][ T9499] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 362.253703][ T9499] Buffer I/O error on dev nbd29, logical block 0, async page read [ 362.304138][ T9499] ldm_validate_partition_table(): Disk read failed. [ 362.328880][ T9499] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 362.371897][ T9499] Buffer I/O error on dev nbd29, logical block 0, async page read [ 362.390082][ T9370] tipc: Subscription rejected, illegal request [ 362.421893][ T9499] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 362.450583][ T9499] Buffer I/O error on dev nbd29, logical block 0, async page read [ 362.458572][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2001'. [ 362.484133][ T9499] Dev nbd29: unable to read RDB block 0 [ 362.502078][ T9499] nbd29: unable to read partition table [ 362.532593][ T9499] ldm_validate_partition_table(): Disk read failed. [ 362.543778][ T9499] Dev nbd29: unable to read RDB block 0 [ 362.576758][ T9499] nbd29: unable to read partition table [ 362.713764][ T9368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.732788][ T9368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.743882][ T9368] bond0 (unregistering): Released all slaves [ 362.783249][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 362.826181][T13007] wg1 speed is unknown, defaulting to 1000 [ 363.134120][T13107] netlink: 'syz.3.2004': attribute type 6 has an invalid length. [ 363.159889][T13107] netlink: 3936 bytes leftover after parsing attributes in process `syz.3.2004'. [ 363.169390][T13107] netlink: 'syz.3.2004': attribute type 1 has an invalid length. [ 363.234986][ T5630] block nbd30: Receive control failed (result -107) [ 363.281467][T13107] nbd30: detected capacity change from 0 to 339754496 [ 363.397159][ T5625] block nbd30: Dead connection, failed to find a fallback [ 363.433368][ T5625] block nbd30: shutting down sockets [ 363.438094][T13113] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.2005'. [ 363.459323][ T5625] ldm_validate_partition_table(): Disk read failed. [ 363.501529][ T5625] Dev nbd30: unable to read RDB block 0 [ 363.531053][T13124] netlink: 'syz.4.2005': attribute type 10 has an invalid length. [ 363.553090][ T5625] nbd30: unable to read partition table [ 363.645943][ T5625] ldm_validate_partition_table(): Disk read failed. [ 363.679366][ T5625] Dev nbd30: unable to read RDB block 0 [ 363.710747][ T5625] nbd30: unable to read partition table [ 363.811569][T13130] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2008'. [ 363.885933][T13112] wg1 speed is unknown, defaulting to 1000 [ 363.937048][ T5630] Bluetooth: hci2: command tx timeout [ 364.287939][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2012'. [ 364.308601][ T9368] hsr_slave_0: left promiscuous mode [ 364.330325][ T9368] hsr_slave_1: left promiscuous mode [ 364.378040][ T9368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.403708][ T9368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.424271][ T9368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.432075][ T9368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.456064][ T9368] veth1_macvtap: left promiscuous mode [ 364.463034][ T9368] veth0_macvtap: left promiscuous mode [ 364.469483][ T9368] veth1_vlan: left promiscuous mode [ 364.474911][ T9368] veth0_vlan: left promiscuous mode [ 364.869325][ T9368] team0 (unregistering): Port device team_slave_1 removed [ 364.893488][ T9368] team0 (unregistering): Port device team_slave_0 removed [ 365.095830][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 365.336075][T13173] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2018'. [ 365.412588][T13161] wg1 speed is unknown, defaulting to 1000 [ 365.653947][T13176] netlink: 'syz.1.2019': attribute type 6 has an invalid length. [ 365.695686][T13176] netlink: 3936 bytes leftover after parsing attributes in process `syz.1.2019'. [ 365.812811][T13007] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.829395][T13007] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.839437][T13007] bridge_slave_0: entered allmulticast mode [ 365.852585][T13007] bridge_slave_0: entered promiscuous mode [ 365.866121][T13007] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.894732][T13007] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.906568][T13007] bridge_slave_1: entered allmulticast mode [ 365.914329][T13007] bridge_slave_1: entered promiscuous mode [ 366.016325][ T5630] Bluetooth: hci2: command tx timeout [ 366.035547][T13176] netlink: 'syz.1.2019': attribute type 1 has an invalid length. [ 366.097715][ T5630] block nbd31: Receive control failed (result -107) [ 366.123977][T13176] nbd31: detected capacity change from 0 to 339754496 [ 366.141153][T13007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.154063][T13007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.174504][ T9499] block nbd31: Dead connection, failed to find a fallback [ 366.219014][ T9499] block nbd31: shutting down sockets [ 366.242868][ T9499] ldm_validate_partition_table(): Disk read failed. [ 366.264705][ T9499] Dev nbd31: unable to read RDB block 0 [ 366.301465][ T9499] nbd31: unable to read partition table [ 366.368068][ T9499] ldm_validate_partition_table(): Disk read failed. [ 366.407878][ T9499] Dev nbd31: unable to read RDB block 0 [ 366.436030][ T9499] nbd31: unable to read partition table [ 366.644935][T13007] team0: Port device team_slave_0 added [ 366.671986][T13177] wg1 speed is unknown, defaulting to 1000 [ 366.686460][T13007] team0: Port device team_slave_1 added [ 366.828723][T13007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.841749][T13007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.870851][T13007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.942157][T13007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.962489][T13007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.020469][T13007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.134765][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 367.153774][T13206] wg1 speed is unknown, defaulting to 1000 [ 367.333005][T13007] hsr_slave_0: entered promiscuous mode [ 367.346428][T13007] hsr_slave_1: entered promiscuous mode [ 367.353520][T13007] debugfs: 'hsr0' already exists in 'hsr' [ 367.360597][T13007] Cannot create hsr debugfs directory [ 367.652952][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2028'. [ 367.686477][T13224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2028'. [ 368.100798][ T5630] Bluetooth: hci2: command tx timeout [ 369.393711][T13236] syzkaller0: entered promiscuous mode [ 369.406635][T13236] syzkaller0: entered allmulticast mode [ 369.684094][T13254] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2033'. [ 370.162620][T13269] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2036'. [ 370.414007][ T9377] tipc: Subscription rejected, illegal request [ 370.422580][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2042'. [ 371.221178][T13306] netlink: 'syz.4.2048': attribute type 10 has an invalid length. [ 371.247257][T13306] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2048'. [ 371.997412][T13309] netlink: 'syz.3.2049': attribute type 16 has an invalid length. [ 372.198174][T13309] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2049'. [ 372.397443][T13309] veth0_macvtap: entered allmulticast mode [ 372.945096][T13007] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 372.967523][T13007] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 372.987903][T13007] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.009315][T13007] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.046864][T13007] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 373.103067][T13007] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 373.119532][T13007] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 373.142311][T13007] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.263692][T13328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2053'. [ 373.531720][T13007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.642058][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2056'. [ 373.652371][T13342] netlink: 'syz.3.2055': attribute type 10 has an invalid length. [ 373.664515][T13007] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.698279][ T9368] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.705515][ T9368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.709904][T13344] openvswitch: netlink: Duplicate key (type 32). [ 373.741139][ T9368] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.748440][ T9368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.748484][T13345] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2056'. [ 373.924764][T13345] netlink: 'syz.1.2056': attribute type 13 has an invalid length. [ 375.624240][T13345] bridge0: port 3(dummy0) entered blocking state [ 375.631335][T13345] bridge0: port 3(dummy0) entered forwarding state [ 375.763926][T13345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.782302][T13345] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.431661][T13405] netlink: 'syz.4.2066': attribute type 7 has an invalid length. [ 376.446207][T13345] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 376.464019][T13345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.552537][T13345] veth1_vlan: left promiscuous mode [ 376.570556][T13345] veth0_vlan: left promiscuous mode [ 376.584562][T13345] veth0_vlan: entered promiscuous mode [ 376.622137][T13345] veth1_vlan: entered promiscuous mode [ 376.717688][T13345] veth1_macvtap: left promiscuous mode [ 376.748250][T13345] veth0_macvtap: left promiscuous mode [ 376.763873][T13345] veth0_macvtap: entered promiscuous mode [ 376.821909][T13345] veth1_macvtap: entered promiscuous mode [ 376.903865][T13345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 376.949773][T13345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 376.991534][T13345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 377.021488][T13345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 377.167402][T13371] wlan0: mtu greater than device maximum [ 377.199156][ T9370] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.206404][ T9370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.258153][ T9370] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.265447][ T9370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.370153][ T134] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.418087][ T134] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.463345][ T134] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.508075][ T134] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.643057][T13433] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2069'. [ 377.671469][T13440] netlink: 'syz.5.2072': attribute type 10 has an invalid length. [ 377.695647][T13440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.722573][T13440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.763474][T13444] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2069'. [ 378.682767][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.689345][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.819421][T13464] bpf: Bad value for 'uid' [ 379.180725][T13473] wlan0: mtu greater than device maximum [ 379.616580][T13485] ref_ctr_offset mismatch. inode: 0x49b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 379.724850][T13494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2082'. [ 379.840170][T13007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.054754][T13508] netlink: 'syz.1.2087': attribute type 7 has an invalid length. [ 380.134053][T13007] veth0_vlan: entered promiscuous mode [ 380.180848][T13007] veth1_vlan: entered promiscuous mode [ 380.456546][T13007] veth0_macvtap: entered promiscuous mode [ 380.489598][T13512] netlink: 'syz.5.2088': attribute type 21 has an invalid length. [ 380.526630][T13007] veth1_macvtap: entered promiscuous mode [ 380.585499][T13007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.659701][T13007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.716637][ T142] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.008407][T13526] wlan0: mtu greater than device maximum [ 381.124040][ T9377] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.147238][ T9377] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.170760][ T9377] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.188887][T13540] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2094'. [ 381.382336][ T9379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.433230][ T9379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.448401][T13547] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.2097'. [ 381.480568][T13547] openvswitch: netlink: Missing key (keys=40, expected=80) [ 381.591351][ T9380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.606562][ T9380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.993198][T13565] netlink: 'syz.5.2103': attribute type 10 has an invalid length. [ 382.141837][T13572] wlan0: mtu greater than device maximum [ 382.518956][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2113'. [ 382.564438][T13593] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2113'. [ 382.801922][T13600] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2117'. [ 382.998672][T13606] netlink: 'syz.5.2113': attribute type 16 has an invalid length. [ 383.071870][T13606] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2113'. [ 383.086797][T13602] netlink: 'syz.2.2118': attribute type 2 has an invalid length. [ 383.121890][T13602] netlink: 'syz.2.2118': attribute type 2 has an invalid length. [ 383.381394][T13614] wlan0: mtu greater than device maximum [ 383.674718][T13630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2127'. [ 383.738122][T13630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2127'. [ 383.947524][T13643] netlink: 5192 bytes leftover after parsing attributes in process `syz.5.2131'. [ 384.124099][T13650] bridge0: port 4(team0) entered blocking state [ 384.131926][T13650] bridge0: port 4(team0) entered disabled state [ 384.140293][T13650] team0: entered allmulticast mode [ 384.146072][T13650] team_slave_0: entered allmulticast mode [ 384.153411][T13650] team_slave_1: entered allmulticast mode [ 384.171582][T13650] team0: entered promiscuous mode [ 384.192532][T13650] team_slave_0: entered promiscuous mode [ 384.200014][T13650] team_slave_1: entered promiscuous mode [ 384.215137][T13650] bridge0: port 4(team0) entered blocking state [ 384.223093][T13650] bridge0: port 4(team0) entered forwarding state [ 384.794484][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2142'. [ 384.880889][T13675] netlink: 'syz.4.2143': attribute type 10 has an invalid length. [ 385.800125][T13707] netlink: 'syz.2.2155': attribute type 10 has an invalid length. [ 385.922397][T13707] geneve1: entered promiscuous mode [ 386.054762][T13707] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 386.084263][T13714] netlink: 'syz.1.2157': attribute type 10 has an invalid length. [ 386.102719][T13713] ref_ctr_offset mismatch. inode: 0x19d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 387.151845][T13739] netlink: 'syz.2.2170': attribute type 10 has an invalid length. [ 387.196341][T13739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.215456][T13739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.269609][T13739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.294011][T13739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.693953][T13760] siw: device registration error -23 [ 387.816754][T13762] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2176'. [ 387.868144][T13762] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2176'. [ 387.973432][T13764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2177'. [ 388.030295][T13764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2177'. [ 388.063225][T13764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2177'. [ 388.444398][T13777] tap1: tun_chr_ioctl cmd 1074025677 [ 388.464360][T13777] tap1: linktype set to 27 [ 388.809856][T13792] netlink: 'syz.5.2186': attribute type 21 has an invalid length. [ 388.940103][T13792] netlink: 'syz.5.2186': attribute type 20 has an invalid length. [ 389.919927][T13798] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2190'. [ 390.008185][T13799] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2190'. [ 390.206944][T13802] siw: device registration error -23 [ 390.676327][T13806] netlink: 'syz.5.2194': attribute type 3 has an invalid length. [ 390.699271][T13806] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2194'. [ 390.721953][T13820] netlink: 'syz.1.2196': attribute type 10 has an invalid length. [ 390.754928][T13820] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2196'. [ 390.939952][T13827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2199'. [ 390.983162][T13827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2199'. [ 391.366311][T13844] siw: device registration error -23 [ 391.517085][T13841] netlink: 'syz.1.2206': attribute type 2 has an invalid length. [ 391.554670][T13841] netlink: 'syz.1.2206': attribute type 8 has an invalid length. [ 391.587282][T13841] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2206'. [ 391.736545][T13847] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.2206'. [ 391.746472][T13847] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.2206'. [ 391.757876][T13847] netlink: 640 bytes leftover after parsing attributes in process `syz.1.2206'. [ 391.974434][T13851] netlink: 'syz.3.2209': attribute type 10 has an invalid length. [ 392.249828][T13860] netlink: 'syz.4.2213': attribute type 10 has an invalid length. [ 392.558615][T13875] siw: device registration error -23 [ 392.603119][T13877] siw: device registration error -23 [ 392.655813][T13879] netlink: 'syz.3.2221': attribute type 10 has an invalid length. [ 392.791828][ T5630] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 392.962148][T13895] netlink: 'syz.3.2226': attribute type 7 has an invalid length. [ 393.023902][T13895] netlink: 'syz.3.2226': attribute type 3 has an invalid length. [ 393.394963][T13907] ref_ctr_offset mismatch. inode: 0x547 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 393.469961][T13918] siw: device registration error -23 [ 393.690800][T13928] netlink: 'syz.5.2240': attribute type 6 has an invalid length. [ 393.725744][T13928] netlink: 'syz.5.2240': attribute type 1 has an invalid length. [ 393.773995][ T5630] block nbd32: Receive control failed (result -107) [ 393.792139][T13933] wg1 speed is unknown, defaulting to 1000 [ 393.819769][T13928] nbd32: detected capacity change from 0 to 339754496 [ 393.877543][ T9499] block nbd32: Dead connection, failed to find a fallback [ 393.910401][ T9499] block nbd32: shutting down sockets [ 393.922113][ T9499] blk_print_req_error: 92 callbacks suppressed [ 393.922130][ T9499] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 393.941777][ T9499] buffer_io_error: 89 callbacks suppressed [ 393.941795][ T9499] Buffer I/O error on dev nbd32, logical block 0, async page read [ 393.955830][ T9499] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 393.965064][ T9499] Buffer I/O error on dev nbd32, logical block 0, async page read [ 393.973661][ T9499] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 393.982912][ T9499] Buffer I/O error on dev nbd32, logical block 0, async page read [ 393.991481][ T9499] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 394.000752][ T9499] Buffer I/O error on dev nbd32, logical block 0, async page read [ 394.009014][ T9499] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 394.025839][ T9499] Buffer I/O error on dev nbd32, logical block 0, async page read [ 394.037066][ T9499] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 394.047362][ T9499] Buffer I/O error on dev nbd32, logical block 0, async page read [ 394.059723][ T9499] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 394.073783][ T9499] Buffer I/O error on dev nbd32, logical block 0, async page read [ 394.099406][ T9499] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 394.124603][ T9499] Buffer I/O error on dev nbd32, logical block 0, async page read [ 394.163392][ T9499] ldm_validate_partition_table(): Disk read failed. [ 394.204260][ T9499] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 394.250338][ T9499] Buffer I/O error on dev nbd32, logical block 0, async page read [ 394.268733][ T9499] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 394.295077][ T9499] Buffer I/O error on dev nbd32, logical block 0, async page read [ 394.334123][ T9499] Dev nbd32: unable to read RDB block 0 [ 394.352192][ T9499] nbd32: unable to read partition table [ 394.404332][T13931] wg1 speed is unknown, defaulting to 1000 [ 394.425235][ T9499] ldm_validate_partition_table(): Disk read failed. [ 394.471822][ T9499] Dev nbd32: unable to read RDB block 0 [ 394.488636][ T9499] nbd32: unable to read partition table [ 394.667309][T13916] wg1 speed is unknown, defaulting to 1000 [ 394.766012][T13960] netlink: 'syz.2.2250': attribute type 10 has an invalid length. [ 394.928400][T13963] __nla_validate_parse: 8 callbacks suppressed [ 394.928534][T13963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2252'. [ 394.972914][T13963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2252'. [ 395.074001][T13963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2252'. [ 395.118025][T13963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2252'. [ 395.212708][T13968] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 395.226191][T13963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2252'. [ 395.249342][T13963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2252'. [ 395.299890][T13973] siw: device registration error -23 [ 395.346049][T13968] netlink: 774 bytes leftover after parsing attributes in process `syz.2.2253'. [ 395.370651][T13968] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2253'. [ 395.429621][T13976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2255'. [ 395.698387][T13982] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2258'. [ 395.851135][T13986] netlink: 'syz.3.2262': attribute type 10 has an invalid length. [ 396.637767][T14006] siw: device registration error -23 [ 396.794199][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 396.808889][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 396.817843][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 396.828678][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 396.839174][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 397.256815][T14027] netlink: 'syz.2.2276': attribute type 10 has an invalid length. [ 397.279357][T14027] ipvlan0: entered allmulticast mode [ 397.296334][T14027] veth0_vlan: entered allmulticast mode [ 397.336589][T14031] netlink: 'syz.3.2277': attribute type 21 has an invalid length. [ 397.368323][T14027] team0: Device ipvlan0 failed to register rx_handler [ 397.400592][T14031] netlink: 'syz.3.2277': attribute type 20 has an invalid length. [ 398.065974][T14051] netlink: 'syz.3.2283': attribute type 10 has an invalid length. [ 398.190863][T14013] wg1 speed is unknown, defaulting to 1000 [ 398.898390][ T5630] Bluetooth: hci1: command tx timeout [ 398.940015][T14013] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.947453][T14013] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.957747][T14013] bridge_slave_0: entered allmulticast mode [ 399.013036][T14013] bridge_slave_0: entered promiscuous mode [ 399.025024][T14013] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.041594][T14013] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.063970][T14013] bridge_slave_1: entered allmulticast mode [ 399.072187][T14013] bridge_slave_1: entered promiscuous mode [ 399.868233][T14013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.953461][T14013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.323006][T14013] team0: Port device team_slave_0 added [ 400.394309][T14013] team0: Port device team_slave_1 added [ 400.635510][T14123] __nla_validate_parse: 11 callbacks suppressed [ 400.635533][T14123] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2300'. [ 400.640399][T14013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.646634][T14123] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2300'. [ 400.672545][T14013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.672580][T14013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.697603][T14013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.812686][T14013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.845334][T14119] netlink: zone id is out of range [ 400.941413][T14013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.946325][T14119] netlink: zone id is out of range [ 400.965695][T14119] netlink: zone id is out of range [ 400.966972][T14125] netlink: 'syz.5.2299': attribute type 2 has an invalid length. [ 400.971847][T14119] netlink: zone id is out of range [ 400.996373][ T5630] Bluetooth: hci1: command tx timeout [ 401.085612][T14125] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2299'. [ 401.127193][T14119] netlink: zone id is out of range [ 401.176290][T14119] netlink: zone id is out of range [ 401.224004][T14119] netlink: zone id is out of range [ 401.257741][T14119] netlink: zone id is out of range [ 401.300278][T14119] netlink: zone id is out of range [ 401.507488][T14119] netlink: zone id is out of range [ 401.871441][T14013] hsr_slave_0: entered promiscuous mode [ 401.902200][T14013] hsr_slave_1: entered promiscuous mode [ 401.943568][T14013] debugfs: 'hsr0' already exists in 'hsr' [ 401.979357][T14013] Cannot create hsr debugfs directory [ 402.133621][T14139] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2304'. [ 402.596165][T14151] netlink: 'syz.2.2307': attribute type 10 has an invalid length. [ 402.716905][T14156] netlink: 'syz.5.2308': attribute type 10 has an invalid length. [ 402.914992][T14151] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 402.931923][T14151] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 403.059561][ T5630] Bluetooth: hci1: command tx timeout [ 403.084559][T14156] geneve1: entered promiscuous mode [ 403.119778][T14156] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 403.366212][T14162] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2312'. [ 403.394542][T14162] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2312'. [ 403.925923][T14169] netlink: 'syz.5.2313': attribute type 11 has an invalid length. [ 403.964289][T14169] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2313'. [ 404.019630][T14175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2314'. [ 404.337090][T14013] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 404.353205][T14013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 404.362968][T14013] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 404.374180][T14013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 404.445618][T14013] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 404.546805][T14013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 404.592358][T14013] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 404.715027][T14189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2321'. [ 404.738644][T14013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.106070][T14013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.136003][ T5630] Bluetooth: hci1: command tx timeout [ 405.359499][T14202] netlink: 'syz.5.2324': attribute type 6 has an invalid length. [ 405.381494][T14202] netlink: 3936 bytes leftover after parsing attributes in process `syz.5.2324'. [ 405.438603][T14202] netlink: 'syz.5.2324': attribute type 1 has an invalid length. [ 405.889946][T14189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.280432][T14013] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.324697][ T9380] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.331957][ T9380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.365983][ T9380] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.373181][ T9380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.414856][T14213] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2326'. [ 406.448478][T14213] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2326'. [ 407.124232][T14237] netlink: 'syz.1.2332': attribute type 10 has an invalid length. [ 407.124402][T14239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2333'. [ 407.628787][T14253] netlink: 'syz.1.2337': attribute type 10 has an invalid length. [ 407.693925][T14253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 407.714736][T14253] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 407.723448][T14253] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 407.733487][T14253] team0: Port device netdevsim1 added [ 407.979711][T14263] netlink: 200 bytes leftover after parsing attributes in process `syz.5.2341'. [ 408.038883][T14268] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2343'. [ 408.075859][T14268] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2343'. [ 408.106889][T14013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.119159][T14265] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2340'. [ 408.797425][T14293] siw: device registration error -23 [ 408.951362][T14013] veth0_vlan: entered promiscuous mode [ 408.974761][T14013] veth1_vlan: entered promiscuous mode [ 409.049285][T14013] veth0_macvtap: entered promiscuous mode [ 409.081061][T14013] veth1_macvtap: entered promiscuous mode [ 409.149480][T14308] netlink: 'syz.2.2354': attribute type 10 has an invalid length. [ 409.169996][T14013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.202012][T14308] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 409.218438][T14308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 409.242910][T14308] team0: Port device netdevsim1 added [ 409.258111][T14013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.287159][ T9377] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.319556][ T9377] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.382418][ T9377] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.417377][ T9377] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.650891][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.679120][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.721773][T14327] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2358'. [ 409.767853][T14327] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2358'. [ 409.789048][ T9375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.843226][ T9375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.899596][T14331] netlink: 'syz.2.2360': attribute type 89 has an invalid length. [ 409.918444][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2360'. [ 410.152508][T14343] siw: device registration error -23 [ 410.378429][ T142] tipc: Subscription rejected, illegal request [ 410.905390][T14365] netlink: 'syz.2.2373': attribute type 21 has an invalid length. [ 410.940234][T14368] netlink: 'syz.3.2372': attribute type 4 has an invalid length. [ 410.965355][T14365] netlink: 'syz.2.2373': attribute type 20 has an invalid length. [ 411.097294][T14368] .`: renamed from bond0 (while UP) [ 411.540342][T14381] netlink: 'syz.1.2377': attribute type 10 has an invalid length. [ 412.070339][T14397] __nla_validate_parse: 5 callbacks suppressed [ 412.070361][T14397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2383'. [ 412.200649][T14397] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2383'. [ 412.295507][T14407] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2387'. [ 412.331259][T14407] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2387'. [ 412.628334][T14411] wg1 speed is unknown, defaulting to 1000 [ 412.681706][T14423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2391'. [ 413.341296][T14448] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2401'. [ 413.352682][T14450] netlink: 'syz.3.2402': attribute type 10 has an invalid length. [ 413.523855][T14448] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2401'. [ 413.878420][T14462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2407'. [ 414.253728][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2410'. [ 414.274326][T14472] netlink: 'syz.2.2411': attribute type 10 has an invalid length. [ 414.392578][T14472] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 414.865167][T14477] netlink: 'syz.3.2413': attribute type 18 has an invalid length. [ 414.896934][T14477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2413'. [ 415.270226][T14500] netlink: 'syz.1.2418': attribute type 49 has an invalid length. [ 415.386047][T14506] netlink: 'syz.3.2420': attribute type 7 has an invalid length. [ 415.683184][T14519] ref_ctr_offset mismatch. inode: 0x624 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 416.291961][T14545] netlink: 'syz.2.2434': attribute type 10 has an invalid length. [ 416.519100][T14553] netlink: 'syz.4.2436': attribute type 10 has an invalid length. [ 417.427346][T14579] __nla_validate_parse: 5 callbacks suppressed [ 417.427365][T14579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2445'. [ 417.846561][T14594] net_ratelimit: 12 callbacks suppressed [ 417.846583][T14594] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 418.828031][T14611] netlink: 'syz.2.2451': attribute type 21 has an invalid length. [ 419.388964][T14611] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2451'. [ 419.584011][T14622] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2456'. [ 419.584923][T14624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2458'. [ 420.890836][ T9368] tipc: Subscription rejected, illegal request [ 421.119983][T14682] netlink: 'syz.1.2478': attribute type 6 has an invalid length. [ 421.133719][T14686] netlink: 'syz.2.2479': attribute type 10 has an invalid length. [ 421.143746][T14682] netlink: 3936 bytes leftover after parsing attributes in process `syz.1.2478'. [ 421.180096][T14682] netlink: 'syz.1.2478': attribute type 1 has an invalid length. [ 421.486008][T14700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2486'. [ 421.487958][T14684] wg1 speed is unknown, defaulting to 1000 [ 421.652695][T14701] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2485'. [ 421.772775][T14701] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2485'. [ 422.689402][T14739] netlink: 'syz.2.2500': attribute type 7 has an invalid length. [ 423.107069][T14755] netlink: 'syz.4.2505': attribute type 10 has an invalid length. [ 423.107441][T14754] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2506'. [ 423.150129][T14755] geneve1: entered promiscuous mode [ 423.396322][T14755] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 423.713129][T14772] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2512'. [ 423.737717][T14762] wg1 speed is unknown, defaulting to 1000 [ 424.049349][T14783] netlink: 'syz.4.2517': attribute type 6 has an invalid length. [ 424.060306][T14783] netlink: 3936 bytes leftover after parsing attributes in process `syz.4.2517'. [ 424.076791][T14783] netlink: 'syz.4.2517': attribute type 1 has an invalid length. [ 424.302245][T14791] netlink: 'syz.5.2516': attribute type 7 has an invalid length. [ 424.328835][T14791] netlink: 'syz.5.2516': attribute type 3 has an invalid length. [ 424.722918][T14796] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2520'. [ 424.749303][T14785] wg1 speed is unknown, defaulting to 1000 [ 424.771476][T14796] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2520'. [ 425.606370][T14811] siw: device registration error -23 [ 425.721798][T14814] netlink: 'syz.3.2527': attribute type 7 has an invalid length. [ 425.761399][T14816] netlink: 'syz.2.2528': attribute type 10 has an invalid length. [ 426.176670][T14825] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2532'. [ 426.233273][T14831] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2534'. [ 426.252545][T14832] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2532'. [ 426.785401][T14841] netlink: 'syz.3.2537': attribute type 10 has an invalid length. [ 427.035441][T14850] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2540'. [ 427.050331][T14849] netlink: 'syz.4.2541': attribute type 10 has an invalid length. [ 427.077230][T14849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.091050][T14849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.143622][T14849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.167284][T14849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.181335][T14858] siw: device registration error -23 [ 427.535663][T14867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2547'. [ 427.645736][T14869] netlink: 'syz.5.2549': attribute type 10 has an invalid length. [ 427.649383][T14873] netlink: 'syz.1.2548': attribute type 10 has an invalid length. [ 427.943678][T14873] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 427.957328][T14873] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 428.151959][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2555'. [ 431.033734][T14873] team0: Port device netdevsim1 removed [ 431.066980][T14877] team0: Device ipvlan0 failed to register rx_handler [ 431.277450][T14890] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 431.496524][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2558'. [ 431.834691][ T142] tipc: Subscription rejected, illegal request [ 432.048657][T14921] validate_nla: 2 callbacks suppressed [ 432.048706][T14921] netlink: 'syz.1.2567': attribute type 1 has an invalid length. [ 432.193553][T14921] netlink: 'syz.1.2567': attribute type 1 has an invalid length. [ 432.438379][T14937] netlink: 'syz.2.2570': attribute type 29 has an invalid length. [ 432.466676][T14937] netlink: 'syz.2.2570': attribute type 29 has an invalid length. [ 432.504726][T14937] netlink: 'syz.2.2570': attribute type 29 has an invalid length. [ 432.866318][T14948] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2573'. [ 432.940748][T14948] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2573'. [ 433.159287][T14959] netlink: 'syz.1.2577': attribute type 10 has an invalid length. [ 433.173521][T14961] pimreg: tun_chr_ioctl cmd 1074025678 [ 433.183600][T14961] pimreg: group set to 0 [ 433.322215][T14963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2578'. [ 433.344754][T14963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2578'. [ 433.471135][T14967] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2579'. [ 433.740983][T14980] netlink: 'syz.4.2584': attribute type 10 has an invalid length. [ 434.835105][T14996] netlink: 'syz.1.2588': attribute type 10 has an invalid length. [ 434.844453][T14999] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2589'. [ 434.875511][T14996] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2588'. [ 434.897919][ T9370] tipc: Subscription rejected, illegal request [ 434.900566][T14999] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2589'. [ 434.917376][T15002] netlink: 'syz.3.2591': attribute type 10 has an invalid length. [ 435.454209][T15018] netlink: 26 bytes leftover after parsing attributes in process `syz.4.2595'. [ 435.706212][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2596'. [ 436.293794][T15054] netlink: 'syz.4.2609': attribute type 10 has an invalid length. [ 436.534558][T15062] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2612'. [ 436.598788][T15063] wlan0: mtu greater than device maximum [ 437.399334][T15083] validate_nla: 4 callbacks suppressed [ 437.399353][T15083] netlink: 'syz.1.2617': attribute type 21 has an invalid length. [ 437.611152][T15083] netlink: 'syz.1.2617': attribute type 20 has an invalid length. [ 438.903731][T15112] wlan0: mtu greater than device maximum [ 439.097480][T15125] @0Ù: renamed from bond_slave_1 (while UP) [ 439.413382][T15144] netlink: 'syz.4.2636': attribute type 21 has an invalid length. [ 439.489636][T15144] netlink: 'syz.4.2636': attribute type 20 has an invalid length. [ 440.035579][T15154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2640'. [ 440.072365][T15154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2640'. [ 440.127489][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.133914][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.947403][T15165] wlan0: mtu greater than device maximum [ 440.985651][T15163] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2645'. [ 441.076161][T15163] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2645'. [ 441.103325][T15172] netlink: 'syz.5.2647': attribute type 4 has an invalid length. [ 441.387385][T15180] netlink: 'syz.5.2650': attribute type 10 has an invalid length. [ 441.593197][T15192] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2655'. [ 441.627001][T15189] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2653'. [ 442.064054][T15205] wlan0: mtu greater than device maximum [ 442.119477][T15203] netlink: 'syz.5.2656': attribute type 21 has an invalid length. [ 442.176063][T15203] netlink: 'syz.5.2656': attribute type 20 has an invalid length. [ 442.508474][T15220] netlink: 'syz.3.2662': attribute type 10 has an invalid length. [ 443.277984][T15245] netlink: 'syz.1.2667': attribute type 10 has an invalid length. [ 443.602595][T15253] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2669'. [ 444.000127][T15245] bridge0: port 3(dummy0) entered disabled state [ 444.052248][T15245] dummy0: left allmulticast mode [ 444.069303][T15245] dummy0: left promiscuous mode [ 444.094294][T15245] bridge0: port 3(dummy0) entered disabled state [ 444.145057][T15245] dummy0: entered promiscuous mode [ 444.153382][T15245] dummy0: entered allmulticast mode [ 444.162246][T15245] team0: Port device dummy0 added [ 444.270060][T15265] wlan0: mtu greater than device maximum [ 444.284104][T15268] tap2: tun_chr_ioctl cmd 1074025677 [ 444.306012][T15268] tap2: linktype set to 769 [ 444.513507][T15280] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2673'. [ 444.574215][T15283] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2675'. [ 445.019150][T15287] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2674'. [ 445.197642][T15294] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2678'. [ 445.246718][T15297] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2678'. [ 445.288031][ T142] tipc: Subscription rejected, illegal request [ 445.299597][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2679'. [ 445.622861][T15311] netlink: 'syz.4.2683': attribute type 7 has an invalid length. [ 445.659584][T15314] netlink: 'syz.5.2682': attribute type 21 has an invalid length. [ 445.682704][T15314] netlink: 'syz.5.2682': attribute type 20 has an invalid length. [ 446.588880][T15324] wlan0: mtu greater than device maximum [ 446.612382][T15326] netlink: 'syz.5.2689': attribute type 10 has an invalid length. [ 446.620344][T15328] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2688'. [ 446.648098][T15323] sctp: [Deprecated]: syz.3.2687 (pid 15323) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.648098][T15323] Use struct sctp_sack_info instead [ 447.178183][T15340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2694'. [ 447.295392][T15296] Bluetooth: hci3: command 0x0406 tx timeout [ 447.317414][T15342] openvswitch: netlink: Message has 1 unknown bytes. [ 447.355348][T15342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.382733][T15345] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2696'. [ 447.410490][T15345] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2696'. [ 447.447752][T15350] openvswitch: netlink: Message has 1 unknown bytes. [ 447.509281][T15350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.527337][T15352] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2699'. [ 447.568650][T15352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2699'. [ 447.783287][T15362] wlan0: mtu greater than device maximum [ 447.879414][T15369] FAULT_INJECTION: forcing a failure. [ 447.879414][T15369] name failslab, interval 1, probability 0, space 0, times 0 [ 447.943569][T15369] CPU: 1 UID: 0 PID: 15369 Comm: syz.3.2705 Not tainted syzkaller #0 PREEMPT(full) [ 447.943592][T15369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 447.943607][T15369] Call Trace: [ 447.943618][T15369] [ 447.943625][T15369] dump_stack_lvl+0xe8/0x150 [ 447.943661][T15369] should_fail_ex+0x412/0x560 [ 447.943690][T15369] should_failslab+0xa8/0x100 [ 447.943718][T15369] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 447.943743][T15369] ? __alloc_skb+0x186/0x7d0 [ 447.943765][T15369] ? __alloc_skb+0x1d0/0x7d0 [ 447.943782][T15369] ? __local_bh_enable_ip+0xd0/0x130 [ 447.943832][T15369] __alloc_skb+0x1d0/0x7d0 [ 447.943857][T15369] netlink_sendmsg+0x5d4/0xb40 [ 447.943890][T15369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.943916][T15369] ? aa_sock_msg_perm+0xf1/0x1b0 [ 447.943941][T15369] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 447.943967][T15369] ____sys_sendmsg+0x972/0x9f0 [ 447.943990][T15369] ? __might_fault+0xaf/0x130 [ 447.944017][T15369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.944049][T15369] ? import_iovec+0x73/0xa0 [ 447.944076][T15369] ___sys_sendmsg+0x2a5/0x360 [ 447.944097][T15369] ? __lock_acquire+0x6b5/0x2cf0 [ 447.944120][T15369] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.944175][T15369] ? __fget_files+0x2a/0x420 [ 447.944195][T15369] ? __fget_files+0x3a0/0x420 [ 447.944224][T15369] __x64_sys_sendmsg+0x1bd/0x2a0 [ 447.944250][T15369] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.944280][T15369] ? __pfx_ksys_write+0x10/0x10 [ 447.944309][T15369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.944329][T15369] do_syscall_64+0x15f/0xf80 [ 447.944353][T15369] ? trace_irq_disable+0x3b/0x140 [ 447.944378][T15369] ? clear_bhb_loop+0x40/0x90 [ 447.944400][T15369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.944417][T15369] RIP: 0033:0x7fd8fbb9ce59 [ 447.944434][T15369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.944448][T15369] RSP: 002b:00007fd8fc980028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.944467][T15369] RAX: ffffffffffffffda RBX: 00007fd8fbe15fa0 RCX: 00007fd8fbb9ce59 [ 447.944480][T15369] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 447.944492][T15369] RBP: 00007fd8fc980090 R08: 0000000000000000 R09: 0000000000000000 [ 447.944502][T15369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.944512][T15369] R13: 00007fd8fbe16038 R14: 00007fd8fbe15fa0 R15: 00007ffe39719d28 [ 447.944541][T15369] [ 447.991025][T15372] netlink: 'syz.1.2708': attribute type 1 has an invalid length. [ 448.128701][T15379] netlink: 'syz.3.2710': attribute type 10 has an invalid length. [ 448.460359][T15388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2714'. [ 448.662852][T15387] gretap0 speed is unknown, defaulting to 1000 [ 448.740326][T15387] gretap0 speed is unknown, defaulting to 1000 [ 448.903326][T15387] gretap0 speed is unknown, defaulting to 1000 [ 449.003278][T15387] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 449.019682][T15387] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 449.089526][T15387] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 449.288033][T15387] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 449.362879][T15387] gretap0 speed is unknown, defaulting to 1000 [ 449.400496][T15387] gretap0 speed is unknown, defaulting to 1000 [ 449.468333][T15387] gretap0 speed is unknown, defaulting to 1000 [ 449.487316][T15417] netlink: 'syz.1.2724': attribute type 10 has an invalid length. [ 449.500319][T15387] gretap0 speed is unknown, defaulting to 1000 [ 449.509963][T15387] gretap0 speed is unknown, defaulting to 1000 [ 449.521674][T15417] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 449.562200][T15387] gretap0 speed is unknown, defaulting to 1000 [ 449.582347][T15387] gretap0 speed is unknown, defaulting to 1000 [ 449.666717][T15387] gretap0 speed is unknown, defaulting to 1000 [ 449.687000][T15387] gretap0 speed is unknown, defaulting to 1000 [ 449.715821][T15387] gretap0 speed is unknown, defaulting to 1000 [ 449.738928][T15387] gretap0 speed is unknown, defaulting to 1000 [ 449.761487][T15387] gretap0 speed is unknown, defaulting to 1000 [ 449.797956][T15387] gretap0 speed is unknown, defaulting to 1000 [ 449.816820][T15387] gretap0 speed is unknown, defaulting to 1000 [ 449.827303][T15387] gretap0 speed is unknown, defaulting to 1000 [ 449.841411][T15387] gretap0 speed is unknown, defaulting to 1000 [ 449.894556][T15387] gretap0 speed is unknown, defaulting to 1000 [ 449.922587][T15387] gretap0 speed is unknown, defaulting to 1000 [ 450.080589][T15441] netlink: 'syz.1.2736': attribute type 10 has an invalid length. [ 450.139032][T15448] netlink: 'syz.5.2739': attribute type 313 has an invalid length. [ 450.193505][T15446] wlan0: mtu greater than device maximum [ 450.458776][T15462] xt_l2tp: wrong L2TP version: 0 [ 450.705651][T15470] __nla_validate_parse: 5 callbacks suppressed [ 450.705671][T15470] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2746'. [ 450.762236][T15470] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2746'. [ 451.259088][T15489] netlink: 'syz.3.2750': attribute type 7 has an invalid length. [ 451.276204][T15489] netlink: 'syz.3.2750': attribute type 3 has an invalid length. [ 451.367274][ T9371] tipc: Subscription rejected, illegal request [ 451.395733][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2755'. [ 452.270290][T15512] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2759'. [ 453.027947][T15544] netlink: 'syz.2.2765': attribute type 6 has an invalid length. [ 453.073457][T15544] netlink: 3936 bytes leftover after parsing attributes in process `syz.2.2765'. [ 453.140012][T15553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2768'. [ 453.141388][T15544] netlink: 'syz.2.2765': attribute type 1 has an invalid length. [ 453.334466][T15561] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2771'. [ 453.381292][T15561] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2771'. [ 453.672157][T15552] wg1 speed is unknown, defaulting to 1000 [ 453.710156][T15552] gretap0 speed is unknown, defaulting to 1000 [ 453.844966][T15553] wg1 speed is unknown, defaulting to 1000 [ 453.904210][T15553] gretap0 speed is unknown, defaulting to 1000 [ 453.941088][T15565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2773'. [ 454.507950][ C0] [ 454.507962][ C0] ================================ [ 454.507967][ C0] WARNING: inconsistent lock state [ 454.507979][ C0] syzkaller #0 Not tainted [ 454.507987][ C0] -------------------------------- [ 454.507993][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 454.508000][ C0] syz.1.2777/15579 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 454.508017][ C0] ffffe8ffffadf040 (&loc_l->lock){....}-{2:2}, at: bpf_lru_push_free+0x33b/0xbb0 [ 454.508084][ C0] {INITIAL USE} state was registered at: [ 454.508091][ C0] lock_acquire+0x106/0x350 [ 454.508108][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 454.508128][ C0] bpf_lru_pop_free+0x1a1/0x1ca0 [ 454.508143][ C0] htab_lru_map_update_elem+0x122/0x870 [ 454.508160][ C0] bpf_map_update_value+0x750/0x920 [ 454.508179][ C0] generic_map_update_batch+0x6ea/0x990 [ 454.508196][ C0] bpf_map_do_batch+0x39b/0x630 [ 454.508210][ C0] __sys_bpf+0x7c1/0x950 [ 454.508230][ C0] __x64_sys_bpf+0x7c/0x90 [ 454.508248][ C0] do_syscall_64+0x15f/0xf80 [ 454.508269][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.508285][ C0] irq event stamp: 2592 [ 454.508290][ C0] hardirqs last enabled at (2591): [] do_syscall_64+0x9d/0xf80 [ 454.508316][ C0] hardirqs last disabled at (2592): [] exc_debug_kernel+0x60/0x140 [ 454.508335][ C0] softirqs last enabled at (2572): [] __irq_exit_rcu+0xca/0x220 [ 454.508355][ C0] softirqs last disabled at (2539): [] __irq_exit_rcu+0xca/0x220 [ 454.508375][ C0] [ 454.508375][ C0] other info that might help us debug this: [ 454.508380][ C0] Possible unsafe locking scenario: [ 454.508380][ C0] [ 454.508385][ C0] CPU0 [ 454.508389][ C0] ---- [ 454.508393][ C0] lock(&loc_l->lock); [ 454.508404][ C0] [ 454.508408][ C0] lock(&loc_l->lock); [ 454.508418][ C0] [ 454.508418][ C0] *** DEADLOCK *** [ 454.508418][ C0] [ 454.508423][ C0] no locks held by syz.1.2777/15579. [ 454.508430][ C0] [ 454.508430][ C0] stack backtrace: [ 454.508439][ C0] CPU: 0 UID: 0 PID: 15579 Comm: syz.1.2777 Not tainted syzkaller #0 PREEMPT(full) [ 454.508456][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 454.508466][ C0] Call Trace: [ 454.508472][ C0] <#DB> [ 454.508480][ C0] dump_stack_lvl+0xe8/0x150 [ 454.508500][ C0] print_usage_bug+0x28b/0x2e0 [ 454.508521][ C0] ? bpf_lru_push_free+0x33b/0xbb0 [ 454.508537][ C0] lock_acquire+0x1cc/0x350 [ 454.508560][ C0] ? bpf_lru_push_free+0x33b/0xbb0 [ 454.508583][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 454.508602][ C0] ? bpf_lru_push_free+0x33b/0xbb0 [ 454.508620][ C0] bpf_lru_push_free+0x33b/0xbb0 [ 454.508642][ C0] htab_lru_map_delete_elem+0x3d3/0x440 [ 454.508667][ C0] bpf_prog_464bc2be3fc7c272+0x43/0x4b [ 454.508685][ C0] __perf_event_overflow+0xde8/0xec0 [ 454.508720][ C0] ? __perf_event_overflow+0x273/0xec0 [ 454.508744][ C0] ? __pfx___perf_event_overflow+0x10/0x10 [ 454.508774][ C0] perf_swevent_event+0x410/0x7e0 [ 454.508799][ C0] ? __pfx_perf_swevent_event+0x10/0x10 [ 454.508827][ C0] perf_bp_event+0x318/0x430 [ 454.508852][ C0] ? __pfx_perf_bp_event+0x10/0x10 [ 454.508897][ C0] ? perf_trace_lock+0xff/0x410 [ 454.508921][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 454.508949][ C0] hw_breakpoint_exceptions_notify+0x243/0x680 [ 454.508995][ C0] notifier_call_chain+0x1ad/0x3d0 [ 454.509025][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 454.509046][ C0] atomic_notifier_call_chain+0xda/0x180 [ 454.509069][ C0] notify_die+0x144/0x1a0 [ 454.509091][ C0] ? __pfx_notify_die+0x10/0x10 [ 454.509117][ C0] ? rcu_is_watching+0x15/0xb0 [ 454.509152][ C0] notify_debug+0x2e/0x50 [ 454.509169][ C0] exc_debug_kernel+0xb1/0x140 [ 454.509189][ C0] asm_exc_debug+0x1e/0x40 [ 454.509204][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 454.509222][ C0] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 454.509236][ C0] RSP: 0018:ffffc90010247cf8 EFLAGS: 00050202 [ 454.509249][ C0] RAX: 00007ffffffff001 RBX: 0000000000000050 RCX: 000000000000000f [ 454.509261][ C0] RDX: 0000000000000001 RSI: 0000200000000301 RDI: ffffc90010247da1 [ 454.509272][ C0] RBP: ffffc90010247eb8 R08: ffffc90010247daf R09: 1ffff92002048fb5 [ 454.509283][ C0] R10: dffffc0000000000 R11: fffff52002048fb6 R12: dffffc0000000000 [ 454.509296][ C0] R13: 0000000000000050 R14: ffffc90010247d60 R15: 00002000000002c0 [ 454.509321][ C0] [ 454.509326][ C0] [ 454.509331][ C0] _copy_from_user+0x7a/0xb0 [ 454.509411][ C0] __sys_bpf+0x229/0x950 [ 454.509435][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 454.509470][ C0] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 454.509497][ C0] ? rcu_is_watching+0x15/0xb0 [ 454.509520][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.509537][ C0] __x64_sys_bpf+0x7c/0x90 [ 454.509558][ C0] do_syscall_64+0x15f/0xf80 [ 454.509579][ C0] ? trace_irq_disable+0x3b/0x140 [ 454.509601][ C0] ? clear_bhb_loop+0x40/0x90 [ 454.509620][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.509637][ C0] RIP: 0033:0x7f3e9059ce59 [ 454.509651][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.509664][ C0] RSP: 002b:00007f3e9142a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 454.509680][ C0] RAX: ffffffffffffffda RBX: 00007f3e90815fa0 RCX: 00007f3e9059ce59 [ 454.509691][ C0] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000001c [ 454.509701][ C0] RBP: 00007f3e90632d6f R08: 0000000000000000 R09: 0000000000000000 [ 454.509711][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.509720][ C0] R13: 00007f3e90816038 R14: 00007f3e90815fa0 R15: 00007ffe7cef74d8 [ 454.509745][ C0] [ 455.153335][T15574] wg1 speed is unknown, defaulting to 1000 [ 455.160368][T15574] gretap0 speed is unknown, defaulting to 1000