last executing test programs: 3m20.910686186s ago: executing program 1 (id=134): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d576c"], 0x24}}, 0x0) 3m20.357919059s ago: executing program 1 (id=139): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'wg2\x00', 0x600}) perf_event_open(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x3, 0x0, 0xfc, 0x0, 0x4d35, 0x82200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000001000), 0x2}, 0x8809, 0x7, 0xfffffffe, 0x9, 0x0, 0xfffffff7, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x82, 0x1, 0xfe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b33, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0}, 0x4400, 0x2, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="9feb01001800310000000000280000002800000003fb0000020000000000001103000000ffffffff0000000000000128c2177265e631fc000000000802000000005fc88136feeab800"], 0x0, 0x43}, 0x28) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) 3m20.098130986s ago: executing program 1 (id=144): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x0, {0x0, 0x2}}, 0x80, 0x0}, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000180)=""/69) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000200)=0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)={r0, r4}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000440)=""/173, 0xad}, {&(0x7f0000000500)=""/208, 0xd0}, {&(0x7f00000006c0)=""/251, 0xfb}, {&(0x7f0000000880)=""/65, 0x41}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000b00)=""/202, 0xca}, {&(0x7f0000000c00)=""/213, 0xd5}], 0x8, &(0x7f0000000080)}, 0x2001) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89ee, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="f40000004000000226bd7000fcdbdf251400000077f2a36c15af17d1cf167c976c3217950a286d31ecfe5150e397d8153997202dedff703c695ea715b0c165ad263b86a22b8e7367daa2515afa2bf30addb9d920e26b4786a6f6f62d9dd032c799c6fde3adbf4c80af5908ef0ac0732c08056c233e331503929ad06ea9f39192bab2b16a515efd9ce7c93ceee65249e7e96239ab07d6db05df095561000000000000f1d2a6cafe2714941767f9a5c61fbcbb8ae1f2971b28256d14886ec0daaa28d023b55a9c80c3625c5d15bfaff315003b211800b98005001000000000000c0067000600000000000000080006800400368000"], 0xf4}, 0x1, 0x0, 0x0, 0x20040080}, 0x4004) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000a00)=@newtaction={0xd8, 0x30, 0x9, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_bpf={0xc0, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7fff, 0x0, 0x1, 0x80, 0x6}}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x10, 0x3f, 0x6, 0x611}, {0x2, 0x6, 0x3, 0x6}, {0x7, 0x1, 0x0, 0x1}, {0x2d8a, 0x6, 0x0, 0x7f}, {0x2, 0xbd, 0x5, 0x3}, {0xa, 0x1}, {0x96, 0x40, 0x0, 0x7}]}]}, {0x3c, 0x6, "72d58cde54d7a910f623fd44903ce99f2dfc1e37bdd0436244fc635307cbb5f80b605ca6ed51a6601834eb946855b8f81cdb91d257ce0ffa"}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09200000000000650901000000000066000000ffffff80180100002020692500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000020000008500000076000000b7400000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3m19.662157247s ago: executing program 1 (id=147): r0 = socket$kcm(0x10, 0x400000002, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)='%pB \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000480)=""/18, 0x12, 0x0, &(0x7f00000004c0)=""/46, 0x2e}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0/../file0\x00', 0x0, 0x4000, r0}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1d, 0xe40, 0x8ea1, 0x1b, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r7}, &(0x7f00000009c0), &(0x7f0000000a00)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xd, &(0x7f0000000180)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x7, 0x0, 0x6, 0x6, 0x6, 0x8, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @alu={0x4, 0x1, 0x8, 0x4, 0x1, 0x30, 0x9}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @generic={0xfd, 0xb, 0x0, 0x1000, 0x5}, @tail_call], &(0x7f0000000240)='GPL\x00', 0x4, 0x7d, &(0x7f0000000280)=""/125, 0x40f00, 0x24, '\x00', r2, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xf, 0xc, 0x9}, 0x10, r3, r4, 0x0, &(0x7f0000000740)=[r5, 0xffffffffffffffff, r6, r7, r8], 0x0, 0x10, 0x3}, 0x94) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000430033"], 0xfe33) 3m19.272188523s ago: executing program 1 (id=148): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x110}}, 0x0) close(r2) close(r0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e0000006a0081040000000000005ef40502e0dfffff0e000a120e0000000224ec4dc2cc0114664568a71802cd0b", 0x2e}], 0x1}, 0x804) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) 3m4.154420898s ago: executing program 32 (id=148): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x110}}, 0x0) close(r2) close(r0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e0000006a0081040000000000005ef40502e0dfffff0e000a120e0000000224ec4dc2cc0114664568a71802cd0b", 0x2e}], 0x1}, 0x804) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) 59.317576855s ago: executing program 5 (id=1223): bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0700000001f58200ed0000000600000020000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000400"/28], 0x50) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@fwd={0x2}, @typedef={0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x5, [{0x0, 0x2}]}]}, {0x0, [0x5f, 0x4f]}}, &(0x7f0000000500)=""/4096, 0x4c, 0x1000, 0xa}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r2, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r2, 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x21, 0x80, 0x8, 0x0, 0x0, 0xffff, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x6}, 0x100000, 0x6, 0x7, 0x0, 0x0, 0x1c, 0xfff, 0x0, 0xfff, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r2, 0x2) 58.125013329s ago: executing program 5 (id=1230): r0 = socket$kcm(0x10, 0x2, 0x10) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x4, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x37) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x40810) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) write$cgroup_type(r3, &(0x7f00000002c0), 0x9) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x21}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c000000010701080000000000000000030000050c00024000000000000000040c00034000000000000002000c18034000000000000000090c00024000000000000000050900010073797a31000000000c00034000000000000000030c00064000000000000001ff0c00024000000000000000031c000780080002400000b94a080002400000000408000240000000040c00024000000000000000815d0dba30d19a71d6309037d78da3df1ad3833ecf42abcf8c575cb100"], 0x9c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4) (async) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{0x0}], 0x1}, 0x10100) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000001700)=0x2) 56.850446804s ago: executing program 5 (id=1237): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x8, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x0, 0x7, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x17, &(0x7f00000007c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x6, 0x54, &(0x7f0000000200)=""/84, 0x41000, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000f8ffffff000000ecffffffffffff000000000000"], &(0x7f0000000300)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)}, 0x10002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000001800000000000000", @ANYRES32], 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f91100"}) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 55.471076621s ago: executing program 5 (id=1241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="140000003a000b63d2038023be3b932c0c713864", 0x14}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000000202010400000000000000000a0000005c0002802c000180140003"], 0x70}}, 0x0) 54.477794865s ago: executing program 5 (id=1245): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x4a88, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="e03f03003d000b88d25a80648c7494f90324fc600002400a000a00053582c137153e3719ac0180feff0000d1bd00", 0x2e}, {&(0x7f00000002c0)="e59b56c955ddec6e27f17e6178a7065a7858e7dcb1a91d6e03ad8511b527948734141d95e4af2692a574ee1c2d68a8fa597d60d32b25002f92485b8d2cd368e05b4e2853b23190449414bb35af05a9a43f428de31c76c8a1792b7f57683245ba8279740d118db43a9b02af0c8abb51e53ba416d4d4d103936dab88726452b306d17c0ed034f8aa9bb255fb43eb6f8c5a6ca8708a89ac0e904b001d2ad2893cf113ebe3fa188a230e2bbbeb733c2342ce05133713b4e5af8ef56e9bef4b278c3ee368d92a36adedf471e50a919279be9c7cd67502dc623e41c200dc72399d4e3b383e609e3e2b43876af3b5af3330b7fb7e5fa05407788ceb4709b8be1dd2a1525175521db0a3de726ef73f9cfb65435791927e40c3dd6c9ebd7dba4cdf1ed95955a4625f93b9585109ef356af15bda3cf261d4ff83b662dbca7253623a18ca7780f8fc0876be939a4be30d8cc114c92d3e044f2e35339ff0233c97c49d24e6c3097b26736e2b43478e0d4eb405e6f024396e2bda74428c99af60f70fcb80f6e3f90c29f432720dbb63f690daf0b5cd77633d2b17b4a60eedaf14128b96619216885f8aead69a64a9a633b095f3c1ea8687a37b5922affe824139acc41092c205b0e1ef8425c134170b861e0513aefa686d6f62ad6f8c8b24796c3cc38ba00ccd0ef352ef339bbeabf3569ecefa70b3f464e88ba781672739b630a173b7bf208ced39457427e431774c97e86ed3464ec9ce43304ae2b39ee1cfcff672b53fc2dec72499a55d848f3438af02dd1cd8d2e64b4d5ce368ca52e348f32031baa1ff0a5c2fad1a437dee67495c6147403058158591a91c7c3bcb3cda719c8eb823e4aec894cea50c22a1c7e1a29d106ca47f5f1cf058d81c8c9947f4131e04db996d253956040f8a9bd4320d9e7d2577737b50605ae0541933a19f04bf83bdad599629c68c91dd4844eaa2016a4ac2904005d1581643a6619f3cded5268a18c8397c6c00fbb08ce6d6e99a84f14636806278fdaac7b5c3562955a2c393f98257c7b5cbe57c3f97a51a283e7974b0283217fb79757e7ddc9c422c09ac108171583761c7e048e3a331a47552f4a2a3dd96fa8e269f254cf95ad77226e6e78733955f853131a86e67f7cfa710c6d96088ec74db3eb53d2776089bc5513515223b7a6b140a24abec9b0eab52bdd6fda25462719d7d6afd83b593d0683671011b7f1ae182aa8ad7af5abf5aad39341a0e97f4fc7b764047d4928278c15f449cef7c2e45fdd5047e4feb9275dda336297e105fb5d660870d5587c6ec769ea46100b73d42ebfc495c625613accded83124b45d17687d42e16bbc711e8350ede992ee8e677030f4d7e8ab1d2a5e6caeb23da8fffb85eb5db2bd625cf736f99fa7c0112b67745720ad3bbe83563e5b898536eea38253f19091193f33db308d8528c00478ac52d84d8ff69547600ecd23d5ca6743243bde86a5ba105533027b68ca167b47058003e078eaa72ba8eee7ead04ec9ae28fc8f2a19455ddf383f3217c039deb29f841e932072c5b12c647b9a8d4e31dab2e6079f3b0536d0235e508ed78715a1483fd8bb7af72ab99c448b4ce5a6feec669aa51edbb21910e5e3b7c092a8cc3d7b7db429adaec321611adf90f47790c55012b48226061b8b6e5582696575b38b25fc0338f35289905b554c0fb06a941e89658708df379de92dee9a85e1fa10468b5255069fcbbc7eab3af16b07ba99a8c65d61fffa557a63e6becdadd0a28b5296dde970bdf3b60c0a3a57d3777a1798532c8a6ccea28d51bd702e9771c111b43ce4e05a59aeedc38275609429d4e90878f96859a1ba6cbf3b2dec1f8c7756faeaeafbee41be888dc3dcaaca7d2d7e717e856aa06bd52009b0f30b212a7864362985bad6ee12bfaf81cc16d962d2cd0022471b668afe4c99d3ed0f3ca29453c540df540c1d65385117887d9ab91550855a2aa9db004a9cc820ceb2e9c558d054d4b9bdcf95b221960b66e02566ab27838b2f69080c250f4cedc63e20e3283f4786a0b50f40efc706409a22f2339abbdaa4fdd2a3012eabb696eebc6c21686c3226a40e3483c4d38393f181dc26db79500e42b65973e8f3d40ab12f3b3a0f8d8e0893ada9e4f91e91b1c0e23045c1a876a00cd65a46167014d37424ade382fdfbb712e11032f413b82e9c585fcc261e292caa27c1b616200c46d3634a3718534078b9fe40424cd7870da7dcae5d25774280c648ae9ba40b7fb4bd6c528a9e48e5f5d5b607ec2a5886380c8c9058091be68a1b164be01d469ae00f414f99674b79530a94ab6d2045aca8a110d50709e787f12f5609c62dca6b5392e147a1246c66156e1b22c5a77645a708a993288f07094163d3c704e39169c54d7eb06f356dc71799c2898ad1d62ba15950cb6f24f2e22d8e4ff00477cffa5491190a79594bf41a8da94d9a2be8480b222ba2031054c2cccbc2d9e6ace5b9775bc21484f318f4cdc27c63f8370a64feda5223b2cac4ed90cd25d3bff0848cf7442a57a5f95cce72b335d9bcdfa6cb6a1f73e508779187513e1bc047c0ed31a6b9223a59dc7ca98b71b0c78d6284cb37384e6b04c0c129adeab9f895bcb0ce45cb55bd40d8881e106a36f6a251a015ba0c80d3dca226ac02703274ba697c160666a3fe6179cd48db6a757ffadde0d91040a37b14726fc462cb543665d9df80da94b09d5c5df4c272fd0d97c84eab8e480e5d6e752f95daeb700e86f7e5b12748b239d40b9cc5308efc3ab1d9b4931325ec16d1833c35900e33004d87c76bba18b095f36fc2fa33c1719a5d554cc8e772d23bd21fd9de962eb458b98826f40906ce0bf10ae365397c8a9b589c0832e110577128cfbc86941426ca7888f773f82b3d0b454be2124b8e55cc76b386f6c5171a365df251d3f1cc455636f858864daa268b954d74b9b83b5f62af952b54713328954915d32c7afc41db24a081468f8c6673887a825ec9cd4b949ee1b45e728f27fb9b7ee95f381af6c48d1d12668389eeaa7456daadddbee3906578ce219aa25ec660247f92f9f3032c3b862aea27bc738ada8377b2e87e610ba6834d50ed28a7331dc2c3907598bbaba94bc3ce504ba460d7fcbe059ba09177faa1507be933c55291dd17834f5ba5482adf205f7322772ba048cea5889aa2de7d7dcd74045b29859d0d474afb63178b508b2fa82c7a6419ecf67c3fe40439d72e60fe6cab11b051247001fcb69d5041903c3d72083e9f07e05e2d73ae2de6b0454a6f2325518bf87a7a4ed43fd9de45d0fe83815b563014bfb73e55ee7f7582e062e090916fd5c88eb592378683fe39594c7ad4cbccf54d1a4c2ec7fa3d68b5c36bbae63569ee9a26433f7fff86e31f549f763145b6a98fa194cbb7c1eb40c0715cb3ddd0a30dc3b2fbe851ff1bdab3e836560fc853d499204c91292e7ba3cab9ae0ae611600aee9f9b549150d338599163440b96b87e5473f65ad1b0efdfb24dfafbe9886cdc884d8a136a080be31632642d66725fe7c3b40b9a605eb9c1154308c0096fc3c5e24012b8831843eee934474d4e4ea91bb6d1fb0219bde870bf43af36adf03ac7d28f0c9c572b6402b0df141225a56d4b845cc135328bb2d8122b54cf50a7e445709b1c93bd81d13e34381cb6193be5e78f583d648295a1642bab1db76af43d9202349985d484a2d83f1b1766e9975f6bc6c3722acbb4011f46d5617f6bf5234e1e0cc6c2b2ec1107d13ecadfa311626523d618558afe455369d2db963b586ffd07720368cd84073187c8c9e30177f72ea31127a5a08d5e8e7a49038ac732f0e91daef3691c156046d86b4ae49a6287e3835911fa1e5eac67c74b55b1b68aceb419d36d5582ecb7a45ccf50617f73670740df1827f128fbac489ef085c818c11657e8339e845351e5fcab6de2f7b5d35e9075b7d59101795f856c71982a76f5dc2989a59b87b2799419fb177d96e9949bafdf4d0227f7ccec0d622f8ffb697abfdd517444848e210af2f14ba442731f0fe5b959c22c4824afaba20580ca64556b848caf885fe5ad3cc4b6cac5e3d568577ef8b0d979d8be89f6901974020b57b09046d56ee1591442bf8302d3879a842b3e7c3a3a60e0c2d15d2b9dfe04f4ad6aef9e14ec9554dc9b2458566cf1918884bcbeb059574d099a21faa96a74614dcfbd68a36f2c347b97d7b6c3e85694384df369cdcb63597e161a3416312a04411219d68881e9a541cbcc66b197077d245e55ae9f25277e3d8825b9733e3212712aca3cc77a271cf3bf848ee5005e1bed5a3694895cbcf0072caf9ab6540457b0b1ee3bca59367439c2f0e8b07d3ee2f54a502fd4874c67822bd214f6f0f5f3c61cd939f2b71a33eae31e618f95f25b413e63e8fbd4a34e5f464e0bb145040648f1500861ecda60370de3e2ff53cf63701c4d7f9eb94648566c7063ed78b62ead4ad67b9507f4ddeb7f590aa24f296f56dc1d617c17eaa431267e0452537b6bd004c64b0fe7bc421ef70969d1b729eaec2cb32d02a77246c8f846320fc1512f239ab9464494ddfa1538b539519301d3dd14932f937f133d43c27d39362fed79e2464aca2c70a774615f54d513c9429c6974f8223c13803ef8ab9ea7fcfcef777a2bd059176ca92eafb540ef9c74a63931243be1e277f7759b7df89809bc435f050af939fda5722d46df87ea8f40b68c4b440b0025d8a7e2ebf10e46aa66f80d970f2dcd756774041bdeeb328666645d0b06fbf151e3d015d023721ef757bec36199269777803805245be1bbfea90ae764d96707ee02ee43cfcc7a558b29cab54fa9a5f30b167bbfdc706787d174625aba4d1a238dbd0fb1b9e8e1889aada8941f342d81a600a60baf3427b9a894d69a7bc5be101d2c3fe0e1ca990efa9c1b8f5660b952b5628d2f738daf1107f3a6c976a2836a1fbe6d9c741bc8cebd63ae59847d5b788e74d8377ff345701cbdca71a510c274f49d617a45be7af2c318bdfff759131d0ec1785cda1cf3f504ee8e77fc26ea90b26ea9a2c8d1bffa5a10e5f408ee8cef511eac731d6324bc7060507b9cf864c6f550fef0435103ae2ba94507ae651a93821f7df9aea867cfedb1e42c6becbdcce29cd5a18c31886e60c878e587c543c36b78f0d3c554b2571f55639c1d982daff434804f21c3e6980ff300cb994315316124871816b0b52ad2ca0cb00f9fc98a7a578dfdebbe955e88d778287793770ceaa7e0ea94c85a711e8cf8f9d2831d2966594ef551fd3fd90ebcab1f9bcbde200ce79c66eed5bd9852ba0f8baba3e0481bfbaae38be3e19c89be1244045d2e2872149c491bcd266b1de6d2f52591ded7907919095dee0797d38829aa766b6bd26cb0ef80715f284ca9fd039a1cba7625b481083155105f03c6661db202b57d2f259058bedb7e1b019d6bf4c308ac1e206e644be0458aac6aec5dda32c1e7b29147acd5604fa82617777e45be8c969746a7124e66954d4064bccd295e483c35c5299bcb8566dd2124e31701ba09c3b7363b62fe9c41cdecbc1352a468a716c22b456661c72eb9be75e8c68f5c0fa4434b0a1907631925076f81dac793cf3d5d4ee1ee6ba9dcc6f11bc4ed34733f6394d8f0cabdc11e16e751c8cd506a92f91a94a9ae5e634133a92e7219a40ff8f2c3bc32fb3b6c33592b38b22d7f4f254196fb6e87bb8763f37bc310fc18dc912e80abd571d656320d45b118c68af239532384d83684c83d75a7b03cba229560348b790e9c91c14b1a6e12e8b58c5a0ac61d2b8831a07bbf042167076d2f8464962f8ced833cccdaa44cc"}, {&(0x7f00000012c0)="5793064149c9536abcbe38b0ab928a6df7f43845cb73ea9172b1eca9af930256e3d179fa396181f7f1883994245534b45257522ccf823c34e946716d78b45c90b0aa896b30844d7e61c0f767a6d2c63de41610bddc78c4466b5183267da2f3dde2db12a37d55a8802a60b80e4e51175f723707cfa3febc79fe7db652551e43dd2bc488336f051f19e8315c06df6a73c697df2b0990ed929ed703737dba92182d53d430e2434d0ba03521ce8740e02bedd8edefecc0142fc859735f"}], 0x1, 0x0, 0xffffffffffffff76}, 0x4000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) 43.475434188s ago: executing program 5 (id=1281): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x4, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2, r1}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2, r1}, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x6, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000000d0000850000000000000095195150e7dddd2275fb738fa6d960bfaaa7190b9e0100000000000000007a767269498fa2439c957fd7d2a0e2c397f194cabb688f02f5f5b21687e18239bcadd0d30b5bed6f3ea3f3ed6e7c0b6c15bb0e8b8cd781b4b79376c27128d2635be0f40dfbfd0f12d8b994b92887aa31248a9371e89f2d3f81902ab37c913ab1a1eb68f3afbd522cfa4a0096765fb905bc8e87ef1b5782fb55b6f33e53b3b239e68ef1"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0xfed2) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0xfed2) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000014c0)={@ifindex, 0xb, 0x0, 0x9, &(0x7f00000013c0)=[0x0, 0x0], 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)={@cgroup, 0xffffffffffffffff, 0x30, 0x2, r6, @void, @value=r5, @void, @void, r7}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)={@cgroup, 0xffffffffffffffff, 0x30, 0x2, r6, @void, @value=r5, @void, @void, r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2f8, 0x61, &(0x7f0000000300)=""/97, 0x399e8cb7ad2a73fe, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)=[r3, r3, r3, r3, r3, r3, r3, r3], &(0x7f0000000500)=[{0x4, 0x2, 0x10, 0x9}, {0x4, 0x2, 0x1, 0x9}, {0x3, 0x3, 0x0, 0x3}, {0x3, 0x2, 0x5, 0x2}, {0x3, 0x3, 0x8, 0xc}, {0x5, 0x3, 0xa, 0x2}, {0x5, 0x4, 0xe, 0xb}], 0x10, 0x81}, 0x94) socket$kcm(0x1e, 0x4, 0x0) (async) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$sock(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x1e, 0x4, 0x0) (async) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(0x3) 28.39757536s ago: executing program 33 (id=1281): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x4, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2, r1}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2, r1}, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x6, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000000d0000850000000000000095195150e7dddd2275fb738fa6d960bfaaa7190b9e0100000000000000007a767269498fa2439c957fd7d2a0e2c397f194cabb688f02f5f5b21687e18239bcadd0d30b5bed6f3ea3f3ed6e7c0b6c15bb0e8b8cd781b4b79376c27128d2635be0f40dfbfd0f12d8b994b92887aa31248a9371e89f2d3f81902ab37c913ab1a1eb68f3afbd522cfa4a0096765fb905bc8e87ef1b5782fb55b6f33e53b3b239e68ef1"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0xfed2) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0xfed2) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000014c0)={@ifindex, 0xb, 0x0, 0x9, &(0x7f00000013c0)=[0x0, 0x0], 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)={@cgroup, 0xffffffffffffffff, 0x30, 0x2, r6, @void, @value=r5, @void, @void, r7}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)={@cgroup, 0xffffffffffffffff, 0x30, 0x2, r6, @void, @value=r5, @void, @void, r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2f8, 0x61, &(0x7f0000000300)=""/97, 0x399e8cb7ad2a73fe, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)=[r3, r3, r3, r3, r3, r3, r3, r3], &(0x7f0000000500)=[{0x4, 0x2, 0x10, 0x9}, {0x4, 0x2, 0x1, 0x9}, {0x3, 0x3, 0x0, 0x3}, {0x3, 0x2, 0x5, 0x2}, {0x3, 0x3, 0x8, 0xc}, {0x5, 0x3, 0xa, 0x2}, {0x5, 0x4, 0xe, 0xb}], 0x10, 0x81}, 0x94) socket$kcm(0x1e, 0x4, 0x0) (async) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$sock(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x1) socket$kcm(0x1e, 0x4, 0x0) (async) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(0x3) 27.995349239s ago: executing program 0 (id=1353): socket$nl_netfilter(0x10, 0x3, 0xc) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x830d}, 0x450, 0x2, 0xfffffffe, 0x0, 0x1, 0x0, 0xfe00, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x401, 0x5}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004040}, 0x40004) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$kcm(0xa, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000002"], 0x0, 0x26}, 0x28) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}, 0x10020) (async) close(r1) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2104, 0x6, @perf_config_ext={0x0, 0x19c6}, 0x2006, 0xfffffffffffff511, 0x0, 0x2, 0x4, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x10) (async) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) (async) socket$kcm(0x2, 0x1, 0x84) 27.522026254s ago: executing program 3 (id=1355): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0xde0e31626a8637a6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48800) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x78, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_config_ext={0x407fff, 0xaea}, 0x14104, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x3, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)}], 0x1}, 0x20000000) perf_event_open(&(0x7f0000000280)={0x826b6be9b9579a0, 0x80, 0x52, 0x1, 0x3, 0x9, 0x0, 0x7fef, 0x84, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x984}, 0x106305, 0x9, 0xfffffbfd, 0x3, 0x8000, 0xffffffff, 0xfff4, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(0x0, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5d32, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0x6, 0x0, 0x4, 0x0, 0xffffffffffffd224, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x4, @perf_bp={&(0x7f00000001c0), 0xc}, 0x4004, 0x2, 0x4, 0x2, 0x9, 0x0, 0x4, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131f4e3ba9284b7be91e38e048ae8d2786485fa6edfc159d9ce6ecf8f59c2f3e1496dd85fce043978d5da09ab20efbde21e640a55793146640e3502d5ef9580045ec5363290d5e649414b3361d663b54c690930014dc439f3465412d03266f900d2d5d1bf"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)=""/104, 0x68}, {&(0x7f0000000700)=""/71, 0x47}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000004200)=""/4098, 0x1002}, {&(0x7f00000031c0)=""/4110, 0x100e}, {&(0x7f0000000240)=""/129, 0x81}], 0x6}, 0x10100) 27.519844949s ago: executing program 0 (id=1357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r1, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x14, 0x3a, 0x301, 0x70bd27, 0x25dfdbfc, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x3, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000002b000701feffffff00000000037c00000c00018008000600ffffffff110002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 27.244711368s ago: executing program 3 (id=1361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xffff, 0x0, @mcast1, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) openat$cgroup_type(r2, &(0x7f0000000180), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4b63bafa3a8b4ee8, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socket$inet6_icmp(0xa, 0x2, 0x3a) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0413000037000100feffffff00000000017c000004008f8001"], 0x1304}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) 26.467412709s ago: executing program 0 (id=1365): r0 = socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x2008, r0}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000640)="83f17654a282f5866d973262fd868cb77dca55477995541e7dff2242a3d86e0d7f5ffa35d23d69b7e5ff656293edbcb461b593aa472eeef20c9bdf76d9a58ba45f3b0c368c7e22cfc0f296819d7b5110aa9dd9060f39d196c54c157ae83b5da1ab4b40c1021cd1cffc2ad0cbe25bd0fa9efcae4c8b86cfbaa6228191ce817d0ac6e2a2fc6cc29b2c217625a571406ca96f8ab34863904f7af49e99462ffa812ddb84d61ea39e799eabbfef8f07e3e83a0fc18b53f5239d6d8c4aff242d3d929f4dcd0a8bb4aabcc9d0b4689e196b", &(0x7f0000000780)=""/232, &(0x7f0000000140)="8d9d94ccc53ae80f", &(0x7f0000000180)="9ab31b35212f047ca8590c997fb0034f70fc24e1fb2eb9db530114fdc915b6c57a01738aee6b01b67c3b6fd36e7e32d7f25338cff6c608592f05da78c26b9ee5242cbc0627ce11d722769b1b94104c9111f7fda33078e738b6c2c2a7e5", 0x5, r2, 0x4}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x203}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x4, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b9040220080006067c09e8fe55a1bc0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080)) 26.077320655s ago: executing program 4 (id=1367): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10e, 0x10e, 0x7, [@func={0x10, 0x0, 0x0, 0xc, 0x4}, @datasec={0x3, 0xa, 0x0, 0xf, 0x3, [{0x5, 0x7fff, 0xa4}, {0x3, 0x7d5, 0x8}, {0x1, 0x5f, 0x71f1}, {0x5, 0x3ff, 0x8}, {0x3, 0x1, 0x9}, {0x3, 0x3c, 0x8}, {0x4, 0x1, 0x1000}, {0x1, 0x1ff, 0x7f}, {0x5, 0x3da, 0x11}, {0x3, 0x7, 0x2}], "f251a3"}, @enum64={0x8, 0x4, 0x0, 0x13, 0x1, 0x4, [{0x6, 0xa6a4, 0x6}, {0x3, 0x101, 0x400}, {0xe, 0x1, 0x17}, {0x7, 0x9, 0x10}]}, @ptr={0x3, 0x0, 0x0, 0x2, 0x2}, @const={0x7, 0x0, 0x0, 0xa, 0x1}, @datasec={0xe, 0x2, 0x0, 0xf, 0x3, [{0x3}, {0x3, 0x23c, 0xae}], 'C_o'}]}, {0x0, [0x30, 0x5f, 0x0, 0x30, 0x2e]}}, &(0x7f0000000340)=""/202, 0x12f, 0xca, 0x0, 0x5}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0x88, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xc7, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x1d, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff}, {}, {}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='syzkaller\x00', 0x9, 0x5f, &(0x7f0000000940)=""/95, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x2, 0x9, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000a00)=[0x1], &(0x7f0000000a40)=[{0x3, 0x2, 0xd, 0x4}, {0x5, 0x5, 0xb, 0x3}, {0x2, 0x4, 0x1, 0x5}, {0x1, 0x3, 0x8, 0x7}]}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x2, 0x1, 0x8, 0x5, 0x8008, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x39ef, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@bloom_filter={0x1e, 0x5, 0x2f, 0x1000, 0x500, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d80)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x12, 0x17, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x382, 0x23, &(0x7f0000000100)=""/35, 0x41000, 0x4, '\x00', r0, @cgroup_sock_addr=0xe, r1, 0x8, &(0x7f0000000480)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x6, 0xffff7fff, 0x93}, 0x10, r3, r4, 0x5, &(0x7f0000000dc0)=[r5, r6, r7, r8, r9], &(0x7f0000000e00)=[{0x0, 0x3, 0x10, 0x6}, {0x1, 0x4, 0xd}, {0x5, 0x5, 0x10, 0xb}, {0x2, 0x5, 0x7}, {0x4, 0x1, 0xd, 0x4}], 0x10, 0xe9}, 0x94) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x98a, '\x00', 0x0, r1, 0x1, 0x4, 0x4}, 0x50) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x11, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f00000012c0)='GPL\x00', 0x5, 0xf1, &(0x7f0000001300)=""/241, 0x41100, 0x19, '\x00', r2, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001400)={0x3, 0x2, 0xfffffffa, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001440)=[r8, r8, r5, r6, r9, r7, r8], &(0x7f0000001480)=[{0x5, 0x3, 0x6, 0x1}, {0x0, 0x1, 0xa, 0xa}, {0x2, 0x1, 0x1, 0x4}, {0x4, 0x3, 0x9, 0xa}, {0x0, 0x5, 0x0, 0x5}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x9, 0x11, &(0x7f0000000fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001080)='GPL\x00', 0x10001, 0xe0, &(0x7f00000010c0)=""/224, 0x0, 0x65, '\x00', r0, @fallback=0x27, r1, 0x8, &(0x7f00000011c0)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, r3, r12, 0x3, &(0x7f00000015c0)=[r5, r9, r8, r7], &(0x7f0000001600)=[{0x2, 0x3, 0x9}, {0x3, 0x2, 0xd, 0x2}, {0x0, 0x1, 0xd}], 0x10, 0x7fff}, 0x94) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001700)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r13, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8e46}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x5}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4000880) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000019c0)={0x6, 0x8, &(0x7f0000001880)=@raw=[@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], &(0x7f00000018c0)='GPL\x00', 0x767, 0xc, &(0x7f0000001900)=""/12, 0x41100, 0x4, '\x00', r0, 0x25, r13, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001940)={0x0, 0x4, 0xd6e8, 0x2fa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001980)=[r11, 0x1, r11, 0x1], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001cc0)={r5, 0x58, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e00)=@bpf_lsm={0x1d, 0x10, &(0x7f0000001a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000001b00)='syzkaller\x00', 0x1, 0xec, &(0x7f0000001b40)=""/236, 0x40f00, 0x8, '\x00', r14, 0x1b, r10, 0x8, &(0x7f0000001d00)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001d40)={0x1, 0xc, 0x8, 0x6}, 0x10, r3, 0x0, 0x4, &(0x7f0000001d80)=[r9, r11], &(0x7f0000001dc0)=[{0x2, 0x5, 0x3, 0xc}, {0x0, 0x4, 0x6}, {0x3, 0x1, 0x5, 0x1}, {0x2, 0x3, 0xc, 0x7}], 0x10, 0x1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002180)={r13, 0xe0, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000001f00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4d, &(0x7f0000001f80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001fc0), &(0x7f0000002000), 0x8, 0x66, 0x8, 0x8, &(0x7f0000002040)}}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r13, 0x89e0, &(0x7f00000021c0)={r4, r10}) socketpair(0x2b, 0x1, 0x0, &(0x7f0000002200)={0xffffffffffffffff}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002240)={r12, r5}, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) write$cgroup_subtree(r13, &(0x7f0000002280)={[{0x2b, 'net_cls'}, {0x2b, 'freezer'}, {0x2b, 'pids'}, {0x2d, 'net_prio'}, {0x2d, 'net'}, {0x2b, 'hugetlb'}]}, 0x30) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000022c0)) sendmsg$IPCTNL_MSG_EXP_DELETE(r13, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002400)={&(0x7f0000002340)={0xc0, 0x2, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_EXPECT_NAT={0xac, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @empty}}}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x880}, 0x1) socket$igmp(0x2, 0x3, 0x2) recvmsg$can_raw(r16, &(0x7f0000002c00)={&(0x7f0000002480)=@can, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002500)=""/39, 0x27}, {&(0x7f0000002540)=""/27, 0x1b}, {&(0x7f0000002580)=""/226, 0xe2}, {&(0x7f0000002680)=""/159, 0x9f}, {&(0x7f0000002740)=""/216, 0xd8}, {&(0x7f0000002840)=""/77, 0x4d}, {&(0x7f00000028c0)=""/28, 0x1c}, {&(0x7f0000002900)=""/204, 0xcc}, {&(0x7f0000002a00)=""/235, 0xeb}], 0x9, &(0x7f0000002bc0)=""/1, 0x1}, 0x40000020) bpf$PROG_LOAD(0x5, &(0x7f0000002f40)={0x2, 0xf, &(0x7f0000002c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf73}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002cc0)='syzkaller\x00', 0x4, 0xce, &(0x7f0000002d00)=""/206, 0x41100, 0x0, '\x00', r2, @fallback=0x2d, r13, 0x8, &(0x7f0000002e00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000002e40)={0x0, 0x10, 0x1, 0xe6}, 0x10, r15, r10, 0x5, &(0x7f0000002e80)=[r11, r9, r6, r11, r8, r6], &(0x7f0000002ec0)=[{0x2, 0x4, 0xf, 0x6}, {0x0, 0x4, 0x6, 0xc}, {0x0, 0x5, 0xe, 0xc}, {0x4, 0x2, 0x1, 0x2}, {0x2, 0x2, 0xb, 0xc}]}, 0x94) 26.036402881s ago: executing program 4 (id=1368): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x7, &(0x7f00000002c0)=[{0x0, 0x9, 0x2, 0x9}, {0x2, 0x4, 0x2, 0x4}, {0x2, 0x6, 0x8, 0xffffffff}, {0x6, 0xb, 0xc, 0x7f6}, {0xff80, 0x7, 0xe5, 0x4}, {0x7, 0x7, 0x5, 0x5}, {0x8, 0xf, 0x0, 0x4}]}) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x7, &(0x7f00000002c0)=[{0x0, 0x9, 0x2, 0x9}, {0x2, 0x4, 0x2, 0x4}, {0x2, 0x6, 0x8, 0xffffffff}, {0x6, 0xb, 0xc, 0x7f6}, {0xff80, 0x7, 0xe5, 0x4}, {0x7, 0x7, 0x5, 0x5}, {0x8, 0xf, 0x0, 0x4}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114d01, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114d01, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x28, 0x1, 0x0) (async) r5 = socket$kcm(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3c, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) getpid() (async) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0xb, 0x5, 0x1, &(0x7f0000000140)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x37, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xa7, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000001040)=ANY=[@ANYBLOB="a80100001200190225bd7000fbdbdf25068100f34e244e20010100000000000046000000d90a00000400000005000000ffffffff0700000083227521991b368d16ba38b4d584a78497917b11a600c2ebcf33330ef69a43477907aba21c040f28b890d9a38e9917f30cf40b3ccfb9bcdad781b348a779d5d365300e04d1c182b420385a590d7eb5484a0e3a6e64c077d44c1e4e9140595a177390cab2f9df92", @ANYRES32=r10, @ANYBLOB="03000000050000000900000000000000c1000100297161ad56a78946f731bea6c7e623a12239b916e970610777cd89c8a0ca370be0861b71a931e7a0fd8c2f7e8253329d611afd523ad2cd222da50320da03806d6a0e824e5454ba150d77aaac90e5d39749cc88c4243ba2b8ce2065f10457ca69683dfe2a330fb4762e55f9fd5af4366da7f4c1838cda48b8bc1b25d825fbbdd0cb4a4ae05a984d15462d7b794ea9eb94504747ef54ff226910083744298ba8325f7cff45f60d429371a40556c23bcd8d6bb480dae292171142f38e8f26000000950001002e958f0d202990eabf2c848084e5665e2273ce517b3a7360739d60041baba48e9be5e13adec6895b732974c3148820f43f2b48e7a6456f1ce62a1e9dc5c587a2ba8571a1380dfccb10960ecb87a598e20bba68f8dc6238a9db230bf5448397a8e7e03922ad4ec2e8a7e746338444bc3e56d4abc639cc7eadf7a74b9ef34664875716aa1a880e72a58419238557d7edaf82000000"], 0x1a8}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd46", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.683766741s ago: executing program 3 (id=1369): sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000051401002dbd7000fbdbdf250800011377cb00020000000800030001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000025e32fe95f0c8f87bd9abb6dbf31f654b46fcbaee89400224dff76004f51639c797ef1ed74e21ccb4821bb6d1edb2358e0795a41b5b5d386ae9d9ea3ca9e6aea93e6aa8aed11893e80abcf4e7ae2584618dcd0"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000006ffffff000000000000000000000000e80cf29fa58f9f5479a9c77925f954110000004f00000000"], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r4, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x20040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair(0x28, 0x1, 0x28, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) setsockopt$sock_attach_bpf(r4, 0x1, 0x23, &(0x7f0000000000), 0xff7b) 21.676259708s ago: executing program 4 (id=1370): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x6c69, 0x4, 0x0, 0x1, 0x0, 0x200, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) r3 = socket$kcm(0x11, 0x2, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x10) (async, rerun: 64) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000002060108000034e4000000000a000000580000000000000005000400000000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274000000001400078005001400a90000000800084000000050"], 0x60}}, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000000000000e6ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000600)=@hci={0x1f, 0x300, 0x31}, 0x80, 0x0}, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8905, 0x0) (async, rerun: 64) r9 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r9, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) (async) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x8004) (async) socket$kcm(0x10, 0x3, 0x10) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500e9990000000000000000fc000000000000000000000000000000ac000400000000000000000000000000007f0000000000090a00306000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000100000000000000030000000200000000000000000000004000000000000000010000000000000004000000000000000000000000000000060000000000000003000000000000000000020000000000"], 0xb8}}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r10}) 21.518733908s ago: executing program 0 (id=1371): perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x80, 0xdd, 0x1, 0x7, 0x3, 0x0, 0x9, 0x2280, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x2, @perf_bp={0x0, 0x1}, 0x94, 0x2, 0x0, 0x0, 0x10001, 0x1, 0x1, 0x0, 0x4, 0x0, 0x85b}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x1c, &(0x7f0000000100), 0x120) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x5, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x80000, 0x0) gettid() r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffff, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r4, &(0x7f00000011c0)) mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x200020, &(0x7f0000000580)=ANY=[@ANYBLOB='uid=', @ANYBLOB=',mode=000', @ANYBLOB=',g']) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688810046", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 18.859469957s ago: executing program 4 (id=1373): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd29, 0x25dfdbff, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async, rerun: 64) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000000000000000000500030000000000000100008408000000060000000100"], &(0x7f00000005c0)=""/13, 0x44, 0xd, 0x1}, 0x28) (async, rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x9, 0x3ff, 0x0, 0x3, 0xffffffffffffffff, 0x7, '\x00', 0x0, r3, 0x1, 0x2}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f2, &(0x7f0000000080)) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)=@o_path={&(0x7f0000000380)='./file0\x00', r6, 0x4000, r7}, 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000067e28b8d744dd605000300000000000000000000000000006100"], 0x0, 0x2d}, 0x12) r9 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r9, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e3d, 0x100, @private1, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3000000000000000010000000c"], 0x30}, 0x4000010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r8, 0x58, &(0x7f00000002c0)}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x10f, 0x88, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000003dd0a00000000000073013500000000009500000000000000b38a595efa0578208e8354bb546620e3690771f5bf003326913779cfaf84efb8b3f976c934b37c6aab214e75d6019bf1582d07e5b5351fb88008465255c682"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 18.750106403s ago: executing program 3 (id=1374): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, r0, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socket$kcm(0x15, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x7fffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x121200, 0x0) ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f0000000380)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup(r5, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r7, 0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 18.726040258s ago: executing program 3 (id=1375): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x18}}, 0x5) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x18}}, 0x5) (async) 18.709654344s ago: executing program 0 (id=1376): close(0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x8901, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23003f) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000009", @ANYRES32, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0xd384ed8852b2f03d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r3, 0xc, 0x1, 0x400, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000200)=[{0x4, 0x5, 0x10, 0x4}, {0x0, 0x4, 0xc, 0xb}], 0x10, 0x800}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) 18.569582236s ago: executing program 4 (id=1377): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x12, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000024000000000000000500000018110000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000850000007b000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x12, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000024000000000000000500000018110000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000850000007b000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x0, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x100}, 0x12020) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r9, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x340440f1) setsockopt$sock_attach_bpf(r9, 0x1, 0x12, &(0x7f0000000540)=r2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3f, {0x4, 0x7, 0x7, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x980) perf_event_open(&(0x7f0000000f00)={0x2, 0x80, 0x7, 0x7, 0x7, 0x7, 0x0, 0x3, 0x80, 0x9b5bf12faf84b351, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000ec0), 0x2}, 0x880, 0x50ca, 0x5, 0x8, 0x2, 0xe8, 0x3, 0x0, 0x1, 0x0, 0xf4}, r5, 0xf, r1, 0x8) (async) perf_event_open(&(0x7f0000000f00)={0x2, 0x80, 0x7, 0x7, 0x7, 0x7, 0x0, 0x3, 0x80, 0x9b5bf12faf84b351, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000ec0), 0x2}, 0x880, 0x50ca, 0x5, 0x8, 0x2, 0xe8, 0x3, 0x0, 0x1, 0x0, 0xf4}, r5, 0xf, r1, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14b0}}, 0x0) 18.069379289s ago: executing program 3 (id=1378): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/229, 0xe5}, {&(0x7f0000000740)=""/180, 0xb4}, {&(0x7f0000000600)=""/251, 0xfb}, {&(0x7f0000000980)=""/207, 0xcf}, {&(0x7f0000000480)=""/295, 0x127}, {&(0x7f00000012c0)=""/4154, 0x103a}], 0x6}, 0x40002002) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x1, 0x4, 0x1210, 0x1, 0x1, '\x00', r2, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0xf}, 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0x1, 0xffffffffffffffff}, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xf}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x0, 0x2, 0x3, 0x7, 0x3, 0x82, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xe1, &(0x7f0000000800)=""/225, 0x40f00, 0x16, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000280)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xc, 0x80000001, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000940)=[0x1, 0xffffffffffffffff, r4, r5], &(0x7f0000000a80)=[{0x2, 0x3, 0x3}, {0x4, 0x2, 0x4, 0x8}, {0x2, 0x5, 0xe, 0x4}], 0x10, 0x5}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000050000000000000fe5000000000000000000000300000000020000000100000000000000000000000061"], 0x0, 0x43}, 0x28) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="14000000350094fb0100fc6022f388a500000000", 0x14}], 0x1}, 0x4000800) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 17.632006779s ago: executing program 34 (id=1378): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/229, 0xe5}, {&(0x7f0000000740)=""/180, 0xb4}, {&(0x7f0000000600)=""/251, 0xfb}, {&(0x7f0000000980)=""/207, 0xcf}, {&(0x7f0000000480)=""/295, 0x127}, {&(0x7f00000012c0)=""/4154, 0x103a}], 0x6}, 0x40002002) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x1, 0x4, 0x1210, 0x1, 0x1, '\x00', r2, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0xf}, 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0x1, 0xffffffffffffffff}, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xf}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x0, 0x2, 0x3, 0x7, 0x3, 0x82, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xe1, &(0x7f0000000800)=""/225, 0x40f00, 0x16, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000280)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xc, 0x80000001, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000940)=[0x1, 0xffffffffffffffff, r4, r5], &(0x7f0000000a80)=[{0x2, 0x3, 0x3}, {0x4, 0x2, 0x4, 0x8}, {0x2, 0x5, 0xe, 0x4}], 0x10, 0x5}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000050000000000000fe5000000000000000000000300000000020000000100000000000000000000000061"], 0x0, 0x43}, 0x28) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="14000000350094fb0100fc6022f388a500000000", 0x14}], 0x1}, 0x4000800) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 17.582095451s ago: executing program 0 (id=1380): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.stat\x00', 0x60ff, 0x8cffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="b9ff033168440372b89e14f00800a25e4113fdbe", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x3, 0x0, 0x7fffffff, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r1, r3, 0x0, 0x0, @val=@netkit={@void, @value=r1, @void, @void, r4}}, 0x1c) 17.418180275s ago: executing program 35 (id=1380): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.stat\x00', 0x60ff, 0x8cffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="b9ff033168440372b89e14f00800a25e4113fdbe", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x3, 0x0, 0x7fffffff, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r1, r3, 0x0, 0x0, @val=@netkit={@void, @value=r1, @void, @void, r4}}, 0x1c) 17.399997285s ago: executing program 6 (id=1348): bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a80)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="020000000800000004000000", @ANYRES32, @ANYBLOB="ca44d07840f357a0a44c8e810db6c681039eadc8cefc86b68f92bc4e4d3de80be567c445623c0261b54ee80278b0daf500aa5b9f88ef40ca2ce04b17da332a18b626202250716939bcfe72f4b4c4e0c14c9b7ee7cb864cec3205986bf8713bbaf2519e8524c6707ac91b40f3c985ee30aef80f49127ae659d19ae89ac4c73e90dd61d53b0ea1976c997a9cc029dd808cb291faa8ab94ab5c0fce9871f9175afbb5fea2def8fd211329904e3cb6ad01162776da3ca851ff4a511b458405094a33a3e4bb2dbaad3aa32080aab7ff7594c209161f92fc0f9e0688e37b1f4849ac94ac4232ccff37304f2f85cee65f69b163f439", @ANYRES64=0x0], 0x20) socket$kcm(0x2, 0x5, 0x84) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000080), 0x0, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%ps \x00'}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0xd, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r4, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x1e, &(0x7f0000000500)=ANY=[@ANYBLOB="184000000400000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f000000850000000600000018540000050000000000000000000000185900000d0000000000000000000000b7080000000000007b8af8ff00000000b7080000010000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000f0ffffff07920000018000008520000002000000"], &(0x7f00000002c0)='GPL\x00', 0x60, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x2, 0xfcbe, 0x5}, 0x10, r4, 0x0, 0x0, &(0x7f0000000380)=[0x1], 0x0, 0x10, 0x9}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x14, 0x6, 0x7, &(0x7f00000004c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a000000000000000000000300000000040000000200000001f8ffff080000000000008e"], 0x0, 0x4a, 0x0, 0x1, 0x3}, 0x28) r8 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_REFRESH(r8, 0x2402, 0xfffffffffffffff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711053000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 17.390558457s ago: executing program 36 (id=1348): bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a80)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="020000000800000004000000", @ANYRES32, @ANYBLOB="ca44d07840f357a0a44c8e810db6c681039eadc8cefc86b68f92bc4e4d3de80be567c445623c0261b54ee80278b0daf500aa5b9f88ef40ca2ce04b17da332a18b626202250716939bcfe72f4b4c4e0c14c9b7ee7cb864cec3205986bf8713bbaf2519e8524c6707ac91b40f3c985ee30aef80f49127ae659d19ae89ac4c73e90dd61d53b0ea1976c997a9cc029dd808cb291faa8ab94ab5c0fce9871f9175afbb5fea2def8fd211329904e3cb6ad01162776da3ca851ff4a511b458405094a33a3e4bb2dbaad3aa32080aab7ff7594c209161f92fc0f9e0688e37b1f4849ac94ac4232ccff37304f2f85cee65f69b163f439", @ANYRES64=0x0], 0x20) socket$kcm(0x2, 0x5, 0x84) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000080), 0x0, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%ps \x00'}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0xd, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r4, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x1e, &(0x7f0000000500)=ANY=[@ANYBLOB="184000000400000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f000000850000000600000018540000050000000000000000000000185900000d0000000000000000000000b7080000000000007b8af8ff00000000b7080000010000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000f0ffffff07920000018000008520000002000000"], &(0x7f00000002c0)='GPL\x00', 0x60, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x2, 0xfcbe, 0x5}, 0x10, r4, 0x0, 0x0, &(0x7f0000000380)=[0x1], 0x0, 0x10, 0x9}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x14, 0x6, 0x7, &(0x7f00000004c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a000000000000000000000300000000040000000200000001f8ffff080000000000008e"], 0x0, 0x4a, 0x0, 0x1, 0x3}, 0x28) r8 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_REFRESH(r8, 0x2402, 0xfffffffffffffff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711053000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 17.38935182s ago: executing program 4 (id=1383): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) syz_clone(0x80080000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (async) fstat(r0, &(0x7f0000000600)) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async) socket$kcm(0x10, 0x2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r3) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, 0xfffffffffffffffe, 0x0) (async) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x10, &(0x7f0000000a00)=ANY=[@ANYRES32=r4, @ANYBLOB="7babffd057eee326b222235cc77f6c0994e0dde2d5cba6a0c20d7e7cdbb6c65364e1dfc7f1da5b965b384f0b5e6de1d2262e71a24c5e679e1f899e0edd1c33c1e916eab908cd06ecc36dbd08544c3bcf701516afe85a8292a46b680b89ab99c11c89cde1644d8f16e71fc4e33dfe0003f910e47312f85e25ec0f975b2f2ef4ea944d92a2f8c3ba64e5e8bbe4781dc1ed015c8d88e10c51ff7f92cb3132b42e93"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x40, 0xa, 0xfe, 0x7, 0x0, 0x8, 0x8, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xc77, 0x2, @perf_config_ext={0x3d59, 0x200}, 0x2811, 0x2, 0xd, 0x6, 0x7, 0x101, 0x6, 0x0, 0xc9a9, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x1) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a010200"], 0x44}}, 0x4040) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="00200700f4565492371bfba9c0c0ffd45562df4860d02d"], 0xa) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xd, r2, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000a, 0x9}, 0x40c, 0x8, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x40, 0x0]}}]}]}, 0x54}}, 0x0) (async) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe}, 0x14181, 0x20032, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x8}, 0x1400, 0x9, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, r7, 0x0) 17.38863941s ago: executing program 37 (id=1383): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) syz_clone(0x80080000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (async) fstat(r0, &(0x7f0000000600)) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async) socket$kcm(0x10, 0x2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r3) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, 0xfffffffffffffffe, 0x0) (async) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x10, &(0x7f0000000a00)=ANY=[@ANYRES32=r4, @ANYBLOB="7babffd057eee326b222235cc77f6c0994e0dde2d5cba6a0c20d7e7cdbb6c65364e1dfc7f1da5b965b384f0b5e6de1d2262e71a24c5e679e1f899e0edd1c33c1e916eab908cd06ecc36dbd08544c3bcf701516afe85a8292a46b680b89ab99c11c89cde1644d8f16e71fc4e33dfe0003f910e47312f85e25ec0f975b2f2ef4ea944d92a2f8c3ba64e5e8bbe4781dc1ed015c8d88e10c51ff7f92cb3132b42e93"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x40, 0xa, 0xfe, 0x7, 0x0, 0x8, 0x8, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xc77, 0x2, @perf_config_ext={0x3d59, 0x200}, 0x2811, 0x2, 0xd, 0x6, 0x7, 0x101, 0x6, 0x0, 0xc9a9, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x1) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a010200"], 0x44}}, 0x4040) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="00200700f4565492371bfba9c0c0ffd45562df4860d02d"], 0xa) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xd, r2, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000a, 0x9}, 0x40c, 0x8, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x40, 0x0]}}]}]}, 0x54}}, 0x0) (async) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe}, 0x14181, 0x20032, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x8}, 0x1400, 0x9, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, r7, 0x0) 1.40604526s ago: executing program 2 (id=1413): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000802000001"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000007a00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x4e23, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 1.275386349s ago: executing program 2 (id=1414): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000440)={&(0x7f0000000000)={0xa, 0x4e22, 0x1, @mcast1, 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)="7f751016cd399172542c98f6d20cd79ff5f6d84c10512c4a2b39aa781f706731b82e28b8e98796a5775c0cb1e3c6c8508abc95da063d50426b452e522fe1ab7476692663567e85b9c0f35a6d3cf62d2877f5ead18fbb", 0x56}, {&(0x7f00000001c0)="5ae49dbddc972712292b1c06dcb4223c6c8f750c28cc48f6663f6c13eea96aae0c4ab39b772286a7ff3fd367db78816dc6e02cf0968d39e2ade875b7190ae470512c3989e49060068c9c08046543a07d9b", 0x51}], 0x2, &(0x7f0000000300)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x2, 0x8, 0x2, 0x9a, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @empty, @local, @private2]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x88, 0x14, 0x0, 0x4, 0x0, [@private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @remote, @mcast2, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote]}}}], 0x110}, 0x20008000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0x2c, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0xc, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x5}}, @const={0xb, 0x0, 0x0, 0xa, 0x3}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x2, 0x3}, {0xc, 0x3}, {0xc, 0x4}, {0xa, 0x1}, {0xf, 0x2}, {0xf}]}, @struct={0x6, 0x2, 0x0, 0x4, 0x1, 0xd0c, [{0x9, 0x5, 0xffff0001}, {0xe, 0x4, 0xb6}]}, @enum64={0xb, 0x2, 0x0, 0x13, 0x0, 0x8, [{0x4, 0x0, 0x81}, {0xe, 0xcbf, 0x4002}]}, @enum={0x3, 0x3, 0x0, 0x6, 0x4, [{0xc, 0x6}, {0x7, 0x1e15}, {0x9, 0x5c43}]}]}, {0x0, [0x2e, 0x0, 0x61, 0x5f, 0x61, 0x2e, 0x61, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000780)=""/5, 0xf0, 0x5, 0x1, 0x8, 0x10000}, 0x28) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x8, 0x100001}, 0x80, 0x0}, 0x2404c050) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', r3, r4, 0x5, 0x0, 0x2}, 0x50) 943.34908ms ago: executing program 2 (id=1415): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0xfffffffd, 0x1}, 0x0, 0x100000001, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) sendmsg$kcm(r4, &(0x7f0000000880)={&(0x7f0000000540)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x3}}, 0x80, 0x0}, 0x88c0) r5 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x14) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000001900)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002a00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r7, 0x0, 0xe, 0x0, &(0x7f0000001540)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf94207176394", 0x5b}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0) 586.146297ms ago: executing program 2 (id=1416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000160081044e81f782db44b9040a1d080206000000040000a118000200fe05000000000e1208000f0100810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803", 0x4c}, {&(0x7f0000000500)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a69d81efd66f3affa37aaa31c99041171824f069f392273bd5ce1ab2b2b6f2dcd0b5b5935c360149c52fd45fec45f0cf2728205888adff194e4191575a40", 0x8c}], 0x2, 0x0, 0x0, 0x7400}, 0x0) recvmsg$kcm(r1, &(0x7f0000001180)={&(0x7f0000000140)=@isdn, 0x80, &(0x7f0000001080)=[{&(0x7f0000000f80)=""/224, 0xe0}], 0x1, &(0x7f00000010c0)=""/138, 0x8a}, 0x2002) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000011c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000500)={0x2, &(0x7f0000000540)=[{0x87, 0x83, 0x3, 0x72}, {0x6, 0x0, 0xfc, 0x1}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000160081044e81f782db44b9040a1d080206000000040000a118000200fe05000000000e1208000f0100810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803", 0x4c}, {&(0x7f0000000500)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a69d81efd66f3affa37aaa31c99041171824f069f392273bd5ce1ab2b2b6f2dcd0b5b5935c360149c52fd45fec45f0cf2728205888adff194e4191575a40", 0x8c}], 0x2, 0x0, 0x0, 0x7400}, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000001180)={&(0x7f0000000140)=@isdn, 0x80, &(0x7f0000001080)=[{&(0x7f0000000f80)=""/224, 0xe0}], 0x1, &(0x7f00000010c0)=""/138, 0x8a}, 0x2002) (async) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000011c0)=0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000500)={0x2, &(0x7f0000000540)=[{0x87, 0x83, 0x3, 0x72}, {0x6, 0x0, 0xfc, 0x1}]}) (async) 436.005219ms ago: executing program 2 (id=1417): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x6, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x74, 0x1ef7}, 0x11ffa, 0x4, 0x98, 0x0, 0x10001, 0xfffff271, 0x8000, 0x0, 0x0, 0x0, 0x20}, r2, 0x8, 0xffffffffffffffff, 0x2) socket$tipc(0x1e, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 171.466806ms ago: executing program 2 (id=1418): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x3, 0x96, 0xff, 0x3, 0x0, 0xfffffffffffffffb, 0x640661560d0ed323, 0x7, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f0e86ac}, 0x100, 0x7f, 0x7fff, 0x5, 0xfffffffe, 0x3f, 0xfffb, 0x0, 0x4, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x10, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0xe07e872424db2fcb) socket$kcm(0x10, 0x3, 0x10) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xd, r3, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x28, 0x3ec, 0x20, 0x70bd2a, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}}, 0x28}}, 0x2000c884) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, 0x0, &(0x7f0000000440)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000a0fe0a7e5a8b11288335986400000040a623b8dc0e96695a7974b3f2a6e82d10d8a8ded78eab12ab482d855a1671a58fa53974fde20d0db51b2d73ea475f7e551cc5241f776966185eda7cc22fd35775571c2e0d850932b72ca0858886d130c6bc7a3e9b46fe772ca02f75c403f61c8d975030917c5caaad3818832237ed88b094dc9b2ef34360287a262da46c4fc41618748f414f31e007c08f597021594982067def7e6d0c2192ba50645e743fd08500dda4de74b14a142ad94dbaccaec4571936bf5482af9656ace0ada7c8c6", @ANYRES32=r0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000300"/27], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140300000000010000000000000000000200000a68000200060a0b04000000000000000002000000cc000480388324a99b00010064796e7365740000280002800800034000000002080004400000001208000940000000010900010073797a31000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x0, 'io'}]}, 0x4) 0s ago: executing program 1 (id=1384): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x801) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0], 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x100008c0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000600010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f00000002c0)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r1}], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x1e, &(0x7f0000000340)=""/30, 0x41000, 0x1, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x0, 0x4, 0x4}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000400)=[r1], &(0x7f0000000480)=[{0x3, 0x3, 0x4, 0xc}, {0x0, 0x1, 0x3, 0x1}, {0x3, 0x4, 0x8, 0x2}, {0x1, 0x3, 0x9, 0xc}, {0x1, 0x4, 0x8, 0x1}, {0x2, 0x3, 0x5, 0x7}, {0x0, 0x2, 0xb, 0x7}, {0x2, 0x4, 0x7, 0x9}, {0x3, 0x3, 0x2}, {0x1, 0x4, 0x3, 0x9}], 0x10, 0x2d10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x2f, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677f2d0b4992", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x30, 0x6, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c801) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0xfe33) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) kernel console output (not intermixed with test programs): atadv0 [ 77.363162][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.376488][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.387054][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.412878][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.451902][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.492265][ T5867] veth0_vlan: entered promiscuous mode [ 77.502597][ T5866] veth0_vlan: entered promiscuous mode [ 77.542605][ T5866] veth1_vlan: entered promiscuous mode [ 77.589828][ T5867] veth1_vlan: entered promiscuous mode [ 77.641493][ T5861] veth0_vlan: entered promiscuous mode [ 77.683696][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.700649][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.715820][ T5862] veth0_vlan: entered promiscuous mode [ 77.752516][ T5862] veth1_vlan: entered promiscuous mode [ 77.765551][ T5879] Bluetooth: hci0: command tx timeout [ 77.773269][ T5861] veth1_vlan: entered promiscuous mode [ 77.803933][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.808005][ T5867] veth0_macvtap: entered promiscuous mode [ 77.822264][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.834923][ T5879] Bluetooth: hci3: command tx timeout [ 77.843515][ T5866] veth0_macvtap: entered promiscuous mode [ 77.850655][ T51] Bluetooth: hci1: command tx timeout [ 77.851730][ T5874] Bluetooth: hci2: command tx timeout [ 77.858465][ T5879] Bluetooth: hci4: command tx timeout [ 77.894097][ T5867] veth1_macvtap: entered promiscuous mode [ 77.908339][ T5861] veth0_macvtap: entered promiscuous mode [ 77.920458][ T5861] veth1_macvtap: entered promiscuous mode [ 77.939848][ T5866] veth1_macvtap: entered promiscuous mode [ 77.962152][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.998553][ T5862] veth0_macvtap: entered promiscuous mode [ 78.009247][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.044990][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.064927][ T5862] veth1_macvtap: entered promiscuous mode [ 78.090584][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.254101][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.333716][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.358904][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.371414][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.381937][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.440221][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.469884][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.481450][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.508223][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.518366][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.549656][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.581417][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.597207][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.634184][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.653487][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.666938][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.681146][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.787671][ T780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.803233][ T780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.829618][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.847223][ T780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.850683][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.863967][ T780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.927527][ T780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.940922][ T780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.031076][ T780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.056097][ T780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.153458][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.185052][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.221852][ C0] hrtimer: interrupt took 256622 ns [ 79.328861][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.370314][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.427139][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.459623][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.464957][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.494203][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.543101][ T5997] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.949745][ T5874] Bluetooth: hci2: command tx timeout [ 79.958932][ T5879] Bluetooth: hci0: command tx timeout [ 79.966466][ T5874] Bluetooth: hci1: command tx timeout [ 79.971979][ T5874] Bluetooth: hci3: command tx timeout [ 79.977729][ T5879] Bluetooth: hci4: command tx timeout [ 80.171958][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.191584][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.716579][ T6010] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9'. [ 80.772543][ T6005] netlink: 'syz.4.5': attribute type 4 has an invalid length. [ 80.806293][ T6010] netlink: 124 bytes leftover after parsing attributes in process `syz.0.9'. [ 80.938302][ T6010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9'. [ 81.205592][ T6021] netlink: 22 bytes leftover after parsing attributes in process `syz.1.11'. [ 81.344557][ T6027] Zero length message leads to an empty skb [ 81.391884][ T6029] warning: `syz.3.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.460254][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 81.497281][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 82.070670][ T6046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20'. [ 82.098135][ T6046] unsupported nlmsg_type 40 [ 82.541145][ T6056] netlink: 44 bytes leftover after parsing attributes in process `syz.4.23'. [ 82.567127][ T6056] netlink: 43 bytes leftover after parsing attributes in process `syz.4.23'. [ 82.576268][ T6056] netlink: 'syz.4.23': attribute type 5 has an invalid length. [ 82.584595][ T6056] netlink: 43 bytes leftover after parsing attributes in process `syz.4.23'. [ 82.595390][ T6062] TCP: TCP_TX_DELAY enabled [ 83.338396][ T6087] netlink: 'syz.4.29': attribute type 10 has an invalid length. [ 83.399332][ T6094] netlink: 'syz.4.29': attribute type 11 has an invalid length. [ 83.479066][ T6094] netlink: 'syz.4.29': attribute type 19 has an invalid length. [ 83.593908][ T6087] team0: Port device wlan1 added [ 84.036867][ T6082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.107499][ T6108] netlink: 'syz.3.34': attribute type 7 has an invalid length. [ 85.775406][ T6147] netlink: 'syz.4.46': attribute type 4 has an invalid length. [ 85.783169][ T6147] __nla_validate_parse: 5 callbacks suppressed [ 85.783188][ T6147] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.46'. [ 86.260050][ T6168] netlink: 'syz.4.53': attribute type 4 has an invalid length. [ 86.270191][ T6168] netlink: 212108 bytes leftover after parsing attributes in process `syz.4.53'. [ 86.328665][ T6170] can: request_module (can-proto-5) failed. [ 86.892359][ T9] cfg80211: failed to load regulatory.db [ 87.338918][ T6164] netlink: 'syz.0.52': attribute type 3 has an invalid length. [ 87.363800][ T6164] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.52'. [ 88.011424][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'. [ 88.127087][ T6201] : entered promiscuous mode [ 88.590863][ T6207] netlink: 'syz.2.62': attribute type 39 has an invalid length. [ 89.674185][ T6221] netlink: 132 bytes leftover after parsing attributes in process `syz.0.65'. [ 90.164151][ T6245] ======================================================= [ 90.164151][ T6245] WARNING: The mand mount option has been deprecated and [ 90.164151][ T6245] and is ignored by this kernel. Remove the mand [ 90.164151][ T6245] option from the mount to silence this warning. [ 90.164151][ T6245] ======================================================= [ 90.277998][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 91.844208][ T6282] netlink: 36 bytes leftover after parsing attributes in process `syz.4.78'. [ 91.941769][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.78'. [ 91.968646][ T6275] Driver unsupported XDP return value 0 on prog (id 73) dev N/A, expect packet loss! [ 91.979597][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.78'. [ 92.494195][ T6304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.83'. [ 93.527465][ T6302] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.82'. [ 93.545366][ T6307] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 93.596950][ T6323] netlink: 184 bytes leftover after parsing attributes in process `syz.0.87'. [ 94.524039][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.554328][ T6344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.115450][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.155414][ T6344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.497776][ T6361] Â: renamed from macvlan0 (while UP) [ 95.579504][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.98'. [ 96.051724][ T6381] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.363895][ T6391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.762436][ T6398] openvswitch: netlink: Missing key (keys=40, expected=80) [ 97.008245][ T6414] netlink: 132 bytes leftover after parsing attributes in process `syz.2.113'. [ 97.118475][ T6418] netlink: 'syz.4.114': attribute type 3 has an invalid length. [ 97.532959][ T6433] netlink: 7 bytes leftover after parsing attributes in process `syz.0.116'. [ 97.584029][ T6433] netlink: 7 bytes leftover after parsing attributes in process `syz.0.116'. [ 98.134564][ T6449] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.123'. [ 99.035400][ T6473] netlink: 'syz.0.130': attribute type 10 has an invalid length. [ 99.043187][ T6473] netlink: 40 bytes leftover after parsing attributes in process `syz.0.130'. [ 99.149153][ T6479] netlink: 2 bytes leftover after parsing attributes in process `syz.4.132'. [ 99.209691][ T6488] netlink: 763 bytes leftover after parsing attributes in process `syz.0.135'. [ 99.427373][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'. [ 99.437337][ T6498] C: renamed from team_slave_0 (while UP) [ 99.464225][ T6498] netlink: 'syz.4.136': attribute type 3 has an invalid length. [ 99.476739][ T6498] netlink: 'syz.4.136': attribute type 1 has an invalid length. [ 99.499477][ T6500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.136'. [ 99.508980][ T6503] netlink: 'syz.3.137': attribute type 1 has an invalid length. [ 99.523568][ T6498] netlink: 116 bytes leftover after parsing attributes in process `syz.4.136'. [ 99.532821][ T6503] netlink: 'syz.3.137': attribute type 1 has an invalid length. [ 99.538279][ T6498] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 99.747748][ T6512] netlink: 'syz.0.141': attribute type 4 has an invalid length. [ 99.773289][ T6512] netlink: 'syz.0.141': attribute type 4 has an invalid length. [ 99.945558][ T6521] syz.0.143 uses obsolete (PF_INET,SOCK_PACKET) [ 99.962233][ T6521] netlink: 'syz.0.143': attribute type 10 has an invalid length. [ 99.986718][ T6521] team0: Device ipvlan1 failed to register rx_handler [ 100.838936][ T6538] netlink: 'syz.3.149': attribute type 10 has an invalid length. [ 101.030567][ T6538] veth0_vlan: left promiscuous mode [ 101.110718][ T6538] veth0_vlan: entered promiscuous mode [ 101.177141][ T6538] team0: Device veth0_vlan failed to register rx_handler [ 101.650466][ T6538] syz.3.149 (6538) used greatest stack depth: 18040 bytes left [ 104.026475][ T6597] netlink: 'syz.0.165': attribute type 21 has an invalid length. [ 104.034372][ T6597] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.065315][ T6597] IPv6: Can't replace route, no match found [ 104.108551][ T6601] bridge0: entered promiscuous mode [ 104.113805][ T6601] bridge0: entered allmulticast mode [ 104.133195][ T6603] netlink: 'syz.3.167': attribute type 2 has an invalid length. [ 104.141510][ T6603] __nla_validate_parse: 4 callbacks suppressed [ 104.141527][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 104.218990][ T6603] : entered promiscuous mode [ 104.347047][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 104.377683][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 104.422283][ T6612] netlink: 2 bytes leftover after parsing attributes in process `syz.3.170'. [ 104.482256][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 104.543931][ T6612] netlink: 2 bytes leftover after parsing attributes in process `syz.3.170'. [ 104.721137][ T6621] netlink: 'syz.0.173': attribute type 10 has an invalid length. [ 104.765626][ T6621] netlink: 'syz.0.173': attribute type 16 has an invalid length. [ 104.793906][ T6621] netlink: 156 bytes leftover after parsing attributes in process `syz.0.173'. [ 106.008649][ T6644] netlink: 'syz.3.180': attribute type 13 has an invalid length. [ 106.037741][ T6644] netlink: 'syz.3.180': attribute type 58 has an invalid length. [ 106.076517][ T6644] netlink: 152 bytes leftover after parsing attributes in process `syz.3.180'. [ 106.193685][ T6642] netlink: 'syz.2.177': attribute type 1 has an invalid length. [ 106.572820][ T6664] netlink: 60 bytes leftover after parsing attributes in process `syz.4.185'. [ 106.930699][ T6677] netlink: 20 bytes leftover after parsing attributes in process `syz.4.189'. [ 107.350731][ T6673] syzkaller0: entered promiscuous mode [ 107.378661][ T6686] netlink: 'syz.4.190': attribute type 21 has an invalid length. [ 107.386795][ T6673] syzkaller0: entered allmulticast mode [ 111.275244][ T51] Bluetooth: hci1: ISO packet for unknown connection handle 3848 [ 114.825644][ T6760] __nla_validate_parse: 1 callbacks suppressed [ 114.825664][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 114.868689][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 115.241854][ T6777] netlink: 'syz.0.202': attribute type 10 has an invalid length. [ 115.333313][ T6777] team0: Device hsr_slave_0 failed to register rx_handler [ 115.553176][ T6790] openvswitch: netlink: Missing key (keys=1040, expected=10000000) [ 115.709009][ T6797] netlink: 96 bytes leftover after parsing attributes in process `syz.3.208'. [ 115.733541][ T6797] netlink: 96 bytes leftover after parsing attributes in process `syz.3.208'. [ 116.015446][ T6808] netlink: 'syz.4.212': attribute type 39 has an invalid length. [ 116.152769][ T6817] netlink: 'syz.0.214': attribute type 12 has an invalid length. [ 116.158726][ T6819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.212'. [ 116.196605][ T6817] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.214'. [ 116.475121][ T6823] netlink: 'syz.3.215': attribute type 13 has an invalid length. [ 116.726923][ T5879] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 116.741736][ T5879] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 116.755386][ T5879] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 116.765448][ T5879] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 116.867131][ T5879] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 117.778503][ T5879] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 117.791250][ T5879] Bluetooth: hci1: Unable to find connection for dst b9:44:db:82:f7:81 sid 0x06 [ 117.930839][ T6236] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.063307][ T6872] netlink: 'syz.3.222': attribute type 21 has an invalid length. [ 118.099980][ T6872] netlink: 128 bytes leftover after parsing attributes in process `syz.3.222'. [ 118.151194][ T6236] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.278002][ T6872] netlink: 'syz.3.222': attribute type 4 has an invalid length. [ 118.286344][ T6872] netlink: 3 bytes leftover after parsing attributes in process `syz.3.222'. [ 118.413638][ T6236] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.540244][ T6236] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.580986][ T6835] chnl_net:caif_netlink_parms(): no params data found [ 118.956624][ T5879] Bluetooth: hci5: command tx timeout [ 119.011563][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.041060][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.075122][ T6835] bridge_slave_0: entered allmulticast mode [ 119.126865][ T6835] bridge_slave_0: entered promiscuous mode [ 119.188232][ T6835] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.215628][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.223100][ T6835] bridge_slave_1: entered allmulticast mode [ 119.277575][ T6835] bridge_slave_1: entered promiscuous mode [ 119.298688][ T6236] bridge_slave_1: left allmulticast mode [ 119.337077][ T6236] bridge_slave_1: left promiscuous mode [ 119.350408][ T6236] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.408190][ T6236] bridge_slave_0: left allmulticast mode [ 119.421001][ T6236] bridge_slave_0: left promiscuous mode [ 119.435763][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.922608][ T6915] netlink: 64 bytes leftover after parsing attributes in process `syz.4.231'. [ 120.665242][ T6236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.691614][ T6236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.714449][ T6236] bond0 (unregistering): Released all slaves [ 121.044753][ T5879] Bluetooth: hci5: command tx timeout [ 121.123462][ T6949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.240'. [ 121.167567][ T6949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.240'. [ 121.243946][ T6835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.263546][ T6835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.520518][ T6966] netlink: 164 bytes leftover after parsing attributes in process `syz.0.241'. [ 121.563951][ T6960] netlink: 44 bytes leftover after parsing attributes in process `syz.2.242'. [ 121.605301][ T6956] netlink: 44 bytes leftover after parsing attributes in process `syz.2.242'. [ 121.634093][ T6835] team0: Port device team_slave_0 added [ 121.648643][ T6963] netlink: 44 bytes leftover after parsing attributes in process `syz.2.242'. [ 121.664008][ T6835] team0: Port device team_slave_1 added [ 122.046456][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.082045][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.140456][ T6835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.197710][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.208833][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.257410][ T6835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.286065][ T6236] hsr_slave_0: left promiscuous mode [ 122.299559][ T6236] hsr_slave_1: left promiscuous mode [ 122.319934][ T6236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.334314][ T6236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.348516][ T6236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.356305][ T6236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.492492][ T6236] veth1_macvtap: left promiscuous mode [ 122.504871][ T6236] veth0_macvtap: left promiscuous mode [ 122.515394][ T6236] veth1_vlan: left promiscuous mode [ 122.532418][ T6236] veth0_vlan: left promiscuous mode [ 123.004719][ T7017] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.256'. [ 123.118481][ T5879] Bluetooth: hci5: command tx timeout [ 123.685659][ T7024] netlink: 11981 bytes leftover after parsing attributes in process `syz.0.257'. [ 124.716522][ T6236] team0 (unregistering): Port device team_slave_1 removed [ 124.790635][ T6236] team0 (unregistering): Port device team_slave_0 removed [ 125.194845][ T5879] Bluetooth: hci5: command tx timeout [ 125.634113][ T7016] mac80211_hwsim hwsim8 .3ãc¤±: renamed from wlan1 (while UP) [ 125.711791][ T7020] netlink: 13566 bytes leftover after parsing attributes in process `syz.0.257'. [ 125.905858][ T6835] hsr_slave_0: entered promiscuous mode [ 125.937020][ T6835] hsr_slave_1: entered promiscuous mode [ 125.948828][ T6835] debugfs: 'hsr0' already exists in 'hsr' [ 125.960082][ T6835] Cannot create hsr debugfs directory [ 125.997894][ T5879] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 126.754804][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 126.952091][ T6835] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 127.024817][ T6835] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 127.064025][ T6835] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 127.101879][ T6835] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 127.181013][ T7076] netlink: 'syz.0.273': attribute type 4 has an invalid length. [ 127.208786][ T7076] netlink: 152 bytes leftover after parsing attributes in process `syz.0.273'. [ 127.335428][ T7076] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 127.460573][ T7090] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.275'. [ 127.532350][ T7089] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.275'. [ 127.825152][ T6835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.946276][ T6835] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.990548][ T6742] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.997795][ T6742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.106176][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.113360][ T6742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.352782][ T7096] netlink: 'syz.0.277': attribute type 21 has an invalid length. [ 129.027547][ T6835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.533101][ T7155] netlink: 'syz.0.289': attribute type 9 has an invalid length. [ 129.641379][ T7155] netlink: 40451 bytes leftover after parsing attributes in process `syz.0.289'. [ 129.820487][ T7161] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.290'. [ 130.002158][ T6835] veth0_vlan: entered promiscuous mode [ 130.056989][ T6835] veth1_vlan: entered promiscuous mode [ 130.271078][ T6835] veth0_macvtap: entered promiscuous mode [ 130.318238][ T7168] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.292'. [ 130.328271][ T6835] veth1_macvtap: entered promiscuous mode [ 130.405343][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.444565][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.482454][ T64] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.502765][ T64] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.534696][ T64] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.574387][ T64] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.575319][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.596530][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.724119][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.747245][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.002784][ T7186] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 132.462212][ T7188] syzkaller0: entered promiscuous mode [ 132.495561][ T7188] syzkaller0: entered allmulticast mode [ 132.960730][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.967385][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.145757][ T7216] netlink: 'syz.2.302': attribute type 1 has an invalid length. [ 133.329765][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 135.969179][ T7165] Set syz1 is full, maxelem 65536 reached [ 136.113173][ T7231] netlink: 'syz.0.306': attribute type 1 has an invalid length. [ 136.191692][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 136.201311][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 136.930659][ T7239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.138402][ T7249] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 137.160005][ T7252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.312'. [ 137.260091][ T7259] netlink: 'syz.2.313': attribute type 10 has an invalid length. [ 137.341318][ T7266] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.313'. [ 137.350985][ T7266] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.313'. [ 137.371643][ T7271] netlink: 64 bytes leftover after parsing attributes in process `syz.0.317'. [ 137.418533][ T7259] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 138.048639][ T7306] netlink: 'syz.0.326': attribute type 1 has an invalid length. [ 138.238964][ T7312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.496587][ T7323] netlink: 32 bytes leftover after parsing attributes in process `syz.3.331'. [ 138.521027][ T7323] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 138.540597][ T7323] netlink: 60 bytes leftover after parsing attributes in process `syz.3.331'. [ 138.560688][ T7325] netlink: 'syz.5.332': attribute type 17 has an invalid length. [ 138.568766][ T7325] netlink: 148 bytes leftover after parsing attributes in process `syz.5.332'. [ 138.864558][ T5879] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 139.704970][ T7374] netlink: 40 bytes leftover after parsing attributes in process `syz.4.345'. [ 139.737478][ T7381] netlink: 'syz.5.344': attribute type 10 has an invalid length. [ 139.837232][ T7381] team0: Port device dummy0 added [ 140.005334][ T7394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.012704][ T7394] IPv6: NLM_F_CREATE should be set when creating new route [ 140.020311][ T7394] IPv6: NLM_F_CREATE should be set when creating new route [ 140.027748][ T7394] IPv6: NLM_F_CREATE should be set when creating new route [ 141.113322][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.359'. [ 141.254315][ T7435] netlink: 10 bytes leftover after parsing attributes in process `syz.4.362'. [ 141.409311][ T7444] netlink: 204 bytes leftover after parsing attributes in process `syz.0.364'. [ 141.542011][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.366'. [ 141.552925][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 141.563737][ T7447] netlink: 2 bytes leftover after parsing attributes in process `syz.3.366'. [ 142.238857][ T7474] netlink: 'syz.4.371': attribute type 13 has an invalid length. [ 142.250075][ T7474] netlink: 'syz.4.371': attribute type 58 has an invalid length. [ 142.457843][ T7490] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 143.661923][ T7521] __nla_validate_parse: 7 callbacks suppressed [ 143.661946][ T7521] netlink: 132 bytes leftover after parsing attributes in process `syz.5.384'. [ 144.331133][ T7536] netlink: 'syz.5.389': attribute type 10 has an invalid length. [ 144.380883][ T7536] team0: Device ip6_vti0 is of different type [ 144.780232][ T7553] netlink: 763 bytes leftover after parsing attributes in process `syz.0.396'. [ 144.807398][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.393'. [ 145.487312][ T7589] netlink: 'syz.0.407': attribute type 14 has an invalid length. [ 145.733223][ T7606] netlink: 'syz.0.409': attribute type 1 has an invalid length. [ 145.818709][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.409'. [ 146.061202][ T7618] Can't find ip_set type hash:ip,íac [ 146.483998][ T7632] netlink: 12 bytes leftover after parsing attributes in process `syz.5.418'. [ 146.497961][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.418'. [ 146.535950][ T7620] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 148.236430][ T7676] netlink: 'syz.2.430': attribute type 21 has an invalid length. [ 148.254978][ T7676] netlink: 'syz.2.430': attribute type 6 has an invalid length. [ 148.276579][ T7676] netlink: 132 bytes leftover after parsing attributes in process `syz.2.430'. [ 148.343588][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.431'. [ 148.364255][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.431'. [ 148.924250][ T7709] netlink: 'syz.3.438': attribute type 28 has an invalid length. [ 148.990493][ T7709] netlink: 'syz.3.438': attribute type 29 has an invalid length. [ 149.018219][ T7709] netlink: 132 bytes leftover after parsing attributes in process `syz.3.438'. [ 149.383587][ T7719] netlink: 10 bytes leftover after parsing attributes in process `syz.5.442'. [ 149.485276][ T7720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.973791][ T7747] netlink: 56 bytes leftover after parsing attributes in process `syz.3.449'. [ 150.129871][ T7750] netlink: 60 bytes leftover after parsing attributes in process `syz.5.450'. [ 150.194960][ T7757] netlink: 'syz.3.449': attribute type 2 has an invalid length. [ 150.230493][ T7757] netlink: 'syz.3.449': attribute type 3 has an invalid length. [ 150.256409][ T7757] netlink: 132 bytes leftover after parsing attributes in process `syz.3.449'. [ 150.710816][ T7750] caif0: entered promiscuous mode [ 150.717134][ T7750] caif0: entered allmulticast mode [ 150.994388][ T7766] netlink: 'syz.5.455': attribute type 33 has an invalid length. [ 151.002322][ T7766] netlink: 164 bytes leftover after parsing attributes in process `syz.5.455'. [ 151.888677][ T7793] netlink: 830 bytes leftover after parsing attributes in process `syz.5.461'. [ 152.171188][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 152.278298][ T7805] netlink: 17267 bytes leftover after parsing attributes in process `syz.5.464'. [ 152.423967][ T7815] netlink: 'syz.2.467': attribute type 8 has an invalid length. [ 152.437354][ T7815] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.467'. [ 153.101741][ T7830] netlink: 'syz.3.473': attribute type 2 has an invalid length. [ 153.130227][ T7830] netlink: 'syz.3.473': attribute type 1 has an invalid length. [ 153.916828][ T7862] veth1_macvtap: left promiscuous mode [ 153.922386][ T7862] macsec0: entered promiscuous mode [ 154.149549][ T7868] __nla_validate_parse: 6 callbacks suppressed [ 154.149568][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.482'. [ 154.712944][ T7882] netlink: 'syz.2.487': attribute type 21 has an invalid length. [ 154.813712][ T7882] netlink: 128 bytes leftover after parsing attributes in process `syz.2.487'. [ 154.855164][ T7882] netlink: 3 bytes leftover after parsing attributes in process `syz.2.487'. [ 154.946472][ T7892] netlink: 'syz.5.488': attribute type 237 has an invalid length. [ 155.543247][ T7917] netlink: 'syz.5.495': attribute type 25 has an invalid length. [ 155.590822][ T7917] netlink: 'syz.5.495': attribute type 28 has an invalid length. [ 155.684390][ T7930] netlink: 68 bytes leftover after parsing attributes in process `syz.0.497'. [ 155.789546][ T7915] netlink: 'syz.5.495': attribute type 25 has an invalid length. [ 155.800497][ T7915] netlink: 'syz.5.495': attribute type 28 has an invalid length. [ 156.442370][ T7945] netlink: 'syz.2.503': attribute type 21 has an invalid length. [ 156.452294][ T7945] netlink: 'syz.2.503': attribute type 5 has an invalid length. [ 156.644081][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.505'. [ 157.003098][ T7979] netlink: 'syz.5.513': attribute type 3 has an invalid length. [ 157.048201][ T7979] netlink: 'syz.5.513': attribute type 1 has an invalid length. [ 157.096048][ T7979] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.513'. [ 157.122092][ T7987] netlink: 'syz.3.514': attribute type 10 has an invalid length. [ 157.149556][ T7987] netlink: 68 bytes leftover after parsing attributes in process `syz.3.514'. [ 157.730448][ T8005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.520'. [ 157.741917][ T8005] netlink: 40 bytes leftover after parsing attributes in process `syz.2.520'. [ 158.280833][ T8017] syzkaller0: entered promiscuous mode [ 158.292557][ T8017] syzkaller0: entered allmulticast mode [ 158.420946][ T8038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.529'. [ 158.550367][ T8046] netlink: 'syz.3.532': attribute type 8 has an invalid length. [ 158.655402][ T8052] nbd: must specify a device to reconfigure [ 159.382084][ T8085] __nla_validate_parse: 4 callbacks suppressed [ 159.382118][ T8085] netlink: 132 bytes leftover after parsing attributes in process `syz.5.541'. [ 159.543653][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.565204][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.780565][ T8095] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.788138][ T8095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.809740][ T8095] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.821856][ T8095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.931645][ T8095] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 160.412064][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.552'. [ 160.627929][ T8137] validate_nla: 3 callbacks suppressed [ 160.627962][ T8137] netlink: 'syz.5.557': attribute type 10 has an invalid length. [ 160.810588][ T8137] team0: Device ipvlan1 failed to register rx_handler [ 160.885533][ T8151] netlink: 'syz.2.561': attribute type 32 has an invalid length. [ 160.904879][ T8151] netlink: 40 bytes leftover after parsing attributes in process `syz.2.561'. [ 160.949311][ T8151] netlink: 'syz.2.561': attribute type 1 has an invalid length. [ 161.092192][ T8151] netlink: 44 bytes leftover after parsing attributes in process `syz.2.561'. [ 161.563148][ T8174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.567'. [ 161.587602][ T8180] netlink: 'syz.4.568': attribute type 3 has an invalid length. [ 161.605879][ T8180] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.568'. [ 161.776615][ T8187] netlink: 'syz.5.570': attribute type 10 has an invalid length. [ 161.843892][ T8187] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 161.939674][ T8196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.574'. [ 161.969012][ T8191] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.572'. [ 162.069335][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 162.081304][ T8202] netlink: 'syz.0.577': attribute type 29 has an invalid length. [ 162.123156][ T8202] netlink: 'syz.0.577': attribute type 29 has an invalid length. [ 162.141731][ T8202] netlink: 'syz.0.577': attribute type 29 has an invalid length. [ 162.270110][ T8211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.577'. [ 162.312538][ T8202] netlink: 'syz.0.577': attribute type 29 has an invalid length. [ 162.593247][ T8220] raw_sendmsg: syz.4.580 forgot to set AF_INET. Fix it! [ 162.993183][ T8232] netlink: zone id is out of range [ 163.016725][ T8231] netlink: zone id is out of range [ 163.023029][ T8232] netlink: zone id is out of range [ 163.028520][ T8232] netlink: zone id is out of range [ 163.033683][ T8232] netlink: zone id is out of range [ 163.107755][ T8232] netlink: zone id is out of range [ 163.113601][ T8231] netlink: zone id is out of range [ 163.159929][ T8232] netlink: zone id is out of range [ 163.211370][ T8231] netlink: zone id is out of range [ 163.227124][ T8232] netlink: zone id is out of range [ 163.347012][ T8214] delete_channel: no stack [ 163.881347][ T8264] netlink: 'syz.5.593': attribute type 21 has an invalid length. [ 163.906587][ T8268] veth0_macvtap: left promiscuous mode [ 164.856459][ T8310] __nla_validate_parse: 5 callbacks suppressed [ 164.856477][ T8310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.602'. [ 164.864870][ T8312] netlink: 60 bytes leftover after parsing attributes in process `syz.3.603'. [ 164.953424][ T8311] : entered promiscuous mode [ 165.210996][ T8328] netlink: 147608 bytes leftover after parsing attributes in process `syz.5.610'. [ 165.235172][ T8327] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.609'. [ 165.247789][ T8328] netlink: 61831 bytes leftover after parsing attributes in process `syz.5.610'. [ 165.270029][ T8322] netlink: 56 bytes leftover after parsing attributes in process `syz.0.607'. [ 165.282426][ T8322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.607'. [ 165.463731][ T8341] netlink: 36 bytes leftover after parsing attributes in process `syz.0.613'. [ 165.685306][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.617'. [ 165.711722][ T8352] _ÐZ`Ô€@S!: entered promiscuous mode [ 165.799514][ T8360] validate_nla: 2 callbacks suppressed [ 165.799548][ T8360] netlink: 'syz.3.620': attribute type 4 has an invalid length. [ 165.854662][ T8360] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.620'. [ 166.175230][ T8377] netlink: 'syz.4.624': attribute type 1 has an invalid length. [ 166.443458][ T8391] netlink: 'syz.2.630': attribute type 10 has an invalid length. [ 167.287077][ T8422] netlink: 'syz.2.637': attribute type 3 has an invalid length. [ 169.381713][ T8513] caif0: entered promiscuous mode [ 169.475118][ T8513] caif0: entered allmulticast mode [ 169.993365][ T8520] __nla_validate_parse: 9 callbacks suppressed [ 169.993386][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'. [ 170.030198][ T8523] netlink: 26 bytes leftover after parsing attributes in process `syz.5.662'. [ 170.181494][ T8529] cgroup: Unknown subsys name 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 170.193120][ T8524] netlink: 'syz.4.661': attribute type 2 has an invalid length. [ 170.357197][ T8524] netlink: 'syz.4.661': attribute type 3 has an invalid length. [ 170.387756][ T8524] netlink: 'syz.4.661': attribute type 4 has an invalid length. [ 170.427104][ T8524] netlink: 'syz.4.661': attribute type 5 has an invalid length. [ 170.439195][ T8524] netlink: 'syz.4.661': attribute type 6 has an invalid length. [ 170.492256][ T8524] netlink: 'syz.4.661': attribute type 8 has an invalid length. [ 170.536685][ T8524] netlink: 194188 bytes leftover after parsing attributes in process `syz.4.661'. [ 173.092263][ T8557] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.670'. [ 173.135097][ T8557] netlink: 44 bytes leftover after parsing attributes in process `syz.3.670'. [ 173.158780][ T8557] netlink: 40 bytes leftover after parsing attributes in process `syz.3.670'. [ 173.255929][ T8564] netlink: 'syz.0.671': attribute type 10 has an invalid length. [ 173.311774][ T8564] net_ratelimit: 9 callbacks suppressed [ 173.311808][ T8564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.485691][ T8573] netlink: 60 bytes leftover after parsing attributes in process `syz.5.674'. [ 174.209595][ T8600] netlink: 'syz.0.681': attribute type 29 has an invalid length. [ 174.226432][ T8600] netlink: 'syz.0.681': attribute type 29 has an invalid length. [ 174.285011][ T8600] netlink: 'syz.0.681': attribute type 29 has an invalid length. [ 176.087329][ T8662] netlink: 'syz.3.696': attribute type 10 has an invalid length. [ 176.131351][ T8664] netlink: 144 bytes leftover after parsing attributes in process `syz.0.699'. [ 176.140768][ T8662] netlink: 40 bytes leftover after parsing attributes in process `syz.3.696'. [ 176.171736][ T8662] veth0_vlan: left promiscuous mode [ 176.196359][ T8662] veth0_vlan: entered promiscuous mode [ 176.210351][ T8662] veth0_vlan: entered allmulticast mode [ 176.223948][ T8670] netlink: 72 bytes leftover after parsing attributes in process `syz.0.699'. [ 176.331222][ T8662] bridge0: port 3(veth0_vlan) entered blocking state [ 176.394078][ T8662] bridge0: port 3(veth0_vlan) entered disabled state [ 176.439761][ T8662] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 178.379477][ T8704] netlink: 'syz.5.706': attribute type 28 has an invalid length. [ 178.392855][ T8703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.433171][ T8704] netlink: 'syz.5.706': attribute type 29 has an invalid length. [ 178.470096][ T8710] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.479276][ T30] audit: type=1107 audit(1759547395.195:2): pid=8707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 178.509704][ T8704] netlink: 132 bytes leftover after parsing attributes in process `syz.5.706'. [ 178.930090][ T8734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.716'. [ 179.236872][ T8745] netlink: 'syz.2.720': attribute type 39 has an invalid length. [ 179.532103][ T8762] netlink: 'syz.4.726': attribute type 10 has an invalid length. [ 179.552658][ T8762] bond0: (slave bond_slave_0): Releasing backup interface [ 179.823536][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'. [ 179.989061][ T8785] netlink: 'syz.5.736': attribute type 1 has an invalid length. [ 179.999595][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.736'. [ 180.057701][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.736'. [ 180.785584][ T8805] nbd: must specify an index to disconnect [ 181.164153][ T8820] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.743'. [ 181.313465][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'. [ 181.580051][ T8849] netlink: 'syz.4.752': attribute type 10 has an invalid length. [ 181.608444][ T8849] team0: Port device geneve1 added [ 181.719266][ T8858] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.756'. [ 181.734120][ T8858] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.756'. [ 181.777780][ T8862] netlink: 104 bytes leftover after parsing attributes in process `syz.0.757'. [ 181.794912][ T8861] netlink: 'syz.0.757': attribute type 21 has an invalid length. [ 181.802925][ T8861] IPv6: Can't replace route, no match found [ 181.812137][ T8862] netlink: 'syz.0.757': attribute type 39 has an invalid length. [ 181.888620][ T8866] netlink: 'syz.5.758': attribute type 10 has an invalid length. [ 181.890039][ T8865] netlink: 'syz.5.758': attribute type 10 has an invalid length. [ 181.901125][ T8866] netlink: 156 bytes leftover after parsing attributes in process `syz.5.758'. [ 181.909999][ T8866] netlink: 140256 bytes leftover after parsing attributes in process `syz.5.758'. [ 181.931633][ T8865] netlink: 156 bytes leftover after parsing attributes in process `syz.5.758'. [ 183.112241][ T8906] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 184.580602][ T8945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.862394][ T8951] validate_nla: 5 callbacks suppressed [ 184.862438][ T8951] netlink: 'syz.2.784': attribute type 10 has an invalid length. [ 184.896430][ T8951] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.910778][ T8951] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.950232][ T8951] bridge0: left promiscuous mode [ 184.952916][ T8954] netlink: 28 bytes leftover after parsing attributes in process `syz.2.784'. [ 184.963713][ T8951] bridge0: left allmulticast mode [ 185.011286][ T8956] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 185.072449][ T8956] netlink: 40 bytes leftover after parsing attributes in process `syz.3.787'. [ 185.076549][ T8951] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.090727][ T8951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.102281][ T8951] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.112645][ T8951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.168393][ T8951] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 185.203744][ T8956] team0: entered promiscuous mode [ 185.209483][ T8956] team_slave_0: entered promiscuous mode [ 185.216323][ T8965] netlink: 'syz.4.789': attribute type 1 has an invalid length. [ 185.230798][ T8956] team_slave_1: entered promiscuous mode [ 185.244379][ T8956] team0: entered allmulticast mode [ 185.253692][ T8956] team_slave_0: entered allmulticast mode [ 185.260282][ T8956] team_slave_1: entered allmulticast mode [ 185.303057][ T8967] netlink: 'syz.4.789': attribute type 3 has an invalid length. [ 185.303150][ T8956] bridge0: port 3(team0) entered blocking state [ 185.331616][ T8967] netlink: 'syz.4.789': attribute type 1 has an invalid length. [ 185.331659][ T8967] netlink: 'syz.4.789': attribute type 2 has an invalid length. [ 185.331672][ T8967] netlink: 'syz.4.789': attribute type 8 has an invalid length. [ 185.331684][ T8967] netlink: 'syz.4.789': attribute type 10 has an invalid length. [ 185.331697][ T8967] netlink: 'syz.4.789': attribute type 11 has an invalid length. [ 185.377790][ T8956] bridge0: port 3(team0) entered disabled state [ 185.402698][ T8956] bridge0: port 3(team0) entered blocking state [ 185.409486][ T8956] bridge0: port 3(team0) entered forwarding state [ 185.459749][ T8975] netlink: 'syz.2.793': attribute type 29 has an invalid length. [ 185.964003][ T9007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.983818][ T9007] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 186.895896][ T9032] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 186.911897][ T9032] dvmrp1: linktype set to 805 [ 186.959896][ T9040] __nla_validate_parse: 10 callbacks suppressed [ 186.959927][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.813'. [ 187.104948][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.815'. [ 187.510895][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.817'. [ 187.670418][ T9058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.687203][ T9058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.731400][ T9058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.774979][ T9058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.902385][ T9058] bond0: (slave batadv0): Releasing backup interface [ 187.920358][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 189.264346][ T9128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.838'. [ 189.480940][ T9134] bridge_slave_1: left allmulticast mode [ 189.504760][ T9134] bridge_slave_1: left promiscuous mode [ 189.539783][ T9134] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.748073][ T9134] bridge_slave_0: left allmulticast mode [ 189.785076][ T9134] bridge_slave_0: left promiscuous mode [ 189.805694][ T9134] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.069364][ T9134] bond0: (slave bridge0): Releasing backup interface [ 191.380094][ T9169] netlink: 64691 bytes leftover after parsing attributes in process `syz.2.850'. [ 191.627777][ T9172] validate_nla: 7 callbacks suppressed [ 191.627798][ T9172] netlink: 'syz.2.850': attribute type 13 has an invalid length. [ 191.709110][ T9172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.850'. [ 191.715760][ T9185] netlink: 'syz.0.854': attribute type 10 has an invalid length. [ 191.788998][ T9181] netlink: 68 bytes leftover after parsing attributes in process `syz.0.854'. [ 191.808052][ T9185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.847920][ T9185] team0: Port device bond0 added [ 191.961089][ T9172] bond0: entered promiscuous mode [ 191.987124][ T9172] bond_slave_0: entered promiscuous mode [ 192.042749][ T9172] bond_slave_1: entered promiscuous mode [ 192.160079][ T9172] dummy0: entered promiscuous mode [ 192.207317][ T9172] bridge0: entered promiscuous mode [ 192.233786][ T9172] bond0: entered allmulticast mode [ 192.282993][ T9172] bond_slave_0: entered allmulticast mode [ 192.321002][ T9172] bond_slave_1: entered allmulticast mode [ 192.363915][ T9172] dummy0: entered allmulticast mode [ 192.410422][ T9172] bridge0: entered allmulticast mode [ 192.929637][ T9201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.986128][ T9204] netlink: 'syz.2.860': attribute type 1 has an invalid length. [ 192.994088][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 193.142990][ T9208] netlink: 'syz.5.863': attribute type 2 has an invalid length. [ 193.160825][ T9208] netlink: 119 bytes leftover after parsing attributes in process `syz.5.863'. [ 193.176283][ T9210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.862'. [ 193.743291][ T51] Bluetooth: hci1: SCO packet for unknown connection handle 2622 [ 194.421588][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.440461][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.012973][ T9241] netlink: 'syz.2.870': attribute type 7 has an invalid length. [ 195.075099][ T9244] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.870'. [ 195.095153][ T9244] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 195.133980][ T9244] openvswitch: netlink: Duplicate key (type 0). [ 195.487495][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'. [ 195.504978][ T9264] netlink: 'syz.3.878': attribute type 33 has an invalid length. [ 195.534779][ T9264] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.878'. [ 195.667210][ T9265] syz.0.877: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 195.717988][ T9265] CPU: 0 UID: 0 PID: 9265 Comm: syz.0.877 Not tainted syzkaller #0 PREEMPT(full) [ 195.718017][ T9265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 195.718041][ T9265] Call Trace: [ 195.718049][ T9265] [ 195.718060][ T9265] dump_stack_lvl+0x189/0x250 [ 195.718094][ T9265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.718118][ T9265] ? __pfx__printk+0x10/0x10 [ 195.718145][ T9265] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 195.718263][ T9265] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 195.718294][ T9265] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 195.718318][ T9265] warn_alloc+0x214/0x310 [ 195.718342][ T9265] ? stack_depot_save_flags+0x41b/0x860 [ 195.718363][ T9265] ? __pfx_warn_alloc+0x10/0x10 [ 195.718385][ T9265] ? kasan_save_track+0x4f/0x80 [ 195.718410][ T9265] ? xskq_create+0x56/0x170 [ 195.718427][ T9265] ? xsk_init_queue+0xb0/0x110 [ 195.718445][ T9265] ? xsk_setsockopt+0x57b/0x8d0 [ 195.718461][ T9265] ? do_sock_setsockopt+0x179/0x1b0 [ 195.718486][ T9265] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 195.718507][ T9265] ? do_syscall_64+0xfa/0x3b0 [ 195.718531][ T9265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.718560][ T9265] __vmalloc_node_range_noprof+0x125/0x12f0 [ 195.718623][ T9265] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 195.718648][ T9265] ? __kasan_kmalloc+0x93/0xb0 [ 195.718670][ T9265] vmalloc_user_noprof+0xad/0xf0 [ 195.718691][ T9265] ? xskq_create+0xbf/0x170 [ 195.718715][ T9265] xskq_create+0xbf/0x170 [ 195.718740][ T9265] xsk_init_queue+0xb0/0x110 [ 195.718767][ T9265] xsk_setsockopt+0x57b/0x8d0 [ 195.718791][ T9265] ? __pfx_xsk_setsockopt+0x10/0x10 [ 195.718820][ T9265] ? __pfx_xsk_setsockopt+0x10/0x10 [ 195.718839][ T9265] ? __pfx_xsk_setsockopt+0x10/0x10 [ 195.718860][ T9265] ? do_sock_setsockopt+0x15e/0x1b0 [ 195.718887][ T9265] ? __pfx_xsk_setsockopt+0x10/0x10 [ 195.718928][ T9265] do_sock_setsockopt+0x179/0x1b0 [ 195.718963][ T9265] __x64_sys_setsockopt+0x13f/0x1b0 [ 195.718999][ T9265] do_syscall_64+0xfa/0x3b0 [ 195.719026][ T9265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.719044][ T9265] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 195.719063][ T9265] ? clear_bhb_loop+0x60/0xb0 [ 195.719088][ T9265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.719109][ T9265] RIP: 0033:0x7f1ec778eec9 [ 195.719143][ T9265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.719157][ T9265] RSP: 002b:00007f1ec86dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 195.719180][ T9265] RAX: ffffffffffffffda RBX: 00007f1ec79e5fa0 RCX: 00007f1ec778eec9 [ 195.719194][ T9265] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c [ 195.719206][ T9265] RBP: 00007f1ec7811f91 R08: 0000000000000004 R09: 0000000000000000 [ 195.719220][ T9265] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 195.719232][ T9265] R13: 00007f1ec79e6038 R14: 00007f1ec79e5fa0 R15: 00007ffd7ac48088 [ 195.719271][ T9265] [ 195.719343][ T9265] Mem-Info: [ 196.218131][ T9265] active_anon:39367 inactive_anon:0 isolated_anon:0 [ 196.218131][ T9265] active_file:17861 inactive_file:39918 isolated_file:0 [ 196.218131][ T9265] unevictable:768 dirty:163 writeback:0 [ 196.218131][ T9265] slab_reclaimable:11747 slab_unreclaimable:100096 [ 196.218131][ T9265] mapped:37381 shmem:35999 pagetables:1289 [ 196.218131][ T9265] sec_pagetables:0 bounce:0 [ 196.218131][ T9265] kernel_misc_reclaimable:0 [ 196.218131][ T9265] free:1272417 free_pcp:18311 free_cma:0 [ 196.377085][ T9274] syzkaller0: entered promiscuous mode [ 196.377163][ T9274] syzkaller0: entered allmulticast mode [ 196.417881][ T9265] Node 0 active_anon:158368kB inactive_anon:0kB active_file:71444kB inactive_file:159468kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:159724kB dirty:648kB writeback:0kB shmem:143260kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12168kB pagetables:4924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 196.482166][ T5880] Bluetooth: hci3: command 0x0406 tx timeout [ 196.482227][ T5880] Bluetooth: hci2: command 0x0406 tx timeout [ 196.482268][ T5880] Bluetooth: hci4: command 0x0406 tx timeout [ 196.482306][ T5880] Bluetooth: hci1: command 0x0406 tx timeout [ 196.523007][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'. [ 196.550985][ T9265] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 196.651214][ T9265] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.874727][ T9265] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 196.880602][ T9265] Node 0 DMA32 free:1167632kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:186524kB inactive_anon:0kB active_file:71444kB inactive_file:157896kB unevictable:1536kB writepending:548kB present:3129332kB managed:2557364kB mlocked:0kB bounce:0kB free_pcp:39756kB local_pcp:21620kB free_cma:0kB [ 196.976398][ T9284] netlink: 'syz.2.881': attribute type 10 has an invalid length. [ 197.004922][ T9284] netlink: 2 bytes leftover after parsing attributes in process `syz.2.881'. [ 197.008056][ T9265] lowmem_reserve[]: 0 0 1 1 1 [ 197.039542][ T9284] batadv_slave_1: entered promiscuous mode [ 197.044708][ T9265] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 197.074958][ T9284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.102364][ T9284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.107315][ T9265] lowmem_reserve[]: 0 0 0 0 0 [ 197.119551][ T9265] Node 1 Normal free:3896736kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14336kB local_pcp:8384kB free_cma:0kB [ 197.194627][ T9265] lowmem_reserve[]: 0 0 0 0 0 [ 197.199418][ T9265] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 197.226084][ T9284] bridge0: port 3(batadv_slave_1) entered blocking state [ 197.233637][ T9284] bridge0: port 3(batadv_slave_1) entered disabled state [ 197.245441][ T9284] batadv_slave_1: entered allmulticast mode [ 197.251279][ T9265] Node 0 DMA32: 212*4kB (UE) 143*8kB (UE) 250*16kB (UME) 87*32kB (UM) 63*64kB (U) 33*128kB (U) 12*256kB (UME) 12*512kB (UE) 13*1024kB (U) 3*2048kB (UM) 272*4096kB (UM) = 1159816kB [ 197.279084][ T9284] bridge0: port 3(batadv_slave_1) entered blocking state [ 197.286424][ T9284] bridge0: port 3(batadv_slave_1) entered forwarding state [ 197.290064][ T9265] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 197.325613][ T9287] netlink: 'syz.3.883': attribute type 10 has an invalid length. [ 197.335593][ T9287] bridge0: port 3(team0) entered disabled state [ 197.343023][ T9287] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.354091][ T9287] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.384697][ T9265] Node 1 Normal: 154*4kB (UM) 45*8kB (UME) 35*16kB (UME) 101*32kB (UME) 24*64kB (UME) 4*128kB (UME) 3*256kB (UM) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3896736kB [ 197.490185][ T9287] team0: Device bridge0 is already an upper device of the team interface [ 197.534692][ T9265] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.591727][ T9265] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.632105][ T9265] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.645573][ T9298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.884'. [ 197.673772][ T9265] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.692076][ T9298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.884'. [ 197.707468][ T9265] 103677 total pagecache pages [ 197.731799][ T9265] 0 pages in swap cache [ 197.747597][ T9265] Free swap = 124996kB [ 197.751948][ T9265] Total swap = 124996kB [ 197.768152][ T9265] 2097051 pages RAM [ 197.776627][ T9265] 0 pages HighMem/MovableOnly [ 197.792201][ T9265] 425684 pages reserved [ 197.815661][ T9265] 0 pages cma reserved [ 198.078541][ T9302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.885'. [ 198.118872][ T9302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.885'. [ 200.873508][ T9307] wg0 speed is unknown, defaulting to 1000 [ 200.874114][ T9316] netlink: 132 bytes leftover after parsing attributes in process `syz.2.888'. [ 200.920946][ T9307] wg0 speed is unknown, defaulting to 1000 [ 200.967238][ T9307] wg0 speed is unknown, defaulting to 1000 [ 201.016071][ T9307] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 201.106682][ T9307] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 201.114046][ T9324] netlink: 'syz.0.891': attribute type 29 has an invalid length. [ 201.124327][ T9324] netlink: 'syz.0.891': attribute type 29 has an invalid length. [ 201.206841][ T9327] netlink: 'syz.0.891': attribute type 29 has an invalid length. [ 201.372516][ T9324] netlink: 'syz.0.891': attribute type 29 has an invalid length. [ 201.385154][ T9307] wg0 speed is unknown, defaulting to 1000 [ 201.398009][ T9307] wg0 speed is unknown, defaulting to 1000 [ 201.407628][ T9307] wg0 speed is unknown, defaulting to 1000 [ 201.423038][ T9307] wg0 speed is unknown, defaulting to 1000 [ 201.437394][ T9307] wg0 speed is unknown, defaulting to 1000 [ 201.453353][ T9307] wg0 speed is unknown, defaulting to 1000 [ 201.517023][ T9334] netlink: 14 bytes leftover after parsing attributes in process `syz.2.894'. [ 201.949907][ T9334] bond0: (slave dummy0): Releasing backup interface [ 201.979775][ T9334] dummy0 (unregistering): left promiscuous mode [ 201.986964][ T9334] dummy0 (unregistering): left allmulticast mode [ 202.129832][ T9346] netlink: 'syz.0.898': attribute type 21 has an invalid length. [ 202.141864][ T9346] netlink: 128 bytes leftover after parsing attributes in process `syz.0.898'. [ 202.183722][ T9349] netlink: 'syz.5.899': attribute type 46 has an invalid length. [ 202.193217][ T9346] netlink: 'syz.0.898': attribute type 5 has an invalid length. [ 202.224764][ T9346] netlink: 'syz.0.898': attribute type 6 has an invalid length. [ 202.254940][ T9346] netlink: 3 bytes leftover after parsing attributes in process `syz.0.898'. [ 202.388269][ T9357] netlink: 196 bytes leftover after parsing attributes in process `syz.3.902'. [ 202.423893][ T9358] debugfs: '!' already exists in 'ieee80211' [ 202.677305][ T9370] netlink: 36 bytes leftover after parsing attributes in process `syz.0.908'. [ 202.695254][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'. [ 202.784829][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.908'. [ 202.859936][ T9380] debugfs: '!' already exists in 'ieee80211' [ 203.178715][ T9366] netlink: 132 bytes leftover after parsing attributes in process `syz.4.903'. [ 203.312247][ T9366] netlink: 132 bytes leftover after parsing attributes in process `syz.4.903'. [ 203.658833][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.916'. [ 204.067265][ T9417] netlink: 'syz.3.922': attribute type 2 has an invalid length. [ 204.086783][ T9417] netlink: 132 bytes leftover after parsing attributes in process `syz.3.922'. [ 204.100681][ T9420] netlink: 'syz.4.924': attribute type 1 has an invalid length. [ 204.130325][ T9425] netlink: 'syz.5.921': attribute type 21 has an invalid length. [ 204.152564][ T9425] netlink: 'syz.5.921': attribute type 1 has an invalid length. [ 204.152888][ T9428] netlink: 872 bytes leftover after parsing attributes in process `syz.0.925'. [ 204.161418][ T9425] netlink: 144 bytes leftover after parsing attributes in process `syz.5.921'. [ 204.196042][ T9428] netlink: 872 bytes leftover after parsing attributes in process `syz.0.925'. [ 204.327781][ T9433] netlink: 3732 bytes leftover after parsing attributes in process `syz.3.926'. [ 204.783144][ T9456] netlink: 'syz.3.932': attribute type 28 has an invalid length. [ 204.828836][ T9456] netlink: 2 bytes leftover after parsing attributes in process `syz.3.932'. [ 204.952035][ T9456] IPv6: Can't replace route, no match found [ 205.068350][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.5.930'. [ 205.863710][ T9480] netlink: 'syz.0.938': attribute type 1 has an invalid length. [ 207.578332][ T9536] validate_nla: 18 callbacks suppressed [ 207.578355][ T9536] netlink: 'syz.2.957': attribute type 2 has an invalid length. [ 207.666011][ T9540] netlink: 'syz.3.954': attribute type 21 has an invalid length. [ 207.875003][ T9551] netlink: 'syz.5.959': attribute type 2 has an invalid length. [ 207.905348][ T9551] netlink: 'syz.5.959': attribute type 3 has an invalid length. [ 207.932460][ T9551] netlink: 'syz.5.959': attribute type 4 has an invalid length. [ 207.981805][ T9551] netlink: 'syz.5.959': attribute type 5 has an invalid length. [ 208.032519][ T9551] netlink: 'syz.5.959': attribute type 6 has an invalid length. [ 208.087097][ T9551] netlink: 'syz.5.959': attribute type 8 has an invalid length. [ 208.697531][ T9563] __nla_validate_parse: 11 callbacks suppressed [ 208.697551][ T9563] netlink: 60 bytes leftover after parsing attributes in process `syz.3.963'. [ 208.732537][ T9562] netlink: 60 bytes leftover after parsing attributes in process `syz.3.963'. [ 209.690703][ T9577] syzkaller0: entered allmulticast mode [ 210.293572][ T9592] netlink: 'syz.4.971': attribute type 10 has an invalid length. [ 210.982725][ T9611] netlink: 'syz.0.975': attribute type 39 has an invalid length. [ 210.997877][ T9610] veth0_macvtap: left promiscuous mode [ 211.480691][ T9629] netlink: 588 bytes leftover after parsing attributes in process `syz.0.982'. [ 212.093643][ T9625] netlink: 164 bytes leftover after parsing attributes in process `syz.5.984'. [ 212.782839][ T9647] validate_nla: 3 callbacks suppressed [ 212.782858][ T9647] netlink: 'syz.5.988': attribute type 39 has an invalid length. [ 212.913299][ T9647] veth0_macvtap: left promiscuous mode [ 213.273549][ T9656] netlink: 64 bytes leftover after parsing attributes in process `syz.0.991'. [ 213.344989][ T9657] netlink: 60 bytes leftover after parsing attributes in process `syz.0.991'. [ 213.737825][ T9677] netlink: 'syz.5.998': attribute type 2 has an invalid length. [ 213.875331][ T9684] netlink: 'syz.0.999': attribute type 29 has an invalid length. [ 213.899991][ T9685] netlink: 'syz.0.999': attribute type 29 has an invalid length. [ 214.622506][ T9709] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 214.629538][ T9709] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 214.722410][ T9708] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.729821][ T9708] IPv6: NLM_F_CREATE should be set when creating new route [ 214.737105][ T9708] IPv6: NLM_F_CREATE should be set when creating new route [ 214.746037][ T9713] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1007'. [ 215.681264][ T9735] syzkaller0: entered promiscuous mode [ 215.695878][ T9735] syzkaller0: entered allmulticast mode [ 215.715688][ T9742] netlink: 'syz.0.1016': attribute type 46 has an invalid length. [ 215.982986][ T9761] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1021'. [ 218.778568][ T9792] netlink: 'syz.0.1028': attribute type 21 has an invalid length. [ 218.835310][ T9796] netlink: 'syz.2.1030': attribute type 2 has an invalid length. [ 218.857359][ T9789] netlink: 'syz.0.1028': attribute type 21 has an invalid length. [ 218.884578][ T9789] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1028'. [ 218.915082][ T9792] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1028'. [ 218.932379][ T9792] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1028'. [ 218.941973][ T9789] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1028'. [ 219.503826][ T9814] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1034'. [ 219.557611][ T9814] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1034'. [ 219.603671][ T9814] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1034'. [ 219.707819][ T9821] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1035'. [ 219.879295][ T9831] __nla_validate_parse: 1 callbacks suppressed [ 219.879312][ T9831] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1038'. [ 220.042780][ T9836] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1040'. [ 220.329084][ T9851] netlink: 7680 bytes leftover after parsing attributes in process `syz.0.1044'. [ 221.568107][ T9878] netlink: 'syz.2.1052': attribute type 3 has an invalid length. [ 221.605510][ T9878] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.1052'. [ 221.688563][ T9878] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.1052'. [ 221.701991][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'. [ 221.804950][ T9894] netlink: 'syz.5.1057': attribute type 21 has an invalid length. [ 221.991980][ T9905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.785565][ T9937] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1068'. [ 223.279877][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1064'. [ 223.500565][ T9949] netlink: 'syz.2.1071': attribute type 10 has an invalid length. [ 223.550031][ T9949] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 223.580137][ T9949] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 223.688839][ T9949] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 223.765152][ T9960] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 223.781426][ T9960] CPU: 1 UID: 0 PID: 9960 Comm: syz.3.1074 Not tainted syzkaller #0 PREEMPT(full) [ 223.781453][ T9960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 223.781463][ T9960] Call Trace: [ 223.781472][ T9960] [ 223.781480][ T9960] dump_stack_lvl+0x189/0x250 [ 223.781508][ T9960] ? kernfs_path_from_node+0x2f/0x290 [ 223.781534][ T9960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.781556][ T9960] ? __pfx__printk+0x10/0x10 [ 223.781585][ T9960] ? __rcu_read_unlock+0x84/0xe0 [ 223.781609][ T9960] ? kernfs_path_from_node+0x2f/0x290 [ 223.781631][ T9960] ? kernfs_path_from_node+0x250/0x290 [ 223.781650][ T9960] ? kernfs_path_from_node+0x2f/0x290 [ 223.781675][ T9960] sysfs_warn_dup+0x8e/0xa0 [ 223.781697][ T9960] sysfs_do_create_link_sd+0xc0/0x110 [ 223.781724][ T9960] device_add_class_symlinks+0x1cf/0x240 [ 223.781753][ T9960] device_add+0x475/0xb50 [ 223.781784][ T9960] wiphy_register+0x1ba6/0x28d0 [ 223.781830][ T9960] ? __pfx_wiphy_register+0x10/0x10 [ 223.781868][ T9960] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 223.781913][ T9960] ieee80211_register_hw+0x3484/0x4100 [ 223.781953][ T9960] ? ieee80211_register_hw+0x1451/0x4100 [ 223.781983][ T9960] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 223.782004][ T9960] ? __remove_hrtimer+0x451/0x470 [ 223.782020][ T9960] ? trace_hrtimer_setup+0x53/0x200 [ 223.782049][ T9960] ? __hrtimer_setup+0x187/0x210 [ 223.782065][ T9960] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 223.782092][ T9960] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 223.782151][ T9960] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 223.782171][ T9960] ? trace_kmalloc+0x1f/0xd0 [ 223.782185][ T9960] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 223.782203][ T9960] ? kstrndup+0xbf/0x160 [ 223.782238][ T9960] hwsim_new_radio_nl+0xea4/0x1b10 [ 223.782261][ T9960] ? __pfx___nla_validate_parse+0x10/0x10 [ 223.782304][ T9960] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 223.782325][ T9960] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 223.782361][ T9960] ? __nla_parse+0x40/0x60 [ 223.782390][ T9960] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 223.782420][ T9960] genl_family_rcv_msg_doit+0x215/0x300 [ 223.782449][ T9960] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 223.782486][ T9960] ? bpf_lsm_capable+0x9/0x20 [ 223.782502][ T9960] ? security_capable+0x7e/0x2e0 [ 223.782532][ T9960] genl_rcv_msg+0x60e/0x790 [ 223.782560][ T9960] ? __pfx_genl_rcv_msg+0x10/0x10 [ 223.782576][ T9960] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 223.782602][ T9960] ? __pfx_ref_tracker_free+0x10/0x10 [ 223.782634][ T9960] netlink_rcv_skb+0x208/0x470 [ 223.782655][ T9960] ? __lock_acquire+0xab9/0xd20 [ 223.782680][ T9960] ? __pfx_genl_rcv_msg+0x10/0x10 [ 223.782700][ T9960] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.782750][ T9960] ? down_read+0x1ad/0x2e0 [ 223.782779][ T9960] genl_rcv+0x28/0x40 [ 223.782794][ T9960] netlink_unicast+0x82c/0x9e0 [ 223.782828][ T9960] ? __pfx_netlink_unicast+0x10/0x10 [ 223.782850][ T9960] ? netlink_sendmsg+0x6c0/0xb30 [ 223.782882][ T9960] netlink_sendmsg+0x805/0xb30 [ 223.782928][ T9960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.782958][ T9960] ? aa_sock_msg_perm+0xf1/0x1d0 [ 223.782984][ T9960] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 223.783007][ T9960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.783031][ T9960] __sock_sendmsg+0x219/0x270 [ 223.783057][ T9960] ____sys_sendmsg+0x505/0x830 [ 223.783091][ T9960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.783131][ T9960] ? import_iovec+0x74/0xa0 [ 223.783162][ T9960] ___sys_sendmsg+0x21f/0x2a0 [ 223.783191][ T9960] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.783246][ T9960] ? __fget_files+0x2a/0x420 [ 223.783284][ T9960] ? __fget_files+0x2a/0x420 [ 223.783302][ T9960] ? __fget_files+0x3a0/0x420 [ 223.783336][ T9960] __x64_sys_sendmsg+0x19b/0x260 [ 223.783366][ T9960] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.783406][ T9960] ? rcu_is_watching+0x15/0xb0 [ 223.783432][ T9960] ? do_syscall_64+0xbe/0x3b0 [ 223.783461][ T9960] do_syscall_64+0xfa/0x3b0 [ 223.783486][ T9960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.783502][ T9960] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 223.783520][ T9960] ? clear_bhb_loop+0x60/0xb0 [ 223.783545][ T9960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.783562][ T9960] RIP: 0033:0x7ff408f8eec9 [ 223.783579][ T9960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.783594][ T9960] RSP: 002b:00007ff409edf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.783613][ T9960] RAX: ffffffffffffffda RBX: 00007ff4091e6090 RCX: 00007ff408f8eec9 [ 223.783626][ T9960] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000004 [ 223.783638][ T9960] RBP: 00007ff409011f91 R08: 0000000000000000 R09: 0000000000000000 [ 223.783649][ T9960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.783660][ T9960] R13: 00007ff4091e6128 R14: 00007ff4091e6090 R15: 00007fff14c66638 [ 223.783697][ T9960] [ 224.529040][ T9976] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1080'. [ 225.104506][ T9996] netlink: 'syz.3.1086': attribute type 20 has an invalid length. [ 225.143091][ T9996] netlink: 'syz.3.1086': attribute type 20 has an invalid length. [ 225.190097][ T9993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1084'. [ 225.478310][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'. [ 225.758241][T10014] netlink: 'syz.0.1091': attribute type 4 has an invalid length. [ 225.908227][T10021] netlink: 'syz.3.1095': attribute type 1 has an invalid length. [ 226.060080][T10034] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1100'. [ 226.372866][T10046] netlink: 'syz.3.1103': attribute type 7 has an invalid length. [ 226.512081][T10045] : entered promiscuous mode [ 226.575512][T10049] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1102'. [ 226.602173][T10050] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1102'. [ 226.847345][T10058] netlink: 'syz.3.1104': attribute type 1 has an invalid length. [ 226.962378][T10061] netlink: 'syz.5.1106': attribute type 4 has an invalid length. [ 227.023116][T10061] netlink: 'syz.5.1106': attribute type 29 has an invalid length. [ 227.052202][T10061] netlink: 'syz.5.1106': attribute type 29 has an invalid length. [ 227.088635][T10061] netlink: 'syz.5.1106': attribute type 29 has an invalid length. [ 227.350008][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1108'. [ 227.366457][T10067] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1108'. [ 227.453421][T10078] bridge_slave_0: entered promiscuous mode [ 227.480670][T10078] bridge_slave_0: entered allmulticast mode [ 227.493967][T10071] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1109'. [ 227.506763][ T30] audit: type=1107 audit(1759547444.225:3): pid=10080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 227.529830][T10078] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1109'. [ 227.742776][T10087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1114'. [ 228.188516][T10130] syzkaller0: entered promiscuous mode [ 228.194205][T10130] syzkaller0: entered allmulticast mode [ 229.578715][T10157] delete_channel: no stack [ 230.733853][T10172] __nla_validate_parse: 6 callbacks suppressed [ 230.733871][T10172] netlink: 208192 bytes leftover after parsing attributes in process `syz.2.1140'. [ 230.782372][T10172] validate_nla: 6 callbacks suppressed [ 230.782393][T10172] netlink: 'syz.2.1140': attribute type 1 has an invalid length. [ 230.906936][T10185] netlink: 'syz.3.1144': attribute type 13 has an invalid length. [ 230.924933][T10185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1144'. [ 230.943927][T10185] bond0: entered promiscuous mode [ 230.952247][T10185] bond_slave_0: entered promiscuous mode [ 230.993632][T10185] bond_slave_1: entered promiscuous mode [ 231.041130][T10185] bond0: entered allmulticast mode [ 231.068000][T10185] bond_slave_0: entered allmulticast mode [ 231.102249][T10185] bond_slave_1: entered allmulticast mode [ 231.103741][T10197] FAULT_INJECTION: forcing a failure. [ 231.103741][T10197] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 231.199885][T10197] CPU: 1 UID: 0 PID: 10197 Comm: syz.2.1147 Not tainted syzkaller #0 PREEMPT(full) [ 231.199912][T10197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 231.199923][T10197] Call Trace: [ 231.199934][T10197] [ 231.199945][T10197] dump_stack_lvl+0x189/0x250 [ 231.199978][T10197] ? __pfx____ratelimit+0x10/0x10 [ 231.200009][T10197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.200037][T10197] ? __pfx__printk+0x10/0x10 [ 231.200086][T10197] ? trace_call_bpf+0x5ba/0x850 [ 231.200105][T10197] ? __might_fault+0xb0/0x130 [ 231.200156][T10197] should_fail_ex+0x414/0x560 [ 231.200208][T10197] _copy_from_user+0x2d/0xb0 [ 231.200235][T10197] copy_from_sockptr+0x5e/0xa0 [ 231.200270][T10197] packet_setsockopt+0xa14/0x12c0 [ 231.200316][T10197] ? __pfx_packet_setsockopt+0x10/0x10 [ 231.200339][T10197] ? perf_trace_lock+0x2f8/0x3b0 [ 231.200426][T10197] ? aa_sk_perm+0x81e/0x950 [ 231.200481][T10197] ? __pfx_aa_sk_perm+0x10/0x10 [ 231.200522][T10197] ? __fget_files+0x2a/0x420 [ 231.200539][T10197] ? aa_sock_opt_perm+0xff/0x1b0 [ 231.200583][T10197] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 231.200604][T10197] ? __pfx_packet_setsockopt+0x10/0x10 [ 231.200637][T10197] do_sock_setsockopt+0x179/0x1b0 [ 231.200689][T10197] __x64_sys_setsockopt+0x13f/0x1b0 [ 231.200746][T10197] do_syscall_64+0xfa/0x3b0 [ 231.200768][T10197] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.200794][T10197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.200813][T10197] ? clear_bhb_loop+0x60/0xb0 [ 231.200850][T10197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.200868][T10197] RIP: 0033:0x7f5244b8eec9 [ 231.200890][T10197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.200904][T10197] RSP: 002b:00007f5242dee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 231.200923][T10197] RAX: ffffffffffffffda RBX: 00007f5244de5fa0 RCX: 00007f5244b8eec9 [ 231.200935][T10197] RDX: 0000000000000008 RSI: 0000000000000107 RDI: 0000000000000004 [ 231.200945][T10197] RBP: 00007f5242dee090 R08: 0000000000000004 R09: 0000000000000000 [ 231.200955][T10197] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 231.200963][T10197] R13: 00007f5244de6038 R14: 00007f5244de5fa0 R15: 00007fffe2e192b8 [ 231.201049][T10197] [ 231.298510][T10188] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1145'. [ 231.905225][T10205] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 232.105737][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1152'. [ 232.428477][T10226] netlink: 'syz.5.1151': attribute type 10 has an invalid length. [ 232.460683][T10229] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.1153'. [ 232.470967][T10229] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1153'. [ 232.502343][T10221] netlink: 'syz.5.1151': attribute type 10 has an invalid length. [ 233.015548][T10230] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1154'. [ 233.240031][T10240] FAULT_INJECTION: forcing a failure. [ 233.240031][T10240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.280307][T10240] CPU: 0 UID: 0 PID: 10240 Comm: syz.0.1159 Not tainted syzkaller #0 PREEMPT(full) [ 233.280335][T10240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 233.280346][T10240] Call Trace: [ 233.280353][T10240] [ 233.280361][T10240] dump_stack_lvl+0x189/0x250 [ 233.280389][T10240] ? __pfx____ratelimit+0x10/0x10 [ 233.280411][T10240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.280431][T10240] ? __pfx__printk+0x10/0x10 [ 233.280467][T10240] should_fail_ex+0x414/0x560 [ 233.280491][T10240] _copy_to_user+0x31/0xb0 [ 233.280510][T10240] simple_read_from_buffer+0xe1/0x170 [ 233.280533][T10240] proc_fail_nth_read+0x1b3/0x220 [ 233.280559][T10240] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 233.280584][T10240] ? rw_verify_area+0x2a6/0x4d0 [ 233.280607][T10240] ? __lock_acquire+0xab9/0xd20 [ 233.280628][T10240] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 233.280651][T10240] vfs_read+0x200/0xa30 [ 233.280673][T10240] ? fdget_pos+0x247/0x320 [ 233.280695][T10240] ? __pfx___mutex_lock+0x10/0x10 [ 233.280718][T10240] ? __pfx_vfs_read+0x10/0x10 [ 233.280744][T10240] ? __fget_files+0x2a/0x420 [ 233.280766][T10240] ? __fget_files+0x3a0/0x420 [ 233.280783][T10240] ? __fget_files+0x2a/0x420 [ 233.280811][T10240] ksys_read+0x145/0x250 [ 233.280829][T10240] ? __pfx_ksys_read+0x10/0x10 [ 233.280850][T10240] ? do_syscall_64+0xbe/0x3b0 [ 233.280876][T10240] do_syscall_64+0xfa/0x3b0 [ 233.280896][T10240] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.280915][T10240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.280932][T10240] ? clear_bhb_loop+0x60/0xb0 [ 233.280953][T10240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.280968][T10240] RIP: 0033:0x7f1ec778d8dc [ 233.280985][T10240] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 233.280998][T10240] RSP: 002b:00007f1ec86dd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 233.281017][T10240] RAX: ffffffffffffffda RBX: 00007f1ec79e5fa0 RCX: 00007f1ec778d8dc [ 233.281045][T10240] RDX: 000000000000000f RSI: 00007f1ec86dd0a0 RDI: 0000000000000005 [ 233.281056][T10240] RBP: 00007f1ec86dd090 R08: 0000000000000000 R09: 0000000000000000 [ 233.281066][T10240] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 233.281077][T10240] R13: 00007f1ec79e6038 R14: 00007f1ec79e5fa0 R15: 00007ffd7ac48088 [ 233.281108][T10240] [ 234.118109][T10249] netlink: 'syz.0.1161': attribute type 3 has an invalid length. [ 234.142915][T10249] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1161'. [ 234.143682][T10254] netlink: 'syz.3.1163': attribute type 17 has an invalid length. [ 234.179084][T10255] netlink: 'syz.3.1163': attribute type 17 has an invalid length. [ 234.183928][T10251] netlink: 'syz.0.1161': attribute type 10 has an invalid length. [ 234.204258][T10255] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1163'. [ 234.218201][T10251] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1161'. [ 234.739868][T10279] netlink: 'syz.5.1170': attribute type 1 has an invalid length. [ 235.115333][T10285] wg2: entered promiscuous mode [ 235.120386][T10285] wg2: entered allmulticast mode [ 235.238209][T10298] netlink: 'syz.5.1174': attribute type 4 has an invalid length. [ 235.831384][T10320] validate_nla: 5 callbacks suppressed [ 235.831414][T10320] netlink: 'syz.3.1179': attribute type 2 has an invalid length. [ 235.891219][T10320] netlink: 'syz.3.1179': attribute type 8 has an invalid length. [ 235.931115][T10320] __nla_validate_parse: 7 callbacks suppressed [ 235.931147][T10320] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1179'. [ 236.502983][T10345] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1186'. [ 236.881458][ T5975] page_pool_release_retry() stalled pool shutdown: id 50, 1 inflight 60 sec [ 237.267051][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1192'. [ 237.288261][T10369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.941655][T10390] netlink: 'syz.2.1199': attribute type 21 has an invalid length. [ 237.949836][T10390] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.958476][T10390] IPv6: Can't replace route, no match found [ 238.020490][T10392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1199'. [ 238.370452][T10409] netlink: 'syz.5.1201': attribute type 3 has an invalid length. [ 238.381995][T10409] netlink: 'syz.5.1201': attribute type 1 has an invalid length. [ 238.405917][T10409] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.1201'. [ 238.785265][ T5870] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 239.231430][T10436] openvswitch: netlink: Invalid VLAN frame [ 239.550802][T10452] netlink: 'syz.0.1210': attribute type 21 has an invalid length. [ 239.559395][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1213'. [ 239.648127][T10452] netlink: 'syz.0.1210': attribute type 6 has an invalid length. [ 239.656451][T10452] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1210'. [ 239.667466][T10446] netlink: 'syz.5.1213': attribute type 5 has an invalid length. [ 239.676445][T10447] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 239.684884][T10447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.815692][T10463] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1215'. [ 241.335083][T10486] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 242.381112][T10526] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1230'. [ 242.568392][ T5874] Bluetooth: hci5: command 0x0406 tx timeout [ 242.569533][T10538] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 242.858222][T10546] netlink: 'syz.3.1234': attribute type 10 has an invalid length. [ 242.916354][T10538] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1234'. [ 242.949809][T10538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1234'. [ 242.976765][T10538] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1234'. [ 243.003943][T10546] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 243.029807][T10546] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 243.080532][T10546] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 243.850027][T10556] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1237'. [ 244.867860][T10572] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1241'. [ 244.921328][T10572] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1241'. [ 245.047419][ T9809] wlan1: Trigger new scan to find an IBSS to join [ 246.103331][T10586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1247'. [ 247.555106][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1250'. [ 247.672312][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1252'. [ 247.712262][T10601] netlink: 'syz.0.1252': attribute type 21 has an invalid length. [ 247.743632][T10599] netlink: 'syz.0.1252': attribute type 21 has an invalid length. [ 247.777914][T10601] netlink: 'syz.0.1252': attribute type 6 has an invalid length. [ 247.835190][T10601] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1252'. [ 247.886341][T10599] netlink: 'syz.0.1252': attribute type 6 has an invalid length. [ 247.894325][T10599] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1252'. [ 248.193192][T10610] netlink: 'syz.4.1254': attribute type 3 has an invalid length. [ 249.329601][T10627] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1257'. [ 249.339817][T10627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1257'. [ 250.005047][ T9808] wlan1: Trigger new scan to find an IBSS to join [ 251.095121][ T9808] wlan1: Creating new IBSS network, BSSID ce:4f:a8:09:45:fe [ 251.786115][T10639] netlink: 'syz.4.1262': attribute type 39 has an invalid length. [ 252.287867][T10649] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1265'. [ 252.352744][T10649] netlink: zone id is out of range [ 252.361986][T10649] netlink: zone id is out of range [ 252.417148][T10647] netlink: 'syz.2.1264': attribute type 2 has an invalid length. [ 252.441346][T10647] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1264'. [ 252.464843][T10649] netlink: zone id is out of range [ 252.470014][T10649] netlink: zone id is out of range [ 252.512775][T10647] nbd: must specify at least one socket [ 252.518261][T10649] netlink: zone id is out of range [ 252.518283][T10649] netlink: zone id is out of range [ 252.518298][T10649] netlink: zone id is out of range [ 252.518311][T10649] netlink: zone id is out of range [ 252.518323][T10649] netlink: zone id is out of range [ 252.679718][T10649] netlink: zone id is out of range [ 252.731676][T10651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1265'. [ 252.886324][T10649] netlink: 'syz.0.1265': attribute type 10 has an invalid length. [ 252.886362][T10649] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1265'. [ 255.242203][T10678] netlink: 'syz.4.1275': attribute type 10 has an invalid length. [ 255.336187][T10678] veth0_vlan: entered allmulticast mode [ 255.391875][T10673] netlink: 'syz.2.1273': attribute type 10 has an invalid length. [ 255.402502][T10681] netlink: 'syz.4.1275': attribute type 10 has an invalid length. [ 255.566458][T10678] veth0_vlan: left promiscuous mode [ 255.629239][T10678] veth0_vlan: entered promiscuous mode [ 255.757123][T10678] team0: Device veth0_vlan failed to register rx_handler [ 255.872002][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.879246][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.083486][T10681] team0: Port device netdevsim0 added [ 256.423167][T10676] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 256.605152][T10673] bridge0: port 3(batadv_slave_1) entered disabled state [ 256.612918][T10673] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.621131][T10673] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.917802][T10710] netlink: 'syz.3.1284': attribute type 10 has an invalid length. [ 258.015023][T10710] bridge0: port 3(team0) entered blocking state [ 258.021713][T10710] bridge0: port 3(team0) entered forwarding state [ 258.029381][T10710] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.036928][T10710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.045057][T10710] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.052554][T10710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.132735][T10710] bridge0: entered promiscuous mode [ 258.139156][T10710] bridge0: entered allmulticast mode [ 258.150931][T10710] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 258.572368][T10723] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1289'. [ 258.593084][T10723] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1289'. [ 260.209236][T10732] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1291'. [ 260.500732][T10735] netlink: 'syz.4.1292': attribute type 2 has an invalid length. [ 260.516838][T10749] netlink: 'syz.2.1294': attribute type 1 has an invalid length. [ 260.525077][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1294'. [ 261.051675][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1297'. [ 261.075410][T10753] syzkaller0: entered promiscuous mode [ 261.087406][T10753] syzkaller0: entered allmulticast mode [ 261.746466][T10777] delete_channel: no stack [ 262.690910][T10813] netlink: 'syz.2.1311': attribute type 1 has an invalid length. [ 262.711610][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1311'. [ 265.398028][T10836] netlink: 'syz.0.1318': attribute type 10 has an invalid length. [ 265.470667][T10836] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 265.541874][T10846] net_ratelimit: 13 callbacks suppressed [ 265.541943][T10846] openvswitch: netlink: Missing valid actions attribute. [ 265.572559][T10845] openvswitch: netlink: Missing valid actions attribute. [ 265.576698][T10846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.588368][T10845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.979704][T10865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1323'. [ 266.262709][T10866] syzkaller0: entered promiscuous mode [ 266.268717][T10866] syzkaller0: entered allmulticast mode [ 266.474304][T10866] syzkaller0: tun_net_xmit 1280 [ 266.480989][T10866] syzkaller0: create flow: hash 3731591761 index 1 [ 266.903388][T10882] netlink: 'syz.0.1329': attribute type 10 has an invalid length. [ 267.114427][T10882] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 267.152206][T10864] syzkaller0: delete flow: hash 3731591761 index 1 [ 267.299047][T10899] netlink: 'syz.2.1333': attribute type 2 has an invalid length. [ 267.320403][T10899] netlink: 110008 bytes leftover after parsing attributes in process `syz.2.1333'. [ 267.590689][T10907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1335'. [ 268.314814][T10930] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1340'. [ 271.098022][T10918] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1338'. [ 271.112078][T10925] bridge_slave_1: left allmulticast mode [ 271.120432][T10925] bridge_slave_1: left promiscuous mode [ 271.128575][T10925] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.198682][T10925] bridge_slave_0: left allmulticast mode [ 271.205854][T10925] bridge_slave_0: left promiscuous mode [ 271.239557][T10925] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.319841][T10931] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1340'. [ 271.618331][T10956] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1347'. [ 271.916257][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1350'. [ 272.331738][T10976] netlink: 'syz.4.1354': attribute type 39 has an invalid length. [ 272.542671][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.552444][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.561613][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.573082][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.581028][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.686042][T10979] netlink: 'syz.0.1357': attribute type 1 has an invalid length. [ 272.709583][T10979] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1357'. [ 272.865714][T10984] wg0 speed is unknown, defaulting to 1000 [ 272.982020][ T780] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.114293][T10997] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1360'. [ 273.401107][ T780] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.624149][T11017] netlink: 'syz.0.1365': attribute type 21 has an invalid length. [ 273.641276][T11004] syzkaller0: entered promiscuous mode [ 273.646907][T11004] syzkaller0: entered allmulticast mode [ 273.673396][ T5933] wg0 speed is unknown, defaulting to 1000 [ 273.688733][ T5933] syz0: Port: 1 Link DOWN [ 274.634878][ T5874] Bluetooth: hci0: command tx timeout [ 276.715957][ T5874] Bluetooth: hci0: command tx timeout [ 278.203547][ T780] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.237242][T11030] netlink: 822 bytes leftover after parsing attributes in process `syz.4.1368'. [ 278.249629][T11017] À: port 1(vlan0) entered blocking state [ 278.265970][T11017] À: port 1(vlan0) entered disabled state [ 278.272011][T11017] vlan0: entered allmulticast mode [ 278.297644][T11017] veth0_vlan: entered allmulticast mode [ 278.315706][T11017] vlan0: entered promiscuous mode [ 278.412031][ T780] bond0: (slave netdevsim0): Releasing backup interface [ 278.429672][ T780] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.430080][T11034] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1370'. [ 278.646357][T11042] cgroup: Unknown subsys name 'uid' [ 278.794913][ T5874] Bluetooth: hci0: command tx timeout [ 278.944435][T10984] chnl_net:caif_netlink_parms(): no params data found [ 280.874734][ T5874] Bluetooth: hci0: command tx timeout [ 281.145232][ T9807] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 281.668528][ T780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.680070][ T780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.692589][ T780] bond0 (unregistering): Released all slaves [ 281.712905][T11047] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1372'. [ 282.573457][ T780] hsr_slave_0: left promiscuous mode [ 282.625035][ T780] hsr_slave_1: left promiscuous mode [ 282.644475][ T780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.652088][ T780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.705306][ T780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.712745][ T780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.779535][ T780] veth1_vlan: left promiscuous mode [ 282.796150][ T780] veth0_vlan: left promiscuous mode [ 283.139549][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.148834][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.157543][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.165720][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.173830][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.380748][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.391537][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 283.406111][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.414312][ T5879] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 283.426972][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 283.427452][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.435543][ T5865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 283.448107][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 283.456053][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.456734][ T5865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 283.474006][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 283.490895][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.500724][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 283.507571][ T5880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 283.529635][ T5880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 283.800231][ T780] team0 (unregistering): Port device team_slave_1 removed [ 283.844080][ T780] team0 (unregistering): Port device team_slave_0 removed [ 284.183285][ T780] team0 (unregistering): Port device dummy0 removed [ 284.726153][T11086] $Hÿ: renamed from bond0 (while UP) [ 284.737447][T11086] $Hÿ: left allmulticast mode [ 284.742340][T11086] bond_slave_0: left allmulticast mode [ 284.748119][T11086] bond_slave_1: left allmulticast mode [ 284.753625][T11086] bridge0: left allmulticast mode [ 285.148616][T11074] chnl_net:caif_netlink_parms(): no params data found [ 285.161551][T11075] chnl_net:caif_netlink_parms(): no params data found [ 285.224048][ T780] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.285897][ T5880] Bluetooth: hci0: command tx timeout [ 285.338784][ T780] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.418449][T11078] chnl_net:caif_netlink_parms(): no params data found [ 285.456334][ T780] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.514686][ T5880] Bluetooth: hci3: command tx timeout [ 285.524904][ T5880] Bluetooth: hci2: command tx timeout [ 285.562885][T11072] chnl_net:caif_netlink_parms(): no params data found [ 285.581822][T11074] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.589231][T11074] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.596787][T11074] bridge_slave_0: entered allmulticast mode [ 285.597429][ T5880] Bluetooth: hci4: command tx timeout [ 285.605437][T11074] bridge_slave_0: entered promiscuous mode [ 285.647067][ T780] team0: Port device netdevsim0 removed [ 285.655006][ T780] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.682731][T11074] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.690037][T11074] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.697728][T11074] bridge_slave_1: entered allmulticast mode [ 285.709249][T11074] bridge_slave_1: entered promiscuous mode [ 285.785999][T11075] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.795184][T11075] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.802700][T11075] bridge_slave_0: entered allmulticast mode [ 285.810833][T11075] bridge_slave_0: entered promiscuous mode [ 285.823331][T11075] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.830866][T11075] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.838574][T11075] bridge_slave_1: entered allmulticast mode [ 285.846841][T11075] bridge_slave_1: entered promiscuous mode [ 285.939744][T11078] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.962314][T11078] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.970037][T11078] bridge_slave_0: entered allmulticast mode [ 285.982736][T11078] bridge_slave_0: entered promiscuous mode [ 286.006710][T11074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.157587][T11078] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.166474][T11078] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.173725][T11078] bridge_slave_1: entered allmulticast mode [ 286.181196][T11078] bridge_slave_1: entered promiscuous mode [ 286.193755][T11074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.218687][T11075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.287922][T11075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.338553][T11120] netlink: 'syz.2.1391': attribute type 3 has an invalid length. [ 286.347581][T11121] netlink: 'syz.2.1391': attribute type 3 has an invalid length. [ 286.355258][T11120] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1391'. [ 286.355564][T11121] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1391'. [ 286.419542][T11074] team0: Port device team_slave_0 added [ 286.428677][T11074] team0: Port device team_slave_1 added [ 286.450415][T11072] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.458045][T11072] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.468155][T11072] bridge_slave_0: entered allmulticast mode [ 286.476639][T11072] bridge_slave_0: entered promiscuous mode [ 286.485671][T11072] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.492989][T11072] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.501274][T11072] bridge_slave_1: entered allmulticast mode [ 286.508588][T11072] bridge_slave_1: entered promiscuous mode [ 286.519759][T11078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.533040][T11078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.558975][T11075] team0: Port device team_slave_0 added [ 286.636821][T11075] team0: Port device team_slave_1 added [ 286.719564][T11078] team0: Port device team_slave_0 added [ 286.726575][T11074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.733817][T11074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.760427][T11074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.773343][T11074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.780798][T11074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.815063][T11074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.841476][T11075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.848988][T11075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.875315][T11075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.889674][T11072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.903820][T11072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.915590][T11078] team0: Port device team_slave_1 added [ 287.060878][T11075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.070930][T11075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.098026][T11075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.238910][ T780] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.277579][T11072] team0: Port device team_slave_0 added [ 287.284379][T11078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.291749][T11078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.318159][T11078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.331498][T11078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.338910][T11078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.366777][T11078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.380503][ T5880] Bluetooth: hci0: command tx timeout [ 287.422015][T11072] team0: Port device team_slave_1 added [ 287.501960][ T780] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.551651][T11074] hsr_slave_0: entered promiscuous mode [ 287.562884][T11074] hsr_slave_1: entered promiscuous mode [ 287.579440][T11074] debugfs: 'hsr0' already exists in 'hsr' [ 287.586690][T11074] Cannot create hsr debugfs directory [ 287.594670][ T5880] Bluetooth: hci2: command tx timeout [ 287.594903][ T5879] Bluetooth: hci3: command tx timeout [ 287.661381][T11072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.669739][T11072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.705179][ T5879] Bluetooth: hci4: command tx timeout [ 287.724685][T11072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.819376][ T780] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.872839][T11075] hsr_slave_0: entered promiscuous mode [ 287.879951][T11075] hsr_slave_1: entered promiscuous mode [ 287.894407][T11075] debugfs: 'hsr0' already exists in 'hsr' [ 287.900285][T11075] Cannot create hsr debugfs directory [ 287.981666][T11072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.990445][T11072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.024580][T11072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.169924][ T780] bond0: (slave netdevsim0): Releasing backup interface [ 288.193766][ T780] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.257767][T11137] cgroup: fork rejected by pids controller in /syz2 [ 288.281580][T11078] hsr_slave_0: entered promiscuous mode [ 288.289409][T11078] hsr_slave_1: entered promiscuous mode [ 288.296853][T11078] debugfs: 'hsr0' already exists in 'hsr' [ 288.302655][T11078] Cannot create hsr debugfs directory [ 288.602493][T11072] hsr_slave_0: entered promiscuous mode [ 288.610032][T11072] hsr_slave_1: entered promiscuous mode [ 288.616795][T11072] debugfs: 'hsr0' already exists in 'hsr' [ 288.623060][T11072] Cannot create hsr debugfs directory [ 289.109002][ T780] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.271685][ T780] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.376764][ T780] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.441423][ T5879] Bluetooth: hci0: command tx timeout [ 289.452325][ T780] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.591901][T11075] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 289.616332][T11075] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 289.637580][T11184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1400'. [ 289.643968][T11075] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 289.675718][ T5879] Bluetooth: hci2: command tx timeout [ 289.675734][ T5880] Bluetooth: hci3: command tx timeout [ 289.688973][T11075] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 289.755263][ T5879] Bluetooth: hci4: command tx timeout [ 289.842637][ T780] bridge_slave_1: left allmulticast mode [ 289.849539][ T780] bridge_slave_1: left promiscuous mode [ 289.855510][ T780] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.865207][ T780] bridge_slave_0: left promiscuous mode [ 289.871030][ T780] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.886283][ T780] vlan0: left allmulticast mode [ 289.891212][ T780] veth0_vlan: left allmulticast mode [ 289.896724][ T780] vlan0: left promiscuous mode [ 289.901917][ T780] À: port 1(vlan0) entered disabled state [ 289.913467][ T780] bridge0: port 3(team0) entered disabled state [ 289.928856][ T780] bridge_slave_1: left allmulticast mode [ 289.937222][ T780] bridge_slave_1: left promiscuous mode [ 289.943008][ T780] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.955964][ T780] bridge_slave_0: left promiscuous mode [ 289.961740][ T780] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.383385][ T780] team0: Port device geneve1 removed [ 290.640724][ T780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.651526][ T780] bond0 (unregistering): Released all slaves [ 290.758529][ T780] bond0 (unregistering): Released all slaves [ 291.119913][ T780] team0: Port device bond0 removed [ 291.128732][ T780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.139508][ T780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.151957][ T780] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 291.162390][ T780] bond0 (unregistering): Released all slaves [ 291.360568][ T780] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 291.369341][ T780] bridge0 (unregistering): left promiscuous mode [ 291.375872][ T780] bridge0 (unregistering): left allmulticast mode [ 291.518872][ T5879] Bluetooth: hci0: command tx timeout [ 291.562400][ T780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.571486][ T780] bond_slave_0: left promiscuous mode [ 291.577435][ T780] bond_slave_0: left allmulticast mode [ 291.585528][ T780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.594457][ T780] bond_slave_1: left promiscuous mode [ 291.600567][ T780] bond_slave_1: left allmulticast mode [ 291.609322][ T780] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 291.617937][ T780] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 291.625783][ T780] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 291.638836][ T780] bond0 (unregistering): Released all slaves [ 291.672005][T11192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1401'. [ 291.682074][T11192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1401'. [ 291.708970][T11078] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 291.761607][ T5879] Bluetooth: hci3: command tx timeout [ 291.761934][ T5880] Bluetooth: hci2: command tx timeout [ 291.782091][T11078] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 291.816415][T11078] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 291.835479][ T5880] Bluetooth: hci4: command tx timeout [ 291.857980][ T780] : left promiscuous mode [ 291.876722][T11078] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 291.909051][ T780] : left promiscuous mode [ 291.966845][T11200] netlink: 'syz.2.1403': attribute type 29 has an invalid length. [ 291.977190][ T780] : left promiscuous mode [ 292.002001][T11200] netlink: 'syz.2.1403': attribute type 29 has an invalid length. [ 292.019269][T11072] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 292.040132][ T780] _ÐZ`Ô€@S!: left promiscuous mode [ 292.082443][T11072] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 292.110063][ T780] : left promiscuous mode [ 292.125556][T11072] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 292.139005][T11072] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 292.373816][T11074] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 292.407377][T11074] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 292.451271][T11074] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 292.483489][T11074] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 292.541453][T11075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.613921][ T780] team0: Port device .3ãc¤± removed [ 292.651227][T11075] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.698233][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.705456][ T6735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.771783][T11078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.782133][ T9807] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.789382][ T9807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.867687][T11078] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.941641][T11072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.970840][ T9807] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.978047][ T9807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.009521][ T6753] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.016708][ T6753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.092833][T11072] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.116199][ T9807] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.123415][ T9807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.152092][T11074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.188473][ T9809] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.195859][ T9809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.315959][T11074] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.426346][ T6753] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.433646][ T6753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.458548][ T6753] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.465855][ T6753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.703716][T11072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.768211][T11075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.111343][T11078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.683252][T11075] veth0_vlan: entered promiscuous mode [ 294.787197][ T780] hsr_slave_0: left promiscuous mode [ 294.820114][ T780] hsr_slave_1: left promiscuous mode [ 294.890872][ T780] hsr_slave_0: left promiscuous mode [ 294.906540][ T780] hsr_slave_1: left promiscuous mode [ 294.925940][ T780] hsr_slave_0: left promiscuous mode [ 294.932283][ T780] hsr_slave_1: left promiscuous mode [ 294.938841][ T780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.946897][ T780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.956905][ T780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.964340][ T780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.013941][ T780] veth1_vlan: left promiscuous mode [ 295.022806][ T780] veth1_macvtap: left promiscuous mode [ 295.029041][ T780] veth1_vlan: left promiscuous mode [ 295.034416][ T780] veth0_vlan: left promiscuous mode [ 295.041680][ T780] veth1_macvtap: left promiscuous mode [ 295.047576][ T780] veth0_macvtap: left promiscuous mode [ 295.053276][ T780] veth1_vlan: left promiscuous mode [ 295.080399][T11261] delete_channel: no stack [ 295.233642][T11268] netlink: 'syz.2.1412': attribute type 10 has an invalid length. [ 295.694246][ T780] team0 (unregistering): Port device team_slave_1 removed [ 295.748243][ T780] team0 (unregistering): Port device C removed [ 296.701523][ T780] team0 (unregistering): Port device team_slave_1 removed [ 296.750317][ T780] team0 (unregistering): Port device team_slave_0 removed [ 297.640203][ T780] team_slave_1 (unregistering): left promiscuous mode [ 297.647415][ T780] team_slave_1 (unregistering): left allmulticast mode [ 297.655371][ T780] team0 (unregistering): Port device team_slave_1 removed [ 297.705588][ T780] team_slave_0 (unregistering): left promiscuous mode [ 297.712441][ T780] team_slave_0 (unregistering): left allmulticast mode [ 297.721688][ T780] team0 (unregistering): Port device team_slave_0 removed [ 298.397763][T11072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.425335][T11075] veth1_vlan: entered promiscuous mode [ 298.503634][T11074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.562577][T11275] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1413'. [ 298.607186][T11078] veth0_vlan: entered promiscuous mode [ 298.659293][T11078] veth1_vlan: entered promiscuous mode [ 298.733700][T11075] veth0_macvtap: entered promiscuous mode [ 298.778795][T11075] veth1_macvtap: entered promiscuous mode [ 298.941418][T11078] veth0_macvtap: entered promiscuous mode [ 298.956225][T11075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.974172][T11078] veth1_macvtap: entered promiscuous mode [ 298.995301][T11075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.070303][ T6753] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.117300][T11078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.170348][T11078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.187487][ T6753] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.200582][ T6753] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.267036][ T6753] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.337830][ T6753] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.372469][ T6753] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.397177][T11291] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1416'. [ 299.423175][ T6753] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.446212][ T6753] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.581046][T11072] veth0_vlan: entered promiscuous mode [ 299.637514][T11072] veth1_vlan: entered promiscuous mode [ 299.675457][ T9807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.683419][ T9807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.695533][T11296] netlink: 'syz.2.1417': attribute type 39 has an invalid length. [ 299.718028][ T9807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.736247][ T9807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.815076][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.822950][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.952889][T11074] veth0_vlan: entered promiscuous mode [ 299.969001][ T780] ================================================================== [ 299.977134][ T780] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x666/0xca0 [ 299.985212][ T780] Write of size 8 at addr ffff888055c14468 by task kworker/u8:5/780 [ 299.993199][ T780] [ 299.995530][ T780] CPU: 0 UID: 0 PID: 780 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 299.995552][ T780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 299.995564][ T780] Workqueue: netns cleanup_net [ 299.995598][ T780] Call Trace: [ 299.995605][ T780] [ 299.995612][ T780] dump_stack_lvl+0x189/0x250 [ 299.995630][ T780] ? lock_release+0x2a/0x3e0 [ 299.995651][ T780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.995664][ T780] ? rcu_is_watching+0x15/0xb0 [ 299.995680][ T780] ? lock_release+0x4b/0x3e0 [ 299.995703][ T780] ? __virt_addr_valid+0x1c8/0x5c0 [ 299.995726][ T780] ? __virt_addr_valid+0x4a5/0x5c0 [ 299.995745][ T780] print_report+0xca/0x240 [ 299.995759][ T780] ? __xfrm_state_delete+0x666/0xca0 [ 299.995775][ T780] kasan_report+0x118/0x150 [ 299.995792][ T780] ? __xfrm_state_delete+0x666/0xca0 [ 299.995819][ T780] __xfrm_state_delete+0x666/0xca0 [ 299.995850][ T780] xfrm_state_flush+0x45f/0x770 [ 299.995880][ T780] xfrm6_tunnel_net_exit+0x3c/0x100 [ 299.995903][ T780] ops_undo_list+0x49a/0x990 [ 299.995927][ T780] ? __pfx_ops_undo_list+0x10/0x10 [ 299.995948][ T780] ? do_raw_spin_unlock+0x122/0x240 [ 299.995969][ T780] cleanup_net+0x4c5/0x800 [ 299.995989][ T780] ? __pfx_cleanup_net+0x10/0x10 [ 299.996008][ T780] ? _raw_spin_unlock_irq+0x23/0x50 [ 299.996023][ T780] ? process_scheduled_works+0x9ef/0x17b0 [ 299.996036][ T780] ? process_scheduled_works+0x9ef/0x17b0 [ 299.996052][ T780] process_scheduled_works+0xae1/0x17b0 [ 299.996098][ T780] ? __pfx_process_scheduled_works+0x10/0x10 [ 299.996131][ T780] worker_thread+0x8a0/0xda0 [ 299.996148][ T780] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 299.996172][ T780] ? __kthread_parkme+0x7b/0x200 [ 299.996198][ T780] kthread+0x70e/0x8a0 [ 299.996218][ T780] ? __pfx_worker_thread+0x10/0x10 [ 299.996231][ T780] ? __pfx_kthread+0x10/0x10 [ 299.996250][ T780] ? _raw_spin_unlock_irq+0x23/0x50 [ 299.996264][ T780] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.996279][ T780] ? __pfx_kthread+0x10/0x10 [ 299.996296][ T780] ret_from_fork+0x436/0x7d0 [ 299.996314][ T780] ? __pfx_ret_from_fork+0x10/0x10 [ 299.996336][ T780] ? __switch_to_asm+0x39/0x70 [ 299.996350][ T780] ? __switch_to_asm+0x33/0x70 [ 299.996365][ T780] ? __pfx_kthread+0x10/0x10 [ 299.996382][ T780] ret_from_fork_asm+0x1a/0x30 [ 299.996416][ T780] [ 299.996421][ T780] [ 300.225680][ T780] Allocated by task 9629: [ 300.230018][ T780] kasan_save_track+0x3e/0x80 [ 300.234702][ T780] __kasan_slab_alloc+0x6c/0x80 [ 300.239560][ T780] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 300.245018][ T780] xfrm_state_alloc+0x24/0x2f0 [ 300.249805][ T780] __find_acq_core+0x8a7/0x1c00 [ 300.254734][ T780] xfrm_find_acq+0x78/0xa0 [ 300.259141][ T780] xfrm_alloc_userspi+0x6b3/0xc90 [ 300.264155][ T780] xfrm_user_rcv_msg+0x7a3/0xab0 [ 300.269090][ T780] netlink_rcv_skb+0x208/0x470 [ 300.273856][ T780] xfrm_netlink_rcv+0x79/0x90 [ 300.278527][ T780] netlink_unicast+0x82c/0x9e0 [ 300.283281][ T780] netlink_sendmsg+0x805/0xb30 [ 300.288091][ T780] __sock_sendmsg+0x219/0x270 [ 300.292868][ T780] ____sys_sendmsg+0x505/0x830 [ 300.297642][ T780] ___sys_sendmsg+0x21f/0x2a0 [ 300.302326][ T780] __x64_sys_sendmsg+0x19b/0x260 [ 300.307254][ T780] do_syscall_64+0xfa/0x3b0 [ 300.311749][ T780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.317630][ T780] [ 300.319946][ T780] Freed by task 43: [ 300.323740][ T780] kasan_save_track+0x3e/0x80 [ 300.328498][ T780] kasan_save_free_info+0x46/0x50 [ 300.333519][ T780] __kasan_slab_free+0x5b/0x80 [ 300.338274][ T780] kmem_cache_free+0x18f/0x400 [ 300.343048][ T780] xfrm_state_gc_task+0x52d/0x6b0 [ 300.348058][ T780] process_scheduled_works+0xae1/0x17b0 [ 300.353593][ T780] worker_thread+0x8a0/0xda0 [ 300.358169][ T780] kthread+0x70e/0x8a0 [ 300.362226][ T780] ret_from_fork+0x436/0x7d0 [ 300.366804][ T780] ret_from_fork_asm+0x1a/0x30 [ 300.371564][ T780] [ 300.373988][ T780] The buggy address belongs to the object at ffff888055c14440 [ 300.373988][ T780] which belongs to the cache xfrm_state of size 928 [ 300.387947][ T780] The buggy address is located 40 bytes inside of [ 300.387947][ T780] freed 928-byte region [ffff888055c14440, ffff888055c147e0) [ 300.401683][ T780] [ 300.404002][ T780] The buggy address belongs to the physical page: [ 300.410420][ T780] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888055c14440 pfn:0x55c14 [ 300.420486][ T780] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 300.428978][ T780] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 300.436549][ T780] page_type: f5(slab) [ 300.440546][ T780] raw: 00fff00000000040 ffff88801b337280 dead000000000122 0000000000000000 [ 300.449132][ T780] raw: ffff888055c14440 00000000800f0009 00000000f5000000 0000000000000000 [ 300.457713][ T780] head: 00fff00000000040 ffff88801b337280 dead000000000122 0000000000000000 [ 300.466375][ T780] head: ffff888055c14440 00000000800f0009 00000000f5000000 0000000000000000 [ 300.475038][ T780] head: 00fff00000000002 ffffea0001570501 00000000ffffffff 00000000ffffffff [ 300.483705][ T780] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 300.492362][ T780] page dumped because: kasan: bad access detected [ 300.498770][ T780] page_owner tracks the page as allocated [ 300.504471][ T780] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6823, tgid 6822 (syz.3.215), ts 116489708333, free_ts 105280108476 [ 300.523661][ T780] post_alloc_hook+0x240/0x2a0 [ 300.528427][ T780] get_page_from_freelist+0x21e4/0x22c0 [ 300.533965][ T780] __alloc_frozen_pages_noprof+0x181/0x370 [ 300.539763][ T780] alloc_pages_mpol+0x232/0x4a0 [ 300.544609][ T780] allocate_slab+0x8a/0x370 [ 300.549105][ T780] ___slab_alloc+0xbeb/0x1420 [ 300.553858][ T780] kmem_cache_alloc_noprof+0x283/0x3c0 [ 300.559314][ T780] xfrm_state_alloc+0x24/0x2f0 [ 300.564081][ T780] pfkey_add+0x6e4/0x2e00 [ 300.568405][ T780] pfkey_sendmsg+0xbfe/0x1090 [ 300.573078][ T780] __sock_sendmsg+0x219/0x270 [ 300.577752][ T780] ____sys_sendmsg+0x505/0x830 [ 300.582510][ T780] ___sys_sendmsg+0x21f/0x2a0 [ 300.587180][ T780] __x64_sys_sendmsg+0x19b/0x260 [ 300.592113][ T780] do_syscall_64+0xfa/0x3b0 [ 300.596611][ T780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.602508][ T780] page last free pid 5860 tgid 5860 stack trace: [ 300.608838][ T780] __free_frozen_pages+0xbc4/0xd30 [ 300.613959][ T780] __slab_free+0x303/0x3c0 [ 300.618374][ T780] qlist_free_all+0x97/0x140 [ 300.622958][ T780] kasan_quarantine_reduce+0x148/0x160 [ 300.628411][ T780] __kasan_slab_alloc+0x22/0x80 [ 300.633252][ T780] __kmalloc_cache_noprof+0x1be/0x3d0 [ 300.638620][ T780] kernfs_fop_open+0x397/0xca0 [ 300.643377][ T780] do_dentry_open+0x950/0x13f0 [ 300.648130][ T780] vfs_open+0x3b/0x340 [ 300.652192][ T780] path_openat+0x2ee5/0x3830 [ 300.656780][ T780] do_filp_open+0x1fa/0x410 [ 300.661282][ T780] do_sys_openat2+0x121/0x1c0 [ 300.665949][ T780] __x64_sys_openat+0x138/0x170 [ 300.670806][ T780] do_syscall_64+0xfa/0x3b0 [ 300.675319][ T780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.681222][ T780] [ 300.683557][ T780] Memory state around the buggy address: [ 300.689196][ T780] ffff888055c14300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 300.697255][ T780] ffff888055c14380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 300.705333][ T780] >ffff888055c14400: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 300.713411][ T780] ^ [ 300.720856][ T780] ffff888055c14480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 300.728917][ T780] ffff888055c14500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 300.736977][ T780] ================================================================== [ 300.745210][ T780] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 300.752421][ T780] CPU: 0 UID: 0 PID: 780 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 300.761844][ T780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 300.771921][ T780] Workqueue: netns cleanup_net [ 300.776705][ T780] Call Trace: [ 300.779979][ T780] [ 300.782906][ T780] dump_stack_lvl+0x99/0x250 [ 300.787557][ T780] ? __asan_memcpy+0x40/0x70 [ 300.793058][ T780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.798382][ T780] ? __pfx__printk+0x10/0x10 [ 300.803167][ T780] vpanic+0x281/0x750 [ 300.807173][ T780] ? __pfx_vpanic+0x10/0x10 [ 300.811684][ T780] ? irqentry_exit+0x74/0x90 [ 300.816273][ T780] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.821583][ T780] panic+0xb9/0xc0 [ 300.825324][ T780] ? __pfx_panic+0x10/0x10 [ 300.829757][ T780] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 300.835660][ T780] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 300.842013][ T780] ? __xfrm_state_delete+0x666/0xca0 [ 300.847324][ T780] check_panic_on_warn+0x89/0xb0 [ 300.852276][ T780] ? __xfrm_state_delete+0x666/0xca0 [ 300.857565][ T780] end_report+0x78/0x160 [ 300.861800][ T780] kasan_report+0x129/0x150 [ 300.866292][ T780] ? __xfrm_state_delete+0x666/0xca0 [ 300.871595][ T780] __xfrm_state_delete+0x666/0xca0 [ 300.876718][ T780] xfrm_state_flush+0x45f/0x770 [ 300.881645][ T780] xfrm6_tunnel_net_exit+0x3c/0x100 [ 300.886873][ T780] ops_undo_list+0x49a/0x990 [ 300.891476][ T780] ? __pfx_ops_undo_list+0x10/0x10 [ 300.896593][ T780] ? do_raw_spin_unlock+0x122/0x240 [ 300.901794][ T780] cleanup_net+0x4c5/0x800 [ 300.906214][ T780] ? __pfx_cleanup_net+0x10/0x10 [ 300.911334][ T780] ? _raw_spin_unlock_irq+0x23/0x50 [ 300.916541][ T780] ? process_scheduled_works+0x9ef/0x17b0 [ 300.922256][ T780] ? process_scheduled_works+0x9ef/0x17b0 [ 300.927976][ T780] process_scheduled_works+0xae1/0x17b0 [ 300.933550][ T780] ? __pfx_process_scheduled_works+0x10/0x10 [ 300.939549][ T780] worker_thread+0x8a0/0xda0 [ 300.944139][ T780] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 300.950471][ T780] ? __kthread_parkme+0x7b/0x200 [ 300.955417][ T780] kthread+0x70e/0x8a0 [ 300.959497][ T780] ? __pfx_worker_thread+0x10/0x10 [ 300.964616][ T780] ? __pfx_kthread+0x10/0x10 [ 300.969216][ T780] ? _raw_spin_unlock_irq+0x23/0x50 [ 300.974429][ T780] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.979628][ T780] ? __pfx_kthread+0x10/0x10 [ 300.984230][ T780] ret_from_fork+0x436/0x7d0 [ 300.988826][ T780] ? __pfx_ret_from_fork+0x10/0x10 [ 300.993945][ T780] ? __switch_to_asm+0x39/0x70 [ 300.998816][ T780] ? __switch_to_asm+0x33/0x70 [ 301.003703][ T780] ? __pfx_kthread+0x10/0x10 [ 301.008311][ T780] ret_from_fork_asm+0x1a/0x30 [ 301.013116][ T780] [ 301.016467][ T780] Kernel Offset: disabled [ 301.020792][ T780] Rebooting in 86400 seconds..