last executing test programs: 17m54.302200779s ago: executing program 32 (id=1615): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(0x0, 0x0, 0x20c, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830e}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r3, 0x2f, 0x0, @void}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000001c0)={'caif0\x00'}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848430000005e140602000006020e00280010000700028000001294", 0x2e}], 0x1}, 0x8050) 17m18.20386679s ago: executing program 33 (id=1818): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x922000000003, 0x11) (async) socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) socket$kcm(0x29, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36) 16m41.449187277s ago: executing program 34 (id=1979): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x1}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x7ff}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x180) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x3, @random="0d230a04266f", 'pim6reg1\x00'}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)="e8cfa85bec281dac84e4537e89af2471edab2b8b815fc6ae770ef9588e0451c2d68d505520f6fbfa7c00b7fc619fcd460a72ba567ef7", 0x36}, {&(0x7f00000003c0)="10791668786beecf257348be01cbde7a53f5a2baff4d6b63140552bf7bc47b559ecaa682d5e8b300cb8e3d4cb0bd045a693d120176c9a1da0ad6d094e877596fa00df138593aefffb9f38a6396a841951c75dad9a9508a2c605bc956e43e656700e101ec7037145390a43e4004a9bc0f53c616ddd5985ae4268004c6742cd15c5a2b050d5d3c3a961a0b43509c3f888eaa9e077a589dac597893dcb773c967f5725bf7493133c0a307c88ec66a8369b2f1c564d07d6851bfc1cfec695d1cac7ab4907daa8a", 0xc5}, {&(0x7f00000004c0)="ddf957f9cb5c90867fd1471f144d5f4cc7594cb2b584627985bf0544cd9d71ffdafd7c0c04f3f9b5ce8c1b3d52eea01de08ad3b314170bb6a2d3bf7dc8be7c6969caf82e3f55c062f4bc358473cfb94aef4b023f134df05d8d58ac7b71de0e038be9530e01c7b443f00b2bd1ccc4ab898cb14cb793f548c2960a78705f06473f563d1fe0e223322df579fc71e705337233ef9cad47141212", 0x98}], 0x3, &(0x7f0000000780)=[{0xf8, 0x10c, 0x6, "33665dcb5e7ccd0d0b48d1dcfed1ddbf8799fa911e684975b61cbc78733080e783f10f0df4ab67abb30391a78711468bfcf514604785396c896e9b50cf6c131e351a5b0712ade20e6cdfc8437b2e763b943d305267b7368de030f8847eac72abcbace2db5b6e14abe6d0cb7b00f23d2d950eb2eac52f7f3d8de8922123612bc300c717c31d0e49fd92b0582a2d1e179a8e59c79bbdc6e7752bd2606af04c90199c4881f3d49b577724056edfd1d71c39437b2fda12b58775a9b889f24b382a5cbfd1d4b00be25ba0e3cbb92f166bb3d4af3ec33c499a2f228f9a39d9e2d242b38d72"}, {0x28, 0x0, 0xef, "2eece842a70ce175dcd6d458e67bae9d78258e66072f1a"}, {0x28, 0x10d, 0x0, "5d88042772e052b5c10c135f1a4b819ac3e20337a31f"}, {0x108, 0x107, 0x40, "911dff2d05a19bb2bd8531eba7efcd9112893b212f89f7b5cff61a265051849c1a3d08fe1e1923c06f6c81bb3320f8a490f669458dcfe8c556788945219f7c28070ee069cb51e57cead7bf508e7db624b850f240881deae76126fedad5f42af63a72bb663f7cbd35b820b9f3889a04414a8cff8d4350c7eb9430575aa9adc616fd11717e26b47dbce26736cba378c9cafb012131c9d4d5f580e33ffdedafbe385793b64faff911e3a6b7ac2370a7cd650c505886ec1ec2ac7bc4ac95e659bf44151c390f34d6ba0f7a83f2dbfb6def4fdcfedc9054459620c3a3e8bac1ea68821bbfb3ab8bac25ec6724817a96b5cba0780f53"}, {0xf8, 0x10f, 0x7f, "86780db0147fe55a56e764b22aea3d296ee80b1a70150ad40ee5ad21df32bb02df1e7158059ea8af1fcfa4686c0883b7e26878bad60b2961f49d6e3d5f7abab9f235ae5eb2ba43eba43dc9a9092ca5908c35fbb947157e55772372e805dc8a72cb8400d62bac118c8538309211f90b0e86fd4c209d75ac5c8578344e2f2f1dd83494b244361b2480bf7012ddc905755aa8f1597f852a0c844938e35a74f938877bb5c031a16f57bd6716a4456ac0ee77d5fc74a2ff4d41aa690dd4d6c4bdfe009500ca1640fc17f023166b103daf83a24037eab7918759dc29ee4b5b0e143fe91e29ef"}, {0x28, 0x10c, 0xfffffff9, "80bc3d3326a10f4b6f78df1c7e8f344e46f38fddc2aa82"}, {0x80, 0x101, 0x7, "e92c000b79c95324f61450941fca59d6256b15f4ec8f4debde2cf4615bbe58574a68e74d8b261c8784ea4c3b395582650bbb09da590c8ccc357553b7b9bff93e9cbc2ad9ce3cc6d1d4123687d1c2016d9822a93529bfe9b03112fc555d90f4aa1c8455c02105b5a4c65b7b52"}], 0x3f0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9m18.647665311s ago: executing program 6 (id=5494): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000), 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x6, 0xa}, 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000001300000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002200000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040) 9m18.38143131s ago: executing program 6 (id=5499): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x2, 0xc, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x60}, 0x1, 0x7}, 0x8014) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r1) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x30}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="4801000016000d0027bd7000fedbdf25ac24ac8c0d41ecf978767eda14141e000000000000000000000000fc0200000000006800feff0000000000004e2200004e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}}, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f00000007c0)={'dummy0\x00', @broadcast}) recvmsg$qrtr(r2, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/218, 0xda}, {&(0x7f0000000700)=""/236, 0xec}], 0x2, 0x0, 0x0, 0x10040}, 0x38, 0x142) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(r1, &(0x7f0000002100)={0x0, 0x0, 0x0}, 0x2100) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmsg$can_raw(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)}, 0x40010100) 9m17.869784603s ago: executing program 6 (id=5504): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)={0x14, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}, 0x1, 0x0, 0x0, 0x44814}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x1, 0x0, 0x62, 0x0, 0x4, 0x448, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) close(r1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x10, 0x2, 0x0, 0xff, 0x0, 0xcbf0, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_config_ext={0xffff8880b8722b10, 0x80000001}, 0x0, 0x5, 0xffffffff, 0x0, 0x4, 0xfffffffc, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{0x0, 0xe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x840000000002, 0x3, 0xff) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_type(r6, &(0x7f0000000200), 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)="ebb28f7fab53b914689eb969ff0ebd7dfe01c185fedbdd584a09829b5ee698f3b61432de4c91ab0fb3bac33a", 0x2c}], 0x1}, 0x4800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @exit, @exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x48}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9}, 0x94) r7 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$kcm(r7, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x41) 9m17.254967479s ago: executing program 6 (id=5506): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x7f0}}, 0x0) (async) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xffffffff7fffffff) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x54, 0x1, 0xe, 0x0, 0x0, 0x4, 0x1082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0x5, 0x8, 0x2, 0x0, 0xe61b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x202, 0x0, 0xffffffff, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%+9llu \x00'}, 0x20) (async) fstat(0xffffffffffffffff, &(0x7f0000000a80)) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x9}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) r2 = socket$kcm(0x2, 0x2, 0x0) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff79}, 0x60) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r1, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%pS \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_ext={0x1c, 0x6, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000b00000000000000030000e4fd35000002000089f17d57428fe2740f5354339f58097d00000000000000000042a41000040000009500000000000000"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x1, 0xb, 0x401, 0xefffffff}, 0x10, 0x2825e, r4, 0x6, &(0x7f0000000f40)=[r3], &(0x7f0000000c40)=[{0x3, 0x4, 0xf, 0x1}, {0x4, 0x1, 0x7, 0x5}, {0x1, 0x1, 0x9, 0x8}, {0x0, 0x5, 0xd, 0x9}, {0x1, 0x1, 0xd, 0x3}, {0x1, 0x2, 0xf, 0x9}], 0x10, 0x6fa9d394}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9b}, 0x94) (async) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a, 0x4, @perf_bp={0x0, 0x1}, 0x104082, 0xa1b7, 0xffffffff, 0x0, 0x1ff, 0xffffffff, 0x0, 0x0, 0xffffb7fe, 0x0, 0x8}, 0x0, 0x5, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async) socket$kcm(0x11, 0x2, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 9m17.133780358s ago: executing program 6 (id=5507): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 9m17.013878759s ago: executing program 6 (id=5508): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0x7ff, 0xfffa, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r3, 0x29, 0x1e, &(0x7f00000000c0), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x1, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x884}, 0x8810) 9m1.476550079s ago: executing program 35 (id=5508): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0x7ff, 0xfffa, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r3, 0x29, 0x1e, &(0x7f00000000c0), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x1, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x884}, 0x8810) 4m9.758125252s ago: executing program 4 (id=8295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, ':\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8ffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000, 0x7}, 0x800, 0x9, 0x6, 0x6, 0xfffffffffdf7bbfe, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x3}, 0x0, 0x4000000000e, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xb9b4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 4m9.46386597s ago: executing program 4 (id=8299): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x40) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x10, 0x2, 0x4) socketpair(0x22, 0x2, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r0}, 0x18) r8 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x6, 0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r0, 0x0, 0x5}, 0x18) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r7}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r10, 0x4008240b, &(0x7f0000000380)={0x2, 0x80, 0x8, 0x7, 0x3, 0x0, 0x0, 0x2, 0x12001, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x10a, 0x80}, 0x0, 0xba, 0x6, 0x1, 0x8, 0x3e4b, 0x400, 0x0, 0x14, 0x0, 0x2000000000000005}) 4m8.396329046s ago: executing program 4 (id=8306): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001340)) socket$kcm(0xa, 0x2, 0x73) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0xa1, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x68, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="03b4b31e30047e358b00bc6fac291bdc4e2bc5008cb3b7da3663b2690afd039f5c51d67080fcd3617cb122d5f71f92424a2ee710621092bb78f6d26c80694ce3460c1aaa4bfb33009854b16781592432cdadc14b33e1", @ANYRES32=r2, @ANYRES32, @ANYBLOB="03000000020000000200"/21], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10000) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26100000000000bf67200000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 4m7.435333159s ago: executing program 4 (id=8309): unlink(&(0x7f0000000040)='./file0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x200000000000007, 0x300) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x8080, 0x2, 0x0, 0x1, 0x7fffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, 0x0, 0x48800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0x7, 0x0, &(0x7f00000002c0)="ff412f66b083dc", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x5, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r3}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x5, 0xe, 0x0, &(0x7f0000000040)="25a688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0xec, 0x24, 0x200, 0x70bd2a, 0x25dfdbff, {0x1}, [@generic="a90a6701bab523cd119eb6abb7d77aa3c581d40e469314db32b49ac576c87fb1da56f47f3f4835cacc1e557598372579dfb7ee2b52df027829b71cc173b0ccd07c04658541911f177b5853b589c8b252fb53d0848361a92735be40c6c79eb06b100e297fcb6fd085ae1a0d3547028c76f66a46b494a19c761820f0be6d926054656a14e3f6a90df23f997129404578bb6a4b14141b263db89b900511b374df86b9478851321f726500d2d243a88c645b8e9f719cbbe5d08da136ac3a32aee18b784a9059e7d85f81317dcafaa83087", @typed={0x8, 0x46, 0x0, 0x0, @u32=0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x8003}, 0x4000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000020002c000000030a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000"], 0xc8}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x10, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29}, 0x94) 4m6.822150146s ago: executing program 4 (id=8313): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe8000000000"], 0xfdef) r4 = getpid() socket$kcm(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000480000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001080)={0xffffffffffffffff, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f086ddeff913e613c26d42000000fbac141417e000031762079f4b", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x3}, 0xe74, 0xc78, 0xb, 0x0, 0x0, 0x0, 0xfc00}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000a40)="2529b9001ad6b9236f9690890ad322e6fc6571c5336c23c6854af6c46cf237254f244222624661b3e2f36a074beddb44e87c18c03d2aa40a8eada58ffde7a6a1f0e184747446dbb36a80d2b7", 0x0, 0x6, 0x88be, 0xffffffffffffffae, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x48) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xef, &(0x7f0000000200)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d00010004080c00bdad20409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x24002040) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 4m6.509485027s ago: executing program 4 (id=8317): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x16, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x1, 0x3, 0x0, 0x7, 0x10, 0x8}, @map_fd={0x18, 0x8}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000240)='GPL\x00', 0x4b66, 0xd5, &(0x7f0000000400)=""/213, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4, 0xa, 0x800}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x2, 0x3}], 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000005c0)={r1, r2}) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) r5 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_pid(r5, &(0x7f0000000180)=r6, 0x12) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x60ff, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r6, r7, 0x0, 0x7, &(0x7f00000000c0)='THAWED\x00'}, 0x30) (async) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) 4m3.447879357s ago: executing program 36 (id=8235): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea000006000000000000000000000000000000000000000000000a0000000000000000fc010000000000000000000000008100050006"], 0xa8}}, 0x40080) 3m51.027220953s ago: executing program 37 (id=8317): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x16, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x1, 0x3, 0x0, 0x7, 0x10, 0x8}, @map_fd={0x18, 0x8}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000240)='GPL\x00', 0x4b66, 0xd5, &(0x7f0000000400)=""/213, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4, 0xa, 0x800}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x2, 0x3}], 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000005c0)={r1, r2}) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) r5 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_pid(r5, &(0x7f0000000180)=r6, 0x12) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x60ff, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r6, r7, 0x0, 0x7, &(0x7f00000000c0)='THAWED\x00'}, 0x30) (async) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) 3m16.261855055s ago: executing program 9 (id=8656): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001340)) socket$kcm(0xa, 0x2, 0x73) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, &(0x7f00000000c0), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0xa1, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x68, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="03000000020000000200"/28], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10000) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26100000000000bf67200000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 3m15.379691542s ago: executing program 7 (id=8669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4004051}, 0x24000840) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x64, 0x1, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x3a}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0xffff2fd1}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xbeae}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x40}]}]}, 0x64}}, 0x8c5) 3m15.254847266s ago: executing program 7 (id=8671): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000002c0095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3m15.252747928s ago: executing program 9 (id=8672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x15, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040}, 0x48014) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) 3m14.996935187s ago: executing program 3 (id=8674): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) r0 = socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0x1e, 0x5, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0x20, &(0x7f0000000c40)={&(0x7f0000000a80)=""/189, 0xbd, 0x0, &(0x7f0000000b40)=""/231, 0xe7}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r4 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r4, &(0x7f0000000a40)={&(0x7f0000000440)=@isdn={0x22, 0x93, 0x1, 0x4e, 0x9}, 0x80, &(0x7f0000000840), 0x0, &(0x7f00000008c0)=[{0x90, 0x111, 0x7, "7f47aea55538c76ab028f4b74f07cc4f55c73388b69b5e3c497bfbacb38139e1111e9703118e2230106daf4ceaa4a01149d911ddfd2f555ebbb820c1820032b0adc6b872e016b355bdc1e3e4e862a2bd697a27939421338b86bb8498b33f34ae87ed9020980b4732ea900e9e59568821545b6a0cb6aac8a15ce8e975b79fcb"}, {0xe8, 0x107, 0xd, "57e9812d195ce13cd3067d2007698e7245ff2ff6e98940a2e9e7b8c19ef2657b4f4841318b9b689da73c86c63ad0d5a102a8e5bfd0e0b9a41b2e3ccc3415ccca6ed056d92227c186e495496322667961923628a6be6180cee94e4fddfa343994b881093551fe2f4118c57f3c96951a12718bd6f375289d1914c9bfc43da291e5e30e78e01eedf4c5cbb19920c3f1dae5c8ea58bef6b6aa4bcf1ded89efb45a9cb3ab7aa58626d4f6f51efb0adde631005e2c616e6f7c98fdaea41641b89d07f6d32b4aa184155e0c460beeb70fae53408440343f"}], 0x178}, 0x50) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0xfffd, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4040, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r7, 0x5, 0x0, 0x3fa8, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x40) (async) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000280)=r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010122bd70006c892128735511990800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) socket$kcm(0x10, 0x3, 0x10) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000140)='{#[[\x00') (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private0={0x76}, 0x2}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="bb", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000000000008400f6ff070000003d3152a6773eb7d092000000000000002000000000000000840000000800000076"], 0x40}, 0x20004000) 3m14.784992648s ago: executing program 7 (id=8676): socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x26) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000000) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x5865, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}, {0x0}], 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x50) sendmsg$kcm(r3, 0x0, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8, 0x1, 0x1, 0x0, 0x4000000}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x27}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) socket$kcm(0x2, 0x5, 0x84) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYRES64=r1], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m14.784527891s ago: executing program 9 (id=8677): r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8917, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) (async) socket$kcm(0x11, 0x3, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x4d, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x3ff, 0x7fffffff, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x2}, 0x28) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) socketpair(0x28, 0x1, 0x0, 0x0) (async) r2 = syz_clone(0x582e6080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8932, &(0x7f0000000080)) (async) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) perf_event_open$cgroup(&(0x7f0000000480)={0x3, 0x80, 0x5, 0x79, 0x9, 0xe, 0x0, 0x7ff, 0x20, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000380), 0x5}, 0x62073b0e0dd08c1c, 0x0, 0x10, 0x7, 0x100000000, 0x7, 0x200, 0x0, 0x1000, 0x0, 0xffffffffffffffff}, r3, 0x0, r0, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r4}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r4, 0x0, 0x5}, 0x18) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0xe900) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) r6 = socket$kcm(0x10, 0x1, 0x0) recvmsg$kcm(r6, 0x0, 0x40002002) 3m14.503271342s ago: executing program 3 (id=8679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000aff000000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000031200048008000240000000120800014000000000140003006e657464657673696d30"], 0xac}, 0x1, 0xf5ffffff}, 0x0) 3m14.305015778s ago: executing program 7 (id=8680): r0 = socket$kcm(0x10, 0x2, 0x2) close(r0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x81000001941}, 0x10401, 0x2, 0x4180, 0x8, 0x8, 0x80000003}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x20040010) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfe}, 0x80, 0x0}, 0x20000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000000000070040000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000fb415c73b9856976dc0ba749148749c104f34e392221382391cf64efd1d6d1467ff6888eaf449b0b8a9b79817b5bb42ea0858dddca5afec5d22c82a26c4af55663c14ed9445b2249a8059bb16264deacf2d46adb4937d2e7d42396ced5190a3ee237415284c2b159cfe0a5c5cb68d19b610e60d7495d4aee6034bc051a5cce6dafb26a16d86bb40c0fefc61ecefad2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000000000000000000fdffffffffffffff0000000000000000"], 0x50) socket$igmp6(0xa, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r6, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x800, 0x0, 0x0, 0x41100, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=r5, @ANYBLOB="0200000000000000000000000000000000008b94", @ANYRES32=r7, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000004100e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$kcm(0x11, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66bbf2", 0x10}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) 3m14.205542379s ago: executing program 3 (id=8681): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0xf}, 0x104101, 0x3fd, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0xf}, 0x104101, 0x3fd, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000000020605000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a3000000000050005000200000005000100060000001c000780080013400000000208000640000001000800084000000013"], 0x64}}, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r4 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x1, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8}, @CTA_TIMEOUT_DCCP_OPEN={0x8}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0xfffffffb}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4014844}, 0x0) 3m14.204357249s ago: executing program 9 (id=8683): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x42) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, &(0x7f0000000180)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x10}, 0x828, 0x0, 0x0, 0x0, 0xc, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00'], 0x50) socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x1, 0x8, 0x9, 0x7fffffff, 0x6, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdca}, 0x0) socketpair(0x28, 0x1, 0x28, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m13.558899959s ago: executing program 0 (id=8685): socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe73}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5c31, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x8, 0xffffffffffffffff, 0x11) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x26) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000000) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x5865, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}, {0x0}], 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x50) sendmsg$kcm(r3, 0x0, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000010020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000c00cef1b8db2da24e3000f0800014000000000340005800c0001007061796c6f61640024000280400000002708000340000000b908000240000020caca07df4eb68700080900010073797a30000000000900020073797a32000000001400000011000100000000"], 0xc0}, 0x1, 0x0, 0x0, 0xc1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x5, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1c}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) socket$kcm(0x2, 0x5, 0x84) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="800000000906010400006e2c3d2ab26c18730000000000000300ead93c0008800c00078008000a4000000000100007800900130073797a31010000000000000005001a0000000000100007800c001840000000000000000005000100070000000800094000000001080009400200000005000100070000000900020073797a310000000004000780"], 0x80}, 0x1, 0x0, 0x0, 0x48000}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYRES64=r1], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m12.473160945s ago: executing program 3 (id=8689): socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66a}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5bf217e2f11db725d6ab156a206325aadd1b4654d87f6a7d948e61f48358012cd3", 0x21}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000000140)="123d15aa958916e66549a178a1a46de63e5bba3f832490e5d910472880378aa118ff94133929e62efd912faad272bb2415310a271a1600d263cf914729bae4ff3cc96cbc21746c2a26df04e07b4ecc5ed569e2d4f0493a7f1ac0612f9b9ad38de3ac2130c4068b16d3aeb7047d78aed961742aef64fb368ac736998bd2fd1bde1728ef766900f173c9fd034c9cf33be3182481d986bcf664cc38363ca9299c1d3f90361997b26b014504c41ab5f0c539dd", 0xb1}], 0x3, &(0x7f0000000240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x400}}], 0x30}, 0xc004) r2 = socket$kcm(0x2c, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x6, &(0x7f0000000000)=r3, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055) 3m12.463282611s ago: executing program 7 (id=8690): syz_clone(0x48201900, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0xb7, 0x0, 0x0, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9e", 0xd2}], 0x1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000007000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="0000d756e9", @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x100000004, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8913, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000000c0)='pimreg0\x00') ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r7, 0x0, 0x20040084) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x61}, {0x6}]}) 3m12.079500042s ago: executing program 9 (id=8697): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1948}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x0, 0x72, 0x0, &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143fdd, 0x80, 0x1}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002680)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c000000210000000200000008000000040000840700000004000000000000008200000007000000010000000600000048000000050000002b0f0000000400000000000007"], 0x0, 0x56, 0x0, 0x0, 0xfffffffc}, 0x20) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x18d, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x8, &(0x7f00000000c0), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(r7, 0x0, 0x41000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x47, 0x0, &(0x7f0000000280)="880a64b5afea2161e2c9b406781381a387829384ca76b266f3bf594488f043dadafae880df6d267ce9de097d42a86cb2f8032b8208d9d7fb074377b3e87d57d0ef7fbaa0ab749f", 0x0, 0x4, 0x0, 0x100}, 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r8, 0x58, &(0x7f00000002c0)}, 0x10) 3m12.067178446s ago: executing program 0 (id=8698): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) sendmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x2c, &(0x7f0000000140)=[{&(0x7f00000006c0)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES8=r6], 0x12) sendmsg$AUDIT_TRIM(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3f6, 0x200, 0x70bd28, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2000c800}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003200000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe000000008500000026000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d339707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf90a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089070000009876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13a0100000082c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72705edfa2cddb01f44c850e4ea450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e8894680600000000000000db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534c88d443ac8b3685135dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6faa21b0f5a0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f416661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7ea6a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d136ecc87185f2437c4fce146d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae0000000000007c012779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53d2f64ec521f6fa1cd02843a5e16074d86c9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a1167b948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfea4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f0000b2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d01005a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303d000000000000000000000000000000b17fedd6b6501a47d0e5b510f4a4fab5a62d5fa7e8ead851b01dbfdfe5823c2600"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) r7 = socket(0x10, 0x3, 0x9) r8 = gettid() syz_open_procfs$namespace(r8, &(0x7f00000003c0)='ns/pid\x00') ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000380)={r7, r1}) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000530414000000080a010100000000000000000200000914000000eb03010000000000000000000000000a00"/60], 0x3c}, 0x1, 0x0, 0x0, 0x240208d1}, 0x40000) sendmsg$RDMA_NLDEV_CMD_RES_GET(r7, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, 0x1409, 0x410, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000840) 3m11.953446191s ago: executing program 3 (id=8700): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x2e05}}], 0x30}, 0x8010) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xf, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xec, 0x1, 0x85, 0x1, 0x0, 0x6, 0x48003, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x100, 0x8, 0x206, 0x4, 0x1, 0x1, 0x6, 0x0, 0x2, 0x0, 0x40}, 0xffffffffffffffff, 0x10000000000b, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x12cd) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x0, 0x0, 0x0, 0x4, {0xa, 0x4e22, 0xfffffffd, @loopback, 0xffffffff}}}, 0x80, 0x0}, 0x40) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r10, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e0000007e020000800000004a00000028660000", @ANYRES16=r10, @ANYBLOB='\a\x00'/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="040000000200000c0000000000000000000000000000000000000000204340a3ac604109c45523c89928bb74311a52e686085ae09b4efd4fc20fa4a5008fab5ffafdd181dd6d91a4b5732092f0cad02ada3aef57f640b3f73707c357cd23bbf234c0e350c97b839c3cdbc16a2d26b47ec4b4cb0d762ccce0b24dc33da597825dcb5b8e25dd3fee5d4950d3b93284907b799cb7398771bff4e4787061633db1812ffb4c"], 0x50) 2m54.124068888s ago: executing program 0 (id=8702): unlink(&(0x7f0000000040)='./file0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x200000000000007, 0x300) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x8080, 0x2, 0x0, 0x1, 0x7fffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, 0x0, 0x48800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0x7, 0x0, &(0x7f00000002c0)="ff412f66b083dc", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x5, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r3}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x5, 0xe, 0x0, &(0x7f0000000040)="25a688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0xec, 0x24, 0x200, 0x70bd2a, 0x25dfdbff, {0x1}, [@generic="a90a6701bab523cd119eb6abb7d77aa3c581d40e469314db32b49ac576c87fb1da56f47f3f4835cacc1e557598372579dfb7ee2b52df027829b71cc173b0ccd07c04658541911f177b5853b589c8b252fb53d0848361a92735be40c6c79eb06b100e297fcb6fd085ae1a0d3547028c76f66a46b494a19c761820f0be6d926054656a14e3f6a90df23f997129404578bb6a4b14141b263db89b900511b374df86b9478851321f726500d2d243a88c645b8e9f719cbbe5d08da136ac3a32aee18b784a9059e7d85f81317dcafaa83087", @typed={0x8, 0x46, 0x0, 0x0, @u32=0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x8003}, 0x4000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a310000f4ff2c000000030a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000"], 0xc8}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x10, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29}, 0x94) 2m54.123212341s ago: executing program 38 (id=8696): perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x15, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x7fffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x82041, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb8, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x3, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000000c0)='pimreg0\x00') ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r7, 0x0, 0x20040084) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x61}, {0x6}]}) 2m54.122794698s ago: executing program 39 (id=8697): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1948}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x0, 0x72, 0x0, &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143fdd, 0x80, 0x1}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002680)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c000000210000000200000008000000040000840700000004000000000000008200000007000000010000000600000048000000050000002b0f0000000400000000000007"], 0x0, 0x56, 0x0, 0x0, 0xfffffffc}, 0x20) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x18d, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x8, &(0x7f00000000c0), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(r7, 0x0, 0x41000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x47, 0x0, &(0x7f0000000280)="880a64b5afea2161e2c9b406781381a387829384ca76b266f3bf594488f043dadafae880df6d267ce9de097d42a86cb2f8032b8208d9d7fb074377b3e87d57d0ef7fbaa0ab749f", 0x0, 0x4, 0x0, 0x100}, 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r8, 0x58, &(0x7f00000002c0)}, 0x10) 2m54.121996087s ago: executing program 40 (id=8700): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x2e05}}], 0x30}, 0x8010) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xf, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xec, 0x1, 0x85, 0x1, 0x0, 0x6, 0x48003, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x100, 0x8, 0x206, 0x4, 0x1, 0x1, 0x6, 0x0, 0x2, 0x0, 0x40}, 0xffffffffffffffff, 0x10000000000b, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x12cd) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x0, 0x0, 0x0, 0x4, {0xa, 0x4e22, 0xfffffffd, @loopback, 0xffffffff}}}, 0x80, 0x0}, 0x40) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r10, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e0000007e020000800000004a00000028660000", @ANYRES16=r10, @ANYBLOB='\a\x00'/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="040000000200000c0000000000000000000000000000000000000000204340a3ac604109c45523c89928bb74311a52e686085ae09b4efd4fc20fa4a5008fab5ffafdd181dd6d91a4b5732092f0cad02ada3aef57f640b3f73707c357cd23bbf234c0e350c97b839c3cdbc16a2d26b47ec4b4cb0d762ccce0b24dc33da597825dcb5b8e25dd3fee5d4950d3b93284907b799cb7398771bff4e4787061633db1812ffb4c"], 0x50) 2m42.184879712s ago: executing program 41 (id=8702): unlink(&(0x7f0000000040)='./file0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x200000000000007, 0x300) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x8080, 0x2, 0x0, 0x1, 0x7fffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, 0x0, 0x48800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0x7, 0x0, &(0x7f00000002c0)="ff412f66b083dc", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x5, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r3}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x5, 0xe, 0x0, &(0x7f0000000040)="25a688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0xec, 0x24, 0x200, 0x70bd2a, 0x25dfdbff, {0x1}, [@generic="a90a6701bab523cd119eb6abb7d77aa3c581d40e469314db32b49ac576c87fb1da56f47f3f4835cacc1e557598372579dfb7ee2b52df027829b71cc173b0ccd07c04658541911f177b5853b589c8b252fb53d0848361a92735be40c6c79eb06b100e297fcb6fd085ae1a0d3547028c76f66a46b494a19c761820f0be6d926054656a14e3f6a90df23f997129404578bb6a4b14141b263db89b900511b374df86b9478851321f726500d2d243a88c645b8e9f719cbbe5d08da136ac3a32aee18b784a9059e7d85f81317dcafaa83087", @typed={0x8, 0x46, 0x0, 0x0, @u32=0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x8003}, 0x4000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a310000f4ff2c000000030a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000"], 0xc8}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x10, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29}, 0x94) 2m13.786470913s ago: executing program 8 (id=8746): socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x26) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000000) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x5865, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}, {0x0}], 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x50) sendmsg$kcm(r3, 0x0, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x27}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}, 0x1, 0x0, 0x200000000000000, 0x8000}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) socket$kcm(0x2, 0x5, 0x84) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYRES64=r1], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m13.556780899s ago: executing program 8 (id=8747): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0, 0xfc5f}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r4 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffff1, &(0x7f0000000380)=[{&(0x7f0000001ec0)=""/4047, 0xfcf}, {&(0x7f0000000ec0)=""/4073, 0xfe9}, {&(0x7f0000000800)=""/234, 0xea}, {&(0x7f0000000600)=""/229, 0xef}, {&(0x7f0000000500)=""/182, 0xb6}, {&(0x7f0000000140)=""/158, 0x9e}], 0x6, 0x0, 0xffffffffffffff70}, 0xbf9d5a5a4c2f3718) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r4, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, 0x0) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000280)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002340)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000600142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef", 0xcb}], 0x1}, 0x0) socket$l2tp(0x2, 0x2, 0x73) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3c, 0x7}, 0x100008, 0x0, 0x0, 0x8, 0x3fd, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x1e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x6f}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x89a1, &(0x7f0000000900)={'nicvf0\x00'}) 2m13.555633083s ago: executing program 2 (id=8708): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001880)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x37}, @in6=@loopback, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd, 0x0, 0x1c00000000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@mark={0xc, 0x15, {0x35075c, 0x7ff}}]}, 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000240)="1408000000000000b89e08c486ddb88f00ad46dfb38e33355000d48fa44f109a56d24da94590c267729e46a7f2f11b45b9f0ee12b2f9", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x1a, 0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0xc}, 0x206a82, 0xc8, 0xffffffbf, 0x5, 0x0, 0x0, 0xfffc, 0x0, 0xa9}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="fb6bba8839fe8b", 0x7}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfdef) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002100)={0x0, 0x0, 0x0}, 0x2100) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000340)=""/117, 0x75}, {&(0x7f00000004c0)=""/108, 0x6c}, {&(0x7f00000003c0)=""/143, 0x8f}, {&(0x7f0000005140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/4084, 0xff4}], 0x6}, 0x40010102) 2m13.318292983s ago: executing program 2 (id=8749): r0 = socket$kcm(0x10, 0x2, 0x2) close(r0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x81000001941}, 0x10401, 0x2, 0x4180, 0x8, 0x8, 0x80000003}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x20040010) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfe}, 0x80, 0x0}, 0x20000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000000000070040000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000fb415c73b9856976dc0ba749148749c104f34e392221382391cf64efd1d6d1467ff6888eaf449b0b8a9b79817b5bb42ea0858dddca5afec5d22c82a26c4af55663c14ed9445b2249a8059bb16264deacf2d46adb4937d2e7d42396ced5190a3ee237415284c2b159cfe0a5c5cb68d19b610e60d7495d4aee6034bc051a5cce6dafb26a16d86bb40c0fefc61ecefad2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000000000000000000fdffffffffffffff0000000000000000"], 0x50) socket$igmp6(0xa, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r6, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x800, 0x0, 0x0, 0x41100, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=r5, @ANYBLOB="0200000000000000000000000000000000008b94", @ANYRES32=r7, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000020e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$kcm(0x11, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66bbf2", 0x10}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) 2m13.213501913s ago: executing program 1 (id=8750): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x922000000001, 0x106) r1 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x8e, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x6894, 0x7, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, r1, 0xa) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b7030000000000001609000006000000cf91000000000000b5020000000000008500000085000000b7000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x800) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff, r2}) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0xa, 0x3, 0x87) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x20040010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4}, 0x80, 0x0}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2m12.510184751s ago: executing program 1 (id=8751): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000210001000000008000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000100000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c040000020000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m12.358123509s ago: executing program 1 (id=8752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000000c0)={'pim6reg0\x00'}) socket$nl_audit(0x10, 0x3, 0x9) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) syz_clone(0x6218a200, &(0x7f0000000300)="8dbda4aa625bb47e1783a1795c3abf3ccb3d0d0184c27f30ffbe37717c0e60a23b34b7c974057747f9f113d1199fd959ee8f8a03669b6e5e", 0x38, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f00000005c0)="a22e7f974ab2d1922078c7d93f0149e84fdc1e3b3328daed5026c8f7c2747f5666028a948803dd1cd99f4d0e83277fbe54ce725b9cdca7c00d2b71a0876f622cfec560c343e8b66277284bb8db3e1eaffd490ac74afd55bb650ea13923878702af379b21df4945ef1214aca0a648cbeffe656ee8114fd2e9cdc6b8b8e09e897a5ffc4f7bc8e3757f35f2aa92991fe7903ff779af07abb268fce5bb1ffd3e713a19ed72dc6e590938164b4d30783941c54e898e2014e2967bfe7934edbd9fc16c80215b335d4bc0f8ccfd8f2c54dc321b014ad0459ff6fbd81211de10ce79f06e1e271e49f8a5cc33e30bb95586c78c9fedce7f") (async) r2 = syz_clone(0x6218a200, &(0x7f0000000300)="8dbda4aa625bb47e1783a1795c3abf3ccb3d0d0184c27f30ffbe37717c0e60a23b34b7c974057747f9f113d1199fd959ee8f8a03669b6e5e", 0x38, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f00000005c0)="a22e7f974ab2d1922078c7d93f0149e84fdc1e3b3328daed5026c8f7c2747f5666028a948803dd1cd99f4d0e83277fbe54ce725b9cdca7c00d2b71a0876f622cfec560c343e8b66277284bb8db3e1eaffd490ac74afd55bb650ea13923878702af379b21df4945ef1214aca0a648cbeffe656ee8114fd2e9cdc6b8b8e09e897a5ffc4f7bc8e3757f35f2aa92991fe7903ff779af07abb268fce5bb1ffd3e713a19ed72dc6e590938164b4d30783941c54e898e2014e2967bfe7934edbd9fc16c80215b335d4bc0f8ccfd8f2c54dc321b014ad0459ff6fbd81211de10ce79f06e1e271e49f8a5cc33e30bb95586c78c9fedce7f") sendmsg$AUDIT_SET(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2008010}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3e9, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x1, 0x0, r2, 0xe8, 0x10000, 0xe, 0x6, 0x0, 0xc, 0x2}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20048884) mkdir(&(0x7f0000000000)='./file0\x00', 0xbe9bac6d2d0f4e0b) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000001b000)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b040)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @remote}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @remote}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000002b000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f659cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c61a137462c7f2539479f49d4eb2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc16e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c0977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6040099d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663dd472021d202eedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe3594d4a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed180d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35f267632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12a851810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f314001a62863f6e04b4506ac2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab79e609c57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2b4bb9905a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296e99d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55000048e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cf7800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc699d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7dc1a869fa5551b873e2c838e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0000000000000000000000a0616252abda1102c3eee13eddef0275f21752ee474e32d790ae1f3df77e303ae1968c2a4419d1ca13b97b2c3123ab5b8473b880644e6acfe1d346d1528262c6e91f38029ec24eeb4fe5c1b3726bcfd386ba153fed11692170e5a09432bd02fa9dba861ecad4dbf61a93733a21aeff5f541b8f78bccbf1ac0000000000000000000000145aaaa62ff74b216b2977e7b9261824f663cea60ec6e0fa03bd596cec6d12316c8ed147d4cdd140857444c27c1946b1afcd4ec260694cb71e421744cf1f860840b0decf9be35aeb02d1bf6137b3189edb2d21557e6804ed52305e7deace8b97cd2b423cb79c541762097e29c386634a4bcc3ee91266d808706aadbc4650183d71bf5341edfe4c815d3a87c05d75da20b260d39cdd8559292000cb06faf9972683d379565dcd932fbc6bfb13f938a693252fc3af8088fcf8e06a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0103461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0103461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) unlink(&(0x7f0000000080)='./file0/file0\x00') 2m12.317402928s ago: executing program 8 (id=8753): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830c}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23870140cde10e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fba6f421145c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e38325ca2e5f1f9caaa7234053eca09ec3c8c16940bc3edfb2e016f355391c0e7"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) sendmsg$xdp(r1, &(0x7f0000000a80)={&(0x7f0000000340)={0x2c, 0x0, 0x0, 0x3a}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x800) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1ac08790fcb87507}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f5"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f9, &(0x7f0000000080)) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000007f000001000000000000000000000000fffd0006000000000a00000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00370000000073013500000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) close(r0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="02436963ff3eddd56f4d29bb970000003000510828bd7000fbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x804) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e12090018f400000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2m12.147810637s ago: executing program 2 (id=8754): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x1000001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x23, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000060900010073797a30000000003c000000090a010400000000000000000700000408000a40000000000900020073797a31000000000900010073797a30000000000800054000000021640200000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000380203806000008004000180580007800b0001"], 0x2e8}}, 0x20080) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40efe, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40000202) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x1}) 2m11.831345169s ago: executing program 5 (id=8704): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008510000001000000950000000000000018010000756c6c2500000000002020207b1a00fe00000000bda100000000000007010000f8ffffffb7020000080000000400000000000000850000007600000095"], &(0x7f00000000c0)='syzkaller\x00', 0x9}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, &(0x7f0000000440)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @ldst={0x3, 0x0, 0x4, 0x0, 0xe, 0x30, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @jmp={0x5, 0x1, 0x6, 0x7, 0x9, 0x80, 0x8}, @btf_id={0x18, 0xd, 0x3, 0x0, 0x4}, @exit, @generic={0x1, 0x3, 0x2, 0x5, 0x7fffffff}, @ldst={0x0, 0x2, 0x2, 0x4, 0x2, 0x18, 0xffffffffffffffff}], &(0x7f0000000100)='GPL\x00', 0x6d004a16, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000380)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x10, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000740)=[0xffffffffffffffff, r4], &(0x7f0000000780)=[{0x5, 0x5, 0x6, 0x6}, {0x3, 0x4, 0xa, 0x4}, {0x2, 0x2, 0xc, 0x9}, {0x1, 0x4, 0xa, 0xc}, {0x2, 0x2, 0x4, 0x6}, {0x4, 0x3, 0xc, 0x5}], 0x10, 0x5e}, 0x94) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000010006bcc9e3be35c6e17aa31076b876c1d000000000000000000000304001ac00800120004000500020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x2, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00f\x00'], 0xfe33) r6 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x100242, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000c1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x9, 0x0, &(0x7f00000006c0)="00000000000000c885", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040), 0x3b) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xcf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) setsockopt$sock_attach_bpf(r8, 0x88, 0x67, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m11.413349055s ago: executing program 2 (id=8755): r0 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x80}, 0x0, 0x0, 0x0, 0x8, 0x3fd, 0x62}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x5, 0x4, 0x6, 0xb}, 0x50) recvmsg$kcm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000a80), 0x0, &(0x7f0000000b00)=""/68, 0x44}, 0x10022) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x1401, 0x100, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008800}, 0x815) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000040080007006e617400140004800800014000000001080002"], 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB], 0x12b0}, 0x8800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)={0x48, 0x1407, 0x300, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x80) socket$kcm(0x10, 0x2, 0x4) r7 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000c302783b25dd24ee01343c02ec4349bf2f5e8cfe2d372b809e8c75fd3deb16fadf348c07b5dc7a6a43ea4d3a4c3ef9a3359b58612fec78b89ffde0fc53ba04043115630fea89de9fd16dbd134e7403c6ae009f2af5a1df78bf9f63011ceadbdea4dcfccae52e0f736e5c1b1fb57b78ad4df3f73c9ca9be65336bfe6adac88e8c2e6ecce1a6d8b7a8d2b6fb9339df82a4721f4d72c2008f5b6b4238b814f52f19cb166811a18faa8048e327e2a78af1edf8d2554300fa9ce210419802d67ca653286a31538c8af04ada0297f08a26414fd48d0bcf9cb1f34034a56efccb72254880f4282cdc", @ANYRES32=0x0, @ANYRES32=r5], 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018e300000095c300000000000000000002000000000000000000000400000000002f"], 0x0, 0x26, 0x0, 0x1}, 0x28) 2m11.243517858s ago: executing program 8 (id=8756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="13030000760091"], 0xfe33) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYBLOB="4fc765680047fa8063fa4bcba1163f1bfa98829d11ee135539a7da6e5f5a65b54a461cb45e0bcd58987e15a89d31bbe8bdbcdff1e15214c96918fdb7c166884cc5e7b202f831a3bd1185313e5e0ae143e56270382965e110da", @ANYBLOB="4c0000000000000000000000461f7e2569cfe667d63d8413c9ddb2"], 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2, @perf_bp={&(0x7f00000002c0)}, 0x8850, 0x2, 0xfffffffe, 0x9, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x84) socket$kcm(0x10, 0x400000002, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r6, 0x5, 0x0, 0x3fa8, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$inet(r7, 0x0, 0x4040000) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x12000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 2m11.186221134s ago: executing program 2 (id=8757): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791028000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2m11.059595892s ago: executing program 1 (id=8758): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r3, 0x27, 0xe, 0x0, &(0x7f0000000580)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x3, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000000e06010100000000000000000200000605000100070000000900020073797a30000000000900020073797a3200000000050001"], 0x44}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xad, 0x1000, &(0x7f0000000200)="01354da24f26d01858320673b6c63b7b525b115f74526b0126381d29448011882fc59c415b9c8706535de251b4715c5ea181bc7cc390c253164d1775728e45c19c44af850515172e39796a6113d3e76c0a6efc3db49e53bbedc91a324535ae2d20a36de588523ce91329a577e5cd3261b681d692dbd403d74fcebf12d0e48f9302410ceffe6b042000fa4a377f75301874f52cf67fbb62988680a6620c6d4ae220a54948a6fb6f7e9379d7ea73", &(0x7f0000000640)=""/4096, 0x8001, 0x0, 0x4d, 0x9, &(0x7f0000000000)="c5b1265718ebc2343b9aef698c27d8cf2bdd8e8c7fb1cd6c221b120ef7232ba38663c969c5ec9409195cd807f4c81701aaea5ff360dae50746f54c859ac0e9b454e6d5d699b49c363045180bf6", &(0x7f0000000180)="5eae220c836b4e0ab7", 0x0, 0x0, 0x8}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0), 0x1000000000000027}, 0x4044045) 2m10.861562608s ago: executing program 1 (id=8759): r0 = socket$kcm(0x2, 0x922000000001, 0x106) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x84) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0xffff, 0x7fffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000023000000180100f82020642500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240)=0xffffffffffffffff, 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000100)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff0000000015040000000001d80f030000000000003404000001ed0a0014040000170000803c400000000000007b0a00fe000000004e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c0da4e95f75b1496a97a46a06e4e1f5a8438d49dbd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m10.834891605s ago: executing program 5 (id=8760): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000000f300851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa10000000000000701000015f3ffffb702000008000000b50200000000000085000000cb00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x41000}, 0x94) 2m10.742228758s ago: executing program 8 (id=8761): syz_clone(0x48201900, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0x0, 0x0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x82, 0x0, &(0x7f00000003c0)="1b102d4a1a071509f5dc29011f30ec8d26e6c7812e2cfb192b7aa6ca012f0a05687fd20ddb7c4e2c73a5bab736bda55a94faedac13fe9ed0d5019bad1e544b02ac2f0168f14e7fe8b42116a318774b820a69dc8af96d41e3d6674ae943587a94736a9bfa4f345faf112e43866fe59601cebf154d8b8c590ab6d45b97577401db2e0b", 0x0, 0xb3dc, 0x0, 0xf, 0x0, &(0x7f00000001c0)="95722bb8903eaa7179b7ea3fd6ecea", &(0x7f0000000480), 0x7, 0x0, 0xae0}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000007000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="0000d756e9", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x50) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x100000004, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8913, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, 0x24}, 0x94) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000300)=""/174, 0xae, 0x0, &(0x7f00000003c0)=""/189, 0xbd}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x14, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd065}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @alu={0x7, 0x0, 0x3, 0x1, 0xb, 0x40, 0xfffffffffffffff0}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0xffff1793, 0x33, &(0x7f0000000200)=""/51, 0x41000, 0x8, '\x00', r5, @fallback=0xf, r6, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x0, 0x1, 0x5}, 0x10, r7, r2, 0x4, &(0x7f0000000540)=[r8, 0xffffffffffffffff, r3], &(0x7f0000000580)=[{0x2, 0x4, 0x1}, {0x4, 0x1, 0xb, 0x5}, {0x1, 0x5, 0x2, 0x6}, {0x1, 0x2, 0xe, 0xc}], 0x10, 0x3}, 0x94) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) close(r3) 2.558517173s ago: executing program 42 (id=8768): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1d}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x18, r2}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, 0x24}, 0x94) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000300)=""/174, 0xae, 0x0, &(0x7f00000003c0)=""/189, 0xbd}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x14, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd065}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @alu={0x7, 0x0, 0x3, 0x1, 0xb, 0x40, 0xfffffffffffffff0}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0xffff1793, 0x33, &(0x7f0000000200)=""/51, 0x41000, 0x8, '\x00', r5, @fallback=0xf, r6, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x0, 0x1, 0x5}, 0x10, r7, r2, 0x4, &(0x7f0000000540)=[r8, 0xffffffffffffffff, r3], &(0x7f0000000580)=[{0x2, 0x4, 0x1}, {0x4, 0x1, 0xb, 0x5}, {0x1, 0x5, 0x2, 0x6}, {0x1, 0x2, 0xe, 0xc}], 0x10, 0x3}, 0x94) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) close(r3) 271.691192ms ago: executing program 43 (id=8764): socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x2004}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2100) socket$kcm(0x2, 0x922000000001, 0x106) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) socket$kcm(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e00000020000000000000000000000000000ff80000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, 0x0, 0x41) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbff, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x464e3680, 0x90, 0x4, 0xffffff7f, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x54004}, 0x0) getpid() sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x80) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 192.563394ms ago: executing program 44 (id=8767): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x8, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x26, 0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x13240, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000) (async, rerun: 64) ioctl$TUNSETOFFLOAD(r5, 0x8010743f, 0xf0ff1f00000000) (async, rerun: 64) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0x28}, 0x41) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg(r2, &(0x7f00000002c0)={&(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000140)="14fcb966d5b8f9f4a27bfab4d1cbd428a941a6d1a9d47d51141302f6a1bb1959e0661e1ee8bf6f22f701af9a3bc4b26cfff53cfbf06292b9b46738084b331de1eb9af4d981ccff64376d2ce29e7b01fc505d3595118323e79e1a98c38a0dd8133be21e18ebc110175bab98f1d225f25873e5b5b30f833e68bf38e82b99d2afc6be959615faade6adcaa651bca83ff2d0", 0x90}, {&(0x7f0000000200)="fc9ffe024c51ab1c75bf7d937a549f17cf07b215a95235923912733f7f0e13094ec8ed32bbd7a2b594bd6bd0e730548bab87b51f06019af0f56a25db45ff5e1adc3af35cacacd7cf1160b403e2b8a3cee60ffa7889d33d01488bb9ef59c9", 0x5e}, {&(0x7f0000000040)="16dbf7be6d018c55df53bc519590c84ecaea", 0x12}], 0x4, &(0x7f0000001500)=[{0x60, 0xa772a2577792e681, 0x275, "591c08a2327b54877135a94531b2ecfe10e5f897e0024ddba81aa4603bfc39bdd5ba5ed34b132d6edf4b42492e5502e45ecfc65d468d507b20a64a330e0133437f5f6206d2e2c3e4a6"}, {0x88, 0x102, 0x6, "d9c03d90e6742153b3edafb7eba31c7ed3824c42eaf5a33fa6883afb341b443fb4bbf3478c59cd10947bfa4c76745d7d59fd53a7b2afa7ab4f811bea9c88d4d3313a2bf2123148363ffcae7c4891a89c7fc586372733e632f2f7d785f9ea51d6648824c836e1b9b19220867ea2d61899c9845bcad35f"}, {0x100, 0x118, 0xfff, "eb376bcffa9b27abeeec318c52bb4fbe3387ce9cee85da6235a5a9527af984dbe7c49a3390ebc40039ec9c312affbc3b310f7f75e360820251c3273dc4882d4bef68cf07b6f0da82223b4bad130e98cd1d1a922b9a3e708f004546fc368205958a956713b8a861e108cf3ca68fc1efe91e043f42b0ba47ec75d6eb3d7401de0087b48eb8cf18b9f0a8a24a4970e189dbb7df4bffce02bad20b97775bc51380821c88069c61a334e2832b5ec6d5f9a7ecc33e7baa3ab8ab88557c1976d895ea85dff123b4abf70884172d6dc07072eecafeb6ffea4584195d15993d58a9044818b7585d198c5918a8aae70938"}, {0x40, 0xff, 0x81, "35802c8883e33f1a410309c530574797e18b589757c288a261aab4ff4a4e3a3f7bf69f4735a4f0e2f8"}, {0xa8, 0x117, 0x6, "dc0e519c3a6fa4306b1ac13f50abc0a2bc372b9aad319c355bbae3be9cdf8bb783e97060fc5d4f1dd3e96f93a8683236c437e64b9a16a9d38184649b7ea217203ebba38491eb69e824654e39292fd3ba5a62eac147560bb1189ae36315c6bf30074617345a550e26c36214496cdda6b32f4208c28c28928765a42e3db70bc96d31b9995e93b08b6852dfabd28ae4688a2e8c33"}, {0xb0, 0x114, 0xf1, "fb78d9df68cd48c498922cf5ce01fae34c3b3749332b5ae52b213ef971c815013d5ad77c86955aa14e005832e253a3de034e7707cc02943f1768f63bf44175acf48a06dce093c2f3b3b1707fd963817e132c6b89fdb49473dcfd36894be9bcc38847e4b56a761a1f79e1410ff47069aae8e4b373d9c002a686ea1cade1c5ce4d96bb5501aff67805fb45adf3c9abf674962860705c4b34c91f"}, {0x98, 0x5c28d56e7bb61663, 0xffff, "a57e21e445c2065fc6d0244c6a9b383f7f6b56869d790f294e7216cc04e4591f26f356d58195781ce5b5d9edfcf490736324c32516ddb43c966ca72854c63edbd5e0a7bbbd21a414be3efc52c5a4b4be2fe928179f20fa408cda5a210f19ef7c1c5e397c8110dc3b5a3c83a7d6707ab7dfef81d77d67aae5e676a4452dbd1cc125eb0ba6e4f923"}, {0x30, 0x111, 0x1ff, "613eb0a48d15657e02a5d8471ff490410fea5220a2c449bd8f22cd1ff0"}, {0x100, 0x108, 0x8, "90ef3f849f5953fb6b945e21814fe76182f91c314c2ccd21cf7739063a59b79f5872e23bf5c2bf8d7f9e8c2e6262d61746fad61a9e951cf1fa81ca2b9df58aaa374e0beeeae912bdf5e9c86a67a950957934e1f42c6f699dc41cf362bf9f4377ceb72878ecd479ef1086f1b73a4e79fa33b8883c10f3cc578f8c313c7937b9c5419171e664f070c174e0f8ff4c48e5ff9edded8cac8a75ec897a3d4286409361551c91804738501a53113b046e346abcad147c7104b1c3726aeb941bf3405121fbb3af1c88af1135fea89be07cf452c41d587570c5df4d4e7d930c882761b0d746cebe169cccebaf2f86b31d5b7618fa"}, {0xf8, 0x0, 0xaa54, "4e80e2b907fbac88bdaa841d78d454767bfed4dd2a76cdd385ade096b59c1bf318fc62c054f3aed2c127c21e7892391cac5b7e5bc05a42c2c454cd9606826957a44cc33a84dcf77f28dee4ad333bab76590c294b7a7777e89da630d2e6fff3b2920c59017cc6a996e684bd3efd3471b310ac22b69cdcebc6957c9596700e651c144848c974de3dc0ea445c8bd2de2f42e3af39d8b9d256c13ba48a93f8671167ca7a9a5d656c13520996d0cf3d44a14c10b8aebfb8c9c0c7a4a7a1f08a4a2ebda78089b2f8d5902ba41a48eb800d38d9f62b0ef7a73f90ebd3d45a15854f1d1361faec711eb34c"}], 0x640}, 0x884) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 0s ago: executing program 45 (id=8763): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @dev}}}], 0x38}, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x106) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x81, 0x0, 0x400000000000000d, 0x1954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x9190, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r1, 0xb, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000480)='GPL\x00'}, 0x94) socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x9, 0x9, 0xfb, 0x0, 0x800, 0x1000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x3}, 0x4, 0x5, 0x5d, 0x5, 0xfffffffffffffffc, 0x3ffc0, 0x649, 0x0, 0x565e, 0x0, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000700000002"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x9e0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYRES16=r9, @ANYRES64=r8, @ANYRESDEC=r1, @ANYRESHEX=r6, @ANYRESHEX=r2], 0x0, 0x26}, 0x28) kernel console output (not intermixed with test programs): 8789] netlink: 'syz.8.7246': attribute type 11 has an invalid length. [ 1048.383761][T28789] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.7246'. [ 1048.400429][T28788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1048.690354][T28806] ªªªªªª: renamed from wg2 [ 1049.199005][T28825] netlink: 'syz.4.7260': attribute type 2 has an invalid length. [ 1049.207263][T28825] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7260'. [ 1049.216754][T28825] nbd: must specify an index to disconnect [ 1049.320958][T28819] netlink: 146936 bytes leftover after parsing attributes in process `syz.7.7258'. [ 1049.367267][T28819] openvswitch: netlink: Message has 6 unknown bytes. [ 1049.769141][T28837] netlink: 'syz.4.7264': attribute type 10 has an invalid length. [ 1049.809668][T28837] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7264'. [ 1049.836448][T28849] delete_channel: no stack [ 1049.885604][T28852] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1049.930295][T28856] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7268'. [ 1050.267579][T28859] delete_channel: no stack [ 1050.477979][T28875] netlink: 'syz.3.7274': attribute type 5 has an invalid length. [ 1050.927952][T28900] netlink: 'syz.2.7283': attribute type 2 has an invalid length. [ 1050.936252][T28900] nbd: must specify an index to disconnect [ 1051.445949][T28928] netlink: 'syz.8.7294': attribute type 11 has an invalid length. [ 1051.446706][T28922] netlink: 'syz.2.7292': attribute type 10 has an invalid length. [ 1051.580803][T28931] __nla_validate_parse: 6 callbacks suppressed [ 1051.580823][T28931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7296'. [ 1051.590157][T28922] team0: Port device wlan1 added [ 1051.832803][T28933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1051.999265][T28949] netlink: 'syz.3.7301': attribute type 11 has an invalid length. [ 1052.031199][T28949] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7301'. [ 1052.329604][T28942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1052.844307][T28965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7305'. [ 1053.141380][T28984] netlink: 'syz.3.7312': attribute type 2 has an invalid length. [ 1053.149323][T28984] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7312'. [ 1053.169625][T28984] nbd: must specify an index to disconnect [ 1053.363445][T28995] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7315'. [ 1053.621228][T29004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7321'. [ 1053.630310][T29004] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7321'. [ 1053.670819][T29007] netlink: 'syz.7.7320': attribute type 10 has an invalid length. [ 1053.679195][T29007] netlink: 55 bytes leftover after parsing attributes in process `syz.7.7320'. [ 1053.736848][T29009] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7323'. [ 1053.748960][T29009] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7323'. [ 1053.753785][T29007] delete_channel: no stack [ 1053.758145][T29009] netlink: 'syz.2.7323': attribute type 5 has an invalid length. [ 1054.027131][T29017] netlink: 'syz.2.7325': attribute type 21 has an invalid length. [ 1054.132282][T29019] netlink: 'syz.4.7327': attribute type 2 has an invalid length. [ 1054.146661][T29019] nbd: must specify an index to disconnect [ 1054.638414][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.646144][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.963532][T29017] bpf: Bad value for 'gid' [ 1055.964264][T29064] netlink: 'syz.7.7339': attribute type 2 has an invalid length. [ 1055.974701][T29064] nbd: must specify an index to disconnect [ 1056.902239][T29100] netlink: 'syz.8.7354': attribute type 2 has an invalid length. [ 1056.914464][T29100] __nla_validate_parse: 7 callbacks suppressed [ 1056.914483][T29100] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.7354'. [ 1056.950475][T29100] nbd: must specify an index to disconnect [ 1057.012600][T29102] netlink: 'syz.2.7355': attribute type 11 has an invalid length. [ 1057.023912][T29102] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7355'. [ 1057.045841][T29101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1057.595460][T29122] netlink: 'syz.2.7363': attribute type 33 has an invalid length. [ 1057.621044][T29122] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7363'. [ 1057.635130][T29122] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 1057.988922][T29132] netlink: 'syz.3.7368': attribute type 2 has an invalid length. [ 1058.016320][T29132] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7368'. [ 1058.027677][T29132] nbd: must specify an index to disconnect [ 1058.130442][T29139] netlink: 'syz.4.7371': attribute type 21 has an invalid length. [ 1058.139420][T29139] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7371'. [ 1058.171349][T29139] netlink: 'syz.4.7371': attribute type 5 has an invalid length. [ 1058.220562][T29139] netlink: 'syz.4.7371': attribute type 6 has an invalid length. [ 1058.261146][T29139] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7371'. [ 1058.486373][T29153] netlink: 'syz.3.7373': attribute type 10 has an invalid length. [ 1058.494577][T29153] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7373'. [ 1058.521312][T29153] delete_channel: no stack [ 1058.533865][T29147] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7374'. [ 1058.630370][T29157] netlink: 'syz.4.7376': attribute type 10 has an invalid length. [ 1058.640302][T29157] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1058.665453][T29157] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1058.687358][T29157] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1058.717271][T29160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1059.582455][T29177] netlink: 'syz.2.7384': attribute type 2 has an invalid length. [ 1059.590252][T29177] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7384'. [ 1059.667100][T29177] nbd: must specify an index to disconnect [ 1059.919095][T29194] netlink: 'syz.2.7390': attribute type 2 has an invalid length. [ 1059.973136][T29194] netlink: 'syz.2.7390': attribute type 8 has an invalid length. [ 1059.999469][T29201] netlink: 'syz.3.7391': attribute type 29 has an invalid length. [ 1060.016231][T29201] netlink: 'syz.3.7391': attribute type 29 has an invalid length. [ 1060.022135][T29194] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7390'. [ 1060.659785][T29227] netlink: 'syz.2.7401': attribute type 2 has an invalid length. [ 1060.690829][T29227] nbd: must specify an index to disconnect [ 1060.788582][T29233] netlink: zone id is out of range [ 1060.806205][T29233] netlink: set zone limit has 8 unknown bytes [ 1061.058617][T29239] netlink: 'syz.8.7407': attribute type 11 has an invalid length. [ 1061.084041][T29230] lo speed is unknown, defaulting to 1000 [ 1061.133858][T29238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1062.044161][T29262] __nla_validate_parse: 7 callbacks suppressed [ 1062.044180][T29262] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7413'. [ 1062.381507][T29274] netlink: 199644 bytes leftover after parsing attributes in process `syz.7.7418'. [ 1062.399581][T29274] nbd: must specify an index to disconnect [ 1062.677085][T29285] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7422'. [ 1062.719446][T29285] netlink: 6 bytes leftover after parsing attributes in process `syz.7.7422'. [ 1062.906681][T29292] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.7424'. [ 1062.933052][T29292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7424'. [ 1062.959583][T29292] nbd: socks must be embedded in a SOCK_ITEM attr [ 1063.256754][T29302] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7428'. [ 1063.473441][T29311] validate_nla: 3 callbacks suppressed [ 1063.473464][T29311] netlink: 'syz.3.7431': attribute type 2 has an invalid length. [ 1063.531489][T29311] netlink: 199644 bytes leftover after parsing attributes in process `syz.3.7431'. [ 1063.547571][T29298] lo speed is unknown, defaulting to 1000 [ 1063.557206][T29311] nbd: must specify an index to disconnect [ 1063.855373][T29316] sit0: entered promiscuous mode [ 1063.879841][T29316] sit0: entered allmulticast mode [ 1064.829532][T29336] netlink: 'syz.8.7440': attribute type 29 has an invalid length. [ 1064.916684][T29343] netlink: 500 bytes leftover after parsing attributes in process `syz.8.7440'. [ 1064.947550][T29336] netlink: 'syz.8.7440': attribute type 29 has an invalid length. [ 1065.606427][T29354] netlink: 'syz.3.7446': attribute type 11 has an invalid length. [ 1065.624806][T29355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7445'. [ 1065.639386][T29353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.242047][T29373] netlink: 'syz.2.7454': attribute type 10 has an invalid length. [ 1066.657876][T29382] netlink: 'syz.3.7455': attribute type 10 has an invalid length. [ 1066.712871][T29384] delete_channel: no stack [ 1068.261273][T29424] netlink: 'syz.4.7469': attribute type 2 has an invalid length. [ 1068.269070][T29424] __nla_validate_parse: 5 callbacks suppressed [ 1068.269086][T29424] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.7469'. [ 1068.370746][T29424] nbd: must specify an index to disconnect [ 1068.526663][T29432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7472'. [ 1068.809015][T29436] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.7473'. [ 1068.904334][T29438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7474'. [ 1068.916804][T29438] netlink: 6 bytes leftover after parsing attributes in process `syz.4.7474'. [ 1069.254183][T29448] netlink: 'syz.2.7476': attribute type 10 has an invalid length. [ 1069.264183][T29448] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7476'. [ 1069.287968][T29448] delete_channel: no stack [ 1069.306372][T29451] netlink: 'syz.7.7479': attribute type 10 has an invalid length. [ 1069.325393][T29451] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1069.359509][T29451] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1069.409241][T29451] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1069.586795][T29457] netlink: 146936 bytes leftover after parsing attributes in process `syz.4.7482'. [ 1069.597707][T29457] openvswitch: netlink: Message has 6 unknown bytes. [ 1069.604797][T29461] netlink: 'syz.7.7483': attribute type 2 has an invalid length. [ 1069.639678][T29461] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.7483'. [ 1069.694345][T29461] nbd: must specify an index to disconnect [ 1069.941220][T29464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7484'. [ 1070.134578][T29468] netlink: 146936 bytes leftover after parsing attributes in process `syz.7.7485'. [ 1070.187014][T29468] openvswitch: netlink: Message has 6 unknown bytes. [ 1070.389471][T29486] netlink: 'syz.4.7490': attribute type 5 has an invalid length. [ 1070.465310][T29482] delete_channel: no stack [ 1071.351851][T29502] netlink: 'syz.7.7496': attribute type 2 has an invalid length. [ 1071.359650][T29502] nbd: must specify an index to disconnect [ 1071.597507][T29508] openvswitch: netlink: Message has 6 unknown bytes. [ 1071.605130][T29513] netlink: 'syz.4.7498': attribute type 10 has an invalid length. [ 1071.672360][T29513] delete_channel: no stack [ 1074.538586][T29575] __nla_validate_parse: 9 callbacks suppressed [ 1074.538606][T29575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7520'. [ 1074.786430][T29586] netlink: 'syz.8.7525': attribute type 2 has an invalid length. [ 1074.799901][T29582] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1074.806795][T29582] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1074.820876][T29586] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.7525'. [ 1074.849927][T29586] nbd: must specify an index to disconnect [ 1074.886249][T29590] netlink: 'syz.4.7527': attribute type 10 has an invalid length. [ 1075.148009][T29590] team0: Port device wlan1 added [ 1076.036643][T29607] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7531'. [ 1076.046896][T29607] netlink: 6 bytes leftover after parsing attributes in process `syz.8.7531'. [ 1076.306601][T29613] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7533'. [ 1076.374727][T29621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7535'. [ 1076.404405][T29621] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7535'. [ 1076.581859][T29633] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7538'. [ 1077.003767][T25067] wlan1: Trigger new scan to find an IBSS to join [ 1078.277600][T29680] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7553'. [ 1078.318203][T29680] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7553'. [ 1078.354370][T29680] netlink: 'syz.2.7553': attribute type 5 has an invalid length. [ 1078.444255][T29691] netlink: 'syz.8.7555': attribute type 4 has an invalid length. [ 1079.234185][T29712] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1079.270521][T29712] netlink: 'syz.3.7564': attribute type 1 has an invalid length. [ 1079.845547][T29723] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1079.978360][T29737] __nla_validate_parse: 4 callbacks suppressed [ 1079.978399][T29737] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7573'. [ 1080.033559][T29739] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7574'. [ 1080.144189][T29743] netlink: 'syz.2.7575': attribute type 29 has an invalid length. [ 1080.164123][T29743] netlink: 'syz.2.7575': attribute type 29 has an invalid length. [ 1080.177704][T29743] netlink: 500 bytes leftover after parsing attributes in process `syz.2.7575'. [ 1080.227909][T29745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7576'. [ 1080.292829][T29747] netlink: 'syz.8.7577': attribute type 1 has an invalid length. [ 1080.353419][T29751] netlink: 'syz.7.7578': attribute type 11 has an invalid length. [ 1080.388829][T29751] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.7578'. [ 1080.424217][T29750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1080.655546][T29772] netlink: 'syz.2.7584': attribute type 2 has an invalid length. [ 1080.663636][T29772] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7584'. [ 1080.676008][T29772] nbd: must specify an index to disconnect [ 1080.788631][T29769] netlink: 146936 bytes leftover after parsing attributes in process `syz.8.7583'. [ 1080.792108][T29777] netlink: 'syz.3.7585': attribute type 29 has an invalid length. [ 1080.822474][T29769] openvswitch: netlink: Message has 6 unknown bytes. [ 1081.294944][T29792] netlink: 'syz.4.7590': attribute type 11 has an invalid length. [ 1081.326345][T29792] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7590'. [ 1081.567876][T29794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1081.589468][T29804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7595'. [ 1081.599016][T29804] netlink: 6 bytes leftover after parsing attributes in process `syz.4.7595'. [ 1081.772010][T29813] netlink: 'syz.8.7597': attribute type 2 has an invalid length. [ 1081.783973][T29813] nbd: must specify an index to disconnect [ 1081.953196][ T59] wlan1: Trigger new scan to find an IBSS to join [ 1082.735653][T29820] lo speed is unknown, defaulting to 1000 [ 1083.339430][ T9666] wlan1: Creating new IBSS network, BSSID 16:b0:5c:ea:b2:36 [ 1083.349516][T29851] netlink: 'syz.4.7612': attribute type 2 has an invalid length. [ 1083.352687][T29850] netlink: 'syz.2.7610': attribute type 2 has an invalid length. [ 1083.358907][T29851] netlink: 'syz.4.7612': attribute type 2 has an invalid length. [ 1083.389386][T29850] nbd: must specify an index to disconnect [ 1083.417913][T29851] dummy0: entered allmulticast mode [ 1084.675279][T29877] openvswitch: netlink: Message has 6 unknown bytes. [ 1084.746420][T29886] netlink: 'syz.4.7621': attribute type 10 has an invalid length. [ 1084.769284][T29886] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1084.803417][T29886] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1084.859753][T29886] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1085.199959][T29895] netlink: 'syz.2.7625': attribute type 2 has an invalid length. [ 1085.208439][T29895] __nla_validate_parse: 6 callbacks suppressed [ 1085.208459][T29895] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7625'. [ 1085.224613][T29895] nbd: must specify an index to disconnect [ 1086.393062][T29922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7634'. [ 1086.437415][T29917] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7633'. [ 1086.576224][T29932] netlink: 'syz.3.7638': attribute type 2 has an invalid length. [ 1086.611415][T29932] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7638'. [ 1086.634293][T29932] nbd: must specify an index to disconnect [ 1086.660285][T29927] netlink: 146936 bytes leftover after parsing attributes in process `syz.7.7636'. [ 1086.689712][T29927] openvswitch: netlink: Message has 6 unknown bytes. [ 1086.885856][T29941] netlink: 'syz.4.7641': attribute type 29 has an invalid length. [ 1086.969994][T29942] netlink: 'syz.4.7641': attribute type 29 has an invalid length. [ 1086.986569][T29941] netlink: 500 bytes leftover after parsing attributes in process `syz.4.7641'. [ 1087.179782][T29951] xt_l2tp: invalid flags combination: 0 [ 1087.469961][T29959] netlink: 'syz.7.7648': attribute type 11 has an invalid length. [ 1087.578543][T29959] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.7648'. [ 1088.022695][T29967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1089.297704][T29974] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7651'. [ 1089.309763][T29974] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7651'. [ 1089.414143][T29972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7650'. [ 1089.451144][T29984] netlink: 'syz.4.7653': attribute type 2 has an invalid length. [ 1089.478925][T29984] nbd: must specify an index to disconnect [ 1089.689120][T29990] openvswitch: netlink: Message has 6 unknown bytes. [ 1089.834966][ T30] audit: type=1107 audit(1759403735.952:4): pid=30003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1090.376987][T30016] __nla_validate_parse: 5 callbacks suppressed [ 1090.377007][T30016] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7663'. [ 1090.409439][T30018] netlink: 'syz.3.7664': attribute type 10 has an invalid length. [ 1090.415785][T30016] netlink: 6 bytes leftover after parsing attributes in process `syz.7.7663'. [ 1090.596410][T30027] netlink: 'syz.4.7667': attribute type 2 has an invalid length. [ 1090.619484][T30027] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7667'. [ 1090.649356][T30027] nbd: must specify an index to disconnect [ 1090.710143][T30026] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7666'. [ 1090.988720][T30040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7672'. [ 1091.123811][T30051] netlink: 'syz.2.7678': attribute type 2 has an invalid length. [ 1091.132297][T30051] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7678'. [ 1091.142134][T30051] nbd: must specify an index to disconnect [ 1091.220251][T30046] netlink: 146936 bytes leftover after parsing attributes in process `syz.8.7675'. [ 1091.265841][T30046] openvswitch: netlink: Message has 6 unknown bytes. [ 1091.516906][T30063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7681'. [ 1092.033358][T30099] netlink: 'syz.8.7690': attribute type 2 has an invalid length. [ 1092.041659][T30099] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.7690'. [ 1092.066215][T30099] nbd: must specify an index to disconnect [ 1092.073258][T30100] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7689'. [ 1092.184705][T30103] netlink: 'syz.4.7693': attribute type 10 has an invalid length. [ 1092.197762][T30103] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1092.212505][T30103] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1092.268903][T30103] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1092.481711][T30107] openvswitch: netlink: Message has 6 unknown bytes. [ 1092.673493][T30123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1092.951881][T30134] netlink: 'syz.4.7706': attribute type 2 has an invalid length. [ 1092.960144][T30134] nbd: must specify an index to disconnect [ 1093.586063][T30170] netlink: 'syz.3.7720': attribute type 2 has an invalid length. [ 1093.611253][T30170] nbd: must specify an index to disconnect [ 1093.698515][T30171] openvswitch: netlink: Message has 6 unknown bytes. [ 1093.926172][T30184] netlink: 'syz.4.7722': attribute type 10 has an invalid length. [ 1093.995816][T30184] delete_channel: no stack [ 1094.003214][T30186] netlink: 'syz.7.7725': attribute type 29 has an invalid length. [ 1094.012198][T30186] netlink: 'syz.7.7725': attribute type 29 has an invalid length. [ 1094.389621][T30198] netlink: 'syz.8.7730': attribute type 11 has an invalid length. [ 1094.722524][T30201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1094.780899][T30209] netlink: 'syz.2.7734': attribute type 11 has an invalid length. [ 1094.807455][T30207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1096.068847][T30247] netlink: 'syz.7.7746': attribute type 10 has an invalid length. [ 1096.086228][T30245] netlink: 'syz.4.7745': attribute type 4 has an invalid length. [ 1096.094810][T30247] __nla_validate_parse: 21 callbacks suppressed [ 1096.094842][T30247] netlink: 55 bytes leftover after parsing attributes in process `syz.7.7746'. [ 1096.111756][T30245] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7745'. [ 1096.132653][T30245] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1096.160795][T30247] delete_channel: no stack [ 1096.192587][T30244] netlink: 72 bytes leftover after parsing attributes in process `syz.8.7747'. [ 1096.368767][T30254] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7750'. [ 1096.368868][T30256] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7750'. [ 1096.404623][T30254] hsr_slave_0: left promiscuous mode [ 1096.445521][T30254] hsr_slave_1: left promiscuous mode [ 1096.507902][T30266] netlink: 'syz.3.7754': attribute type 10 has an invalid length. [ 1096.747165][T30266] team0 (unregistering): Port device team_slave_0 removed [ 1096.778069][T30266] team0 (unregistering): Port device team_slave_1 removed [ 1096.825319][T30266] team0 (unregistering): Port device wlan1 removed [ 1097.932844][T30291] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7761'. [ 1098.378984][T30302] netlink: 146936 bytes leftover after parsing attributes in process `syz.8.7763'. [ 1098.419497][T30302] openvswitch: netlink: Message has 6 unknown bytes. [ 1098.448483][T30316] netlink: 'syz.3.7768': attribute type 10 has an invalid length. [ 1098.459548][T30316] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7768'. [ 1098.487497][T30316] delete_channel: no stack [ 1098.677344][T30324] netlink: 'syz.8.7772': attribute type 2 has an invalid length. [ 1098.687778][T30324] netlink: 199556 bytes leftover after parsing attributes in process `syz.8.7772'. [ 1098.705262][T30324] nbd: must specify an index to disconnect [ 1098.728289][T30326] netlink: 'syz.2.7773': attribute type 10 has an invalid length. [ 1098.845864][T30328] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7774'. [ 1098.950130][T30339] netlink: 'syz.2.7779': attribute type 40 has an invalid length. [ 1098.997644][T30339] siw: device registration error -23 [ 1099.248693][T30354] openvswitch: netlink: Message has 6 unknown bytes. [ 1099.414458][T30360] netlink: 'syz.3.7787': attribute type 5 has an invalid length. [ 1099.810898][T30374] netlink: 'syz.8.7791': attribute type 29 has an invalid length. [ 1099.819752][T30374] netlink: 'syz.8.7791': attribute type 29 has an invalid length. [ 1099.821700][T30376] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1100.289684][T30396] netlink: 'syz.3.7799': attribute type 11 has an invalid length. [ 1100.380011][T30391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1100.751453][T30415] openvswitch: netlink: Message has 6 unknown bytes. [ 1101.778872][T30444] netlink: 'syz.8.7816': attribute type 8 has an invalid length. [ 1101.805930][T30444] netlink: 'syz.8.7816': attribute type 3 has an invalid length. [ 1101.828252][T30444] __nla_validate_parse: 16 callbacks suppressed [ 1101.828287][T30444] netlink: 153952 bytes leftover after parsing attributes in process `syz.8.7816'. [ 1102.089270][T30457] netlink: 'syz.2.7822': attribute type 4 has an invalid length. [ 1102.126812][T30458] netlink: 'syz.7.7820': attribute type 2 has an invalid length. [ 1102.136970][T30458] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.7820'. [ 1102.146682][T30458] nbd: must specify an index to disconnect [ 1102.423217][T30470] netlink: 146936 bytes leftover after parsing attributes in process `syz.4.7826'. [ 1102.441195][T30470] openvswitch: netlink: Message has 6 unknown bytes. [ 1102.564628][T30477] FAULT_INJECTION: forcing a failure. [ 1102.564628][T30477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1102.603487][T30477] CPU: 0 UID: 0 PID: 30477 Comm: syz.8.7828 Not tainted syzkaller #0 PREEMPT(full) [ 1102.603513][T30477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1102.603525][T30477] Call Trace: [ 1102.603533][T30477] [ 1102.603542][T30477] dump_stack_lvl+0x189/0x250 [ 1102.603570][T30477] ? __pfx____ratelimit+0x10/0x10 [ 1102.603590][T30477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1102.603611][T30477] ? __pfx__printk+0x10/0x10 [ 1102.603629][T30477] ? __might_fault+0xb0/0x130 [ 1102.603662][T30477] should_fail_ex+0x414/0x560 [ 1102.603692][T30477] _copy_from_user+0x2d/0xb0 [ 1102.603715][T30477] ___sys_sendmsg+0x158/0x2a0 [ 1102.603740][T30477] ? __pfx____sys_sendmsg+0x10/0x10 [ 1102.603798][T30477] ? __fget_files+0x2a/0x420 [ 1102.603820][T30477] ? __fget_files+0x3a0/0x420 [ 1102.603853][T30477] __x64_sys_sendmsg+0x19b/0x260 [ 1102.603878][T30477] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1102.603918][T30477] ? do_syscall_64+0xbe/0x3b0 [ 1102.603942][T30477] do_syscall_64+0xfa/0x3b0 [ 1102.603962][T30477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.603980][T30477] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1102.603997][T30477] ? clear_bhb_loop+0x60/0xb0 [ 1102.604018][T30477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.604035][T30477] RIP: 0033:0x7f88e1b8eec9 [ 1102.604052][T30477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1102.604069][T30477] RSP: 002b:00007f88e29de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1102.604089][T30477] RAX: ffffffffffffffda RBX: 00007f88e1de5fa0 RCX: 00007f88e1b8eec9 [ 1102.604103][T30477] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1102.604114][T30477] RBP: 00007f88e29de090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.604133][T30477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.604144][T30477] R13: 00007f88e1de6038 R14: 00007f88e1de5fa0 R15: 00007ffc9dc674c8 [ 1102.604174][T30477] [ 1103.342907][T30494] netlink: 'syz.8.7833': attribute type 10 has an invalid length. [ 1103.355925][T30494] netlink: 55 bytes leftover after parsing attributes in process `syz.8.7833'. [ 1103.384045][T30494] delete_channel: no stack [ 1103.421811][T30493] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7831'. [ 1103.538217][T30493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7831'. [ 1103.549888][T30501] netlink: 'syz.4.7834': attribute type 2 has an invalid length. [ 1103.563372][T30501] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7834'. [ 1103.578235][T30501] nbd: must specify an index to disconnect [ 1103.765383][T30508] netlink: 146936 bytes leftover after parsing attributes in process `syz.4.7838'. [ 1103.774881][T30508] openvswitch: netlink: Message has 6 unknown bytes. [ 1104.025962][T30526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7842'. [ 1104.205542][T30533] netlink: 'syz.4.7845': attribute type 10 has an invalid length. [ 1104.219018][T30533] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1104.242560][T30533] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1104.255850][T30533] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1104.272224][T30530] netlink: 146936 bytes leftover after parsing attributes in process `syz.2.7844'. [ 1104.282807][T30530] openvswitch: netlink: Message has 6 unknown bytes. [ 1104.429418][T30543] netlink: 'syz.8.7857': attribute type 10 has an invalid length. [ 1104.519334][T30543] delete_channel: no stack [ 1105.037211][T30554] openvswitch: netlink: Message has 6 unknown bytes. [ 1105.500492][T30584] openvswitch: netlink: Message has 6 unknown bytes. [ 1105.727230][T30596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1106.322468][T30606] netlink: 'syz.8.7867': attribute type 29 has an invalid length. [ 1106.333346][T30606] netlink: 'syz.8.7867': attribute type 29 has an invalid length. [ 1106.769285][T30626] delete_channel: no stack [ 1106.906560][T30630] __nla_validate_parse: 10 callbacks suppressed [ 1106.906581][T30630] netlink: 146936 bytes leftover after parsing attributes in process `syz.8.7875'. [ 1106.923816][T30630] openvswitch: netlink: Message has 6 unknown bytes. [ 1106.946748][T30639] validate_nla: 1 callbacks suppressed [ 1106.946768][T30639] netlink: 'syz.2.7879': attribute type 2 has an invalid length. [ 1107.014491][T30639] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7879'. [ 1107.106519][T30639] nbd: must specify an index to disconnect [ 1107.419986][T30647] netlink: 146936 bytes leftover after parsing attributes in process `syz.8.7881'. [ 1107.433707][T30647] openvswitch: netlink: Message has 6 unknown bytes. [ 1107.837724][T30660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7886'. [ 1107.991528][T30667] netlink: 'syz.4.7889': attribute type 11 has an invalid length. [ 1107.999827][T30667] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7889'. [ 1108.026608][T30666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.058334][T30669] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7890'. [ 1108.145131][T30674] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7892'. [ 1108.171294][T30675] netlink: 'syz.3.7891': attribute type 2 has an invalid length. [ 1108.192178][T30675] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7891'. [ 1108.202896][T30675] nbd: must specify an index to disconnect [ 1108.294873][T30682] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7895'. [ 1108.367363][T30683] netlink: 'syz.7.7893': attribute type 10 has an invalid length. [ 1108.388870][T30682] netlink: 6 bytes leftover after parsing attributes in process `syz.8.7895'. [ 1108.416387][T30683] delete_channel: no stack [ 1108.871479][T30699] openvswitch: netlink: Message has 6 unknown bytes. [ 1109.176743][T30712] netlink: 'syz.7.7906': attribute type 11 has an invalid length. [ 1109.396754][T30723] netlink: 'syz.2.7908': attribute type 2 has an invalid length. [ 1109.447950][T30723] nbd: must specify an index to disconnect [ 1109.496701][T30715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.872626][T30751] netlink: 'syz.4.7916': attribute type 10 has an invalid length. [ 1109.905836][T30751] delete_channel: no stack [ 1109.976788][T30754] openvswitch: netlink: Message has 6 unknown bytes. [ 1110.576531][T30772] netlink: 'syz.3.7925': attribute type 29 has an invalid length. [ 1110.587339][T30772] netlink: 'syz.3.7925': attribute type 29 has an invalid length. [ 1111.097713][T30797] netlink: 'syz.7.7930': attribute type 13 has an invalid length. [ 1111.137226][T30797] netlink: 'syz.7.7930': attribute type 17 has an invalid length. [ 1111.200985][T30797] lo: left promiscuous mode [ 1111.346838][T30797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.366201][T30797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1111.392822][ T5933] lo speed is unknown, defaulting to 1000 [ 1111.398600][ T5933] syz2: Port: 1 Link ACTIVE [ 1111.446958][T30811] openvswitch: netlink: Message has 6 unknown bytes. [ 1111.585287][T30821] xt_l2tp: invalid flags combination: 0 [ 1112.042090][T30829] __nla_validate_parse: 18 callbacks suppressed [ 1112.042111][T30829] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7938'. [ 1112.474667][T30844] netlink: 'syz.7.7945': attribute type 10 has an invalid length. [ 1112.491526][T30844] netlink: 55 bytes leftover after parsing attributes in process `syz.7.7945'. [ 1112.521740][T30844] delete_channel: no stack [ 1115.653807][T30867] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7953'. [ 1115.991826][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.998288][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.569560][T30871] netlink: 146936 bytes leftover after parsing attributes in process `syz.3.7955'. [ 1116.588341][T30871] openvswitch: netlink: Message has 6 unknown bytes. [ 1116.591475][T30884] netlink: 'syz.2.7959': attribute type 10 has an invalid length. [ 1116.629332][T30884] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7959'. [ 1116.631750][T30883] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7958'. [ 1116.697702][T30884] delete_channel: no stack [ 1117.285812][T30903] netlink: 'syz.3.7965': attribute type 2 has an invalid length. [ 1117.308181][T30903] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7965'. [ 1117.320548][T30903] nbd: must specify an index to disconnect [ 1117.553680][T30913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7967'. [ 1117.723097][T30921] netlink: 'syz.3.7970': attribute type 29 has an invalid length. [ 1117.742030][T30921] netlink: 'syz.3.7970': attribute type 29 has an invalid length. [ 1117.763572][T30921] netlink: 500 bytes leftover after parsing attributes in process `syz.3.7970'. [ 1118.089046][T30929] xt_l2tp: invalid flags combination: 0 [ 1118.246733][T30937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7973'. [ 1118.434580][T30944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7979'. [ 1118.506115][T30929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7973'. [ 1118.524425][T30945] netlink: 'syz.8.7978': attribute type 10 has an invalid length. [ 1118.563035][T30945] netlink: 55 bytes leftover after parsing attributes in process `syz.8.7978'. [ 1118.597214][T30945] delete_channel: no stack [ 1118.764785][T30957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7984'. [ 1118.774476][T30954] netlink: 'syz.4.7983': attribute type 11 has an invalid length. [ 1118.790259][T30954] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7983'. [ 1118.810222][T30953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1118.892994][T30961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7985'. [ 1119.688171][T30984] openvswitch: netlink: Message has 6 unknown bytes. [ 1120.109775][T30996] netlink: 'syz.8.7999': attribute type 2 has an invalid length. [ 1120.122461][T30996] netlink: 'syz.8.7999': attribute type 2 has an invalid length. [ 1120.187893][T31002] netlink: 'syz.7.8001': attribute type 5 has an invalid length. [ 1120.458392][T31014] netlink: 'syz.3.8005': attribute type 10 has an invalid length. [ 1120.531958][T31014] delete_channel: no stack [ 1120.755372][T31029] netlink: 'syz.7.8010': attribute type 10 has an invalid length. [ 1120.808353][T31029] delete_channel: no stack [ 1121.134332][T31036] netlink: 'syz.4.8014': attribute type 10 has an invalid length. [ 1121.796876][T31048] xt_l2tp: unknown flags: 51 [ 1122.363762][T31072] netlink: 'syz.8.8028': attribute type 10 has an invalid length. [ 1122.379619][T31072] __nla_validate_parse: 20 callbacks suppressed [ 1122.379651][T31072] netlink: 55 bytes leftover after parsing attributes in process `syz.8.8028'. [ 1122.466222][T31072] delete_channel: no stack [ 1122.580679][T31083] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8030'. [ 1122.684511][T31087] bpf: Bad value for 'uid' [ 1122.694076][T31087] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8032'. [ 1122.713113][T31088] bpf: Bad value for 'uid' [ 1122.819424][T31094] netlink: 'syz.3.8034': attribute type 2 has an invalid length. [ 1122.828429][T31094] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8034'. [ 1122.842214][T31094] nbd: must specify an index to disconnect [ 1123.142437][T31103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8037'. [ 1123.388615][T31120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8042'. [ 1123.492068][T31128] netlink: 'syz.4.8045': attribute type 2 has an invalid length. [ 1123.500029][T31128] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8045'. [ 1123.511178][T31128] nbd: must specify an index to disconnect [ 1123.714755][T31139] netlink: 'syz.4.8050': attribute type 4 has an invalid length. [ 1123.723122][T31139] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8050'. [ 1123.738850][T31139] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1123.964669][T31147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8053'. [ 1124.022541][T31150] netlink: 'syz.3.8052': attribute type 21 has an invalid length. [ 1124.032553][T31150] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8052'. [ 1124.046462][T31150] netlink: 'syz.3.8052': attribute type 5 has an invalid length. [ 1124.059222][T31150] netlink: 'syz.3.8052': attribute type 6 has an invalid length. [ 1124.375745][T31168] netlink: 'syz.3.8058': attribute type 11 has an invalid length. [ 1124.389129][T31167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1124.429727][T31172] netlink: 'syz.4.8060': attribute type 2 has an invalid length. [ 1124.448530][T31172] nbd: must specify an index to disconnect [ 1125.615950][T31233] netlink: 'syz.4.8080': attribute type 5 has an invalid length. [ 1125.623067][T31227] openvswitch: netlink: Message has 6 unknown bytes. [ 1125.719355][T31237] netlink: 'syz.4.8082': attribute type 11 has an invalid length. [ 1126.148170][T31240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1126.590196][T31260] ÿÿÿÿÿÿ: renamed from dummy0 (while UP) [ 1126.861004][T31274] delete_channel: no stack [ 1127.186673][T31279] openvswitch: netlink: Message has 6 unknown bytes. [ 1128.188320][T31314] netlink: 'syz.4.8107': attribute type 2 has an invalid length. [ 1128.443721][T31322] netlink: 'syz.2.8111': attribute type 21 has an invalid length. [ 1128.479568][T31322] __nla_validate_parse: 15 callbacks suppressed [ 1128.479596][T31322] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8111'. [ 1128.771399][T31336] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8112'. [ 1128.841438][T31339] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8115'. [ 1128.999294][T31331] delete_channel: no stack [ 1129.107995][T31342] netlink: 146936 bytes leftover after parsing attributes in process `syz.3.8117'. [ 1129.120954][T31342] openvswitch: netlink: Message has 6 unknown bytes. [ 1129.185125][T31356] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8122'. [ 1129.353016][T31360] netlink: 'syz.7.8124': attribute type 11 has an invalid length. [ 1129.380158][T31361] netlink: 'syz.2.8123': attribute type 4 has an invalid length. [ 1129.396692][T31360] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.8124'. [ 1129.408821][T31361] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8123'. [ 1129.429773][T31361] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1129.448562][T31359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1129.693667][T31373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8130'. [ 1129.702813][T31373] netlink: 6 bytes leftover after parsing attributes in process `syz.4.8130'. [ 1129.739067][T31371] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8128'. [ 1129.980670][T31385] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1129.987607][T31385] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1130.056309][T31388] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1130.078693][T31388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1131.441205][T31420] openvswitch: netlink: Message has 6 unknown bytes. [ 1131.909379][T31423] netlink: 'syz.2.8148': attribute type 5 has an invalid length. [ 1133.839389][T31454] netlink: 'syz.2.8155': attribute type 10 has an invalid length. [ 1133.880909][T31454] __nla_validate_parse: 7 callbacks suppressed [ 1133.880944][T31454] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8155'. [ 1133.901419][T31456] delete_channel: no stack [ 1134.425490][T31465] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8158'. [ 1134.446825][T31463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8159'. [ 1134.710494][T31477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8166'. [ 1134.828628][T31483] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8168'. [ 1134.923609][T31488] delete_channel: no stack [ 1134.954539][T31489] delete_channel: no stack [ 1135.225702][T31493] netlink: 146936 bytes leftover after parsing attributes in process `syz.8.8171'. [ 1135.236385][T31493] openvswitch: netlink: Message has 6 unknown bytes. [ 1135.988167][T31511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8176'. [ 1136.390273][T31522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8180'. [ 1136.466422][T31530] netlink: 'syz.3.8183': attribute type 2 has an invalid length. [ 1136.485068][T31530] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.8183'. [ 1136.511224][T31530] nbd: must specify an index to disconnect [ 1136.524814][T31532] netlink: 'syz.7.8184': attribute type 29 has an invalid length. [ 1136.595818][T31532] netlink: 'syz.7.8184': attribute type 29 has an invalid length. [ 1136.774367][T31544] netlink: 'syz.2.8188': attribute type 11 has an invalid length. [ 1136.784143][T31544] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8188'. [ 1136.797672][T31542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1136.877984][T31546] delete_channel: no stack [ 1136.905583][T31548] delete_channel: no stack [ 1139.669472][T31571] netlink: 'syz.7.8197': attribute type 10 has an invalid length. [ 1139.690968][T31573] netlink: 'syz.4.8195': attribute type 4 has an invalid length. [ 1139.711248][T31573] __nla_validate_parse: 1 callbacks suppressed [ 1139.711268][T31573] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8195'. [ 1139.730498][T31573] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1139.744477][T31575] netlink: 'syz.3.8196': attribute type 2 has an invalid length. [ 1139.768373][T31575] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.8196'. [ 1139.819158][T31575] nbd: must specify an index to disconnect [ 1140.060149][T31584] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8202'. [ 1140.094931][T31579] netlink: 64 bytes leftover after parsing attributes in process `syz.8.8200'. [ 1140.418779][T31594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8205'. [ 1140.668011][T31602] delete_channel: no stack [ 1141.410332][T31611] netlink: 'syz.2.8213': attribute type 2 has an invalid length. [ 1141.418783][T31611] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8213'. [ 1141.430143][T31611] nbd: must specify an index to disconnect [ 1141.594990][T31621] netlink: 'syz.2.8215': attribute type 5 has an invalid length. [ 1141.604363][T31620] netlink: 'syz.2.8215': attribute type 10 has an invalid length. [ 1141.616554][T31620] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8215'. [ 1143.249435][T31609] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 1143.361405][T31637] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8219'. [ 1143.524684][T31634] netlink: 146936 bytes leftover after parsing attributes in process `syz.7.8220'. [ 1143.577569][T31634] openvswitch: netlink: Message has 6 unknown bytes. [ 1143.632960][T15615] Bluetooth: hci4: command 0x0406 tx timeout [ 1143.713934][T31653] netlink: 'syz.4.8225': attribute type 2 has an invalid length. [ 1143.725789][T31653] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8225'. [ 1143.739213][T31653] nbd: must specify an index to disconnect [ 1143.818198][T31655] netlink: 'syz.2.8226': attribute type 4 has an invalid length. [ 1143.841684][T31655] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1144.305110][T31668] netlink: 'syz.7.8231': attribute type 11 has an invalid length. [ 1144.323517][T31664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1144.677655][T31680] openvswitch: netlink: Message has 6 unknown bytes. [ 1144.791282][T31690] __nla_validate_parse: 8 callbacks suppressed [ 1144.791310][T31690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8241'. [ 1145.406305][T31708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8247'. [ 1145.461351][T31707] netlink: 'syz.7.8246': attribute type 10 has an invalid length. [ 1145.522977][T31707] geneve0: entered promiscuous mode [ 1145.733035][T31707] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1146.172342][T31716] delete_channel: no stack [ 1146.303895][T31720] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8251'. [ 1146.532535][T31724] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8252'. [ 1146.556357][T31724] netlink: 130016 bytes leftover after parsing attributes in process `syz.8.8252'. [ 1146.578941][T31724] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8252'. [ 1146.617674][T31724] netlink: 300 bytes leftover after parsing attributes in process `syz.8.8252'. [ 1146.800294][T15615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1146.810256][T15615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1146.819396][T15615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1146.844851][T15615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1146.854229][T15615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1147.074555][T25067] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.168955][T31728] lo speed is unknown, defaulting to 1000 [ 1147.249874][T31739] netlink: 'syz.8.8257': attribute type 32 has an invalid length. [ 1147.273821][T25067] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.329079][T31744] netlink: 146936 bytes leftover after parsing attributes in process `syz.4.8256'. [ 1147.355352][T31745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8258'. [ 1147.365044][T31744] openvswitch: netlink: Message has 6 unknown bytes. [ 1147.523547][T25067] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.586550][T31749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8259'. [ 1147.723188][T25067] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.911259][ T5856] Bluetooth: hci0: command tx timeout [ 1149.207983][T25067] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1149.505724][T25067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1149.534037][T25067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1149.561916][T25067] bond0 (unregistering): Released all slaves [ 1149.654957][T31728] chnl_net:caif_netlink_parms(): no params data found [ 1149.710229][T25067] : left promiscuous mode [ 1149.888262][T31810] __nla_validate_parse: 2 callbacks suppressed [ 1149.888281][T31810] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8278'. [ 1150.272460][T31728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.279696][T31728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.318002][T31728] bridge_slave_0: entered allmulticast mode [ 1150.339534][T31728] bridge_slave_0: entered promiscuous mode [ 1150.377266][T31728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.386376][T31728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.398100][T31728] bridge_slave_1: entered allmulticast mode [ 1150.422177][T31728] bridge_slave_1: entered promiscuous mode [ 1150.676944][T31819] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8281'. [ 1150.720455][T31728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1150.746414][T31728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1150.969011][T31728] team0: Port device team_slave_0 added [ 1150.995877][T31728] team0: Port device team_slave_1 added [ 1151.000724][ T5856] Bluetooth: hci0: command tx timeout [ 1151.014419][T25067] hsr_slave_0: left promiscuous mode [ 1151.034440][T25067] hsr_slave_1: left promiscuous mode [ 1151.044135][T25067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1151.054922][T25067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1151.095905][T25067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1151.132861][T25067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1151.210809][T25067] veth1_macvtap: left promiscuous mode [ 1151.219359][T31834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8287'. [ 1151.234687][T25067] veth0_macvtap: left promiscuous mode [ 1152.850000][ T5910] lo speed is unknown, defaulting to 1000 [ 1152.870223][ T5910] infiniband syz2: ib_query_port failed (-19) [ 1152.881621][T31728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1152.897717][T31728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1152.927945][T31728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1152.946244][T31728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1152.969691][T31728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.000250][T31728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1153.070964][ T5856] Bluetooth: hci0: command tx timeout [ 1153.092159][T31849] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8293'. [ 1153.363687][T31859] netlink: 44 bytes leftover after parsing attributes in process `syz.8.8296'. [ 1153.391417][T31859] netlink: 43 bytes leftover after parsing attributes in process `syz.8.8296'. [ 1153.411858][T31728] hsr_slave_0: entered promiscuous mode [ 1153.414567][T31859] netlink: 'syz.8.8296': attribute type 5 has an invalid length. [ 1153.418888][T31728] hsr_slave_1: entered promiscuous mode [ 1153.433646][T31859] netlink: 43 bytes leftover after parsing attributes in process `syz.8.8296'. [ 1153.645938][T31865] netlink: 'syz.4.8299': attribute type 39 has an invalid length. [ 1153.787288][T31867] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8300'. [ 1154.406267][T31887] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8303'. [ 1154.988396][T31728] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1155.000518][T31728] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1155.018016][T31728] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1155.033487][T31728] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1155.150849][ T5856] Bluetooth: hci0: command tx timeout [ 1155.212235][T31728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.254044][T31728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.278886][T25067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.286169][T25067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.314042][T25067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.321259][T25067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.777187][T31728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.937058][T31915] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8311'. [ 1155.976891][T31918] netlink: 'syz.3.8312': attribute type 11 has an invalid length. [ 1155.986444][T31918] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8312'. [ 1156.014841][T31917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1156.225242][T31928] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8314'. [ 1156.269817][T31928] netlink: 6 bytes leftover after parsing attributes in process `syz.8.8314'. [ 1156.528425][T31728] veth0_vlan: entered promiscuous mode [ 1156.542931][T31936] netlink: 'syz.8.8316': attribute type 29 has an invalid length. [ 1156.570791][T31936] netlink: 'syz.8.8316': attribute type 29 has an invalid length. [ 1156.581670][T31728] veth1_vlan: entered promiscuous mode [ 1156.607931][T31936] netlink: 500 bytes leftover after parsing attributes in process `syz.8.8316'. [ 1156.732654][T31728] veth0_macvtap: entered promiscuous mode [ 1156.763757][T31728] veth1_macvtap: entered promiscuous mode [ 1156.889702][T31728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1156.947239][T31728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1157.030415][ T9666] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.069778][ T9666] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.108112][ T9666] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.159651][ T9666] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.474732][ T9666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.490858][ T9666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.548403][ T9666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.563677][ T9666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.840805][T31960] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8321'. [ 1157.983475][T31965] netlink: 44 bytes leftover after parsing attributes in process `syz.8.8323'. [ 1158.003546][T31965] netlink: 43 bytes leftover after parsing attributes in process `syz.8.8323'. [ 1158.038771][T31965] netlink: 'syz.8.8323': attribute type 5 has an invalid length. [ 1158.075485][T31965] netlink: 43 bytes leftover after parsing attributes in process `syz.8.8323'. [ 1158.462222][T31978] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.8327'. [ 1158.853140][T31992] netlink: 'syz.3.8330': attribute type 22 has an invalid length. [ 1160.577997][T15615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1160.589344][T15615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1160.598367][T15615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1160.610088][T15615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1160.617964][T15615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1160.654431][T32023] netlink: 'syz.8.8343': attribute type 11 has an invalid length. [ 1160.733638][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.905596][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.958661][T32031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.959965][T32041] __nla_validate_parse: 2 callbacks suppressed [ 1160.959983][T32041] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8348'. [ 1161.018139][T32041] netlink: 43 bytes leftover after parsing attributes in process `syz.7.8348'. [ 1161.054931][T32041] netlink: 'syz.7.8348': attribute type 5 has an invalid length. [ 1161.063332][T32041] netlink: 43 bytes leftover after parsing attributes in process `syz.7.8348'. [ 1161.101383][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.236047][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.362163][T32054] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode [ 1161.679842][T32065] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8356'. [ 1161.747125][T32065] bridge_slave_0: entered allmulticast mode [ 1161.778810][T32067] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8355'. [ 1161.837577][T32022] chnl_net:caif_netlink_parms(): no params data found [ 1162.172670][T32071] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1162.322879][T32071] netlink: 'syz.8.8357': attribute type 11 has an invalid length. [ 1162.506662][T32075] netlink: 'syz.3.8358': attribute type 10 has an invalid length. [ 1162.657799][T32078] netlink: 'syz.7.8359': attribute type 2 has an invalid length. [ 1162.681292][T15615] Bluetooth: hci2: command tx timeout [ 1163.152332][ T36] team0: Port device geneve1 removed [ 1163.741928][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1163.756196][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1163.767767][ T36] bond0 (unregistering): Released all slaves [ 1164.367449][T32022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.374035][T32104] netlink: 'syz.7.8368': attribute type 11 has an invalid length. [ 1164.382823][T32104] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.8368'. [ 1164.387643][T32022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.401354][T32103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1164.412590][T32022] bridge_slave_0: entered allmulticast mode [ 1164.424637][T32022] bridge_slave_0: entered promiscuous mode [ 1164.448819][T32022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.466610][T32022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.474112][T32022] bridge_slave_1: entered allmulticast mode [ 1164.483578][T32022] bridge_slave_1: entered promiscuous mode [ 1164.507559][ T36] team0: Port device wlan1 removed [ 1164.573719][T32107] netlink: 'syz.7.8370': attribute type 11 has an invalid length. [ 1164.600785][T32107] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.8370'. [ 1164.666507][T32108] mac80211_hwsim hwsim50 wlan0: entered allmulticast mode [ 1164.696534][T32113] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8371'. [ 1164.703672][T32109] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 1164.708591][T32113] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8371'. [ 1164.727235][T32113] netlink: 'syz.3.8371': attribute type 5 has an invalid length. [ 1164.737915][T32113] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8371'. [ 1164.756304][T15615] Bluetooth: hci2: command tx timeout [ 1164.793077][T32022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.827155][T32022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.968345][T32114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1165.059976][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1165.102645][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1165.586524][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1165.634534][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1166.128028][T32135] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8378'. [ 1166.273010][T32022] team0: Port device team_slave_0 added [ 1166.288033][T32022] team0: Port device team_slave_1 added [ 1166.809015][T32022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1166.831199][T15615] Bluetooth: hci2: command tx timeout [ 1166.832908][T32022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1166.874798][T32022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1166.901281][T32022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1166.908285][T32022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1166.944009][T32022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1167.040408][T32158] netlink: 'syz.7.8387': attribute type 10 has an invalid length. [ 1167.220067][T32158] team0: Port device wlan1 added [ 1167.236488][T32022] hsr_slave_0: entered promiscuous mode [ 1167.243960][T32022] hsr_slave_1: entered promiscuous mode [ 1167.250595][T32022] debugfs: 'hsr0' already exists in 'hsr' [ 1167.256992][T32022] Cannot create hsr debugfs directory [ 1167.926553][T32185] netlink: 'syz.3.8393': attribute type 11 has an invalid length. [ 1167.952900][T32185] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8393'. [ 1167.967523][T32022] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1167.979642][T32184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1168.016833][T32022] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1168.046497][T32022] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1168.068991][T32022] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1168.199728][T32203] netlink: 763 bytes leftover after parsing attributes in process `syz.3.8398'. [ 1168.228637][T32203] : renamed from gre0 (while UP) [ 1168.476075][T32022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.487044][T32217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8402'. [ 1168.499133][T32212] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.8401'. [ 1168.546105][T32022] 8021q: adding VLAN 0 to HW filter on device team0 [ 1168.566649][T32219] netlink: 'syz.7.8403': attribute type 10 has an invalid length. [ 1168.569869][ T9666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.581792][ T9666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.665669][T32219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.684065][T32219] team0: Port device bond0 added [ 1168.696969][ T9666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.704300][ T9666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.912087][T15615] Bluetooth: hci2: command tx timeout [ 1169.011811][T32234] netlink: 132 bytes leftover after parsing attributes in process `syz.8.8408'. [ 1169.484985][T32022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.693604][T32252] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1169.700443][T32252] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1169.867653][T32022] veth0_vlan: entered promiscuous mode [ 1169.889025][T32022] veth1_vlan: entered promiscuous mode [ 1169.937868][T32022] veth0_macvtap: entered promiscuous mode [ 1169.950061][T32022] veth1_macvtap: entered promiscuous mode [ 1169.980359][T32022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1169.998370][T32022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1170.021111][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.048791][ T59] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.061845][ T59] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.078497][ T59] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.178282][ T6102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.201499][ T6102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.256686][ T9666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.268578][ T9666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.412622][T32264] netlink: 'syz.7.8416': attribute type 9 has an invalid length. [ 1170.436793][T32264] netlink: 'syz.7.8416': attribute type 8 has an invalid length. [ 1170.457588][T32264] netlink: 143452 bytes leftover after parsing attributes in process `syz.7.8416'. [ 1170.593120][T32272] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8418'. [ 1170.649755][T32276] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8418'. [ 1170.681209][T32276] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 1170.688894][T32276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1170.737947][T32268] delete_channel: no stack [ 1170.847524][T32283] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8421'. [ 1170.867806][T32283] netlink: 'syz.3.8421': attribute type 5 has an invalid length. [ 1170.897143][T32278] bridge_slave_1: left allmulticast mode [ 1170.904274][T32278] bridge_slave_1: left promiscuous mode [ 1170.910751][T32278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.943107][T32278] bridge_slave_0: left allmulticast mode [ 1170.948893][T32278] bridge_slave_0: left promiscuous mode [ 1170.969999][T32278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.048535][T32286] netlink: 'syz.8.8423': attribute type 11 has an invalid length. [ 1171.079091][T32285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1171.249412][T32296] __nla_validate_parse: 5 callbacks suppressed [ 1171.249432][T32296] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8428'. [ 1171.399554][T32294] netlink: 88 bytes leftover after parsing attributes in process `syz.9.8427'. [ 1171.422622][T32294] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8427'. [ 1171.621423][T32304] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 1171.637782][T32304] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 1171.648208][T32304] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 1172.449252][T32321] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1172.511856][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1172.521455][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1172.529500][T32321] netlink: 'syz.3.8437': attribute type 10 has an invalid length. [ 1172.540764][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1172.554775][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1172.565452][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1172.686838][T32327] FAULT_INJECTION: forcing a failure. [ 1172.686838][T32327] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.705393][T32327] CPU: 1 UID: 0 PID: 32327 Comm: syz.9.8438 Not tainted syzkaller #0 PREEMPT(full) [ 1172.705418][T32327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1172.705430][T32327] Call Trace: [ 1172.705438][T32327] [ 1172.705447][T32327] dump_stack_lvl+0x189/0x250 [ 1172.705475][T32327] ? __pfx____ratelimit+0x10/0x10 [ 1172.705494][T32327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1172.705517][T32327] ? __pfx__printk+0x10/0x10 [ 1172.705543][T32327] ? __pfx___might_resched+0x10/0x10 [ 1172.705572][T32327] should_fail_ex+0x414/0x560 [ 1172.705604][T32327] should_failslab+0xa8/0x100 [ 1172.705629][T32327] __kmalloc_noprof+0xcb/0x4f0 [ 1172.705650][T32327] ? kfree+0x4d/0x440 [ 1172.705670][T32327] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1172.705702][T32327] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1172.705730][T32327] ? tomoyo_domain+0xd9/0x130 [ 1172.705754][T32327] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1172.705776][T32327] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1172.705803][T32327] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1172.705827][T32327] ? ksys_write+0x1cb/0x250 [ 1172.705899][T32327] ? __fget_files+0x2a/0x420 [ 1172.705926][T32327] ? __fget_files+0x2a/0x420 [ 1172.705947][T32327] ? __fget_files+0x3a0/0x420 [ 1172.705968][T32327] ? __fget_files+0x2a/0x420 [ 1172.706004][T32327] security_file_ioctl+0xcb/0x2d0 [ 1172.706028][T32327] __se_sys_ioctl+0x47/0x170 [ 1172.706053][T32327] do_syscall_64+0xfa/0x3b0 [ 1172.706071][T32327] ? lockdep_hardirqs_on+0x9c/0x150 [ 1172.706090][T32327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.706107][T32327] ? clear_bhb_loop+0x60/0xb0 [ 1172.706130][T32327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.706147][T32327] RIP: 0033:0x7ff3f5f8eec9 [ 1172.706165][T32327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1172.706180][T32327] RSP: 002b:00007ff3f6e3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1172.706200][T32327] RAX: ffffffffffffffda RBX: 00007ff3f61e6090 RCX: 00007ff3f5f8eec9 [ 1172.706214][T32327] RDX: 0000200000000040 RSI: 00000000401054d5 RDI: 0000000000000003 [ 1172.706226][T32327] RBP: 00007ff3f6e3b090 R08: 0000000000000000 R09: 0000000000000000 [ 1172.706238][T32327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1172.706249][T32327] R13: 00007ff3f61e6128 R14: 00007ff3f61e6090 R15: 00007ffe4d3e0508 [ 1172.706285][T32327] [ 1172.943100][T32327] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1173.621464][T32348] netlink: 44 bytes leftover after parsing attributes in process `syz.9.8446'. [ 1173.673147][T32348] netlink: 43 bytes leftover after parsing attributes in process `syz.9.8446'. [ 1173.688830][T32348] netlink: 'syz.9.8446': attribute type 5 has an invalid length. [ 1173.697148][T32348] netlink: 43 bytes leftover after parsing attributes in process `syz.9.8446'. [ 1173.770135][T32351] netlink: 'syz.3.8447': attribute type 11 has an invalid length. [ 1173.844372][T32351] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8447'. [ 1173.927327][T32360] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8450'. [ 1173.938331][T32360] netlink: 6 bytes leftover after parsing attributes in process `syz.7.8450'. [ 1174.095939][T32323] chnl_net:caif_netlink_parms(): no params data found [ 1174.141859][T32361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1174.247671][T32373] netlink: 'syz.7.8451': attribute type 11 has an invalid length. [ 1174.292244][T32373] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.8451'. [ 1174.336946][T32364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1174.527542][T32377] netlink: 'syz.9.8454': attribute type 10 has an invalid length. [ 1174.590233][T32323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.600176][T15615] Bluetooth: hci5: command tx timeout [ 1174.611044][T32323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.619189][T32323] bridge_slave_0: entered allmulticast mode [ 1174.629318][T32323] bridge_slave_0: entered promiscuous mode [ 1174.639726][T32323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.647183][T32323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.654813][T32323] bridge_slave_1: entered allmulticast mode [ 1174.663154][T32323] bridge_slave_1: entered promiscuous mode [ 1175.248445][T32368] delete_channel: no stack [ 1175.264773][T32377] team0: Port device wlan1 added [ 1175.325656][T32379] : entered promiscuous mode [ 1175.435692][T32323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1175.499547][T32323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1175.509842][T32399] netlink: 'syz.9.8458': attribute type 29 has an invalid length. [ 1175.621714][T32402] netlink: 'syz.9.8458': attribute type 29 has an invalid length. [ 1175.643414][T32323] team0: Port device team_slave_0 added [ 1175.656397][T32323] team0: Port device team_slave_1 added [ 1175.826011][T32415] netlink: 'syz.9.8464': attribute type 7 has an invalid length. [ 1175.857060][T32415] netlink: 'syz.9.8464': attribute type 8 has an invalid length. [ 1176.177741][T32421] wg2: entered allmulticast mode [ 1176.271586][T32323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1176.278602][T32323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1176.330284][T32323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1176.398001][T32427] wg2: entered promiscuous mode [ 1176.438963][T32323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1176.459049][T32323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1176.493345][T32323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1176.670867][T15615] Bluetooth: hci5: command tx timeout [ 1176.822394][T32323] hsr_slave_0: entered promiscuous mode [ 1176.829358][T32323] hsr_slave_1: entered promiscuous mode [ 1176.886939][T32323] debugfs: 'hsr0' already exists in 'hsr' [ 1176.921326][T32323] Cannot create hsr debugfs directory [ 1176.934588][T32449] netlink: 'syz.7.8475': attribute type 11 has an invalid length. [ 1176.947369][T32449] __nla_validate_parse: 1 callbacks suppressed [ 1176.947409][T32449] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.8475'. [ 1176.972464][T32445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1177.171641][T32455] delete_channel: no stack [ 1177.368308][T32462] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8479'. [ 1177.397328][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.405567][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.427106][T32464] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8480'. [ 1177.678327][T32470] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8483'. [ 1177.702879][T32470] unsupported nlmsg_type 40 [ 1177.711877][T32470] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8483'. [ 1177.741751][T32470] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8483'. [ 1177.771129][T32470] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8483'. [ 1177.802901][T32470] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8483'. [ 1177.831464][T32470] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8483'. [ 1177.874486][T32470] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8483'. [ 1178.644837][T32496] netlink: 'syz.3.8491': attribute type 2 has an invalid length. [ 1178.665019][T32496] nbd: must specify an index to disconnect [ 1178.712693][T32323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1178.750951][T15615] Bluetooth: hci5: command tx timeout [ 1178.804628][T32323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1178.888290][T32323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1179.382200][T32513] FAULT_INJECTION: forcing a failure. [ 1179.382200][T32513] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.462101][T32513] CPU: 1 UID: 0 PID: 32513 Comm: syz.8.8496 Not tainted syzkaller #0 PREEMPT(full) [ 1179.462126][T32513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1179.462137][T32513] Call Trace: [ 1179.462145][T32513] [ 1179.462154][T32513] dump_stack_lvl+0x189/0x250 [ 1179.462180][T32513] ? __pfx____ratelimit+0x10/0x10 [ 1179.462200][T32513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1179.462230][T32513] ? __pfx__printk+0x10/0x10 [ 1179.462249][T32513] ? __pfx___might_resched+0x10/0x10 [ 1179.462269][T32513] ? fs_reclaim_acquire+0x7d/0x100 [ 1179.462299][T32513] should_fail_ex+0x414/0x560 [ 1179.462328][T32513] should_failslab+0xa8/0x100 [ 1179.462351][T32513] __kmalloc_noprof+0xcb/0x4f0 [ 1179.462370][T32513] ? tomoyo_encode+0x28b/0x550 [ 1179.462398][T32513] tomoyo_encode+0x28b/0x550 [ 1179.462430][T32513] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1179.462469][T32513] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1179.462491][T32513] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1179.462516][T32513] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1179.462539][T32513] ? perf_trace_run_bpf_submit+0x100/0x170 [ 1179.462606][T32513] ? __fget_files+0x2a/0x420 [ 1179.462634][T32513] ? __fget_files+0x2a/0x420 [ 1179.462653][T32513] ? __fget_files+0x3a0/0x420 [ 1179.462672][T32513] ? __fget_files+0x2a/0x420 [ 1179.462698][T32513] security_file_ioctl+0xcb/0x2d0 [ 1179.462723][T32513] __se_sys_ioctl+0x47/0x170 [ 1179.462747][T32513] do_syscall_64+0xfa/0x3b0 [ 1179.462766][T32513] ? lockdep_hardirqs_on+0x9c/0x150 [ 1179.462785][T32513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.462803][T32513] ? clear_bhb_loop+0x60/0xb0 [ 1179.462826][T32513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.462842][T32513] RIP: 0033:0x7f88e1b8eec9 [ 1179.462859][T32513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1179.462872][T32513] RSP: 002b:00007f88e29bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1179.462891][T32513] RAX: ffffffffffffffda RBX: 00007f88e1de6090 RCX: 00007f88e1b8eec9 [ 1179.462904][T32513] RDX: 0000200000000040 RSI: 00000000401054d5 RDI: 0000000000000003 [ 1179.462915][T32513] RBP: 00007f88e29bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.462926][T32513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.462934][T32513] R13: 00007f88e1de6128 R14: 00007f88e1de6090 R15: 00007ffc9dc674c8 [ 1179.462964][T32513] [ 1179.463632][T32513] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1179.719263][T32498] syzkaller0: entered promiscuous mode [ 1179.731624][T32498] syzkaller0: entered allmulticast mode [ 1179.745033][T32323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1180.798933][T32530] bpf: Bad value for 'gid' [ 1180.835741][T15615] Bluetooth: hci5: command tx timeout [ 1181.033348][T32533] delete_channel: no stack [ 1182.408587][T32323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.464905][T32323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.565562][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.572794][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.711351][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.718581][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.858333][T32559] __nla_validate_parse: 5 callbacks suppressed [ 1182.858354][T32559] netlink: 65039 bytes leftover after parsing attributes in process `syz.9.8512'. [ 1182.907638][T32561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8513'. [ 1182.932393][T32561] netlink: 6 bytes leftover after parsing attributes in process `syz.3.8513'. [ 1183.313510][T32575] netlink: 'syz.7.8518': attribute type 4 has an invalid length. [ 1183.363755][T32575] netlink: 152 bytes leftover after parsing attributes in process `syz.7.8518'. [ 1183.988145][T32323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.238905][T32323] veth0_vlan: entered promiscuous mode [ 1184.259494][T32323] veth1_vlan: entered promiscuous mode [ 1184.317506][T32323] veth0_macvtap: entered promiscuous mode [ 1184.330472][T32323] veth1_macvtap: entered promiscuous mode [ 1184.375406][T32323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1184.430497][T32323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1184.486248][ T9666] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.505975][ T9666] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.518234][ T9666] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.539140][ T9666] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.809286][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.826135][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.868973][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.879033][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.233428][T32637] dummy0: entered allmulticast mode [ 1186.540805][T32649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8540'. [ 1186.545811][T32652] netlink: 'syz.3.8542': attribute type 2 has an invalid length. [ 1186.567667][T32652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8542'. [ 1186.580403][T32652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8542'. [ 1186.708094][T32652] netlink: 'syz.3.8542': attribute type 3 has an invalid length. [ 1186.730702][T32652] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8542'. [ 1187.216238][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1187.227759][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1187.236671][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1187.248420][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1187.257878][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1187.354229][ T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.602609][ T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.839003][ T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.905649][T32691] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1187.912234][T32691] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1187.919230][T32694] netlink: 146936 bytes leftover after parsing attributes in process `syz.9.8552'. [ 1187.941800][T32694] openvswitch: netlink: Message has 6 unknown bytes. [ 1187.986260][T32686] bridge_slave_1: left allmulticast mode [ 1188.016007][T32686] bridge_slave_1: left promiscuous mode [ 1188.042858][T32686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.095366][T32686] bridge_slave_0: left allmulticast mode [ 1188.141940][T32686] bridge_slave_0: left promiscuous mode [ 1188.158827][T32686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.419610][ T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.321086][T15615] Bluetooth: hci1: command tx timeout [ 1189.553694][T32722] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8563'. [ 1189.562851][T32722] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8563'. [ 1189.572933][T32722] netlink: 'syz.3.8563': attribute type 5 has an invalid length. [ 1189.581825][T32722] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8563'. [ 1189.794344][T32729] netlink: 146936 bytes leftover after parsing attributes in process `syz.3.8564'. [ 1189.809729][T32729] openvswitch: netlink: Message has 6 unknown bytes. [ 1191.391128][T15615] Bluetooth: hci1: command tx timeout [ 1193.017951][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1193.028820][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1193.042658][ T36] bond0 (unregistering): Released all slaves [ 1193.146699][T32669] chnl_net:caif_netlink_parms(): no params data found [ 1193.254692][ T36] : left promiscuous mode [ 1193.472132][T15615] Bluetooth: hci1: command tx timeout [ 1193.579295][T32747] netlink: 'syz.9.8570': attribute type 10 has an invalid length. [ 1193.805311][T32765] netlink: 'syz.3.8574': attribute type 11 has an invalid length. [ 1193.819068][T32765] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8574'. [ 1194.125492][T32767] netlink: 'syz.7.8575': attribute type 10 has an invalid length. [ 1194.280575][ T300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1194.435073][ T311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8576'. [ 1194.604026][ T315] netlink: 146936 bytes leftover after parsing attributes in process `syz.9.8577'. [ 1194.659320][ T315] openvswitch: netlink: Message has 6 unknown bytes. [ 1194.997662][T32669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.015364][T32669] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.023202][T32669] bridge_slave_0: entered allmulticast mode [ 1195.031495][T32669] bridge_slave_0: entered promiscuous mode [ 1195.107236][ T328] delete_channel: no stack [ 1195.130049][T32669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.173489][T32669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.203239][T32669] bridge_slave_1: entered allmulticast mode [ 1195.227758][T32669] bridge_slave_1: entered promiscuous mode [ 1195.447916][T32669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1195.539862][T32669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1195.550931][T15615] Bluetooth: hci1: command tx timeout [ 1195.727945][T32669] team0: Port device team_slave_0 added [ 1195.740464][T32669] team0: Port device team_slave_1 added [ 1195.760280][ T346] netlink: 146936 bytes leftover after parsing attributes in process `syz.9.8590'. [ 1195.787825][ T346] openvswitch: netlink: Message has 6 unknown bytes. [ 1195.922755][T32669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1195.930776][T32669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1195.958931][T32669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1195.972306][T32669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1195.979300][T32669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1196.009959][ T355] netlink: 'syz.0.8592': attribute type 10 has an invalid length. [ 1196.019405][T32669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.045972][ T355] team0: Device ipvlan1 failed to register rx_handler [ 1196.442918][ T36] team0: Port device wlan1 removed [ 1196.583459][ T365] netlink: 146936 bytes leftover after parsing attributes in process `syz.7.8593'. [ 1196.603251][T32669] hsr_slave_0: entered promiscuous mode [ 1196.659698][T32669] hsr_slave_1: entered promiscuous mode [ 1196.667087][ T365] openvswitch: netlink: Message has 6 unknown bytes. [ 1196.698121][T32669] debugfs: 'hsr0' already exists in 'hsr' [ 1196.765549][T32669] Cannot create hsr debugfs directory [ 1196.796119][ T372] netlink: 'syz.9.8596': attribute type 2 has an invalid length. [ 1196.813922][ T372] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.8596'. [ 1196.830100][ T372] nbd: must specify an index to disconnect [ 1197.165665][ T376] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8598'. [ 1197.546551][ T384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8603'. [ 1197.608018][ T384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8603'. [ 1198.468474][ T392] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8602'. [ 1199.323604][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1199.362986][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1199.409545][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1199.434183][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1199.465747][ T403] netlink: 'syz.0.8607': attribute type 2 has an invalid length. [ 1199.520807][ T403] netlink: 'syz.0.8607': attribute type 1 has an invalid length. [ 1199.569342][ T36] veth1_macvtap: left promiscuous mode [ 1199.754310][ T418] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8615'. [ 1199.807267][ T418] netlink: 'syz.7.8615': attribute type 1 has an invalid length. [ 1200.406450][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1200.460504][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1201.129797][ T435] netlink: 'syz.7.8620': attribute type 10 has an invalid length. [ 1201.272676][ T435] batman_adv: batadv0: Adding interface: team0 [ 1201.290718][ T435] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1201.397754][ T435] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1202.284899][ T451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8625'. [ 1202.919855][ T469] delete_channel: no stack [ 1203.111499][ T475] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8632'. [ 1203.123460][ T475] netlink: 43 bytes leftover after parsing attributes in process `syz.7.8632'. [ 1203.133169][ T475] netlink: 'syz.7.8632': attribute type 5 has an invalid length. [ 1203.141931][ T475] netlink: 43 bytes leftover after parsing attributes in process `syz.7.8632'. [ 1203.300218][T32669] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1203.323614][T32669] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1203.346626][T32669] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1203.374410][T32669] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1203.447995][ T484] netlink: 'syz.7.8634': attribute type 3 has an invalid length. [ 1203.456589][ T484] netlink: 132 bytes leftover after parsing attributes in process `syz.7.8634'. [ 1203.584841][T32669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1203.633853][T32669] 8021q: adding VLAN 0 to HW filter on device team0 [ 1203.660679][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.667866][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1203.685035][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.692208][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.192203][ T508] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8638'. [ 1204.643847][T32669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1204.802633][ T525] netlink: 'syz.3.8642': attribute type 10 has an invalid length. [ 1205.325095][ T537] netlink: 'syz.7.8645': attribute type 10 has an invalid length. [ 1205.354525][ T537] netlink: 65015 bytes leftover after parsing attributes in process `syz.7.8645'. [ 1205.940380][T32669] veth0_vlan: entered promiscuous mode [ 1205.995536][T32669] veth1_vlan: entered promiscuous mode [ 1206.202344][T32669] veth0_macvtap: entered promiscuous mode [ 1206.295610][ T550] delete_channel: no stack [ 1206.403114][T32669] veth1_macvtap: entered promiscuous mode [ 1206.528701][T32669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1206.589742][T32669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1206.650022][ T565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8654'. [ 1206.671874][ T565] netlink: 6 bytes leftover after parsing attributes in process `syz.0.8654'. [ 1206.682016][ T140] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.700990][ T1171] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.709865][ T1171] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.750285][ T1171] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.919307][ T572] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8658'. [ 1207.038602][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.068739][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.184944][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.208300][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.484915][ T598] netlink: 'syz.7.8663': attribute type 2 has an invalid length. [ 1207.538044][ T598] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.8663'. [ 1207.559512][ T598] nbd: must specify an index to disconnect [ 1207.996359][ T610] netlink: 'syz.0.8670': attribute type 10 has an invalid length. [ 1208.608037][ T639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8679'. [ 1208.658033][ T610] team0: Port device wlan1 added [ 1208.664066][ T639] netlink: 6 bytes leftover after parsing attributes in process `syz.3.8679'. [ 1209.108423][ T653] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1209.115055][ T653] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1209.865456][ T658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8685'. [ 1210.458179][ T666] netlink: 44 bytes leftover after parsing attributes in process `syz.8.8687'. [ 1210.469066][ T666] netlink: 43 bytes leftover after parsing attributes in process `syz.8.8687'. [ 1210.480140][ T666] netlink: 'syz.8.8687': attribute type 5 has an invalid length. [ 1210.489324][ T666] netlink: 43 bytes leftover after parsing attributes in process `syz.8.8687'. [ 1211.023090][ T691] netlink: 'syz.0.8698': attribute type 7 has an invalid length. [ 1211.150814][ T30] audit: type=1107 audit(1759403857.252:5): pid=690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1230.100678][ C0] sched: DL replenish lagged too much [ 1238.866673][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.899531][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1250.272733][ T735] !€ÿ: renamed from bond_slave_0 (while UP) [ 1250.700699][ T5856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1250.715783][ T5856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1250.725598][ T5856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1250.738056][ T5856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1250.774380][ T5856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1251.161775][T15615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1251.224452][T15615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1251.243432][T15615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1251.282562][T15615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1251.341246][T15615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1251.792858][T15615] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1251.821288][T15615] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1251.850525][T15615] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1251.911817][T15615] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1251.953826][T15615] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1252.615616][T15615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1252.624978][T15615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1252.633507][T15615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1252.643701][T15615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1252.651700][T15615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1252.821685][ T9666] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.853227][ T752] netlink: 146936 bytes leftover after parsing attributes in process `syz.8.8712'. [ 1252.870734][ T752] openvswitch: netlink: Message has 6 unknown bytes. [ 1252.918583][ T748] bridge_slave_1: left allmulticast mode [ 1252.931047][ T748] bridge_slave_1: left promiscuous mode [ 1252.949764][ T748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.990852][T15615] Bluetooth: hci6: command tx timeout [ 1253.001729][ T748] bridge_slave_0: left allmulticast mode [ 1253.007509][ T748] bridge_slave_0: left promiscuous mode [ 1253.031537][ T748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.192691][ T9666] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.316952][ T9666] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.470736][T15615] Bluetooth: hci4: command tx timeout [ 1253.500214][ T758] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8713'. [ 1253.523957][ T9666] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.894272][ T764] netlink: 146936 bytes leftover after parsing attributes in process `syz.8.8714'. [ 1253.909441][ T764] openvswitch: netlink: Message has 6 unknown bytes. [ 1254.021682][ T736] chnl_net:caif_netlink_parms(): no params data found [ 1254.240228][ T775] netlink: 'syz.8.8715': attribute type 10 has an invalid length. [ 1254.248556][ T775] netlink: 55 bytes leftover after parsing attributes in process `syz.8.8715'. [ 1254.312104][ T777] delete_channel: no stack [ 1254.350808][T15615] Bluetooth: hci7: command tx timeout [ 1254.609231][ T9666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1254.620123][ T9666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1254.630790][ T9666] bond0 (unregistering): Released all slaves [ 1254.765288][T15615] Bluetooth: hci0: command tx timeout [ 1255.078071][T15615] Bluetooth: hci6: command tx timeout [ 1255.087568][ T9666] team0: Port device wlan1 removed [ 1255.169910][ T743] chnl_net:caif_netlink_parms(): no params data found [ 1255.219098][ T736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.238793][ T736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.248556][ T736] bridge_slave_0: entered allmulticast mode [ 1255.259382][ T736] bridge_slave_0: entered promiscuous mode [ 1255.268166][ T750] chnl_net:caif_netlink_parms(): no params data found [ 1255.334229][ T736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.341806][ T736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.348987][ T736] bridge_slave_1: entered allmulticast mode [ 1255.357296][ T736] bridge_slave_1: entered promiscuous mode [ 1255.366333][ T789] netlink: 146936 bytes leftover after parsing attributes in process `syz.8.8716'. [ 1255.384200][ T789] openvswitch: netlink: Message has 6 unknown bytes. [ 1255.413105][ T740] chnl_net:caif_netlink_parms(): no params data found [ 1255.557702][T15615] Bluetooth: hci4: command tx timeout [ 1255.603855][ T9666] hsr_slave_0: left promiscuous mode [ 1255.619446][ T9666] hsr_slave_1: left promiscuous mode [ 1255.629366][ T9666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1255.646610][ T9666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1255.654652][ T9666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1255.662295][ T9666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.682330][ T9666] veth1_macvtap: left promiscuous mode [ 1255.687905][ T9666] veth0_macvtap: left promiscuous mode [ 1255.694000][ T9666] veth1_vlan: left promiscuous mode [ 1255.698644][ T793] netlink: 'syz.8.8717': attribute type 10 has an invalid length. [ 1255.699359][ T9666] veth0_vlan: left promiscuous mode [ 1255.712738][ T793] netlink: 55 bytes leftover after parsing attributes in process `syz.8.8717'. [ 1255.769291][ T794] delete_channel: no stack [ 1256.227871][ T9666] team0 (unregistering): Port device team_slave_1 removed [ 1256.277982][ T9666] team0 (unregistering): Port device team_slave_0 removed [ 1256.432573][T15615] Bluetooth: hci7: command tx timeout [ 1256.791465][ T736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1256.830763][T15615] Bluetooth: hci0: command tx timeout [ 1256.879212][ T736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1257.150913][T15615] Bluetooth: hci6: command tx timeout [ 1257.264485][ T736] team0: Port device team_slave_0 added [ 1257.404971][ T736] team0: Port device team_slave_1 added [ 1257.464558][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.472984][ T750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.480197][ T750] bridge_slave_0: entered allmulticast mode [ 1257.488526][ T750] bridge_slave_0: entered promiscuous mode [ 1257.497362][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.511462][ T750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.518736][ T750] bridge_slave_1: entered allmulticast mode [ 1257.527520][ T750] bridge_slave_1: entered promiscuous mode [ 1257.534674][ T740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.545827][ T740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.554354][ T740] bridge_slave_0: entered allmulticast mode [ 1257.562506][ T740] bridge_slave_0: entered promiscuous mode [ 1257.570392][ T743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.578080][ T743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.585696][ T743] bridge_slave_0: entered allmulticast mode [ 1257.593855][ T743] bridge_slave_0: entered promiscuous mode [ 1257.631471][T15615] Bluetooth: hci4: command tx timeout [ 1257.657057][ T740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.665334][ T740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.673761][ T740] bridge_slave_1: entered allmulticast mode [ 1257.681437][ T740] bridge_slave_1: entered promiscuous mode [ 1257.688107][ T743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.696070][ T743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.703620][ T743] bridge_slave_1: entered allmulticast mode [ 1257.711826][ T743] bridge_slave_1: entered promiscuous mode [ 1257.720086][ T736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1257.727403][ T736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.753655][ T736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1257.766747][ T736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.774522][ T736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.800957][ T736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.822800][ T750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.903004][ T750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1257.937742][ T743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.953666][ T743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.012557][ T740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.030123][ T740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.070021][ T736] hsr_slave_0: entered promiscuous mode [ 1258.077332][ T736] hsr_slave_1: entered promiscuous mode [ 1258.085227][ T736] debugfs: 'hsr0' already exists in 'hsr' [ 1258.091124][ T736] Cannot create hsr debugfs directory [ 1258.098839][ T750] team0: Port device team_slave_0 added [ 1258.107677][ T750] team0: Port device team_slave_1 added [ 1258.131803][ T743] team0: Port device team_slave_0 added [ 1258.141838][ T743] team0: Port device team_slave_1 added [ 1258.268916][ T740] team0: Port device team_slave_0 added [ 1258.289485][ T740] team0: Port device team_slave_1 added [ 1258.338934][ T743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.346190][ T743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.372493][ T743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1258.390542][ T750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.397832][ T750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.426048][ T750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1258.511857][T15615] Bluetooth: hci7: command tx timeout [ 1258.558850][ T743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1258.567328][ T743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.595486][ T743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.615603][ T750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1258.623674][ T750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.650364][ T750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.729621][ T36] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.772652][ T740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.779641][ T740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.806716][ T740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1258.848216][ T740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1258.855540][ T740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.882718][ T740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.911177][T15615] Bluetooth: hci0: command tx timeout [ 1258.953487][ T750] hsr_slave_0: entered promiscuous mode [ 1258.959888][ T750] hsr_slave_1: entered promiscuous mode [ 1258.966575][ T750] debugfs: 'hsr0' already exists in 'hsr' [ 1258.972990][ T750] Cannot create hsr debugfs directory [ 1258.998832][ T36] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.053305][ T743] hsr_slave_0: entered promiscuous mode [ 1259.059718][ T743] hsr_slave_1: entered promiscuous mode [ 1259.066591][ T743] debugfs: 'hsr0' already exists in 'hsr' [ 1259.073468][ T743] Cannot create hsr debugfs directory [ 1259.147496][ T36] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.198249][ T740] hsr_slave_0: entered promiscuous mode [ 1259.207181][ T740] hsr_slave_1: entered promiscuous mode [ 1259.214556][ T740] debugfs: 'hsr0' already exists in 'hsr' [ 1259.220308][ T740] Cannot create hsr debugfs directory [ 1259.230678][T15615] Bluetooth: hci6: command tx timeout [ 1259.277784][ T36] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.447424][ T816] netlink: 146936 bytes leftover after parsing attributes in process `syz.8.8721'. [ 1259.461002][ T816] openvswitch: netlink: Message has 6 unknown bytes. [ 1259.710964][T15615] Bluetooth: hci4: command tx timeout [ 1260.090861][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.191821][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.267352][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.341163][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.600838][T15615] Bluetooth: hci7: command tx timeout [ 1260.866159][ T36] team0: Port device bond0 removed [ 1260.874013][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1260.887142][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1260.907679][ T36] bond0 (unregistering): Released all slaves [ 1261.001014][T15615] Bluetooth: hci0: command tx timeout [ 1261.061600][ T825] netlink: 204 bytes leftover after parsing attributes in process `syz.8.8723'. [ 1261.343998][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1261.355999][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1261.368427][ T36] bond0 (unregistering): Released all slaves [ 1261.487406][ T829] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8724'. [ 1261.499620][ T36] : left promiscuous mode [ 1261.547844][ T831] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8725'. [ 1261.660530][ T36] team0: Port device wlan1 removed [ 1261.733251][ T834] netlink: 'syz.8.8726': attribute type 10 has an invalid length. [ 1261.741516][ T834] netlink: 55 bytes leftover after parsing attributes in process `syz.8.8726'. [ 1261.777035][ T834] delete_channel: no stack [ 1261.969373][ T736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1261.985083][ T736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1262.024993][ T736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1262.081055][ T736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1262.269832][ T36] hsr_slave_0: left promiscuous mode [ 1262.277509][ T36] hsr_slave_1: left promiscuous mode [ 1262.284777][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.294056][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.302921][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.310331][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.320219][ T36] batman_adv: batadv0: Removing interface: team0 [ 1262.328648][ T36] hsr_slave_0: left promiscuous mode [ 1262.335085][ T36] hsr_slave_1: left promiscuous mode [ 1262.341556][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.348961][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.358546][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.366026][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.396334][ T36] veth1_macvtap: left promiscuous mode [ 1262.402214][ T36] veth0_macvtap: left promiscuous mode [ 1262.407863][ T36] veth1_vlan: left promiscuous mode [ 1262.413875][ T36] veth0_vlan: left promiscuous mode [ 1262.985403][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1263.041982][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1264.147803][ T736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.321644][ T736] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.340084][ T9666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.347278][ T9666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.377234][ T750] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1264.399043][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.406273][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1264.516917][ T846] netlink: 'syz.8.8729': attribute type 10 has an invalid length. [ 1264.523639][ T750] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1264.547497][ T750] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1264.592719][ T846] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1264.608431][ T846] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1264.622494][ T846] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1264.670922][ T750] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1265.086652][ T750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.188573][ T750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.297767][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.305007][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.365645][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.372868][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1265.409552][ T743] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1265.428456][ T743] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1265.466831][ T743] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1265.485557][ T866] netlink: 'syz.8.8734': attribute type 10 has an invalid length. [ 1265.649191][ T866] team0: Port device wlan1 added [ 1265.655956][ T743] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1265.736550][ T736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.166343][ T736] veth0_vlan: entered promiscuous mode [ 1266.176312][ T882] netlink: 763 bytes leftover after parsing attributes in process `syz.8.8737'. [ 1266.230098][ T736] veth1_vlan: entered promiscuous mode [ 1266.261031][ T882] : renamed from gre0 (while UP) [ 1266.292069][ T740] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1266.319498][ T740] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1266.339277][ T740] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1266.383065][ T740] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1266.437725][ T743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.464970][ T750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.513709][ T743] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.572013][ T736] veth0_macvtap: entered promiscuous mode [ 1266.589180][ T9666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.596460][ T9666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.632432][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.639627][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.658117][ T736] veth1_macvtap: entered promiscuous mode [ 1266.687124][ T894] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8739'. [ 1266.704908][ T894] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1266.717262][ T894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1266.725064][ T736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1266.749800][ T736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.751708][ T894] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8739'. [ 1266.790966][ T894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1266.813784][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.850162][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.894504][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.915035][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.952185][ T750] veth0_vlan: entered promiscuous mode [ 1266.979266][ T750] veth1_vlan: entered promiscuous mode [ 1267.354671][ T740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1267.426653][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.455700][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.459075][ T740] 8021q: adding VLAN 0 to HW filter on device team0 [ 1267.544843][ T9666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.552118][ T9666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1267.561217][ T902] netlink: 'syz.8.8740': attribute type 11 has an invalid length. [ 1267.568183][ T750] veth0_macvtap: entered promiscuous mode [ 1267.569147][ T902] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.8740'. [ 1267.580323][ T750] veth1_macvtap: entered promiscuous mode [ 1267.647479][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.654720][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.719346][ T9666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.742781][ T9666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.754631][ T743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1267.833070][ T750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1267.897156][ T905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1267.917949][ T740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1267.970295][ T740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1268.005307][ T750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1268.039128][ T914] veth1_macvtap: left promiscuous mode [ 1268.049830][ T914] macsec0: entered promiscuous mode [ 1268.059152][ T914] macsec0: entered allmulticast mode [ 1268.077845][ T918] veth1_macvtap: entered promiscuous mode [ 1268.086144][ T917] xt_l2tp: wrong L2TP version: 0 [ 1268.092051][ T918] veth1_macvtap: entered allmulticast mode [ 1268.167781][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.210839][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.269328][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.313137][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.008482][ T705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.043384][ T705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.196687][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.241034][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.280960][ T740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1269.362977][ T743] veth0_vlan: entered promiscuous mode [ 1269.424544][ T743] veth1_vlan: entered promiscuous mode [ 1269.641563][ T743] veth0_macvtap: entered promiscuous mode [ 1269.648663][ T958] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8747'. [ 1269.692861][ T743] veth1_macvtap: entered promiscuous mode [ 1269.720472][ T961] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8747'. [ 1269.803738][ T743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1270.327043][ T743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1270.409522][ T9666] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.418857][ T9666] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.459236][ T970] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1270.465792][ T970] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1270.475984][ T9666] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.512239][ T9666] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.727064][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.759325][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.915405][ T984] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8754'. [ 1270.928884][ T985] netlink: 'syz.8.8753': attribute type 4 has an invalid length. [ 1270.939895][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.949404][ T985] netlink: 152 bytes leftover after parsing attributes in process `syz.8.8753'. [ 1270.969557][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.103445][ T740] veth0_vlan: entered promiscuous mode [ 1271.143979][ T984] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8754'. [ 1271.297780][ T740] veth1_vlan: entered promiscuous mode [ 1271.345408][ T993] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8704'. [ 1271.459234][ T984] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8754'. [ 1271.527971][ T740] veth0_macvtap: entered promiscuous mode [ 1271.556582][ T740] veth1_macvtap: entered promiscuous mode [ 1271.614650][ T740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1271.656581][ T740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1271.685485][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.731107][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.753204][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.798096][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.826024][ T998] netlink: 763 bytes leftover after parsing attributes in process `syz.8.8756'. [ 1271.853487][ T999] netlink: 56 bytes leftover after parsing attributes in process `syz.8.8756'. [ 1272.048420][ T1003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8758'. [ 1272.237884][ T1006] netlink: 'syz.1.8759': attribute type 10 has an invalid length. [ 1273.025547][ T1006] team0: Port device wlan1 added [ 1273.031999][ T1030] netlink: 146936 bytes leftover after parsing attributes in process `syz.2.8763'. [ 1273.053844][ T1030] openvswitch: netlink: Message has 6 unknown bytes. [ 1273.062982][ T9666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.116762][ T9666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.161617][ T1024] bridge_slave_1: left allmulticast mode [ 1273.170650][ T1024] bridge_slave_1: left promiscuous mode [ 1273.179116][ T1024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.218181][ T1024] bridge_slave_0: left allmulticast mode [ 1273.238246][ T1024] bridge_slave_0: left promiscuous mode [ 1273.246984][ T1024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.391935][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1302.398361][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.554882][ T5856] Bluetooth: hci1: command tx timeout [ 1400.154160][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1400.181424][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1402.690643][T15615] Bluetooth: hci7: command 0x0406 tx timeout [ 1402.696720][T15615] Bluetooth: hci0: command 0x0406 tx timeout [ 1402.702822][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 1402.705991][ T1051] Bluetooth: hci6: command tx timeout [ 1403.595890][ T140] ------------[ cut here ]------------ [ 1403.601755][ T140] WARNING: CPU: 0 PID: 140 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3ca/0x440 [ 1403.611790][ T140] Modules linked in: [ 1403.616012][ T140] CPU: 0 UID: 0 PID: 140 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 1403.625466][ T140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1403.635725][ T140] Workqueue: cfg80211 cfg80211_event_work SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1403.641580][ T140] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 1403.647955][ T140] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 42 ac 27 f7 90 0f 0b 90 eb bd e8 37 ac 27 f7 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 27 ac 27 f7 90 0f 0b 90 e9 de fd [ 1403.667643][ T140] RSP: 0018:ffffc90002e178e0 EFLAGS: 00010293 [ 1403.673808][ T140] RAX: ffffffff8a96c9b9 RBX: dffffc0000000000 RCX: ffff888020398000 [ 1403.681860][ T140] RDX: 0000000000000000 RSI: ffffffff8d53922f RDI: ffffffff8b9ec3e0 [ 1403.689844][ T140] RBP: ffffc90002e179b0 R08: ffffffff8f5cd637 R09: 1ffffffff1eb9ac6 [ 1403.699022][ T140] R10: dffffc0000000000 R11: fffffbfff1eb9ac7 R12: ffff88806a224d90 [ 1403.707742][ T140] R13: 1ffff920005c2f24 R14: ffff8880a9f8b338 R15: 0000000000000006 [ 1403.715872][ T140] FS: 0000000000000000(0000) GS:ffff888126372000(0000) knlGS:0000000000000000 [ 1403.724955][ T140] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1403.731626][ T140] CR2: 00007fdddb5e6038 CR3: 0000000056f0e000 CR4: 00000000003526f0 [ 1403.739622][ T140] DR0: 0000000000000000 DR1: 0100000000000000 DR2: 0000000000000000 [ 1403.747643][ T140] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1403.755662][ T140] Call Trace: [ 1403.758954][ T140] [ 1403.761952][ T140] ? lockdep_hardirqs_on+0x9c/0x150 [ 1403.767178][ T140] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 1403.773171][ T140] ? __pfx___mutex_lock+0x10/0x10 [ 1403.778220][ T140] cfg80211_process_wdev_events+0x38a/0x4f0 [ 1403.784179][ T140] cfg80211_process_rdev_events+0xa1/0x110 [ 1403.790179][ T140] cfg80211_event_work+0x31/0x70 [ 1403.797201][ T140] ? process_scheduled_works+0x9ef/0x17b0 [ 1403.803716][ T140] process_scheduled_works+0xade/0x17b0 [ 1403.809328][ T140] ? __pfx_process_scheduled_works+0x10/0x10 [ 1403.815407][ T140] worker_thread+0x8a0/0xda0 [ 1403.820017][ T140] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1403.826424][ T140] ? __kthread_parkme+0x7b/0x200 [ 1403.831419][ T140] kthread+0x711/0x8a0 [ 1403.835534][ T140] ? __pfx_worker_thread+0x10/0x10 [ 1403.840706][ T140] ? __pfx_kthread+0x10/0x10 [ 1403.845316][ T140] ? _raw_spin_unlock_irq+0x23/0x50 [ 1403.850570][ T140] ? lockdep_hardirqs_on+0x9c/0x150 [ 1403.855775][ T140] ? __pfx_kthread+0x10/0x10 [ 1403.860379][ T140] ret_from_fork+0x436/0x7d0 [ 1403.865040][ T140] ? __pfx_ret_from_fork+0x10/0x10 [ 1403.870175][ T140] ? __switch_to_asm+0x39/0x70 [ 1403.875133][ T140] ? __switch_to_asm+0x33/0x70 [ 1403.879918][ T140] ? __pfx_kthread+0x10/0x10 [ 1403.884622][ T140] ret_from_fork_asm+0x1a/0x30 [ 1403.889431][ T140] [ 1403.892523][ T140] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1403.899818][ T140] CPU: 0 UID: 0 PID: 140 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 1403.909195][ T140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1403.919267][ T140] Workqueue: cfg80211 cfg80211_event_work [ 1403.924996][ T140] Call Trace: [ 1403.928265][ T140] [ 1403.931188][ T140] dump_stack_lvl+0x99/0x250 [ 1403.935776][ T140] ? __asan_memcpy+0x40/0x70 [ 1403.940355][ T140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1403.945554][ T140] ? __pfx__printk+0x10/0x10 [ 1403.950149][ T140] vpanic+0x281/0x750 [ 1403.954130][ T140] ? __pfx__printk+0x10/0x10 [ 1403.958711][ T140] ? __pfx_vpanic+0x10/0x10 [ 1403.963208][ T140] ? is_bpf_text_address+0x26/0x2b0 [ 1403.968409][ T140] panic+0xb9/0xc0 [ 1403.972121][ T140] ? __pfx_panic+0x10/0x10 [ 1403.976546][ T140] __warn+0x31b/0x4b0 [ 1403.980522][ T140] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 1403.986065][ T140] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 1403.991599][ T140] report_bug+0x2be/0x4f0 [ 1403.995933][ T140] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 1404.001482][ T140] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 1404.007022][ T140] ? __cfg80211_ibss_joined+0x3cc/0x440 [ 1404.012559][ T140] handle_bug+0x84/0x160 [ 1404.016801][ T140] exc_invalid_op+0x1a/0x50 [ 1404.021296][ T140] asm_exc_invalid_op+0x1a/0x20 [ 1404.026136][ T140] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 1404.032279][ T140] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 42 ac 27 f7 90 0f 0b 90 eb bd e8 37 ac 27 f7 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 27 ac 27 f7 90 0f 0b 90 e9 de fd [ 1404.051877][ T140] RSP: 0018:ffffc90002e178e0 EFLAGS: 00010293 [ 1404.057938][ T140] RAX: ffffffff8a96c9b9 RBX: dffffc0000000000 RCX: ffff888020398000 [ 1404.065900][ T140] RDX: 0000000000000000 RSI: ffffffff8d53922f RDI: ffffffff8b9ec3e0 [ 1404.073876][ T140] RBP: ffffc90002e179b0 R08: ffffffff8f5cd637 R09: 1ffffffff1eb9ac6 [ 1404.081860][ T140] R10: dffffc0000000000 R11: fffffbfff1eb9ac7 R12: ffff88806a224d90 [ 1404.089832][ T140] R13: 1ffff920005c2f24 R14: ffff8880a9f8b338 R15: 0000000000000006 [ 1404.097808][ T140] ? __cfg80211_ibss_joined+0x3c9/0x440 [ 1404.103378][ T140] ? lockdep_hardirqs_on+0x9c/0x150 [ 1404.108574][ T140] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 1404.114465][ T140] ? __pfx___mutex_lock+0x10/0x10 [ 1404.119493][ T140] cfg80211_process_wdev_events+0x38a/0x4f0 [ 1404.125414][ T140] cfg80211_process_rdev_events+0xa1/0x110 [ 1404.131231][ T140] cfg80211_event_work+0x31/0x70 [ 1404.136169][ T140] ? process_scheduled_works+0x9ef/0x17b0 [ 1404.141918][ T140] process_scheduled_works+0xade/0x17b0 [ 1404.147506][ T140] ? __pfx_process_scheduled_works+0x10/0x10 [ 1404.153518][ T140] worker_thread+0x8a0/0xda0 [ 1404.158126][ T140] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1404.164468][ T140] ? __kthread_parkme+0x7b/0x200 [ 1404.169412][ T140] kthread+0x711/0x8a0 [ 1404.173481][ T140] ? __pfx_worker_thread+0x10/0x10 [ 1404.178586][ T140] ? __pfx_kthread+0x10/0x10 [ 1404.183176][ T140] ? _raw_spin_unlock_irq+0x23/0x50 [ 1404.188376][ T140] ? lockdep_hardirqs_on+0x9c/0x150 [ 1404.193570][ T140] ? __pfx_kthread+0x10/0x10 [ 1404.198158][ T140] ret_from_fork+0x436/0x7d0 [ 1404.202745][ T140] ? __pfx_ret_from_fork+0x10/0x10 [ 1404.207858][ T140] ? __switch_to_asm+0x39/0x70 [ 1404.212632][ T140] ? __switch_to_asm+0x33/0x70 [ 1404.217413][ T140] ? __pfx_kthread+0x10/0x10 [ 1404.222008][ T140] ret_from_fork_asm+0x1a/0x30 [ 1404.226788][ T140] [ 1404.230076][ T140] Kernel Offset: disabled [ 1404.234393][ T140] Rebooting in 86400 seconds..