last executing test programs: 5m38.739586534s ago: executing program 0 (id=1408): r0 = perf_event_open(&(0x7f0000000180)={0xffffffffffffffff, 0x80, 0x4a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0}, 0x807) sendmsg$kcm(r1, &(0x7f0000006900)={&(0x7f0000006640)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x3}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000740), &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0, 0x32, 0x0, 0x0, 0x10, &(0x7f0000000800), 0x0, 0x0, 0x8f, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) sendmsg$inet(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)}, {&(0x7f00000002c0)="5b920861be9e6950d41da61158a10f79de7167f31899d0af20c1ef805cdc4fbbbde19f45c27bd5924b047808896de2a3603284056c63710b32a4e63725bb4017fc2fdf5bb8e08297a7c91c0f8dcfd7986139058b1ac5", 0x56}, {&(0x7f0000000440)="ea73df1b5bb101c1d5a417a9deaa3050a15dd649e5bc4e4bf39725c2e7425d5c7f5f60bfe2bb9e5c758bacdb3c9565bf18795706d0cd8cc299afdaa82cc6b908de052c2c591fb9cc9f74f3f4c28a738c785fbb60e6679f1c60b5d511f2eee7671f0e0ace542b22ca41ccddaede50d5e40430c295bc0144b0265e60fe65d031ab2432bb4959b696f382c888e01e8c453e3dc24a386aa8153f5fecc66fe323b5cf77d9254db64a9fec3cec9ea5640cb78d669f54fe75f69f075ff9303c842b1a326e5a52502506771cbd32508a1c2b2ea7d0b9856cf2ce2725abfd896cef1fc636119bc1ec347a34", 0xe7}, {&(0x7f0000000340)="951d9ecaffaf172267ef1e1b00a1840ef7eb6fccb0a9bbc8ce79ae347f7838578ecf24b0253038629c82ab431a0e2def80b472895b3447d14a00702e785f9cc75877559103d00cd07b1c5140b3d220d2b374694f97f85cc5e328f415d7b61222651fda21", 0x64}, {&(0x7f0000000540)="fda217974f1ef3f4716f8fad990a3874ee5aab7cc2e94a97f13db16a1b661c946fa72b0ffb53d84091039da501716f43c3fdc8c6fc349157a051ee511ae4e61abaeda08caf616f51aeb86eae8b5112c5e0a099988137f9676b5afd65e8aa32232a5fa7961f1d99b5ca5bea05a45ff9c4fd703610", 0x74}, {&(0x7f00000005c0)="e4a0f1f9deb032f41ed902df932837d299850b57226bb331dcbcb56f86e6710b00d0ded20d402a2ef3d3043ac60ce0e049b6cca9e0bf4ab023615f227748bf8c73c2015dd747571f9c7391d1273df0e5a0a58d15b2583f8ce35fd1a8c41200760264beb4b4ed61a3b37dcb003963aaf9783bf5c8109318801f0f8a00544b1c336ba7852b9d7b892e1b63d1d7126098b308e1925919", 0x95}], 0x6, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010102, @multicast1}}}], 0x20}, 0x40008d4) r6 = socket$kcm(0x2a, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x4, 0xffffffffffffff03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x3122, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x114301, 0x4, 0x0, 0x1, 0x0, 0x800000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x6, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d06007cee4e3f00000000080100000000000000", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(r7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r9}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r10 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7ff1, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x25346c7d6a446d0f, 0x2, 0xb, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) sendmsg$inet(r10, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000540), 0x1}, 0x8804) 5m37.843609172s ago: executing program 0 (id=1412): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800020, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x9, 0x0, 0x0, 0x40, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r1}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) socket(0x11, 0x80a, 0x0) (async) socket(0x11, 0x80a, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 5m37.382803002s ago: executing program 3 (id=1416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1, 0x0) close(r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x164}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r4}, 0x8) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r2, &(0x7f00000002c0)={&(0x7f0000000340), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000680)=""/226, 0xe2}, {&(0x7f0000000000)=""/21, 0x15}], 0x3, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}, 0x110) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6, 0xffffffffffffffff, 0x2000000}, 0xc) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 5m37.095632695s ago: executing program 0 (id=1418): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xc884}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4}, 0x18) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 5m36.450686044s ago: executing program 3 (id=1420): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2040}, 0x0, 0xd, 0xffffffffffffffff, 0x0) (async) close(0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000840)) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000012c0)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2361}, {}, {}, [@alu={0x4, 0x1, 0x9, 0x1, 0x8, 0x20, 0x8}, @map_val={0x18, 0x8}, @jmp={0x5, 0x1, 0xa, 0x9, 0x5, 0x50, 0x8}, @jmp={0x5, 0x0, 0x9, 0xa, 0x2, 0xfffffffffffffffc, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x6, 0x40, &(0x7f0000001180)=""/64, 0x41100, 0x24, '\x00', 0x0, 0x17, r2, 0x8, &(0x7f00000011c0)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xc847, 0xffffffffffffffff, 0x6, &(0x7f0000001200)=[0x1, 0xffffffffffffffff], &(0x7f0000001240)=[{0x2, 0x4, 0xf, 0x8}, {0x1, 0x4, 0x7, 0x7}, {0x0, 0x4, 0x1, 0x8}, {0x2, 0x2, 0xd}, {0x3, 0x2}, {0x0, 0x1, 0x9, 0xa}], 0x10, 0x397}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x36, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x9, 0x7, 0x4, 0x800c, 0xffffffffffffffff, 0x1, '\x00', r7, r6, 0x0, 0x2, 0x3, 0x0, @value=r6}, 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe77, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x1, 0x7}, {0x1}], 0x10, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) (async) r10 = socket$kcm(0x2, 0x5, 0x84) (async) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r10, 0x84, 0x72, &(0x7f0000000000)=r11, 0xc) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) close(r12) (async) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5m35.982567896s ago: executing program 3 (id=1422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x6, 0x1, "39f7"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x4, [@enum64={0x1, 0xa, 0x0, 0x13, 0x0, 0x4, [{0xfffffffd, 0x4, 0x7}, {0x3, 0x9, 0x5}, {0xd, 0x9, 0xfffffffd}, {0x2, 0x6, 0x800}, {0xc, 0x7baa1c1e, 0xc0000}, {0x4, 0x8, 0xffffffff}, {0x2, 0x1, 0x7}, {0x1, 0x10000, 0x101}, {0xb, 0x4, 0x8}, {0x7, 0x400, 0xfffffffa}]}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f00000001c0)=""/21, 0xa0, 0x15, 0x1}, 0x28) r2 = socket$kcm(0x10, 0x400000002, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000000000000000000004000040c7700000846f63023e4c2bb790eb4b585bea7b44e576ac518dc4acfd4d09905d93959d44209a8cc748bba6f635eec1f41f41823b9e9ce93f87c55e40698626cf1389f395b707f49e90ac4fe00871fa9a0ea6a87740676f599d0eab34b4525e5b0f6d9727dc8b3756", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010000000300"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1}, &(0x7f0000000180), &(0x7f0000000400)}, 0x20) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3}, &(0x7f00000001c0), &(0x7f0000000600)}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, r1, 0x3, 0x4, 0x4}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) (async) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f26}, 0x0, 0xffffffffffffec25, 0x7, 0x8, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 5m35.640403751s ago: executing program 3 (id=1423): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200040, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000080)='syzkaller\x00', 0xf, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) (async) close(r0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200040, 0x0) (async) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xffffffffffffffff) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000080)='syzkaller\x00', 0xf, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) 5m34.983144657s ago: executing program 3 (id=1427): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140)}, 0xa004, 0x0, 0x2, 0x3, 0x816}, 0x0, 0x1, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x10000010000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7b}) (async, rerun: 32) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (rerun: 32) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:, w\x00'], 0x8) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0a000000f8ffff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4020804) 5m33.941108233s ago: executing program 3 (id=1436): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x8, 0x100000830d}, 0x4500, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) socket$kcm(0x10, 0x2, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x3, 0x23, 0x0, 0x1, 0x3}, 0x50) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff, 0x4}, 0x14030, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000280)='net_prio.prioidx\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) 5m33.818404034s ago: executing program 0 (id=1437): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x25, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x3}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x42, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xff05, 0x0) socket$kcm(0xa, 0x1, 0x106) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x7}, 0x80, 0x0, 0xfffffedd}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x0, 0xffff934c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xbdc}, 0x94) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xfffffffb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m32.144498632s ago: executing program 0 (id=1445): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x140f, 0x4, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x1403, 0x200, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'tunl0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1, &(0x7f00000002c0)=@raw=[@jmp={0x5, 0x1, 0x6, 0xb, 0x3, 0xfffffffffffffffe}], &(0x7f0000000300)='GPL\x00', 0xc9, 0xaa, &(0x7f0000000340)=""/170, 0x41100, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff], 0x0, 0x10, 0x80000000}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f00000006c0)=""/45, 0x2d}, {&(0x7f0000000700)=""/80, 0x50}], 0x3}, 0x40000100) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r2, r1, 0x25, 0x2, @void}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000880)={r5, r6, 0x0, r2}, 0x10) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000008c0), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000900)={[{0x2b, 'devices'}, {0x0, 'freezer'}, {0x2d, 'net'}, {0x2d, 'blkio'}, {0x2b, 'blkio'}, {0x2b, 'hugetlb'}, {0x2b, 'cpuacct'}, {0x2d, 'hugetlb'}, {0x2d, 'rdma'}]}, 0x46) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%pI4 \x00'}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000a80)=@o_path={&(0x7f0000000980)='./file0\x00', r8, 0x4000, r0}, 0x18) (async) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000ac0)='syz1\x00', 0x1ff) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0xae, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e00)=r10, 0x4) (async) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000e40)={r5}, 0x8) (async) recvmsg$unix(r3, &(0x7f0000002340)={&(0x7f0000000e80), 0x6e, &(0x7f0000002240)=[{&(0x7f0000000f00)=""/29, 0x1d}, {&(0x7f0000000f40)=""/17, 0x11}, {&(0x7f0000000f80)=""/79, 0x4f}, {&(0x7f0000001000)=""/81, 0x51}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/169, 0xa9}, {&(0x7f0000002140)=""/49, 0x31}, {&(0x7f0000002180)=""/167, 0xa7}], 0x8, &(0x7f00000022c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x40010000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002480)={@map=r21, 0x24, 0x1, 0x7, &(0x7f0000002380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000023c0)=[0x0, 0x0, 0x0], &(0x7f0000002400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002440)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000024c0)={@fallback=r15, r19, 0x11, 0x2004, r17, @value=r21, @void, @void, @void, r23}, 0x20) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x40082406, &(0x7f0000002500)='\x00') (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000027c0)={{r11, 0xffffffffffffffff}, &(0x7f0000002740), &(0x7f0000002780)=r16}, 0x20) r25 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002840)=@bpf_ext={0x1c, 0x24, &(0x7f0000002540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r19}}, {}, [@jmp={0x5, 0x1, 0x0, 0x9, 0x8, 0x8, 0x10}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @ldst={0x3, 0x1, 0x2, 0x4, 0x5, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r14}, @alu={0x4, 0x0, 0x1, 0x0, 0x2, 0x4, 0xffffffffffffffff}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x3}, @generic={0x4, 0x8, 0x2, 0x4}, @alu={0x4, 0x1, 0x4, 0xa, 0x2, 0x7ffffffffffffff0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000002680)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x20, '\x00', r9, 0x0, r11, 0x8, &(0x7f00000026c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000002700)={0x0, 0xd, 0x8d, 0xc730}, 0x10, 0x23124, 0xffffffffffffffff, 0x0, &(0x7f0000002800)=[r24, r18, r13, r14, r20], 0x0, 0x10, 0x25}, 0x94) (async) r26 = openat$cgroup(r22, &(0x7f0000002900)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002940)={r25, r26, 0xc, 0x0, @val=@target_btf_id=r10}, 0x14) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r12, &(0x7f0000002a40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x3c, 0x2, 0x9, 0x901, 0x0, 0x0, {0xa}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80000000}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x894) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xe, 0x17, &(0x7f0000002a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r20}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r21}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x34ee}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002b40)='syzkaller\x00', 0x5, 0x33, &(0x7f0000002b80)=""/51, 0x40f00, 0x22, '\x00', r1, @sk_skb=0x4, r16, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002bc0)={0x2, 0x4, 0x4, 0x707b}, 0x10, r10, r12, 0x4, 0x0, &(0x7f0000002c00)=[{0x2, 0x5, 0x1, 0x9}, {0x0, 0x5, 0x6, 0xb}, {0x0, 0x5, 0xa, 0x3}, {0x5, 0x5, 0x5, 0x7}], 0x10, 0x9}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r18, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x40, 0x140b, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$unix(r22, &(0x7f0000002f80)={&(0x7f0000002e00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002e80)="a56aa5c42d3319dc262579359a241a9ce3cd150649daea63d15ac8c7da2086ead332d29f465b849e38e2a37e92d0dd541629ca4e1fa2707e758faf282fa22905bc71a62d0886cd5594feaa90fbe75ab7a4640e032187d40f181eb84c17bcfb41a84f025e2f675eabddbd2a002059199826c5114fca3a4c75cfa00f9bf98f9967652a10c9fd01fea353bb86a8c58ae1604f84950954c5102e3906d454387b2fee0545922e55f7ce6fa59ef3f245388bf8868746", 0xb3}], 0x1, 0x0, 0x0, 0x4000010}, 0x4000091) 5m31.4192431s ago: executing program 0 (id=1447): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xfffffffffffffffb, r0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}], 0x20}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0xd4, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x12, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000cf0000020100000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000001880)=[{0x8, 0xc, 0x5, 0x1}, {0x0, 0x8, 0x5, 0xc0ddbc6}]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5m17.828172565s ago: executing program 32 (id=1436): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x8, 0x100000830d}, 0x4500, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) socket$kcm(0x10, 0x2, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x3, 0x23, 0x0, 0x1, 0x3}, 0x50) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff, 0x4}, 0x14030, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000280)='net_prio.prioidx\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) 5m15.490851683s ago: executing program 33 (id=1447): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xfffffffffffffffb, r0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}], 0x20}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0xd4, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x12, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000cf0000020100000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000001880)=[{0x8, 0xc, 0x5, 0x1}, {0x0, 0x8, 0x5, 0xc0ddbc6}]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.787078505s ago: executing program 1 (id=2879): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xffffffff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001f80)=""/212, 0x1a, 0xd4, 0xa}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1408, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.166363704s ago: executing program 1 (id=2881): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 5.904928352s ago: executing program 1 (id=2882): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@nfc_llcp={0xa, 0x0, 0xe0ffffff, 0x0, 0x0, 0x0, "be467b1f4cfd8c642c13334c199f91732d13b884b4ad52d055d6d5ae3b991ffc48ca221108c4d3aa623010eab68d9504000034ea00000001f000"}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="80005b020eaa4da2", 0x8}, {&(0x7f00000000c0)="bb801d2b6ee74ca6dd0afd8db62e5de99f891ce37d5b7c9d62780020763e62f9f45dfb9f7bf4191f3eae21e30fd0bd2a98d0d29b7acc934ead1435306043fa7d8dee130a7eb7881168d6b534a57a9b795804ce11c4d65ad423b1f5815ae045903eea000a046284f15279a17ac2f5c9a872d7de0970782ef38c371d83155120b2f9db327afee3e6fd99551e46abfc3b828775bacd32", 0x95}, {&(0x7f0000000880)="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", 0xab4}], 0x3, 0x0, 0x0, 0x900}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000200000020a00080100000009500007b00000000850000001300000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x92, &(0x7f0000000240)=""/146, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="d40a000040000000180000000000000000000000743039fe95"], &(0x7f0000000040)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="d40a000040000000180000000000000000000000743039fe95"], &(0x7f0000000040)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000840)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000840)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 5.257641969s ago: executing program 1 (id=2887): r0 = socket$kcm(0x2, 0x5, 0x84) (async) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@ifindex, 0xffffffffffffffff, 0x23, 0x2}, 0x20) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1a, 0x1, 0x6, &(0x7f0000000000)) r3 = socket$kcm(0x2, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8919, &(0x7f0000000180)) socketpair(0x5, 0x800, 0x0, &(0x7f00000006c0)) (async, rerun: 32) r4 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) 4.572673735s ago: executing program 1 (id=2892): openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000900)='io.pressure\x00', 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000001}, 0x50) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, 0x0, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000800000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xa, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10, 0x0}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x76, &(0x7f0000000000), 0x8) syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 4.326802224s ago: executing program 4 (id=2896): mount$bpf(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x44000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000001100000015000040000000006f000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x9}, 0x94) r0 = socket$kcm(0x29, 0x7, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$kcm(r0, &(0x7f0000001600)={&(0x7f00000002c0)=@xdp={0x2c, 0x1b, r1, 0x3a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)="1536fadd1effc578d214c7ae536a1403cb5dd4f2014209950d9fab9608aa84af4693af00bf04d8794a6fd37a954f227e93aeddf8a9e765aa93790e28a1cb69690d7a6a54b2f48c845d34d754a2c62d91ac8d30c505ea6ad1d24d6c9ed7b7dbe22c3035a0e9032c2dfc214391f519fe0bb0fee8ee037613dc8db210969bff8efe8b26fc7c394da06585ec1f96436d850dde77b849574a45660b8a3457d917a9f3bb6168d180799fd9f331f8c47cbdd177e2", 0xb1}, {&(0x7f0000000400)="e072aff30300783e5e7812f5020bc517307dfda991ff1a74215269801bdd1ffc5fca9f7d5b9a4f47a43b1104e1f306ff05d1c5bc000d57f03deeee78b6ec16fc768e18ab922b67b2fb37dbd1401396d8886be91e552c8f21d8a320287b31da639fdb1d2129272c423489bf5a11ec628ac8be800bc4e0752f564ba08ab1dfc1d6597f020e674d3fa2a8abe23a18642202a7e6b0168774894e7eb0bac9392d154e476f51a13061a153cd20fc46c4ddc79e0346a9acbba9e879b9071440877c67025aa50cfc6f0ca534b3a1d9f1c7fbaa8aec030cd2b9f94d68d45fe3074de2ac9e315782d8ba459e1ab9d4dbfe716d69cf21acd5b2648286c6dd7f757b5a7457c2f84051ec074480e9103a9c216026e10f318f9606a0c31bbb3d3a9653b8c68a29bbfbdecee413207a96c54fedbab4fd7c7368c484578085c29ade98eb2b3b2f4c150a255a33300091abec8635cfc4c293ca070cd6e719cea679e0a2fd9e7ac65cfb0f1660070e0a65d0872947a52833486f69d37fdabd2241ffc157a1ade35d83ed0741546cde970c14976144066ef88ac73bded1b40f3fc347c2b4e868cd5cd31587ed311c1103d24f4261d000340a344d0ce824b6f810f5bde124c7a499cfc9e00ddcb74b6740f0233db65bd3367c2606331f566c43873a84d6206c9fa5f3537152aea04bc822ee343dc8f081b8365f92bddcdf0c929940e1e765878ba2336eba8b7da7ffd1215d7db862a2ac901440c5256d4d0d4ad576030f464d1f4915e585456b23b9b15ab7bbcb392179b442c3775b6164ba03a963e81cd22e6473fe55c7b9ced00e8cd75fd944d2534d940dafc5b4e4198c2bf57d4e7c6369f5bdaca2067afb0fd760572c1e8bd6a5086392f6d9f8b8a85f21822bb839084425c52492120fe72e1a2905c67c10c63895b4e26354b2c34161c4cfd4fb020f17311c6b6f18dfe770fc1cc13bfb2394f5fcfea5e53fffa5435eac32db766f6bdd01da97a90f6b2e114be33b447e7c3c35b4072398876119a098c097963cc4c8683a950dd5a6094186a3abe52fe6661138d0c1a79a3a22683514d516a09fef07021d97077ecee45f0d41aee56761dd2e2965534037b564383951e84bda6492f9e91f13926fe6d222dd5ab27f8918dc000d48c9d301e89217251c07192e169fd386042652741af9341ca9581e6338c31a449bcd421f019c6b33539553b4de4fbf2cc8a45706ef16a1eb5e0d1405b7eb9dc490d6cddd329c809cd3f31c9566b5df8e6b938d4df2b8c79dbb7f9c19f10826c3f9234198fbd7933faea0eca0a414fcf173c400f86d7a0df67262557ac08238dfdbf3b0367724b6cf89cbc23a1b9d20326fc25ba0f4565fad5268120363a0b7100535230713e2eb09ce6e253a05d51dea19128a11a0c9b5857f2fcdab2e9d09ced7331fd51184dbf695e36f2df29a4f79052c94bd212854854718a865e201bf073628cc548bb608160551a3a24985a5d3c2351c2144911b84a191d96e181bedcd209b3a99a205288f21e1ed035f38489fb23b1d4554963363ed3ef64d6cdf8f553f3b85e531f7d941ae4399ff4b9d4ba6e6cf3bfdab7e446b0574f2d16d40f26cbddde51d2b5d64ae3533841815fd38bd0da5bb53239ec03a4d2daad861a0d65943ae5604a9531c81a065e38535c4368b36f8780951caa7a2cb86ffc5e4766849868173c5ad51949a2267dfa3f624ec2e9d8895b6b073348e2fe0f7e1c6f143299502b93499adfebfcfd494cb3c6be5ddd52ac73616fa110533d434a24bcb0eb29efc75dfc4640a16494e04c9ae3db53aeb42a238b5f9f4d812561f6a5086904c78aa12d4bdc76cb3327af41ed54ddec1e2ced2dcc0bac754fa4096221e86bb59dae6cda4825d32b44538281533e18327622e71e0a3e48bcc3a0711d4697070196159d65767bccc473804de953d73e1adec46b954ca91041bf093aafadd79c7b0f92706f061e3b89553504f5763662a117f504dcbef4e3bbf61b4bd9df4150b8087e0a7a4e63ac3dd41675cc1773426da80962271fede6fc6dabfc91b494f08d25879177aa6bcfdfb371f3ade15a4a331eddd8763dc4e3df2a8376d968f94e97c046a66c853301007814b765e97a580aebc224fabec604aba3f6ced85d3632fdf0017c2c20daa39c0a61f75d9b748bd82779ef4e35ad25b7d799ec8c54ce61d912e9b781a5c6bc87ea3d5913b0871b9ff0fd34b062a1d74be1c447d57be8c5ee3f605d5e5bfabc396c21f7b9cf83c70d46c65f86d6d37e3b1e312e357b23caf5b5a820383657eda20b0a934036eb9ea7646f617f780bc42145fe06ac196fc7b18d5b99b450ad3a80a6d9335f480824d8ae516484b827d6759272dbf687250334bacb9eaefd018dd5ca14fb71dd53db5bdbba426fb3b199eb11b37b5c9a006896616067b5469d81f1e0a73be14b895f5efa29477c2f8eb28036f2af0a81f0710610ed3fab3c041fc72262d4f8294c752f621c0be8966136a5d352b24d7fe6effc35d1327f9fe09e2eb2022f223490aee65d77920148db54d0546a5e5595020924303eb64a134ef6c7de45842bfe93814ba19c352288d91f9f75e9bb7572d4b9a4e02c807e4b328dc4492b00fbac3a369330ebe3bece0d0b1f66bf7c2c76706ef0fd1e145bcd1784e2d00e7dc929468779b9dfdbab87c5957ec77d014858aff05622058cad4bfec6f748e54ff400f74be5ee7a7955bffd227a24b04b6547a3bdc2771b3bacaa8b431ac915043f249f67896791e9a8dd45be41863b223218d4656161791fc8db80760d7b6faccf23d82b476adcf5a46e56df410b1b56e9c8e8045ef16a885d8a6b1817c53bf81540e4a188fb15b9ee902fb005d27e3ca43979f47d9d7c865a4c42af0acc592ed9b0b25497f597f8425d76ed0bdaae93d3b7352dc46dfeef3c7d18ab085248183fafef45180218b4e40f071e115b452eed254d2b419257f8ca5599d997b43d5f94efdaef956715273f445fee31bb08036e31df2826a4ad08149961a915715e0d07910258866adc5c49f8f2cf5c7ccc8ad2878b1f9a5361517172444d8fac1090c1cf643ff14356c5ff4f134aa8bb90cabbecc6d58b564bd8d5407c369e9c2c7a0ae90ea10498d692128018c6614bf75a7f62ff951d2187da1ff0cae7c95c298b692da78bc9c0d2e897c4afa1cc0b721bc63efb89b892f481565198e7761a4e7a9ee1fdc0b2b055ef307550e0aa8a91227f4a54295c5499b4b6e02e057a1acdf009f804d5d037dfdc4a0bd62db0ce37a5b8da2958b5f85d5d3eefdf78cda3069fef6d069417fdb56b1ecb2f98d20af1529a2020e555f531b3f0e81ece4084203d48399a6c9d6dae309f2b9c4fbcfa767acf8bcfd715669984b72fd28e9033da2a47fed0b585ae36be50effe420d7fdfb3a219aa2698c511267f98efcaada1f0f8896618d6c1369883ea5a91e3c379578603967909201dd3d51121dce783d3cc9c66e6236a067739fa96e25b9b9d4e1848e08b580f9e12bd226f2a14fb966fc9c083c5ea794eecfd3351d59639af365d61e4091e0daddf5d7034968ba6eaa14b761cbd7ad178231c5a415374030c2655a3b2329fc037cdfc0289cbb86bb9cf9ec0570ea1dd80fe3e3291fcae7f8bb54cf008ee6d76475957a8b7ca81e399207af6d980f560b382fe01bb95bf1083e8f9e058d7616585727602f589d3375e1df316938ed1a9e06bbf1054109824a0bec0c476c23e07fa09f3f87cd1caa70c1619403b81d057ccbd6eebd23e1cee593ed7bde17d2ca523848d732b699af69445981f53815eb228a189f53586b70115e2d0ee1dc6915a79192f52d974342997f0c8fc75ee760e703535031961000ea29be72ace460e5a0eb37f4e94088b611cfb4b1fe9f2d3ee7a7a7ef71b51f9717852fa9c481ee574cca04e7eb5a62315e5cfc72f2148490f40f4a54ccf57d134627b7c0752e3930627b3fbf1aabd8a12af28a0509cc0e394590e600e82a29229b7b12a0e2356a3ceff18c85e335cd477cba540a62db06a37471a31ef6d576c4dff1b3c4125c51abe03b8144453547d353ac25398c246981425db51b688467a8dc1ff406260f7a82e0e7a2066007216123f7ebedacc8b980e4fd9d63e04530f8b6533bbd21a64ea96402a1aadcbb1b6ea816fcec71ae8013492d8ffac3e5af27cf185a8224f8466b4b75a657aed5455078546101927a8333ec81749ce8e75b3f1140e7b987835b59b7519c9ec32ebff90427cc62f29aefb93f84561c03e824a88e0ecbefd3984197cb38ba0ee900b1c9723694b740250e5a6ab653428c94789e68f3d55dab5aa51691d14c9b67eac3f65082f07e2fd764da97d61be92d3f6592750b77180dbf4c081a70620cf38a7ae28898171adc41dcfe2bbfc5c2a33c99683be291724bf3bbe1816949a7685f8fe56ff3a81590ea0a682d1201255a7d757896b907605db6216dfe211ddeb7240b2244d50cfa77102c5392c4cbcb262bee1a1d78c7eb7b939f1df5797728df8863698bbe03a95631fd5ae293e2bd6338ad23ac38b5017ae7c5d86b718ebe5261182508af4ac4bb1112e5720667ab99b8578f5c6560a96eb55b03d38bc1fc690491cc0073d5eb72a589d8258d3f5ac2a4fda48df2a3aa7ac46542f1885b89d29c988eede890c127e8846321e3d80d675570c3289f457594aa3bb6ecfdac81dad0d6121e74839cbc93bb8d1ae4227e3277eaad1f0ff49d6290bd05c5cfcb042ab5f676622abd76b73bfd33b0c160d4c212219168b742dc9bca9829c92fa7b01d066ef8c538548387d083b0f1cbbd159ce572d60c26b41e43c91b6de46dd11bd1321ea06b20be102d6bef67fee4210608e046a79d5776ef2fe14d1c451e49af01f3726bd4718329c78236148f99986efe564d425b3f821606a8dcde9564d827f2ab0b00cfd2714126e4690735218cf743b909f544fcb670d33694f2cc140cc7b3ba197b8747520d7128363f0071efa14199fc48203c31f691c04feddac6381c16dd13a6bb89de1458fad8af7080821e6e82c368a7486bb4b96e53cfd9c83a87e2aca5e9178aa0d7f017dd273861999468360fe853062e0a2018ed72deb783e5adf171efd5eb72e7385249fc891cecceed4f5e85852e19910ff9d2c86c6ad04ad474dc93c8fd6f8302aa2503e01d72344595a4d6ec9a9600dd2de614823d6625ff5fdbc358fda5e3f5a8a3b344ff57fe5b36c593ace339cccf79740ad761f0159082c3ce3fb47152300ce078db0be1edec9b5cad4d65e3ce1c8263b77dd84100cd8e3bbc360354120110110af0968932a46824a1b9d633cef84851672953ff441b4fdc4eca51f62d81ff8926b798df33f2a2d436f34e33cea011462cb9789acf2aa503880623e587288e1a3181bc849c54c300c0de708b58fc1dd34320fe3fd58087a8cb17f10c26c5cb53c5d54074d33f393b024e78330f8c4b1bb1b3f95d0398f9020f5c28f1a0afa9f013001e11458aaa96fee17895ecab9d943a84e5a6bf6a85dd4b6d15ef4179935df4ac4577379f453704320d73032d3e6011018c9e4c041ca8c34b6f37529498ba01f9a5bb989cea0dfad24d9a0773b3ad69820f0481b451ad28be6a59f108cdad25cc3835b227b2142b8682910d1dc936aaa883bcfef35a9321e5a2e96a9e9f3354823beedde53f6448e3ea2197dc1c7ef577c2b15b65c3098fc278e7603ae7af504b4a59082562f679a54040260fce1bcf450048e127650da9a87677fa50d725d5c651e6992577e75ec78939eb2f056cb09559e4764760c3d09250b2b13c65250964adf6828f89", 0x1000}, {&(0x7f0000001400)="cd62e05c59be20dae208278e59b5c249a085a537c38b1b23a29b9f9d9541224b8d1f8360fe96cad9383a27229e505188bf8ceee7834c04bb070414422ded8494d8c9a8afcd6336bde7cc5ae3452e4e8ed3e4631b0b6698729b2007831404fbca7979576b810b98b87c8b698a0edae2e64434d259bcaf37866fddf1d112d73356d8fb69eadb96198f9c820a270446dc28f50593b742cc16c71ab7019498317fbc7ca2c79785b4b592e960ee3dc103bd4588ce173f80d0c2f4cfc10d912b57b572fb45b7d9aff287b1", 0xc8}], 0x3, &(0x7f0000001500)=ANY=[@ANYBLOB="0001000000000000040100000000000047f7db26ee347c83135b0f8b45947cb48ea3ae0751b32760341e621b9c3bfc410f5d461f8c89df6c017da7c51faafa8ecd4e5c63f211d16bd7473ebffbe4e0e67f75b9ba15fbc9638fa8117c6f26b67eef4494bd72c544a01d4846311448127b3018875ed48eeb235e2fc11318880cbac76d03fadc849ceaf90576a0ff8f740293387731bb0b941f477dc7c1e371af36bdd09eb90186246024bb1929005b940cb6cac11613200dbb5a7b31df70edf7341c2c2e4777af5e4549451975fd48d0425e07d4224f5e0879e99cf933d11853cea26667bb1e3c5b7ceef3ce36605287ad5b4e82fdd84abcd50ae08f41caed"], 0x100}, 0x10008050) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x18, 0x3f9, 0x200, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4004840) (async) r3 = socket$kcm(0x2, 0x5, 0x84) (async) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x200000000, 0xffffffffffffffff, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x2}, {0x2}]}, 0x94) (async) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001840)='cpuacct.usage\x00', 0x2, 0x0) getpid() (async) write$cgroup_int(r5, &(0x7f0000001880)=0x8000, 0x12) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r6, &(0x7f0000001dc0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d80)={&(0x7f0000001900)={0x448, 0x3f3, 0x400, 0x70bd26, 0x25dfdbfb, {0x4, 0x1, 0x25, [0x40, 0xb9, 0x8, 0x4, 0x1, 0xfffffffd, 0xc, 0x1ff, 0x8, 0x100000, 0x722a, 0x8000, 0x12fb5b18, 0x1, 0x7, 0x0, 0xcc19, 0x7, 0x0, 0x401, 0x59a, 0x1, 0x2, 0x20000000, 0x5, 0x6, 0x8, 0x3, 0x3, 0x9, 0xffff, 0x9, 0xffffffff, 0x4, 0x10000, 0x0, 0x8139, 0x6, 0x2, 0xd, 0x5, 0x0, 0x400, 0x1, 0x800, 0x8, 0x9, 0x9, 0x5, 0x0, 0x8000, 0x3, 0xf, 0x0, 0x8000, 0x6, 0x10, 0x2, 0x2, 0x9, 0x8, 0x6, 0x5, 0x9ed], [0xcc34, 0xfff, 0x2, 0x9, 0xee3a, 0x3, 0x4, 0x4, 0x571, 0x5, 0x2, 0x8, 0x4, 0xf89, 0x5, 0x7, 0x3, 0x3, 0x0, 0x7f, 0x6, 0x2000000, 0xc, 0x3e, 0x9fe4, 0x3, 0x0, 0xd4, 0x2, 0x8, 0x18, 0x8001, 0x2, 0x3, 0x3, 0x6, 0x2, 0xfff, 0x1, 0x0, 0x4, 0x5, 0x5, 0x10000, 0x7, 0x80000000, 0x9e1, 0x3dd, 0xffffffff, 0xfffffffa, 0x7, 0x95b, 0xfffffff1, 0x6, 0x2, 0x5, 0xfffffff7, 0x1ff, 0x1, 0x0, 0x15b40397, 0x8, 0xf, 0x7ff], [0x4, 0xea8, 0x5, 0x1, 0x8, 0x3, 0xffff, 0x9, 0xcf, 0x0, 0x8, 0x100, 0x7fffffff, 0x101, 0x44, 0x9, 0xb0, 0x213f, 0x1ff0000, 0x727, 0xffff, 0x0, 0x5, 0x2, 0x0, 0xc7, 0x8, 0x2, 0x5, 0x5, 0x5, 0x2, 0xe10, 0x6, 0x2, 0xe3, 0x10, 0x80000001, 0x94, 0x8, 0x2, 0x2, 0x6, 0x0, 0x8, 0x5a34c3d, 0x7, 0x7, 0x80000001, 0x3, 0x800, 0xffff, 0x8, 0x1, 0x200, 0x0, 0xe2, 0x80000001, 0xe71, 0xb4, 0xfffffffb, 0x6, 0x4, 0xfff], [0x3, 0x4, 0x7, 0x1, 0x1, 0x7, 0xfffffffa, 0xfffffff8, 0x3, 0x0, 0xfe1, 0xeead, 0x5, 0xfff, 0x100000, 0x548e, 0x9, 0x8749, 0xdc6, 0x6, 0xe1ef, 0x3, 0x9, 0x1, 0x3, 0x3, 0x2, 0x4, 0xc, 0x9, 0x8, 0x2, 0xc, 0x0, 0x2b57db43, 0x5, 0x1, 0x5, 0x7, 0x9, 0x7ff, 0x7, 0xfffffffb, 0x8, 0x5, 0x2, 0x100, 0x5, 0x1, 0x5, 0x3, 0x5, 0xf, 0xffffff00, 0x8, 0xfffffff7, 0xa, 0x6, 0x6, 0xe, 0xf8, 0x4, 0x546, 0x6], 0x28, ['\x00', '-:[\x00', 'syzkaller\x00', '!\x00', '\x00', 'o\x00', 'syzkaller\x00', '', 'syzkaller\x00']}, ["", "", "", "", ""]}, 0x448}, 0x1, 0x0, 0x0, 0x20008080}, 0x15) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33) recvmsg$unix(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, &(0x7f0000000000)=r9, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)=@deltclass={0x38, 0x29, 0x800, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff2, 0xd}, {0x6}, {0xd, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x8c0) 4.110736566s ago: executing program 6 (id=2898): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x5}}]}, {0x0, [0x61, 0x2e, 0x5f, 0x61]}}, &(0x7f0000000100)=""/72, 0x36, 0x48, 0x0, 0x25a}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x5}}]}, {0x0, [0x61, 0x2e, 0x5f, 0x61]}}, &(0x7f0000000100)=""/72, 0x36, 0x48, 0x0, 0x25a}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r0, 0x0, 0x9}, 0x18) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r0, 0x0, 0x9}, 0x18) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4}, 0x48) close(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xfffffffffffffe91, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f00000002c0), 0x10, 0x10, &(0x7f0000000780), &(0x7f0000000500), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xfffffffffffffe91, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f00000002c0), 0x10, 0x10, &(0x7f0000000780), &(0x7f0000000500), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x180, 0xc8, 0x400000, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfdef) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x86652da295c9ade7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map, 0x37, 0x0, 0x5, &(0x7f00000000c0)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x50) r12 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000000000071115e00000000008510000002000000850000005500000095000000000000009500a50500000000593d99973ab8bd84c7ae49ffb03398929787e599d43d73bfa7fbad380654b3dbd19705b578dd896a48070306cbb723154d92a6c9ba4e724ca3d4191cb23190858474249c9f0eb2c65e4ff70e1268d7aa51661c9062c9525f739b6e47126c7b84e972f425e4f09d46a0d1c17a5e0927153239042f0b6265561d1627a654effd7ef7500d875a3afdbde8a26f930cc2098b0027564c781f51a9b56eb8fd2f0cd67dcbb78e7c71b28f9599ef"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r11, r9, 0x3, 0x0, r9, @void, @value=r13, @void, @void, r10}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@fallback=r0, r5, 0x2c, 0x14, 0x0, @void, @value=r0, @void, @void, r10}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1, '\x00', r4, 0x0, 0x0, 0x4, 0x3}, 0x50) (async) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1, '\x00', r4, 0x0, 0x0, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r14}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r14}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r3, 0x58, &(0x7f0000000b00)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r3, 0x58, &(0x7f0000000b00)}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) 4.100482s ago: executing program 4 (id=2900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) 3.739927951s ago: executing program 6 (id=2901): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'tunl0\x00', @random="e000230c1100"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a00000a10000009500000000008ddbe228c249b6433e0000", @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRESDEC=r1], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async, rerun: 32) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'bond_slave_0\x00', @random="00870fd42900"}) (async, rerun: 32) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x20040010) (async) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x8a, &(0x7f0000000040)=r8, 0x4) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r9}, &(0x7f00000006c0)=0x1200, &(0x7f0000000700)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x5, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r9, 0x0, &(0x7f0000000280)=""/118}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x7, 0x8, 0x42, 0x0, 0x3ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x2, 0x800, 0x2, 0xc, 0x1, 0x2, 0x0, 0xc05, 0x0, 0x4e9c}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000080)={'veth1_virt_wifi\x00', @local}) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7, 0x83}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000780)="f4000900062b3c25fe80000000000000dc8b850f2384", 0x16}], 0x1}, 0x800) 3.686915369s ago: executing program 5 (id=2902): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xce, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x7, 0x80}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}, {&(0x7f0000000400)="8904d745b156dbecc86a087a789e8642bf3d62935994c93eb897451231e0053756a8ab49b2"}]}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x8, 0x8, 0x5, 0x5, 0x0, 0x9, 0x30414, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x89c5, 0x8}, 0x1c0c0, 0x1, 0xd4a, 0x2, 0x3ff, 0x7, 0x0, 0x0, 0xdd32aac0, 0x0, 0x6}, r3, 0x3, r0, 0x2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYRES32], 0xffdd) socketpair(0x1e, 0x6, 0x5, &(0x7f00000004c0)) socketpair(0x28, 0x4, 0x5, &(0x7f0000000300)) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c616ab9f064d063d8940b743b20cdefb0a165dcfec"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r5}, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000180)="1400000016001963d25a80648c5691", 0xf}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000007919b0000000000095000000000000000d82897eb8012eb44fbcbcaa33e56aa80d631bb79ed7e3bcf758677206b1621f85d31de8c968029a5359596837204c93398772408bb3f3f7829d473b64b94dd861873d55d71b749a71a38664ba76b40738e4e63e34d856ae01eeba5b714eb748"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x21}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) socket$kcm(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000007c0)={'netdevsim0\x00', @broadcast}) 3.685991952s ago: executing program 2 (id=2903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0xda, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0x4, 0x20}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0xffffffffffffffff, 0xfffffde8, 0x10}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%ps \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0xe, &(0x7f0000000040)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0x4, 0x4, 0xa, 0xffffffffffffffe0, 0x4}, @exit, @alu={0x6, 0x0, 0x2, 0xa, 0xb, 0x80}], &(0x7f00000000c0)='syzkaller\x00', 0xc748, 0x0, 0x0, 0x41100, 0x48, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000400)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x9, 0x6, 0x7ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[r3, r4, r5, 0xffffffffffffffff, r6], 0x0, 0x10, 0x1}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd368a6acfbb9f167}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}, 0x1, 0x0, 0x0, 0x24000080}, 0x8000) 3.650941946s ago: executing program 4 (id=2904): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x9, 0xc, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffbfffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="e03f030013006bcd9e3fe3dc6e48aa31086b8700350000007ea60264160af3653c002e000d000af08bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r5, 0x1a, 0x0, @void}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3.529622879s ago: executing program 1 (id=2905): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80404, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="140000003500df746baa0700000000f90424", 0x12}, {&(0x7f0000000000)="fbb5549892418fbb", 0x8}], 0x2}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000500)=r4, 0x4) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @loopback}, 0x10, 0x0}, 0x200440e4) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) (async) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r6, 0x6f, &(0x7f0000001040)}, 0x10) 3.315283247s ago: executing program 2 (id=2906): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getpid() r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000400)={'wlan1\x00', @remote}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x3, 0x0, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000730129000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x1f000}], 0x20}, 0x0) 2.505190682s ago: executing program 4 (id=2908): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000d40), 0x2}, 0x0, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$kcm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000380)="98756dce643fbf5ef0138305b9544f502e60a43857f9cf2c64177698ae815d6829d2da0a945e071b97c5d166b5959ca869db96c987605573c7816d96bcc23fe66dde53dffd2b91b89b19f1eec2de751229d3560d7889c1bf83cdde4c14f53be0222af4290d9ecd3cf7a25c008b6ab1a896fe5fb75138abb263f0b92400a30c842d26e20a28096db5ae15d593fd0adc68e567f470a81fe2c0e9b6d3206dc34e58a419008a1ca86651dea080729f1515d654058992ac1326683fc25cfefde118954d002e0c9517302ecd53184640f4309d40a4225745181a4b492f32efe403e53bfb", 0xe1}, {&(0x7f0000000800)="d1323119264c1a256343601a7e25b84528784e43c13ae97e38a9077644d34d0513d96b16f77b86721c22b4544fc5bee55d9a059695478af3b8a1c9d69321a0a78dab875cb5300d9e645f7bec6aab434e0c0c098db56e19330adbb8f6793bc0eaf9011f2fe4c52db3da845ea90cf72edaac1ebfc82dda19e8986885c1e5976ec90ac0a4822832b14211fa0dbfb9e2ea57a9d9cc7c701ebb80280bb32512142000fb8522c3b41738ffb6b8cef954f62099bda83ef612be8d64012b30b9", 0xbc}, {&(0x7f0000000300)="0cd7", 0x2}, {&(0x7f00000008c0)="90ed98801e", 0x5}, {&(0x7f0000000900)="5f31424a64f937d672c90e52e12ef3ba2df3ee0413691a4d8174350dcdd1fbc7c1a8438557f00249657d869bb70261abd849bcc66ada5fbbd08b2a68cace95eed437", 0x42}], 0x5, &(0x7f0000000a00)=[{0x30, 0x110, 0x7, "bc507e61ed82f8790438c84c4ff6cb45824e43aa2f754c64a2af88d4252d12"}, {0xc8, 0x1, 0x3, "d89880fe3062b957398369036bd51a21edc60bcedaccc15ddc4fcecf61915f4171cb7be49ac5bb0468a39afdcef2c2f2e36e63f4399265f61e79c6921a6c7cb0dbb1dfd33ce7b8b42189cfc5c3d9ed089a9eca60c36f62369294ec7eb6b0f5644141857115c4b41c00a8dda86050f8ea4422adf4c1f69f3cd7a8d51dc44e60da0f03ac4f43773e5a8db7437b95987212d36f3aad755a75416d545b50e831362e78ceca9abd92d78ab98dab403dbe1b7e3d3a9836b1"}, {0x70, 0x0, 0xd5, "3b1184a6936a4713ccba64e54c9a4972a4ab972b18263908d5c28c24d2f1cddb99ade3b951f173c2da110d01a960b9c695c649310e6193827d503f47a57a31f6c8ce15195eb04c15b9bd4ba4ca6061e50a886401159eb598a73f3a359dee41"}, {0xa8, 0x117, 0x5, "94f647b0d4217b5b49b48da23b00d8b6a8add63908ba6e6ae18016eee6b4bbdc5f232d200212f766a4987506bd4bd6c2315c704a36a239a73c2fbf3f5ccde2d6e2f88bbf3daad25b758f4dcdbb2d58c092d7a98080ddaf71d687781f9fab340582823c84168db428ec44b7c83823f2fb804e3c3a1b9a4484b14ba8821a2e2358ac0429b5aea74d344ff2a570b7e99eda8ea6c560"}, {0x20, 0x109, 0x7, "3d7014cebbb86eec9f13afd64dcb"}, {0x20, 0x115, 0x7, "24ca2c4a5b866b4b1f2686"}, {0x78, 0x117, 0x401, "b0df24761bf6e12efca2931b2cd5223cc503a73049efe0af7c6486177b0a8895d1802726038630ec0f735232970473ed0824abda25d8087cb1ac288a31f737bee48217eec1b40ce9c8ab3f7fd3248a4382e51efa3adcb842428f0e92225f7d1ac1680e3845d5db"}], 0x2c8}, 0x4048000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x258}, 0x1, 0x0, 0x0, 0x20000850}, 0x40) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="a0010000170a010800000000000000000a00000a0800074000000001080007400000000108000740000000000000074063f1afe17c000380080002400000000908000140000000000800024000000008080001400000000008000240000001c008000240000000020800014000000000400003801400010076657468300000000000000000000000140001007665746831000000000000000000000014000100766c616e3000000000000000000000000c00054000000000000000040900010073797a31000000000900010073797a30000000000c0005400000000000000004c0000380180003801400010000000000000000000000000000000000a40003801400010076657468310000000000000000000000140001006e72300000000000000000000000000014000100776c616e3100000000000000000000001400010076657468315f6d616376746170000000140001007663616e30000000000000000000000014000100776732000000000000000000000000001400010076657468315f746f5f626f6e64000000140001006e723000"/416], 0x1a0}, 0x1, 0x0, 0x0, 0x4080}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@llu, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x88, &(0x7f0000000000)=""/136}, 0x94) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc0081000000010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000e8390cd806e5a1e332c9d55b7b468102dd9174dd293170a3eb94c034e9290b64c78952ef", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000400"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2.464870008s ago: executing program 5 (id=2909): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x120}, 0xc, &(0x7f0000000340)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x194, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x144, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, @NFT_MSG_DELFLOWTABLE={0x150, 0x18, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8a}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xf4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x6c, 0x8, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88fb}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8914}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x9c, 0x3, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_USERDATA={0x72, 0xc, "97c6eff9e521eeffb389e2695b881ca500e6e8ab6d4bf98ecdec7888c7f51851f45f73663ec2ea7ed3182f561eca2d11e18b7d6eabef88af533b879709ed88529c988273b9ec853522b7dff8ea38eb92269d51dfe0db94b85e42cfec28cd5e66d69bfb198bf5aedd01fa34da606c"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELOBJ={0x2c0, 0x14, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_USERDATA={0xf7, 0x8, "0c38a7258236909eb64b3a160aa2d6f8bbe89cd103dfe07d19dbb47928788c70e0299bb8d51dab0e1a5ed3b65e51e9079ef9f301c13185120c509f673ec2ab37257878f34bd47c62f8c6bded6f30627cabbe8af4ffef0da97a3ab0127303aa25ff03a88e559d39c10d096563dffed7fe543890f5d7c5c4a0c8ba5a5673382ceaf095087ea87c0eed2a59727a1d1ba1a3430e2c6097a4857bdeecb784ed3a25b396fedbfe41fbb30b640c4907cf411b0079403f61e64595b3b02d42d09c08422a88df03073c8f0bb058b3e384f93478855096dc1cc3f2d3e79298b657370b5150f0529ccdf03b7534cbb720ed69bc8109b3a090"}, @NFTA_OBJ_USERDATA={0xab, 0x8, "2b3a7c7f97284c6376ee76e4169bdecc1bc05a5092ddbfc53ec85929fd7e137087e238109927b9b37ebafacd4613b16f90670982f8aba16b93f315b7b0e1c71e4fb5acba88d5dd4f540c0f6b26067658cdb40aebcbbf56055d252b6d6b4dc544c5860af69a0ce4eba06487c012f3c144808895c58eaf8029a1a16f63e432a5d7e2e31452382a97be4eb48263529b8794239359797bce0156c670d411ea7b15d048e7e7868b78ee"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x1a, 0x8, "2313f3af42a787a36c0ab7ad5aef2b3fb38f84a7dbd8"}, @NFTA_OBJ_USERDATA={0xdd, 0x8, "e0cbb20663cb472edfeaf0e7fd57aae680cffc82fc6e9da28a3b90293095d1116bcf868e2a1b7d0134274b5fe765bc7b0a5c7400c56e91053c29e296ecd6df3400e219746acf14df89143f56c5f12f962a5e904779603b269bd9c473b4f32df1718216137006ab521edb94405232677371367e2c79468ffd43e67f84c237ce7ef826064893a16ee9966660c92ec381a1b8f1f80229d7f8fe2adf5cbb0b2299005bcf29e1ee56f580bda343673d2bce76bda90021356ed91be177be1a71ff91788d4135fd5ad6238bbf0fe508765feb26fb615505b1a1477949"}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x80, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x4c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x810}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000540)=@newsa={0x154, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e23, 0x1, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0x33}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x1f}, {0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x2, 0x3, 0x1000}, {0x0, 0x9}, 0x70bd2b, 0x0, 0x2, 0x1, 0x0, 0x3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in6=@local}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x50, &(0x7f0000000080)=""/80, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0xa, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000180), 0x10, 0x5}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x5}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x108, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0x12b) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x1, 0x0) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000300e8fe55a118001500060014000040a8002b000e00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace6f177ccbec4c2ee5a7cef4260027836b0d17a54ef5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc806dcabced7ad654fac9609f4fb00"/216, 0xd8}], 0x1}, 0x4004) 2.390644695s ago: executing program 6 (id=2910): socket$kcm(0x2, 0x922000000001, 0x106) (async) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r1, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, r1, 0x3, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x26) (async) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x1a5d, @private1, 0x9}}, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xc8, 0xd, 0x0, 0x0, 0x0, 0x7, 0x301ba, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3d, 0x4}, 0x10a, 0x0, 0x4080001, 0x3, 0x3f8, 0x401, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x1) (rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000034000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r6 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r6, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r6], 0x48}, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c23003f) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, &(0x7f0000000080)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000200)=r2}, 0x20) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x1400, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.691370575s ago: executing program 5 (id=2911): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={&(0x7f0000000100)="02b6173d4bbd59ef7f30a46edd3ead94ed0dc5e8f2f05b029a32a21198d524fa3f9fa8f4703fed10c643c137c1edcf2c8ba5434a3f3d3d03b6d88c7c00b2e03ae16f87588873b357d3b6dc91de741d6335f66ef988b0990468eb88359d18371545e7bfb3f73760ab32d1365ab19111586eeed3feaf7007fe6925942faea76e61f282e8", &(0x7f0000000340)=""/4096, &(0x7f00000001c0)="3d5146c553c7142d53f18fb9b5705ff3b4d608148793f83f462e61baa26423b88d3815d11318d7f3459cef737d7e51ee3251dc0e2342b7cfeaa9fc", &(0x7f0000000200)="d51fb5861e6879f35c326f944ce9eba8ca688fe445e4cbd9", 0x9, r1}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001480)={r1, 0x58, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000014c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', r2, r3, 0x2, 0x2, 0x5}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x1400, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.608143027s ago: executing program 2 (id=2912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x44, 0x3, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000010}, 0x48014) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xa6ed}]}], {0x14}}, 0xd8}}, 0x200000d4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r3], 0xfe33) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xd8e, 0x6, 0x5, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x8800) (rerun: 64) 1.534595274s ago: executing program 4 (id=2913): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000800)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f00000013c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x394, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_USERDATA={0x81, 0xc, "a04f1788601286b2a231e62d7dd0d778000f922b5861c3928f21799e4c5262fe93e3a806c32b60a8396c32a6629af47d450e284e9eac2db97d2054ca3fd99524b1c09b2c647784e5f4ec721360abeba153d89aa891bf32cd54b7d8aa7f1b4e1f42b946f78adeeb90d5b8c3e412862df2d0c96d58a0f0253317b86127e3"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0xd6, 0xc, "784baf23df7d7ee29a9c39653a1fd5641dd55023242b23bc76417132f084f9d8a916c4ea2f6e478d94a55818fc9cf54259b6fabdb36301403ec8e1a75121cd65b5e186cdf730fe4244c22115f6d354b1f150609bdd5595c70457e163a3f64307ba8fbbc242f8d19b39d2583bbd63e9faffad9a43c9411ea0aa7d7df56e82a11cd7968868f08594b4c7dbb82b788fa770c2c1810c2a6f7927c0e9fb8fec73ae70ec322a60c2838629752e1ad604a2cb0b1c5ebe7cbfea1ef5706b2f5fe45166601533ce66b11622ef9aaa66710784c66b2c3e"}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0xf4, 0xc, "707e39f183bcab6c409b8ec23ec811d8edc3cbc83528ecb6813459f01e954422da08c06f33d656a0a0d0ee6ccfcd45c31c478220f31f5f6456a10d38568f31f8e5d383b86eef36d2407fb4f2a64c230c20c6094e779b5ec28c8b835af7b9bc75d3c5bacae98229cfa0892c9ac30e483325a0b75e23d86adcdc27572b73d27ceecd72a1f40cc50cd4fc0139f7a85426079f19d7325bd5814e85a7b2e1eefddbede3465c8399570c293bb700be5f1b37ecf5f69d286315eb063101007a69908cfd5997b41fea296f92bf2f209377baca35e2972e7c857b436245349537b0aeb7fb8ec32f8bcbadd96a17f1ee8043b8c763"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xed, 0xc, "77e52c93f5607245d30461e2f747e80b147908c168a062055632d2f416d3d4196ffe54adba5e6eda468bc95b9b974ddb8595bc60802f78306470201cc885de9232aa58e6e3d6ab7f17288dc9aff9cd2262163777d6b9d351fef19077a6188c84f6a343e582daebd940a8f3879083448bf6c23aa7a13988a4669dec66810255e9bf76c39091adf25152eb48f11831f030907243aa2a99d820df48309c1c8b43c8db1a4c0af9ea9ad1303cfd57414cba0e6a7980e165b13c0452aad724f65a45ea4875c422906063e0af4be715bac77e0559c48702f61bb10d3c9d26ea3fc87315fe7e07ee736e12a1f6"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x1b4, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0xa5, 0x6, "93bab3d937cf2822e1d421b5bf378c43bacb6e358aa722986d422e1073919170d6bdf30ee069830d9eafd53b5bbe97c24dad70ca203f23d287b43e9c90af12f6b86a349e4b016c07c5ab1cfe511910855b650ebdf1d87640e792c015cab9c69f92ce0db85094627ac7fdc5e10017265ee623e55ce42e0974e7fca5ebe8bde086e167ac8accaf1a20c2a5d825d5a3b7e04e0430b04565e9f74da5f9e7e996a7377b"}, @NFTA_TABLE_USERDATA={0xab, 0x6, "b6606d96ea06e6d96a1b5b97961343f0ade561a50a08fafc603722119fa037f50c4e31535040f4dac79c7a0692bc2f561d22502614cf82bfc016f9bcb060f5eb4e5bf5e852110b21dabf29af0a80ce86ad9d2f5e1de5024e80b2e50fee0a0a69384ecc8003df722539267ae3facb46e3ec16b7b8e43cbc07871d10a3cbc258d15068d1f140fe5c3e4a40d4e5fc60ad3bd40295dceb887ac63b867635eba018061465b205164f18"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x14, 0x6, "6d667a87c6b34016a3ede8f3e7bed099"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x60, 0x18, 0xa, 0x7b8a11ae97d7a981, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELRULE={0x2d0, 0x8, 0xa, 0x106, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0xa2, 0x7, 0x1, 0x0, "606309ccf22c424b965467d65e753d82527a231c267b497306d6c34c6979fdb4728e121aac19e3441ae9f301d8a09bc03f57ec77cb23dc9c042fe84bad59d1fd5b84792fa65768ba1d76910cee6fbedc9f10421f016c1b8dc9ba3c1736ee2cb4f2c51efb3fd09911e4584fba589ce7400f19c325ae16bc2f581f5efd23358bb46fa43d00d08ed1b89507f9bfbe1b7571a12eb0d07d8d0351f64cdbb29c79"}, @NFTA_RULE_EXPRESSIONS={0x1a8, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x5c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x42b9c97249d91a63}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8}]}}}, {0x100, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xf4, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xe8, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xbe, 0x1, "9b162bc33e59e1b779e72c4db77e23cce1f0049ac7278a095b88e251786ad2432b9ba032ca41de7c2ba9b2b3dcc34f1c34631c08a0422a1c93159044f50b6074a0101d7f9c2e74d7747cccdec69457b9a7605fc61cfee26e7c40377d6a3afb15a0b4db34493944d75cdffd55b776dae01c3748bf35161403d1189242902f8fd6fed313139c4c6dbfac679f477495816b2fa0e10a3fe9d035a1b2855552fe6cf055e6b024e86b6d2d90868a4f51cc2ef0ec055a1c0990b083be5a"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xb6}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4b}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x80000000}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3ff}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1ff}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x960}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8918, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02008125d7e1"}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x23, 0x4, 0x60000000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xffffffff00000000}, 0x8ac, 0x0, 0x0, 0x0, 0x7ffffffffffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') close(r7) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a40)={0x54, 0x1407, 0x100, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000014) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x0, 0x2c, 0x55, &(0x7f0000000600)="c66695d9f76bbb9315910e25d966331d3fa8ebf69905099005de6ec7491e523e4da2ea50a7a7703b84d9222b", &(0x7f0000000640)=""/85, 0x200, 0x0, 0x13, 0x51, &(0x7f00000006c0)="ad155cf77c64dbf01b9ccd31a460d774921d44", &(0x7f0000000700)="60a47936cf787032876b1b3c87ec5cfa2da0e203d351a841519ce5ab2814e7b0b066f7fa1ef003bc6471f7a76b71f35073c364a8d6d077cb1abe0b8dd616a81ba49f2f805d6184ebbdc960fa996013e29e", 0x5, 0x0, 0x3}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xa}, 0x35) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000150a05000000000000000000030000040900020073797a31000000000800030000000006"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc1) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000dff2c872a5faa6b33b9db7080000000000007b8af8ff00000000bfa200800000000400000000f8ffffffb7d337394c03000033104e56ef22d61b2b2a38c41808000000b7040000000000c493d2552f008500000003000000950000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) getpid() sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x4c054}, 0x2000c005) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.533907168s ago: executing program 6 (id=2914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x107200, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000002280)={'bridge_slave_0\x00', @random="2b0100004ec6"}) 1.398571553s ago: executing program 6 (id=2915): openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000900)='io.pressure\x00', 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000001}, 0x50) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, 0x0, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000800000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xa, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10, 0x0}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x76, &(0x7f0000000000), 0x8) syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 1.333326595s ago: executing program 5 (id=2916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r3, 0x29, 0x17, &(0x7f0000000100)=r4, 0x4) (async) sendmsg(r3, &(0x7f00000026c0)={&(0x7f00000021c0)=@in6={0xa, 0x4e23, 0x8ef, @empty, 0x12}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002cc0)="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", 0x599}], 0x1}, 0x40840) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async, rerun: 64) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6a}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x92c}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88b5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000008}, 0x0) ioctl$TUNSETNOCSUM(r5, 0xc040ff0b, 0x1) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}]}, 0x78}}, 0x80c4) 1.122688254s ago: executing program 2 (id=2917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x5c}}, 0x40800) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 916.707619ms ago: executing program 2 (id=2918): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x13, 0x0, &(0x7f0000000000)="0306eaa1d78ad62ceef1884386dd78bbe5fc15", 0x0, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0, 0x3, 0x0, 0xfffffffc}, 0x50) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000480)=0xbb6) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000021401002bbd7000ffdbdf250900020073797a320000004600080001000012000008000100010000000800010000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c000}, 0x400c040) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f6", 0x40}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, 0x0, 0x80) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000580)=0x7, 0x12) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061149800000000000400000f82c42ff8eb21b7eb2a4e1f14"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 911.492122ms ago: executing program 5 (id=2919): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x27, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x828, 0x0, 0x4000, 0x0, 0x9, 0x800000, 0x200, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r0, &(0x7f00000000c0), 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000001940)=ANY=[], &(0x7f0000000700)=""/4096, 0x36, 0x1000, 0xa}, 0x28) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x54, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e33236384b1"}) 278.807846ms ago: executing program 2 (id=2920): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x9466e7a8e881412a, 0x2e, 0xfffffbff, 0x3, 0x3e838, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x1, 0x10, 0x0, 0x0, 0x1000, 0x42640, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x9}, 0x4000, 0x4000000000020035, 0xfffffbfd, 0x3, 0x3, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0x2, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100000, 0x0, 0x0, 0x0, 0x1000000000000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xf7) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x19a7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x100, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x19a7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x100, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x0) socket$kcm(0x2c, 0x3, 0x0) (async) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}}, 0x80, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000363385d119e0d9809ef6ff7f9b31b732bfd9362f59478615110ce36474863281b619bc4a8b98d435"], 0x18}, 0xfc00) socket$kcm(0x2, 0x200000000000001, 0x106) (async) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x35, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r6, 0x29, 0x35, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES16], 0xfffffffffffffe67) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES16], 0xfffffffffffffe67) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={0x0}, 0x18) socket$kcm(0x2, 0x5, 0x84) (async) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x8f, 0x3, 0x0, 0x0, 0x7fef, 0x20825, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8107b7b, 0x1, @perf_config_ext={0x407fff, 0x400aea}, 0x14145, 0x277, 0x7f, 0x3, 0x2, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0xa9e6}, 0x0, 0x3, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) 186.495847ms ago: executing program 6 (id=2921): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}}, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0xb54b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x4, 0xfffff271, 0xffff, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000040a050000000000200000000a00000a0900030073797a31000000000900010073797a31"], 0x2c}}, 0x4080) 127.351387ms ago: executing program 4 (id=2922): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x224, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x9, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x40, 0x7, 0x0, 0x7fffffff, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x800, 0x7fff, 0x7, 0x1, 0x81, 0x4, 0x5, 0x0, 0x4000000, 0x0, 0x80000001}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x24000000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) socket$kcm(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r3, 0x0, 0x0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b40)={0x1, 0x58, &(0x7f0000000ac0)}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000300)="42404d8c6324b3dab6d2ca779343524b80e7af77bcb93a8632b0dd3476309df6fc1b41241e1be0a70d3e7c00fa947c01842acadf1549961996b6ae70ab0e763ca45f18f22d820458243bc4872548f67a2732b234fb42bd564e8ebc55de909962738d1740912269ea58c8ce589627f0116f06261d6ed00cc5fa6201a2e99a6dff1e8064c4fb732fcab7deee23f1a6", &(0x7f0000000140)=""/2}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 5 (id=2923): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c11}, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x210000, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000200)={'veth1_to_team\x00', @random="fb176ab940d8"}) socket$kcm(0x2, 0x922000000001, 0x106) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2d, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r6, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r6, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x100) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x2f08, 0xe, 0x0, &(0x7f0000000000)="46c33c56e981df5e1559014932a2", 0x0, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): st failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 339.654872][T10296] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1096'. [ 340.358971][T10324] netlink: 'syz.1.1105': attribute type 10 has an invalid length. [ 340.375318][T10324] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1105'. [ 340.636715][T10319] netlink: 'syz.4.1104': attribute type 11 has an invalid length. [ 340.665026][T10319] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1104'. [ 340.709645][T10319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.751332][T10331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.805944][T10334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1108'. [ 340.838503][T10334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1108'. [ 340.974964][T10332] netlink: 'syz.0.1107': attribute type 17 has an invalid length. [ 341.024474][T10332] netlink: 'syz.0.1107': attribute type 16 has an invalid length. [ 341.069941][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1113'. [ 341.079040][T10332] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1107'. [ 341.111904][T10353] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1107'. [ 341.116151][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1113'. [ 341.198983][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1107'. [ 341.323800][T10362] netlink: 'syz.3.1117': attribute type 39 has an invalid length. [ 341.796418][T10361] lo speed is unknown, defaulting to 1000 [ 342.215399][T10380] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1121'. [ 342.250661][T10380] netlink: 'syz.3.1121': attribute type 5 has an invalid length. [ 344.652934][T10406] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 344.669424][T10406] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 344.704811][T10406] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 346.134368][T10457] __nla_validate_parse: 2 callbacks suppressed [ 346.154454][T10457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1138'. [ 346.486145][T10474] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 346.537636][T10465] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1140'. [ 346.822043][T10483] nftables ruleset with unbound set [ 347.176503][T10498] FAULT_INJECTION: forcing a failure. [ 347.176503][T10498] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 347.238101][T10498] CPU: 0 UID: 0 PID: 10498 Comm: syz.1.1152 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 347.238130][T10498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.238140][T10498] Call Trace: [ 347.238148][T10498] [ 347.238157][T10498] dump_stack_lvl+0x189/0x250 [ 347.238186][T10498] ? __pfx____ratelimit+0x10/0x10 [ 347.238213][T10498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.238236][T10498] ? __pfx__printk+0x10/0x10 [ 347.238271][T10498] ? __might_fault+0xb0/0x130 [ 347.238313][T10498] should_fail_ex+0x414/0x560 [ 347.238345][T10498] _copy_from_user+0x2d/0xb0 [ 347.238369][T10498] ___sys_sendmsg+0x158/0x2a0 [ 347.238394][T10498] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.238463][T10498] ? __fget_files+0x2a/0x420 [ 347.238479][T10498] ? __fget_files+0x3a0/0x420 [ 347.238511][T10498] __x64_sys_sendmsg+0x19b/0x260 [ 347.238535][T10498] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.238568][T10498] ? __pfx_ksys_write+0x10/0x10 [ 347.238590][T10498] ? rcu_is_watching+0x15/0xb0 [ 347.238616][T10498] ? do_syscall_64+0xbe/0x3b0 [ 347.238649][T10498] do_syscall_64+0xfa/0x3b0 [ 347.238672][T10498] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.238696][T10498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.238715][T10498] ? clear_bhb_loop+0x60/0xb0 [ 347.238739][T10498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.238757][T10498] RIP: 0033:0x7f78a1d8ebe9 [ 347.238775][T10498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.238790][T10498] RSP: 002b:00007f78a2c7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.238811][T10498] RAX: ffffffffffffffda RBX: 00007f78a1fb5fa0 RCX: 00007f78a1d8ebe9 [ 347.238824][T10498] RDX: 0000000000008000 RSI: 0000200000001600 RDI: 0000000000000003 [ 347.238835][T10498] RBP: 00007f78a2c7e090 R08: 0000000000000000 R09: 0000000000000000 [ 347.238847][T10498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.238857][T10498] R13: 00007f78a1fb6038 R14: 00007f78a1fb5fa0 R15: 00007ffda523d6c8 [ 347.238893][T10498] [ 348.392596][T10526] netlink: 'syz.2.1157': attribute type 1 has an invalid length. [ 348.435531][T10526] netlink: 'syz.2.1157': attribute type 2 has an invalid length. [ 348.598969][T10536] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1158'. [ 348.618484][T10533] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1158'. [ 348.632806][T10536] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1158'. [ 348.910075][T10544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1161'. [ 348.919774][T10544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1161'. [ 349.011619][T10551] FAULT_INJECTION: forcing a failure. [ 349.011619][T10551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.025280][T10551] CPU: 0 UID: 0 PID: 10551 Comm: syz.0.1164 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 349.025310][T10551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.025321][T10551] Call Trace: [ 349.025330][T10551] [ 349.025338][T10551] dump_stack_lvl+0x189/0x250 [ 349.025369][T10551] ? __pfx____ratelimit+0x10/0x10 [ 349.025397][T10551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.025421][T10551] ? __pfx__printk+0x10/0x10 [ 349.025464][T10551] should_fail_ex+0x414/0x560 [ 349.025497][T10551] _copy_from_user+0x2d/0xb0 [ 349.025521][T10551] __copy_msghdr+0x3c5/0x5b0 [ 349.025548][T10551] ___sys_sendmsg+0x1a5/0x2a0 [ 349.025572][T10551] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.025636][T10551] ? __fget_files+0x2a/0x420 [ 349.025654][T10551] ? __fget_files+0x3a0/0x420 [ 349.025685][T10551] __x64_sys_sendmsg+0x19b/0x260 [ 349.025709][T10551] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.025742][T10551] ? __pfx_ksys_write+0x10/0x10 [ 349.025765][T10551] ? rcu_is_watching+0x15/0xb0 [ 349.025792][T10551] ? do_syscall_64+0xbe/0x3b0 [ 349.025825][T10551] do_syscall_64+0xfa/0x3b0 [ 349.025850][T10551] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.025876][T10551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.025895][T10551] ? clear_bhb_loop+0x60/0xb0 [ 349.025921][T10551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.025940][T10551] RIP: 0033:0x7fe8f0b8ebe9 [ 349.025959][T10551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.025975][T10551] RSP: 002b:00007fe8f1977038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.026007][T10551] RAX: ffffffffffffffda RBX: 00007fe8f0db5fa0 RCX: 00007fe8f0b8ebe9 [ 349.026021][T10551] RDX: 0000000000008000 RSI: 0000200000001600 RDI: 0000000000000003 [ 349.026034][T10551] RBP: 00007fe8f1977090 R08: 0000000000000000 R09: 0000000000000000 [ 349.026045][T10551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.026057][T10551] R13: 00007fe8f0db6038 R14: 00007fe8f0db5fa0 R15: 00007ffffe1f7a98 [ 349.026092][T10551] [ 349.421618][T10555] netlink: 'syz.2.1162': attribute type 10 has an invalid length. [ 349.432241][T10555] veth0_vlan: left promiscuous mode [ 349.591764][T10555] veth0_vlan: entered promiscuous mode [ 349.735653][T10555] team0: Device veth0_vlan failed to register rx_handler [ 349.841578][T10557] lo speed is unknown, defaulting to 1000 [ 350.018544][T10579] raw_sendmsg: syz.2.1172 forgot to set AF_INET. Fix it! [ 350.225458][T10585] netlink: 'syz.1.1173': attribute type 12 has an invalid length. [ 350.233451][T10585] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1173'. [ 350.308296][T10589] FAULT_INJECTION: forcing a failure. [ 350.308296][T10589] name failslab, interval 1, probability 0, space 0, times 1 [ 350.331626][T10578] syz.1.1173 (10578) used obsolete PPPIOCDETACH ioctl [ 350.369301][T10589] CPU: 1 UID: 0 PID: 10589 Comm: syz.4.1175 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 350.369331][T10589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 350.369343][T10589] Call Trace: [ 350.369351][T10589] [ 350.369360][T10589] dump_stack_lvl+0x189/0x250 [ 350.369390][T10589] ? __pfx____ratelimit+0x10/0x10 [ 350.369418][T10589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.369442][T10589] ? __pfx__printk+0x10/0x10 [ 350.369473][T10589] ? __pfx___might_resched+0x10/0x10 [ 350.369492][T10589] ? fs_reclaim_acquire+0x7d/0x100 [ 350.369528][T10589] should_fail_ex+0x414/0x560 [ 350.369560][T10589] should_failslab+0xa8/0x100 [ 350.369592][T10589] __kmalloc_noprof+0xcb/0x4f0 [ 350.369617][T10589] ? sock_kmalloc+0xd6/0x160 [ 350.369644][T10589] sock_kmalloc+0xd6/0x160 [ 350.369669][T10589] ____sys_sendmsg+0x1b5/0x830 [ 350.369698][T10589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.369729][T10589] ? import_iovec+0x74/0xa0 [ 350.369757][T10589] ___sys_sendmsg+0x21f/0x2a0 [ 350.369780][T10589] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.369825][T10589] ? __fget_files+0x2a/0x420 [ 350.369859][T10589] ? __fget_files+0x2a/0x420 [ 350.369875][T10589] ? __fget_files+0x3a0/0x420 [ 350.369906][T10589] __x64_sys_sendmsg+0x19b/0x260 [ 350.369930][T10589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 350.369962][T10589] ? __pfx_ksys_write+0x10/0x10 [ 350.369985][T10589] ? rcu_is_watching+0x15/0xb0 [ 350.370013][T10589] ? do_syscall_64+0xbe/0x3b0 [ 350.370045][T10589] do_syscall_64+0xfa/0x3b0 [ 350.370071][T10589] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.370097][T10589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.370117][T10589] ? clear_bhb_loop+0x60/0xb0 [ 350.370142][T10589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.370161][T10589] RIP: 0033:0x7fdc7f78ebe9 [ 350.370179][T10589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.370196][T10589] RSP: 002b:00007fdc80613038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.370219][T10589] RAX: ffffffffffffffda RBX: 00007fdc7f9b5fa0 RCX: 00007fdc7f78ebe9 [ 350.370243][T10589] RDX: 0000000000008000 RSI: 0000200000001600 RDI: 0000000000000003 [ 350.370256][T10589] RBP: 00007fdc80613090 R08: 0000000000000000 R09: 0000000000000000 [ 350.370268][T10589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.370279][T10589] R13: 00007fdc7f9b6038 R14: 00007fdc7f9b5fa0 R15: 00007ffd25eb49a8 [ 350.370313][T10589] [ 350.655735][T10596] netlink: 'syz.2.1177': attribute type 10 has an invalid length. [ 350.720431][T10595] netlink: 'syz.2.1177': attribute type 3 has an invalid length. [ 351.177013][T10613] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1181'. [ 351.224262][T10613] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1181'. [ 351.689355][T10627] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1184'. [ 351.702204][T10627] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1184'. [ 351.885040][T10633] IPv6: NLM_F_REPLACE set, but no existing node found! [ 353.490132][T10653] FAULT_INJECTION: forcing a failure. [ 353.490132][T10653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.695184][T10653] CPU: 1 UID: 0 PID: 10653 Comm: syz.0.1190 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 353.695212][T10653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 353.695224][T10653] Call Trace: [ 353.695232][T10653] [ 353.695241][T10653] dump_stack_lvl+0x189/0x250 [ 353.695271][T10653] ? __pfx____ratelimit+0x10/0x10 [ 353.695298][T10653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.695321][T10653] ? __pfx__printk+0x10/0x10 [ 353.695349][T10653] ? __might_fault+0xb0/0x130 [ 353.695388][T10653] should_fail_ex+0x414/0x560 [ 353.695418][T10653] _copy_from_user+0x2d/0xb0 [ 353.695442][T10653] ____sys_sendmsg+0x2fe/0x830 [ 353.695469][T10653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.695499][T10653] ? import_iovec+0x74/0xa0 [ 353.695526][T10653] ___sys_sendmsg+0x21f/0x2a0 [ 353.695549][T10653] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.695610][T10653] ? __fget_files+0x2a/0x420 [ 353.695626][T10653] ? __fget_files+0x3a0/0x420 [ 353.695655][T10653] __x64_sys_sendmsg+0x19b/0x260 [ 353.695679][T10653] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.695709][T10653] ? __pfx_ksys_write+0x10/0x10 [ 353.695731][T10653] ? rcu_is_watching+0x15/0xb0 [ 353.695759][T10653] ? do_syscall_64+0xbe/0x3b0 [ 353.695790][T10653] do_syscall_64+0xfa/0x3b0 [ 353.695813][T10653] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.695839][T10653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.695857][T10653] ? clear_bhb_loop+0x60/0xb0 [ 353.695882][T10653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.695899][T10653] RIP: 0033:0x7fe8f0b8ebe9 [ 353.695917][T10653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.695931][T10653] RSP: 002b:00007fe8f1977038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.695961][T10653] RAX: ffffffffffffffda RBX: 00007fe8f0db5fa0 RCX: 00007fe8f0b8ebe9 [ 353.695974][T10653] RDX: 0000000000008000 RSI: 0000200000001600 RDI: 0000000000000003 [ 353.695987][T10653] RBP: 00007fe8f1977090 R08: 0000000000000000 R09: 0000000000000000 [ 353.695999][T10653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.696009][T10653] R13: 00007fe8f0db6038 R14: 00007fe8f0db5fa0 R15: 00007ffffe1f7a98 [ 353.696043][T10653] [ 354.395813][T10682] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 354.403085][T10682] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 355.975038][T10721] syzkaller0: entered promiscuous mode [ 355.980578][T10721] syzkaller0: entered allmulticast mode [ 356.170069][T10733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1214'. [ 356.206733][T10733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1214'. [ 356.233328][T10733] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1214'. [ 356.353782][T10734] delete_channel: no stack [ 356.365204][T10749] siw: device registration error -23 [ 357.362188][T10779] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1224'. [ 357.652003][T10782] netlink: 'syz.3.1227': attribute type 10 has an invalid length. [ 357.823379][T10786] netlink: del zone limit has 4 unknown bytes [ 357.855031][T10778] netlink: zone id is out of range [ 357.881118][T10778] netlink: zone id is out of range [ 357.887268][T10778] netlink: zone id is out of range [ 358.185674][T10778] netlink: set zone limit has 4 unknown bytes [ 358.495284][T10825] netlink: 'syz.2.1237': attribute type 39 has an invalid length. [ 359.303576][T10855] netlink: 'syz.2.1247': attribute type 3 has an invalid length. [ 359.311776][T10855] netlink: 'syz.2.1247': attribute type 1 has an invalid length. [ 359.332683][T10855] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1247'. [ 359.532545][T10868] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1249'. [ 359.583906][T10868] netlink: 'syz.1.1249': attribute type 10 has an invalid length. [ 359.623786][T10868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.690702][T10868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.796790][T10875] netlink: 'syz.0.1250': attribute type 1 has an invalid length. [ 359.804706][T10875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.877200][T10868] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 360.152853][T10892] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1255'. [ 360.312897][T10892] netlink: zone id is out of range [ 360.319539][T10892] netlink: zone id is out of range [ 360.369862][T10892] netlink: zone id is out of range [ 360.376433][T10892] netlink: zone id is out of range [ 360.386732][T10889] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 360.656829][T10906] netlink: 'syz.4.1257': attribute type 7 has an invalid length. [ 360.974190][T10916] netlink: 'syz.3.1258': attribute type 5 has an invalid length. [ 361.027778][T10913] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1259'. [ 361.075118][T10916] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1258'. [ 363.291958][T10964] netlink: 'syz.4.1270': attribute type 6 has an invalid length. [ 363.306802][T10963] netlink: 'syz.4.1270': attribute type 6 has an invalid length. [ 363.912363][T10993] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1277'. [ 363.935777][T10993] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1277'. [ 364.049688][T10997] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1277'. [ 364.317985][T11009] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1282'. [ 365.107103][T11031] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1288'. [ 365.131364][T11029] netlink: 'syz.4.1288': attribute type 10 has an invalid length. [ 365.450677][T11041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1292'. [ 365.510251][T11029] bond0: (slave bond_slave_0): Releasing backup interface [ 366.316979][T11056] netlink: 'syz.3.1297': attribute type 39 has an invalid length. [ 366.525692][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1295'. [ 366.923819][T11068] nft_compat: unsupported protocol 0 [ 366.971272][ T5880] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5 [ 367.696080][T11111] net_ratelimit: 83 callbacks suppressed [ 367.696102][T11111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.170172][T11100] syzkaller0: entered promiscuous mode [ 368.190863][T11100] syzkaller0: entered allmulticast mode [ 368.255495][T11100] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 368.734975][T11134] netlink: 2759 bytes leftover after parsing attributes in process `syz.1.1318'. [ 369.419819][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1321'. [ 375.814871][T11200] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1338'. [ 378.870782][T11238] tap0: tun_chr_ioctl cmd 1074025677 [ 378.889947][T11238] tap0: linktype set to 825 [ 379.121137][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.129505][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.108717][T11266] netlink: 456 bytes leftover after parsing attributes in process `syz.2.1353'. [ 380.871252][T11293] netlink: 'syz.1.1357': attribute type 5 has an invalid length. [ 381.841161][T11270] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1354'. [ 381.897310][T11295] netlink: 'syz.1.1357': attribute type 3 has an invalid length. [ 381.922342][T11295] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1357'. [ 382.064016][T11311] netlink: 'syz.1.1360': attribute type 7 has an invalid length. [ 382.072266][T11311] netlink: 'syz.1.1360': attribute type 8 has an invalid length. [ 382.744883][T11338] netlink: 'syz.4.1368': attribute type 2 has an invalid length. [ 382.816833][T11338] : entered promiscuous mode [ 383.902549][T11354] À: port 1(vlan0) entered blocking state [ 383.973790][T11354] À: port 1(vlan0) entered disabled state [ 384.028283][T11362] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1374'. [ 384.124195][T11354] vlan0: entered allmulticast mode [ 384.139234][T11363] netlink: 'syz.3.1374': attribute type 10 has an invalid length. [ 384.173346][T11354] veth0_vlan: entered allmulticast mode [ 384.229531][T11354] vlan0: entered promiscuous mode [ 384.295115][T11355] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1372'. [ 384.310230][T11363] batman_adv: batadv0: Removing interface: team0 [ 384.673982][T11363] team0: Cannot enslave team device to itself [ 384.908503][T11372] sit0: entered allmulticast mode [ 385.113432][T11374] sit0: entered promiscuous mode [ 385.633466][T11383] netlink: 'syz.1.1381': attribute type 21 has an invalid length. [ 385.666993][T11383] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1381'. [ 385.915049][T11392] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1384'. [ 385.962967][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'. [ 385.999302][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1385'. [ 386.111076][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1385'. [ 386.273981][T11390] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1382'. [ 386.977608][T11421] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1391'. [ 387.043449][T11424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1390'. [ 387.052910][T11424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.068657][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1390'. [ 387.123682][T11424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1390'. [ 387.270646][T11427] netlink: 'syz.4.1389': attribute type 2 has an invalid length. [ 387.362853][T11435] netlink: 'syz.3.1394': attribute type 29 has an invalid length. [ 387.380481][T11435] netlink: 'syz.3.1394': attribute type 29 has an invalid length. [ 388.041958][T11449] netlink: 'syz.2.1397': attribute type 21 has an invalid length. [ 388.073539][T11449] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1397'. [ 389.615343][T11496] netlink: 'syz.0.1412': attribute type 10 has an invalid length. [ 389.673841][T11500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1414'. [ 389.741252][T11496] syz_tun: entered promiscuous mode [ 389.831447][T11496] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 391.400245][T11539] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1422'. [ 392.443389][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1427'. [ 393.748628][T11598] netlink: 'syz.1.1440': attribute type 39 has an invalid length. [ 393.845429][T11602] netlink: 'syz.1.1440': attribute type 39 has an invalid length. [ 394.297932][T11600] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.1437'. [ 394.343063][T11600] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.1437'. [ 394.627964][T11600] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.1437'. [ 399.756510][T11646] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1450'. [ 400.691420][T11643] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.1450'. [ 408.906705][T11658] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1454'. [ 409.445087][T11658] netlink: zone id is out of range [ 409.451655][T11658] netlink: zone id is out of range [ 409.637054][T11658] netlink: zone id is out of range [ 409.642242][T11658] netlink: zone id is out of range [ 409.766041][T11658] netlink: zone id is out of range [ 409.771242][T11658] netlink: zone id is out of range [ 409.846072][T11664] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1456'. [ 409.858784][T11658] netlink: zone id is out of range [ 409.904578][T11658] netlink: zone id is out of range [ 409.919267][T11658] netlink: zone id is out of range [ 409.984017][T11658] netlink: zone id is out of range [ 410.145351][T11668] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1457'. [ 412.037972][ T5869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 412.046908][ T5869] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 412.055064][ T5869] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 412.064583][ T5869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 412.073899][ T5869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 413.078444][T11671] chnl_net:caif_netlink_parms(): no params data found [ 413.250414][ T5880] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 413.278803][ T5880] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 413.295383][ T5880] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 413.305976][ T5880] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 413.316534][ T5880] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 413.548068][T11689] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1462'. [ 413.558376][T11690] netlink: 'syz.4.1461': attribute type 21 has an invalid length. [ 413.574731][T11690] netlink: 'syz.4.1461': attribute type 15 has an invalid length. [ 413.592916][T11690] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1461'. [ 413.611811][T11691] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1462'. [ 413.621130][T11690] IPv6: NLM_F_CREATE should be specified when creating new route [ 413.649100][T11690] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 413.656458][T11690] IPv6: NLM_F_CREATE should be set when creating new route [ 413.664731][T11690] IPv6: NLM_F_CREATE should be set when creating new route [ 413.672003][T11690] IPv6: NLM_F_CREATE should be set when creating new route [ 413.693383][T11689] netlink: 'syz.1.1462': attribute type 21 has an invalid length. [ 413.698083][T11671] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.763428][T11671] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.809666][T11671] bridge_slave_0: entered allmulticast mode [ 413.838630][T11671] bridge_slave_0: entered promiscuous mode [ 414.085384][T11556] bond0: (slave syz_tun): Releasing backup interface [ 414.116058][ T5869] Bluetooth: hci5: command tx timeout [ 414.352919][ T5869] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 414.383611][T11671] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.403451][T11671] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.413645][T11671] bridge_slave_1: entered allmulticast mode [ 414.432319][T11671] bridge_slave_1: entered promiscuous mode [ 415.615152][ T5869] Bluetooth: hci6: command tx timeout [ 416.189982][T11679] chnl_net:caif_netlink_parms(): no params data found [ 416.199081][ T5869] Bluetooth: hci5: command tx timeout [ 416.927128][T11671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.959307][T11671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.033534][T11728] C: renamed from team_slave_0 [ 417.041658][T11728] netlink: 'syz.1.1470': attribute type 1 has an invalid length. [ 417.055877][T11728] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1470'. [ 417.065643][T11728] net_ratelimit: 75 callbacks suppressed [ 417.065659][T11728] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 417.229165][T11671] team0: Port device team_slave_0 added [ 417.259714][T11671] team0: Port device team_slave_1 added [ 417.274058][T11740] netlink: 'syz.1.1473': attribute type 2 has an invalid length. [ 417.645022][ T5869] Bluetooth: hci6: command tx timeout [ 417.702242][T11679] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.715798][T11679] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.739644][T11679] bridge_slave_0: entered allmulticast mode [ 417.752609][T11679] bridge_slave_0: entered promiscuous mode [ 417.790708][T11671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.799092][T11671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.830950][T11671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.847042][T11679] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.855802][T11679] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.863056][T11679] bridge_slave_1: entered allmulticast mode [ 417.871961][T11679] bridge_slave_1: entered promiscuous mode [ 418.020274][T11761] netlink: 'syz.1.1479': attribute type 2 has an invalid length. [ 418.030513][T11761] netlink: 'syz.1.1479': attribute type 1 has an invalid length. [ 418.039224][T11761] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1479'. [ 418.275407][ T5869] Bluetooth: hci5: command tx timeout [ 418.685509][T11671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.692870][T11671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.764417][T11671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.012904][T11679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.097578][T11679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.442246][T11671] hsr_slave_0: entered promiscuous mode [ 419.471784][T11671] hsr_slave_1: entered promiscuous mode [ 419.485643][T11671] debugfs: 'hsr0' already exists in 'hsr' [ 419.501715][T11671] Cannot create hsr debugfs directory [ 419.692744][T11787] netlink: 'syz.4.1485': attribute type 3 has an invalid length. [ 419.703702][T11787] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1485'. [ 419.713721][T11787] netlink: 'syz.4.1485': attribute type 3 has an invalid length. [ 419.722300][T11787] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1485'. [ 419.724574][ T5869] Bluetooth: hci6: command tx timeout [ 419.744036][T11679] team0: Port device team_slave_0 added [ 419.979218][T11790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.364778][ T5869] Bluetooth: hci5: command tx timeout [ 420.539928][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.634805][T11679] team0: Port device team_slave_1 added [ 420.726323][T11793] netlink: 'syz.1.1486': attribute type 4 has an invalid length. [ 421.170666][ T13] wlan1: Trigger new scan to find an IBSS to join [ 421.610898][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.759999][T11799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1488'. [ 421.800458][ T5869] Bluetooth: hci6: command tx timeout [ 421.844292][T11679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.854484][T11679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.891655][T11679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.171230][T11679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.182160][T11679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.210287][T11679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.251555][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.340822][ T49] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.772934][T11812] netlink: 'syz.4.1492': attribute type 10 has an invalid length. [ 422.810863][T11679] hsr_slave_0: entered promiscuous mode [ 422.823836][T11679] hsr_slave_1: entered promiscuous mode [ 422.834227][T11679] debugfs: 'hsr0' already exists in 'hsr' [ 422.848106][T11679] Cannot create hsr debugfs directory [ 423.234254][T11815] netlink: 'syz.4.1493': attribute type 10 has an invalid length. [ 423.257611][T11815] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1493'. [ 423.351101][T11820] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1495'. [ 423.458668][T11824] netlink: 14199 bytes leftover after parsing attributes in process `syz.2.1496'. [ 424.200308][ T12] wlan1: Trigger new scan to find an IBSS to join [ 424.922032][T11671] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 424.967296][T11671] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 425.102294][ T49] bridge_slave_1: left allmulticast mode [ 425.108741][ T49] bridge_slave_1: left promiscuous mode [ 425.118136][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.129471][ T3503] wlan1: Creating new IBSS network, BSSID ea:cb:04:da:6d:0f [ 426.745618][T11671] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 426.909996][ T49] : left promiscuous mode [ 426.942923][T11671] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 427.218618][T11851] netlink: 'syz.2.1501': attribute type 3 has an invalid length. [ 427.254608][T11851] netlink: 'syz.2.1501': attribute type 1 has an invalid length. [ 427.262416][T11851] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1501'. [ 427.690042][T11679] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 427.883682][T11679] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 427.923237][T11679] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 427.956956][T11679] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 428.209761][T11671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.237080][ T49] hsr_slave_0: left promiscuous mode [ 428.246133][ T49] hsr_slave_1: left promiscuous mode [ 428.259229][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.272525][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.316525][ T49] veth0_macvtap: left promiscuous mode [ 428.322696][ T49] veth1_vlan: left promiscuous mode [ 428.329007][ T49] veth0_vlan: left promiscuous mode [ 429.149933][T11904] netlink: 'syz.4.1511': attribute type 10 has an invalid length. [ 429.247033][T11903] netlink: 'syz.2.1510': attribute type 27 has an invalid length. [ 429.260298][T11903] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1510'. [ 429.793778][ T49] team0 (unregistering): Port device team_slave_1 removed [ 429.852566][ T49] team0 (unregistering): Port device team_slave_0 removed [ 430.627865][T11671] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.680565][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.687801][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.732587][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.739817][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.420980][T11679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.490984][T11679] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.567219][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.574469][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.671633][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.678866][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.722294][T11943] netlink: 809 bytes leftover after parsing attributes in process `syz.4.1522'. [ 431.764202][T11943] netlink: 130160 bytes leftover after parsing attributes in process `syz.4.1522'. [ 431.874906][T11945] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1520'. [ 432.185443][T11950] netlink: 'syz.1.1521': attribute type 3 has an invalid length. [ 432.231091][T11950] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1521'. [ 432.716223][T11671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.575479][T11679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.719307][T11977] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 433.839434][T11978] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1527'. [ 434.277854][T11671] veth0_vlan: entered promiscuous mode [ 434.317684][T11671] veth1_vlan: entered promiscuous mode [ 434.467867][T11671] veth0_macvtap: entered promiscuous mode [ 434.518057][T11671] veth1_macvtap: entered promiscuous mode [ 434.631648][T11671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.693765][T11671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.879447][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.897466][ T55] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.922485][ T55] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.941927][ T55] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.192389][T12012] netlink: 'syz.2.1533': attribute type 1 has an invalid length. [ 435.215214][T11679] veth0_vlan: entered promiscuous mode [ 435.228733][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.262034][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.319209][T11679] veth1_vlan: entered promiscuous mode [ 435.336043][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.343892][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.440211][T11679] veth0_macvtap: entered promiscuous mode [ 435.489177][T11679] veth1_macvtap: entered promiscuous mode [ 435.588163][T11679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.656598][T11679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.720219][ T3503] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.752420][ T3503] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.846445][ T3503] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.884521][ T3503] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.140966][ T3173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.175986][ T3173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.348839][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.372008][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.802560][T12054] netlink: 'syz.4.1541': attribute type 10 has an invalid length. [ 436.846271][T12054] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 437.320069][T12074] netlink: 'syz.6.1545': attribute type 28 has an invalid length. [ 437.410232][T12080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.429953][T12079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1546'. [ 437.449904][T12079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1546'. [ 438.181502][T12082] syzkaller0: entered promiscuous mode [ 438.187576][T12082] syzkaller0: entered allmulticast mode [ 440.379201][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.396599][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.850287][T12009] Set syz1 is full, maxelem 65536 reached [ 443.196919][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'. [ 448.093074][T12174] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1568'. [ 448.275429][T12176] netlink: 'syz.6.1569': attribute type 10 has an invalid length. [ 449.378162][T12201] netlink: 'syz.2.1574': attribute type 3 has an invalid length. [ 449.404777][T12211] netlink: 'syz.6.1577': attribute type 10 has an invalid length. [ 449.423216][T12201] netlink: 'syz.2.1574': attribute type 1 has an invalid length. [ 449.446136][T12211] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1577'. [ 449.446405][T12211] ipvlan1: entered promiscuous mode [ 449.446426][T12211] ipvlan1: entered allmulticast mode [ 449.446440][T12211] veth0_vlan: entered allmulticast mode [ 449.449364][T12211] bridge0: port 3(ipvlan1) entered blocking state [ 449.449497][T12211] bridge0: port 3(ipvlan1) entered disabled state [ 449.452628][T12211] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 449.529438][T12217] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1576'. [ 449.564981][T12201] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1574'. [ 449.582698][T12211] netlink: 'syz.6.1577': attribute type 10 has an invalid length. [ 449.591711][T12211] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1577'. [ 449.604695][T12211] bridge0: port 3(ipvlan1) entered blocking state [ 449.612447][T12211] bridge0: port 3(ipvlan1) entered disabled state [ 449.655123][T12211] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 449.678168][T12221] netdevsim0: mtu greater than device maximum [ 449.897276][T12231] netlink: 'syz.2.1583': attribute type 29 has an invalid length. [ 449.921700][T12231] netlink: 'syz.2.1583': attribute type 29 has an invalid length. [ 449.969914][T12231] netlink: 'syz.2.1583': attribute type 29 has an invalid length. [ 449.991518][T12231] netlink: 'syz.2.1583': attribute type 29 has an invalid length. [ 450.283546][T12255] netlink: 'syz.4.1590': attribute type 1 has an invalid length. [ 450.514795][T12264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.211336][T12278] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1596'. [ 451.748979][T12299] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.1602'. [ 452.032017][T12300] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.1602'. [ 453.470782][T12350] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1616'. [ 453.803337][T12351] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1616'. [ 453.921860][T12350] GPL: mtu less than device minimum [ 454.001495][T12352] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1616'. [ 454.609318][T12381] validate_nla: 1 callbacks suppressed [ 454.609339][T12381] netlink: 'syz.5.1618': attribute type 13 has an invalid length. [ 454.660638][T12381] __nla_validate_parse: 2 callbacks suppressed [ 454.660659][T12381] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1618'. [ 456.577901][T12381] erspan0: refused to change device tx_queue_len [ 456.584306][T12381] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 456.818978][T12396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1626'. [ 456.847604][T12393] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.1627'. [ 457.028547][T12394] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.1627'. [ 457.069874][T12408] netlink: 'syz.5.1630': attribute type 11 has an invalid length. [ 457.081715][T12408] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1630'. [ 460.044226][T12445] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1640'. [ 460.145390][T12446] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1641'. [ 460.323400][T12446] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1641'. [ 460.378020][T12440] netlink: 'syz.5.1638': attribute type 4 has an invalid length. [ 460.842310][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1644'. [ 462.095472][T12478] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode [ 462.103567][T12478] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 463.129090][T12504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1654'. [ 463.513211][T12507] can: request_module (can-proto-0) failed. [ 464.833139][T12540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1662'. [ 464.842912][T12540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1662'. [ 465.453671][T12556] netlink: 'syz.5.1664': attribute type 1 has an invalid length. [ 465.547819][T12557] sock: sock_timestamping_bind_phc: sock not bind to device [ 465.855534][T12570] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1666'. [ 465.905839][T12570] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 466.556295][T12588] lo: entered allmulticast mode [ 466.585347][T12584] netlink: 'syz.5.1670': attribute type 4 has an invalid length. [ 466.591449][T12588] lo: entered promiscuous mode [ 466.594598][T12584] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1670'. [ 466.622796][T12588] lo: left allmulticast mode [ 466.668938][T12584] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 466.859537][T12597] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1675'. [ 466.911276][T12601] netlink: 'syz.5.1676': attribute type 1 has an invalid length. [ 467.595851][T12611] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1681'. [ 467.642162][T12608] netlink: 'syz.2.1679': attribute type 10 has an invalid length. [ 467.776381][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1680'. [ 467.812381][T12608] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 467.884314][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1680'. [ 467.915175][T12615] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1680'. [ 469.206453][T12637] netlink: 40107 bytes leftover after parsing attributes in process `syz.5.1687'. [ 469.283070][T12642] netlink: 'syz.2.1689': attribute type 23 has an invalid length. [ 469.302729][T12642] netlink: 'syz.2.1689': attribute type 6 has an invalid length. [ 469.375587][T12642] netlink: 'syz.2.1689': attribute type 13 has an invalid length. [ 469.384186][T12642] netlink: 'syz.2.1689': attribute type 17 has an invalid length. [ 469.392951][T12642] lo: left promiscuous mode [ 470.143713][T12642] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 470.156430][T12642] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 470.309955][T12564] À: port 1(vlan0) entered blocking state [ 470.315890][T12564] À: port 1(vlan0) entered forwarding state [ 470.414009][T12677] netlink: 'syz.6.1695': attribute type 23 has an invalid length. [ 470.536935][T12679] openvswitch: netlink: Message has 24 unknown bytes. [ 470.562189][T12679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.839236][T12691] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1701'. [ 470.943277][T12693] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 470.950165][T12693] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 471.388849][T12711] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1707'. [ 473.433015][T12728] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1710'. [ 473.736965][T12741] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 474.257670][ T49] wlan1: Trigger new scan to find an IBSS to join [ 474.466649][T12736] delete_channel: no stack [ 477.482861][T12783] openvswitch: netlink: Actions may not be safe on all matching packets [ 479.246501][T12565] wlan1: Trigger new scan to find an IBSS to join [ 480.339623][T12848] C: renamed from team_slave_0 (while UP) [ 480.430525][ T3173] wlan1: Creating new IBSS network, BSSID 8a:a3:b0:7b:c7:4a [ 480.450689][T12848] netlink: 'syz.5.1743': attribute type 1 has an invalid length. [ 480.552102][T12848] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1743'. [ 480.593581][T12848] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 480.736053][T12848] netlink: 'syz.5.1743': attribute type 31 has an invalid length. [ 480.999609][T12859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1745'. [ 481.017359][T12863] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1746'. [ 481.193978][T12873] netlink: 'syz.5.1747': attribute type 39 has an invalid length. [ 481.203084][T12872] netlink: 'syz.5.1747': attribute type 39 has an invalid length. [ 481.588503][T12887] netlink: 'syz.2.1752': attribute type 2 has an invalid length. [ 481.611192][T12887] netlink: 85376 bytes leftover after parsing attributes in process `syz.2.1752'. [ 481.756285][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.385584][T12913] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1754'. [ 482.538633][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.998361][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.204679][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.317827][T12925] delete_channel: no stack [ 483.324729][T12934] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1762'. [ 483.348522][T12943] netlink: 'syz.2.1765': attribute type 29 has an invalid length. [ 483.369760][T12934] netlink: 'syz.4.1762': attribute type 1 has an invalid length. [ 483.371322][T12943] netlink: 'syz.2.1765': attribute type 29 has an invalid length. [ 483.379056][T12934] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1762'. [ 483.409785][T12943] netlink: 'syz.2.1765': attribute type 27 has an invalid length. [ 483.644622][T12948] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1765'. [ 483.681247][T12950] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1765'. [ 483.693387][T12948] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1765'. [ 483.717919][T12954] netlink: 'syz.4.1768': attribute type 1 has an invalid length. [ 485.544577][T12998] netlink: 'syz.1.1771': attribute type 27 has an invalid length. [ 485.621880][T12999] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1777'. [ 486.671692][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.683180][ T36] bond_slave_0: left promiscuous mode [ 486.693797][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.703794][ T36] bond_slave_1: left promiscuous mode [ 486.712887][ T36] bond0 (unregistering): (slave team0): Releasing backup interface [ 486.721612][ T36] team0: left promiscuous mode [ 486.727200][ T36] C: left promiscuous mode [ 486.732037][ T36] team_slave_1: left promiscuous mode [ 486.742792][ T36] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 486.753436][ T36] batadv_slave_0: left promiscuous mode [ 486.763298][ T36] bond0 (unregistering): Released all slaves [ 486.829118][T13021] sit0: entered allmulticast mode [ 486.914022][ T36] : left promiscuous mode [ 487.773570][T13042] sit0: entered allmulticast mode [ 488.140585][ T5880] Bluetooth: hci0: ISO packet for unknown connection handle 3084 [ 492.939674][ T36] hsr_slave_0: left promiscuous mode [ 492.963620][ T36] hsr_slave_1: left promiscuous mode [ 492.971847][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.996991][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.037378][ T36] veth1_macvtap: left promiscuous mode [ 493.253100][T13091] netlink: 'syz.4.1801': attribute type 21 has an invalid length. [ 493.708391][ T36] team0 (unregistering): Port device team_slave_1 removed [ 493.780279][T13094] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1804'. [ 493.792550][ T36] team0 (unregistering): Port device C removed [ 494.210611][T13091] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1801'. [ 494.229376][T13091] netlink: 'syz.4.1801': attribute type 1 has an invalid length. [ 494.312489][T13099] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1805'. [ 494.553286][T13103] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1806'. [ 495.418267][T13130] netlink: 'syz.6.1811': attribute type 10 has an invalid length. [ 495.480716][T13130] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.517972][T13130] bond0: (slave team0): Enslaving as an active interface with an up link [ 495.551428][T13130] netdevsim netdevsim6 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 496.024155][T13149] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1817'. [ 496.032792][T13141] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1814'. [ 496.208467][T13141] delete_channel: no stack [ 496.934969][T13174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1825'. [ 497.020636][T13182] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1824'. [ 497.077118][T13174] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1825'. [ 497.097653][T13181] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1824'. [ 497.689492][T13193] netlink: 'syz.6.1829': attribute type 16 has an invalid length. [ 497.729287][T13197] netlink: 'syz.1.1830': attribute type 13 has an invalid length. [ 497.797929][T13197] netlink: 'syz.1.1830': attribute type 17 has an invalid length. [ 497.896091][T13197] gretap0: refused to change device tx_queue_len [ 497.902959][T13197] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 498.074718][T13209] netlink: 'syz.4.1832': attribute type 10 has an invalid length. [ 500.057380][T13274] __nla_validate_parse: 6 callbacks suppressed [ 500.057446][T13274] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1847'. [ 500.790582][T13302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1852'. [ 500.803867][T13302] netlink: 130076 bytes leftover after parsing attributes in process `syz.4.1852'. [ 500.818992][T13302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1852'. [ 500.844712][T13299] netlink: 'syz.5.1853': attribute type 3 has an invalid length. [ 500.863447][T13299] netlink: 'syz.5.1853': attribute type 1 has an invalid length. [ 500.877530][T13299] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.1853'. [ 501.762140][T13344] netlink: 'syz.6.1865': attribute type 11 has an invalid length. [ 501.773666][T13344] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1865'. [ 501.800740][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.808410][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.972460][T13343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.396278][T13350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1867'. [ 502.516582][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1869'. [ 503.558656][T13375] netlink: 'syz.5.1876': attribute type 13 has an invalid length. [ 503.578148][T13375] netlink: 14581 bytes leftover after parsing attributes in process `syz.5.1876'. [ 503.661107][T13384] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1876'. [ 504.830311][T13394] GPL: port 1(gretap0) entered blocking state [ 504.843808][T13394] GPL: port 1(gretap0) entered disabled state [ 504.910738][T13394] gretap0: entered allmulticast mode [ 504.944545][T13394] gretap0: entered promiscuous mode [ 507.890914][T13462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1896'. [ 507.946215][T13465] netlink: 'syz.1.1896': attribute type 9 has an invalid length. [ 507.965339][T13465] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.1896'. [ 508.148225][T13469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1897'. [ 508.426688][T13482] netlink: 'syz.1.1898': attribute type 2 has an invalid length. [ 508.479153][T13482] netlink: 'syz.1.1898': attribute type 5 has an invalid length. [ 508.511088][T13482] netlink: 'syz.1.1898': attribute type 6 has an invalid length. [ 508.531230][T13482] netlink: 'syz.1.1898': attribute type 7 has an invalid length. [ 508.548436][T13482] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1898'. [ 508.557973][T13482] netlink: 130080 bytes leftover after parsing attributes in process `syz.1.1898'. [ 508.568955][T13482] netlink: 'syz.1.1898': attribute type 2 has an invalid length. [ 508.582341][T13482] netlink: 'syz.1.1898': attribute type 5 has an invalid length. [ 508.590350][T13482] netlink: 'syz.1.1898': attribute type 6 has an invalid length. [ 508.598720][T13482] netlink: 'syz.1.1898': attribute type 7 has an invalid length. [ 508.635231][T13482] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1898'. [ 508.677404][T13487] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1902'. [ 508.917312][T13505] netlink: 636 bytes leftover after parsing attributes in process `syz.1.1906'. [ 510.659337][T13549] netlink: 'syz.5.1910': attribute type 4 has an invalid length. [ 510.669283][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 511.110684][T13535] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1913'. [ 514.879699][T13550] team0: Port device dummy0 added [ 516.225091][T13603] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1923'. [ 517.199617][T13612] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1927'. [ 518.353968][T13633] openvswitch: netlink: Flow actions attr not present in new flow. [ 520.817181][T13638] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1933'. [ 521.028104][T13645] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1934'. [ 521.590624][T13657] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1938'. [ 522.452148][T13678] netlink: zone id is out of range [ 522.461994][T13678] netlink: zone id is out of range [ 522.482774][T13678] netlink: zone id is out of range [ 522.496456][T13678] netlink: zone id is out of range [ 522.501177][T13674] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1941'. [ 522.510392][T13678] netlink: zone id is out of range [ 522.518700][T13685] netlink: del zone limit has 4 unknown bytes [ 522.526352][T13678] netlink: zone id is out of range [ 522.532692][T13678] netlink: zone id is out of range [ 522.539266][T13685] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1944'. [ 522.557551][T13688] netlink: 17279 bytes leftover after parsing attributes in process `syz.6.1945'. [ 522.680190][T13682] validate_nla: 1 callbacks suppressed [ 522.680210][T13682] netlink: 'syz.2.1943': attribute type 9 has an invalid length. [ 522.694023][T13682] netlink: 146452 bytes leftover after parsing attributes in process `syz.2.1943'. [ 522.709231][T13678] netlink: set zone limit has 4 unknown bytes [ 522.764854][T13678] syzkaller0: refused to change device tx_queue_len [ 523.174601][T13718] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1954'. [ 523.467563][T13730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.724006][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1955'. [ 524.211543][T13751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1962'. [ 524.580556][T13758] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1964'. [ 524.718761][T13764] netlink: 'syz.6.1965': attribute type 1 has an invalid length. [ 524.756583][T13764] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.1965'. [ 525.260058][T13801] veth1_macvtap: left promiscuous mode [ 525.328120][T13801] macsec0: entered allmulticast mode [ 526.159350][T13805] veth1_macvtap: entered promiscuous mode [ 526.264556][T13805] veth1_macvtap: entered allmulticast mode [ 526.371664][T13805] macsec0: entered promiscuous mode [ 527.662339][T13860] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 529.226833][T13885] __nla_validate_parse: 2 callbacks suppressed [ 529.226856][T13885] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.1995'. [ 529.956987][T13893] netlink: 64519 bytes leftover after parsing attributes in process `syz.5.1996'. [ 530.572432][T13906] netlink: 'syz.1.2000': attribute type 33 has an invalid length. [ 530.692759][T13906] netlink: 'syz.1.2000': attribute type 3 has an invalid length. [ 530.788369][T13906] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.2000'. [ 530.932654][T13846] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 531.778995][T13940] netlink: 'syz.6.2009': attribute type 21 has an invalid length. [ 532.143740][T13945] sit0: left allmulticast mode [ 532.394853][T13953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.023419][T13970] netlink: 'syz.6.2017': attribute type 29 has an invalid length. [ 533.065514][T13970] netlink: 'syz.6.2017': attribute type 29 has an invalid length. [ 533.119845][T13970] netlink: 'syz.6.2017': attribute type 29 has an invalid length. [ 533.224925][T13984] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2021'. [ 533.479089][T13992] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2022'. [ 533.586174][T13992] netlink: 'syz.5.2022': attribute type 29 has an invalid length. [ 533.649552][T13998] netlink: 'syz.5.2022': attribute type 29 has an invalid length. [ 533.698805][T13992] netlink: 'syz.5.2022': attribute type 29 has an invalid length. [ 534.423529][T14005] netlink: 'syz.6.2026': attribute type 1 has an invalid length. [ 534.475406][T14005] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2026'. [ 534.597721][T13959] Bluetooth: hci5: command 0x0406 tx timeout [ 534.793214][T14014] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2027'. [ 534.847681][T14015] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2027'. [ 535.144486][T14014] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2027'. [ 535.540596][T14023] netlink: 146452 bytes leftover after parsing attributes in process `syz.2.2029'. [ 538.231596][T14029] validate_nla: 1 callbacks suppressed [ 538.231665][T14029] netlink: 'syz.6.2031': attribute type 2 has an invalid length. [ 538.284948][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2032'. [ 538.305241][T14029] netlink: 137592 bytes leftover after parsing attributes in process `syz.6.2031'. [ 538.390043][T14030] netlink: 'syz.4.2030': attribute type 9 has an invalid length. [ 538.424633][T14030] netlink: 146452 bytes leftover after parsing attributes in process `syz.4.2030'. [ 538.564148][T14044] netlink: 'syz.2.2035': attribute type 10 has an invalid length. [ 538.635642][T14044] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2035'. [ 538.688352][T14043] netlink: 'syz.2.2035': attribute type 14 has an invalid length. [ 538.725068][T14044] bond0: entered promiscuous mode [ 538.753884][T14044] !€ÿ: entered promiscuous mode [ 538.787651][T14057] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2039'. [ 538.798577][T14044] bond_slave_1: entered promiscuous mode [ 538.818863][T14044] dummy0: entered promiscuous mode [ 539.433649][T14044] team0: Port device bond0 removed [ 539.439817][T14044] bridge0: port 3(bond0) entered blocking state [ 539.446515][T14044] bridge0: port 3(bond0) entered disabled state [ 539.453053][T14044] bond0: entered allmulticast mode [ 539.458329][T14044] !€ÿ: entered allmulticast mode [ 539.463463][T14044] bond_slave_1: entered allmulticast mode [ 539.469423][T14044] dummy0: entered allmulticast mode [ 539.883535][T14076] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2045'. [ 539.956065][T13959] Bluetooth: hci6: command 0x0406 tx timeout [ 539.963910][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2044'. [ 540.010919][T14083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2044'. [ 540.028091][T14076] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2045'. [ 540.211725][T14081] netlink: 'syz.1.2046': attribute type 39 has an invalid length. [ 540.411231][T14078] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2044'. [ 540.493063][T14078] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2044'. [ 542.009812][T14110] netlink: 'syz.5.2052': attribute type 2 has an invalid length. [ 542.022677][T14110] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2052'. [ 542.033948][T14110] nbd: must specify a device to reconfigure [ 542.893950][T14149] netlink: 'syz.1.2065': attribute type 21 has an invalid length. [ 542.935059][T14149] netlink: 'syz.1.2065': attribute type 15 has an invalid length. [ 542.942934][T14149] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2065'. [ 543.008116][T14149] IPv6: NLM_F_CREATE should be specified when creating new route [ 543.054676][T14149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 543.061996][T14149] IPv6: NLM_F_CREATE should be set when creating new route [ 543.069332][T14149] IPv6: NLM_F_CREATE should be set when creating new route [ 543.076612][T14149] IPv6: NLM_F_CREATE should be set when creating new route [ 543.530774][T14154] netlink: 'syz.5.2066': attribute type 10 has an invalid length. [ 543.593482][T14154] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2066'. [ 543.623721][T14154] batadv0: entered promiscuous mode [ 543.658008][T14154] batadv0: entered allmulticast mode [ 543.689843][T14154] bridge0: port 3(batadv0) entered blocking state [ 543.759132][T14154] bridge0: port 3(batadv0) entered disabled state [ 543.773019][T14161] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2068'. [ 543.805046][T14154] bridge0: port 3(batadv0) entered blocking state [ 543.812220][T14154] bridge0: port 3(batadv0) entered forwarding state [ 543.951782][ T3173] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 543.961876][ T3173] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 544.692514][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 544.915561][T14195] __nla_validate_parse: 3 callbacks suppressed [ 544.915583][T14195] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.2078'. [ 545.776835][T14224] netlink: 'syz.6.2085': attribute type 21 has an invalid length. [ 545.798806][T14224] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2085'. [ 545.832530][T14224] netlink: 'syz.6.2085': attribute type 6 has an invalid length. [ 546.710513][T14224] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2085'. [ 547.228390][T14251] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2091'. [ 547.347829][T14258] : entered promiscuous mode [ 548.329658][T14271] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2096'. [ 548.992490][T14286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 550.924277][T14317] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2106'. [ 551.211737][T14332] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2109'. [ 551.278315][ T49] wlan1: Trigger new scan to find an IBSS to join [ 551.292973][T14334] netlink: 56429 bytes leftover after parsing attributes in process `syz.1.2110'. [ 551.372597][T14337] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2108'. [ 551.403540][T14334] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2110'. [ 551.463839][T14337] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2108'. [ 551.547036][T14339] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2107'. [ 551.610624][T14335] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2107'. [ 551.770970][T14344] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.2112'. [ 552.619896][T14369] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2119'. [ 553.181278][T14383] netlink: 'syz.6.2124': attribute type 1 has an invalid length. [ 553.406701][T14394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 553.414035][T14394] IPv6: NLM_F_CREATE should be set when creating new route [ 553.421387][T14394] IPv6: NLM_F_CREATE should be set when creating new route [ 553.428652][T14394] IPv6: NLM_F_CREATE should be set when creating new route [ 554.057884][T14405] netlink: 'syz.1.2129': attribute type 39 has an invalid length. [ 555.168870][T12565] wlan1: Trigger new scan to find an IBSS to join [ 555.272108][T14420] syzkaller0: refused to change device tx_queue_len [ 555.681624][T14430] tun0: tun_chr_ioctl cmd 2147767507 [ 556.711260][ T12] wlan1: Creating new IBSS network, BSSID be:59:74:36:a9:88 [ 557.511371][T14458] __nla_validate_parse: 8 callbacks suppressed [ 557.511395][T14458] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2139'. [ 558.573481][T14468] netlink: 'syz.2.2144': attribute type 6 has an invalid length. [ 558.592185][T14457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2141'. [ 558.604119][T14468] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2144'. [ 558.709558][T14467] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2141'. [ 559.026172][T14482] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2148'. [ 559.154037][T14485] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2150'. [ 559.354109][T14500] netlink: 'syz.6.2155': attribute type 10 has an invalid length. [ 559.453681][T14500] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 559.739113][T14515] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2158'. [ 559.831288][T14520] FAULT_INJECTION: forcing a failure. [ 559.831288][T14520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.844486][T14520] CPU: 1 UID: 0 PID: 14520 Comm: syz.1.2160 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 559.844515][T14520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 559.844527][T14520] Call Trace: [ 559.844535][T14520] [ 559.844544][T14520] dump_stack_lvl+0x189/0x250 [ 559.844576][T14520] ? __pfx____ratelimit+0x10/0x10 [ 559.844605][T14520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.844630][T14520] ? __pfx__printk+0x10/0x10 [ 559.844659][T14520] ? __might_fault+0xb0/0x130 [ 559.844702][T14520] should_fail_ex+0x414/0x560 [ 559.844734][T14520] _copy_from_user+0x2d/0xb0 [ 559.844760][T14520] ___sys_sendmsg+0x158/0x2a0 [ 559.844786][T14520] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.844844][T14520] ? __fget_files+0x2a/0x420 [ 559.844863][T14520] ? __fget_files+0x3a0/0x420 [ 559.844895][T14520] __x64_sys_sendmsg+0x19b/0x260 [ 559.844920][T14520] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 559.844940][T14520] ? perf_trace_preemptirq_template+0xa3/0x340 [ 559.844980][T14520] ? __pfx_ksys_write+0x10/0x10 [ 559.845005][T14520] ? rcu_is_watching+0x15/0xb0 [ 559.845032][T14520] ? do_syscall_64+0xbe/0x3b0 [ 559.845075][T14520] do_syscall_64+0xfa/0x3b0 [ 559.845102][T14520] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.845129][T14520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.845150][T14520] ? clear_bhb_loop+0x60/0xb0 [ 559.845176][T14520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.845196][T14520] RIP: 0033:0x7f78a1d8ebe9 [ 559.845216][T14520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.845235][T14520] RSP: 002b:00007f78a2c7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.845259][T14520] RAX: ffffffffffffffda RBX: 00007f78a1fb5fa0 RCX: 00007f78a1d8ebe9 [ 559.845274][T14520] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 559.845287][T14520] RBP: 00007f78a2c7e090 R08: 0000000000000000 R09: 0000000000000000 [ 559.845301][T14520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.845314][T14520] R13: 00007f78a1fb6038 R14: 00007f78a1fb5fa0 R15: 00007ffda523d6c8 [ 559.845350][T14520] [ 560.224815][T14528] netlink: 'syz.4.2163': attribute type 21 has an invalid length. [ 560.232780][T14528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2163'. [ 560.720123][T14540] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2166'. [ 560.752632][T14540] hsr_slave_0: left promiscuous mode [ 560.761688][T14540] hsr_slave_1: left promiscuous mode [ 560.822487][T14546] @ÿ: renamed from bond_slave_0 [ 560.910434][T14546] netlink: 'syz.4.2167': attribute type 21 has an invalid length. [ 560.934849][T14546] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2167'. [ 560.945797][T14546] netlink: 'syz.4.2167': attribute type 4 has an invalid length. [ 562.408331][T14582] netlink: 'syz.4.2175': attribute type 21 has an invalid length. [ 563.258935][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.266548][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.941910][T14618] __nla_validate_parse: 4 callbacks suppressed [ 563.941963][T14618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2187'. [ 564.158544][T14630] tap0: tun_chr_ioctl cmd 1074025675 [ 564.163893][T14630] tap0: persist disabled [ 565.927955][T14652] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2194'. [ 567.402020][T14669] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2202'. [ 567.868361][T14691] : entered promiscuous mode [ 569.448956][T14739] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2220'. [ 569.467801][T14739] bond_slave_0: entered promiscuous mode [ 569.473715][T14739] bond_slave_1: entered promiscuous mode [ 569.483382][T14740] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2220'. [ 569.636501][T14517] Set syz1 is full, maxelem 65536 reached [ 569.856423][T14752] TCP: TCP_TX_DELAY enabled [ 570.153634][T14767] netlink: 67 bytes leftover after parsing attributes in process `syz.6.2229'. [ 570.457049][T14776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2232'. [ 570.818664][T14788] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2235'. [ 571.037009][T14802] netlink: 'syz.6.2239': attribute type 2 has an invalid length. [ 571.056333][T14803] netlink: 'syz.6.2239': attribute type 2 has an invalid length. [ 571.109881][T14802] netlink: 'syz.6.2239': attribute type 8 has an invalid length. [ 571.126155][T14803] netlink: 'syz.6.2239': attribute type 8 has an invalid length. [ 571.144258][T14802] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2239'. [ 571.205304][T14803] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2239'. [ 571.251069][T14809] netlink: 'syz.4.2238': attribute type 10 has an invalid length. [ 571.393435][T14811] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2242'. [ 571.409715][T14811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2242'. [ 571.438272][T14811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2242'. [ 571.463648][T14816] openvswitch: netlink: IP tunnel dst address not specified [ 571.582261][T14811] netlink: 'syz.2.2242': attribute type 3 has an invalid length. [ 571.733595][T14816] openvswitch: netlink: Flow actions attr not present in new flow. [ 571.833560][T14823] netlink: 'syz.4.2244': attribute type 10 has an invalid length. [ 573.311996][T14852] netlink: 'syz.6.2252': attribute type 46 has an invalid length. [ 575.680834][T14900] netlink: 'syz.2.2260': attribute type 10 has an invalid length. [ 575.877493][T14900] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 575.953685][T14900] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 576.015729][T14907] netlink: 'syz.5.2262': attribute type 2 has an invalid length. [ 576.024174][T14900] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 576.056114][T14908] netlink: 'syz.5.2262': attribute type 2 has an invalid length. [ 576.091287][T14908] netlink: 'syz.5.2262': attribute type 8 has an invalid length. [ 576.107548][T14900] netlink: 'syz.2.2260': attribute type 10 has an invalid length. [ 576.133020][T14907] netlink: 'syz.5.2262': attribute type 8 has an invalid length. [ 576.180327][T14908] __nla_validate_parse: 4 callbacks suppressed [ 576.180350][T14908] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2262'. [ 576.212501][T14912] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2261'. [ 576.247997][T14907] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2262'. [ 576.301027][T14912] netlink: 'syz.6.2261': attribute type 8 has an invalid length. [ 576.352013][T14912] netlink: 'syz.6.2261': attribute type 6 has an invalid length. [ 576.407407][T14912] netlink: 144448 bytes leftover after parsing attributes in process `syz.6.2261'. [ 578.854951][T14941] netlink: 'syz.5.2270': attribute type 8 has an invalid length. [ 578.903460][T14941] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 579.725494][T14950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2272'. [ 582.400152][T14967] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2276'. [ 582.432785][T14967] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2276'. [ 583.252320][T14977] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2278'. [ 583.619606][T14985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2283'. [ 584.796510][T15004] netlink: 'syz.6.2284': attribute type 9 has an invalid length. [ 584.863418][T15004] netlink: 146452 bytes leftover after parsing attributes in process `syz.6.2284'. [ 585.120863][T15013] netlink: 'syz.5.2286': attribute type 39 has an invalid length. [ 585.515716][T15022] netlink: 'syz.4.2289': attribute type 1 has an invalid length. [ 585.568061][T15022] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2289'. [ 585.626615][T15022] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2289'. [ 586.726103][T12566] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 589.387770][T15064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.201818][T15060] delete_channel: no stack [ 590.811167][T15090] pim6reg1: entered allmulticast mode [ 591.296494][T15097] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2308'. [ 593.614262][T15124] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2315'. [ 594.540324][T15144] netlink: 'syz.1.2321': attribute type 3 has an invalid length. [ 594.577817][T15144] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2321'. [ 594.625228][T15148] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2319'. [ 595.026872][T15151] netlink: 'syz.2.2323': attribute type 10 has an invalid length. [ 595.057489][T15151] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 595.072273][T15152] Set syz1 is full, maxelem 65536 reached [ 597.427648][T15170] netlink: 'syz.1.2328': attribute type 7 has an invalid length. [ 600.458389][T15206] bridge0: port 3(batadv0) entered disabled state [ 600.468889][T15206] bridge_slave_1: left allmulticast mode [ 600.476284][T15206] bridge_slave_1: left promiscuous mode [ 600.482113][T15206] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.493517][T15206] bridge_slave_0: left allmulticast mode [ 600.499852][T15206] bridge_slave_0: left promiscuous mode [ 600.507636][T15206] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.927872][T15233] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 601.733029][T15255] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2345'. [ 602.061387][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2346'. [ 602.502008][T15255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.551814][T15255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.572079][T15255] bond0 (unregistering): (slave team0): Releasing backup interface [ 602.612238][T15255] bond0 (unregistering): Released all slaves [ 603.412889][T15282] sit0: entered promiscuous mode [ 603.418643][T15282] sit0: entered allmulticast mode [ 603.677030][T15285] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2353'. [ 603.870199][T15292] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2356'. [ 603.913670][T15292] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2356'. [ 604.167621][T15306] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 604.716747][T15321] netlink: 'syz.2.2361': attribute type 1 has an invalid length. [ 605.006187][T15329] netlink: 'syz.2.2363': attribute type 16 has an invalid length. [ 605.014076][T15329] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2363'. [ 605.466285][T15345] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2366'. [ 605.889897][T15334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2363'. [ 606.163001][T15355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2370'. [ 606.226094][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2370'. [ 607.497251][T14666] wlan1: Trigger new scan to find an IBSS to join [ 607.767852][ T30] audit: type=1107 audit(1755449548.141:3): pid=15383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 611.666307][T15407] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 611.814462][T15407] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 611.824348][T15407] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 612.270432][T12559] wlan1: Trigger new scan to find an IBSS to join [ 612.549558][T14971] wlan1: Creating new IBSS network, BSSID be:10:c8:92:f1:85 [ 614.060414][T15456] netlink: 'syz.5.2393': attribute type 10 has an invalid length. [ 614.512079][T15465] __nla_validate_parse: 1 callbacks suppressed [ 614.512194][T15465] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2397'. [ 614.834046][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2400'. [ 615.318995][T15490] syz.5.2404: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 615.339970][T15490] CPU: 1 UID: 0 PID: 15490 Comm: syz.5.2404 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 615.340003][T15490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 615.340019][T15490] Call Trace: [ 615.340029][T15490] [ 615.340040][T15490] dump_stack_lvl+0x189/0x250 [ 615.340086][T15490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 615.340113][T15490] ? __pfx__printk+0x10/0x10 [ 615.340158][T15490] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 615.340187][T15490] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 615.340218][T15490] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 615.340248][T15490] warn_alloc+0x214/0x310 [ 615.340286][T15490] ? stack_depot_save_flags+0x40/0x860 [ 615.340324][T15490] ? __pfx_warn_alloc+0x10/0x10 [ 615.340368][T15490] ? kasan_save_track+0x4f/0x80 [ 615.340398][T15490] ? xskq_create+0x56/0x170 [ 615.340431][T15490] ? xsk_init_queue+0xb0/0x110 [ 615.340452][T15490] ? xsk_setsockopt+0x57b/0x8d0 [ 615.340473][T15490] ? do_sock_setsockopt+0x17c/0x1b0 [ 615.340501][T15490] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 615.340518][T15490] ? do_syscall_64+0xfa/0x3b0 [ 615.340545][T15490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.340594][T15490] __vmalloc_node_range_noprof+0x125/0x12f0 [ 615.340730][T15490] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 615.340789][T15490] ? __kasan_kmalloc+0x93/0xb0 [ 615.340834][T15490] vmalloc_user_noprof+0xad/0xf0 [ 615.340869][T15490] ? xskq_create+0xbf/0x170 [ 615.340904][T15490] xskq_create+0xbf/0x170 [ 615.340945][T15490] xsk_init_queue+0xb0/0x110 [ 615.340985][T15490] xsk_setsockopt+0x57b/0x8d0 [ 615.341024][T15490] ? __pfx_xsk_setsockopt+0x10/0x10 [ 615.341054][T15490] ? __pfx_aa_sk_perm+0x10/0x10 [ 615.341101][T15490] ? __fget_files+0x2a/0x420 [ 615.341118][T15490] ? aa_sock_opt_perm+0xff/0x1b0 [ 615.341169][T15490] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 615.341192][T15490] ? __pfx_xsk_setsockopt+0x10/0x10 [ 615.341229][T15490] do_sock_setsockopt+0x17c/0x1b0 [ 615.341283][T15490] __x64_sys_setsockopt+0x13f/0x1b0 [ 615.341327][T15490] do_syscall_64+0xfa/0x3b0 [ 615.341355][T15490] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.341386][T15490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.341408][T15490] ? clear_bhb_loop+0x60/0xb0 [ 615.341444][T15490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.341464][T15490] RIP: 0033:0x7f674e78ebe9 [ 615.341488][T15490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.341505][T15490] RSP: 002b:00007f674f530038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 615.341529][T15490] RAX: ffffffffffffffda RBX: 00007f674e9b5fa0 RCX: 00007f674e78ebe9 [ 615.341544][T15490] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 615.341559][T15490] RBP: 00007f674e811e19 R08: 0000000000000004 R09: 0000000000000000 [ 615.341572][T15490] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 615.341585][T15490] R13: 00007f674e9b6038 R14: 00007f674e9b5fa0 R15: 00007ffe1bb97248 [ 615.341656][T15490] [ 615.343467][T15490] Mem-Info: [ 615.352770][T15491] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2403'. [ 615.407871][T15490] active_anon:7520 inactive_anon:0 isolated_anon:0 [ 615.407871][T15490] active_file:20100 inactive_file:40036 isolated_file:0 [ 615.407871][T15490] unevictable:768 dirty:202 writeback:0 [ 615.407871][T15490] slab_reclaimable:11278 slab_unreclaimable:125885 [ 615.407871][T15490] mapped:29166 shmem:1356 pagetables:1236 [ 615.407871][T15490] sec_pagetables:0 bounce:0 [ 615.407871][T15490] kernel_misc_reclaimable:0 [ 615.407871][T15490] free:1274009 free_pcp:17510 free_cma:0 [ 615.754409][T15490] Node 0 active_anon:30280kB inactive_anon:0kB active_file:80400kB inactive_file:159944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120864kB dirty:808kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12288kB pagetables:4904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 615.825534][T15490] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 615.887757][T15490] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 615.917390][T15490] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 615.923337][T15490] Node 0 DMA32 free:1186240kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30236kB inactive_anon:0kB active_file:80400kB inactive_file:158372kB unevictable:1536kB writepending:808kB present:3129332kB managed:2557484kB mlocked:0kB bounce:0kB free_pcp:57560kB local_pcp:26624kB free_cma:0kB [ 615.957273][T15490] lowmem_reserve[]: 0 0 1 1 1 [ 615.962297][T15490] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 616.003540][T15490] lowmem_reserve[]: 0 0 0 0 0 [ 616.008666][T15490] Node 1 Normal free:3894224kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11744kB local_pcp:9664kB free_cma:0kB [ 616.040468][T15490] lowmem_reserve[]: 0 0 0 0 0 [ 616.048227][T15490] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 616.061668][T15490] Node 0 DMA32: 2643*4kB (UME) 1557*8kB (UME) 1017*16kB (UME) 818*32kB (UME) 144*64kB (UME) 224*128kB (UME) 172*256kB (UM) 75*512kB (UM) 47*1024kB (UM) 13*2048kB (UME) 226*4096kB (UM) = 1186244kB [ 616.086841][T15490] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 616.103141][T15490] Node 1 Normal: 190*4kB (UME) 53*8kB (UME) 31*16kB (UME) 180*32kB (UME) 63*64kB (UME) 14*128kB (UME) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3894224kB [ 616.123107][T15490] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 616.132828][T15490] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 616.142292][T15490] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 616.151993][T15490] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 616.203936][T15490] 61490 total pagecache pages [ 616.208925][T15490] 0 pages in swap cache [ 616.219510][T15490] Free swap = 124996kB [ 616.225085][T15490] Total swap = 124996kB [ 616.234403][T15490] 2097051 pages RAM [ 616.249058][T15490] 0 pages HighMem/MovableOnly [ 616.257834][T15490] 425654 pages reserved [ 616.262821][T15490] 0 pages cma reserved [ 616.938181][T15521] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2411'. [ 617.064591][T15521] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2411'. [ 617.332310][T15528] netlink: 'syz.1.2410': attribute type 9 has an invalid length. [ 617.359256][T15528] netlink: 146452 bytes leftover after parsing attributes in process `syz.1.2410'. [ 617.552289][T15540] netlink: 'syz.4.2417': attribute type 10 has an invalid length. [ 618.177663][T15548] netlink: 'syz.5.2420': attribute type 21 has an invalid length. [ 618.378030][T15548] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2420'. [ 618.921006][T15560] netlink: 'syz.1.2423': attribute type 21 has an invalid length. [ 622.860791][T15594] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2431'. [ 623.345023][T15601] netlink: 'syz.1.2433': attribute type 2 has an invalid length. [ 623.354688][T15601] netlink: 'syz.1.2433': attribute type 8 has an invalid length. [ 623.363856][T15601] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2433'. [ 623.459105][T15613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2437'. [ 623.473035][T15613] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2437'. [ 623.793608][T15625] netlink: 'syz.4.2440': attribute type 21 has an invalid length. [ 624.018696][T15626] netlink: 'syz.1.2439': attribute type 9 has an invalid length. [ 624.070361][T15626] netlink: 146452 bytes leftover after parsing attributes in process `syz.1.2439'. [ 624.869927][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.876422][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.192751][T15649] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2444'. [ 625.507414][T15649] hsr_slave_0: left promiscuous mode [ 625.704523][T15659] netlink: 'syz.2.2446': attribute type 21 has an invalid length. [ 626.104517][T15649] hsr_slave_1: left promiscuous mode [ 626.679336][T15665] netlink: 'syz.5.2451': attribute type 1 has an invalid length. [ 626.706218][T15665] netlink: 'syz.5.2451': attribute type 2 has an invalid length. [ 626.892816][T15670] netlink: 'syz.1.2453': attribute type 9 has an invalid length. [ 626.931031][T15670] netlink: 146452 bytes leftover after parsing attributes in process `syz.1.2453'. [ 627.896953][T15678] netlink: 'syz.4.2454': attribute type 9 has an invalid length. [ 627.954983][T15682] netlink: 'syz.1.2455': attribute type 21 has an invalid length. [ 627.979510][T15678] netlink: 146452 bytes leftover after parsing attributes in process `syz.4.2454'. [ 629.015117][T15682] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2455'. [ 629.677809][T15696] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2459'. [ 630.581904][T15721] netlink: 'syz.4.2465': attribute type 9 has an invalid length. [ 630.594428][T15721] netlink: 146452 bytes leftover after parsing attributes in process `syz.4.2465'. [ 630.711150][T15729] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2468'. [ 631.215048][T15738] syzkaller0: entered promiscuous mode [ 631.261161][T15738] syzkaller0: entered allmulticast mode [ 633.514032][T15735] netlink: 'syz.5.2471': attribute type 9 has an invalid length. [ 633.550957][T15735] netlink: 146452 bytes leftover after parsing attributes in process `syz.5.2471'. [ 636.124717][T15766] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.2477'. [ 636.172084][T15766] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.2477'. [ 636.243210][T15745] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2474'. [ 636.820533][ T5880] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 637.133910][T15799] netlink: 'syz.6.2480': attribute type 9 has an invalid length. [ 637.181898][T15786] netlink: 'syz.2.2484': attribute type 3 has an invalid length. [ 637.194534][T15799] netlink: 146452 bytes leftover after parsing attributes in process `syz.6.2480'. [ 637.321279][T15786] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2484'. [ 637.851381][T15816] netlink: 'syz.1.2486': attribute type 21 has an invalid length. [ 638.121961][T15825] netlink: 'syz.4.2491': attribute type 10 has an invalid length. [ 638.634685][T15830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2493'. [ 639.101508][T15841] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2496'. [ 639.500444][T15849] netlink: 'syz.4.2497': attribute type 9 has an invalid length. [ 639.512445][T15849] netlink: 146452 bytes leftover after parsing attributes in process `syz.4.2497'. [ 640.401213][T15878] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2502'. [ 640.501953][T15878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2502'. [ 640.731343][T15887] netlink: 'syz.4.2506': attribute type 1 has an invalid length. [ 640.760071][T15887] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2506'. [ 640.797471][T15892] netlink: 'syz.6.2505': attribute type 21 has an invalid length. [ 641.769611][T15920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 641.850507][T15922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 641.866001][T15925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 642.202272][T15937] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2519'. [ 643.198973][T15945] syzkaller0: entered promiscuous mode [ 643.212059][T15945] syzkaller0: entered allmulticast mode [ 644.102432][T15961] netlink: 'syz.1.2524': attribute type 2 has an invalid length. [ 644.123097][T15962] netlink: 'syz.1.2524': attribute type 2 has an invalid length. [ 644.978430][T15992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.053242][T16056] netlink: 'syz.4.2549': attribute type 9 has an invalid length. [ 648.103838][T16066] netlink: 'syz.5.2552': attribute type 29 has an invalid length. [ 648.117760][T16066] netlink: 'syz.5.2552': attribute type 29 has an invalid length. [ 648.129806][T16066] netlink: 'syz.5.2552': attribute type 29 has an invalid length. [ 648.134368][T16056] netlink: 146452 bytes leftover after parsing attributes in process `syz.4.2549'. [ 648.156562][T16066] netlink: 'syz.5.2552': attribute type 29 has an invalid length. [ 648.960645][T16085] netlink: 'syz.6.2557': attribute type 10 has an invalid length. [ 649.195680][T16083] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2555'. [ 649.244749][T16091] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2558'. [ 649.331600][T16083] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 649.344669][T16073] delete_channel: no stack [ 649.436410][T16083] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 650.469423][T16121] netlink: 'syz.6.2565': attribute type 9 has an invalid length. [ 650.478553][T16121] netlink: 146452 bytes leftover after parsing attributes in process `syz.6.2565'. [ 651.073976][T16129] openvswitch: netlink: Flow actions attr not present in new flow. [ 652.061381][T16151] netlink: 'syz.1.2575': attribute type 10 has an invalid length. [ 652.084769][T16151] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2575'. [ 652.323533][T16154] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2574'. [ 653.127295][T16177] netlink: 'syz.5.2579': attribute type 28 has an invalid length. [ 653.193657][T16177] netlink: 'syz.5.2579': attribute type 3 has an invalid length. [ 653.202139][T16177] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2579'. [ 653.257362][T16179] netlink: 'syz.1.2580': attribute type 9 has an invalid length. [ 653.279544][T16179] netlink: 146452 bytes leftover after parsing attributes in process `syz.1.2580'. [ 653.307807][T16183] netlink: 'syz.6.2581': attribute type 13 has an invalid length. [ 653.442205][T16186] netlink: 'syz.2.2582': attribute type 21 has an invalid length. [ 653.487103][T16188] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2583'. [ 653.518425][T16188] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2583'. [ 653.618747][T16194] bridge_slave_1: left allmulticast mode [ 653.694426][T16194] bridge_slave_1: left promiscuous mode [ 654.180549][T16194] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.738527][T16197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 654.834593][T16201] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.2587'. [ 654.844608][T16201] veth0_to_bond: default FDB implementation only supports local addresses [ 655.258229][T16227] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.2589'. [ 655.436540][T16230] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2591'. [ 655.997503][T16241] netlink: 'syz.4.2595': attribute type 9 has an invalid length. [ 656.048575][T16241] netlink: 146452 bytes leftover after parsing attributes in process `syz.4.2595'. [ 657.309831][T16262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2599'. [ 657.830083][T16269] netlink: 'syz.1.2602': attribute type 10 has an invalid length. [ 658.530480][T16290] netlink: 'syz.5.2609': attribute type 29 has an invalid length. [ 658.891989][T16295] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.2611'. [ 659.151615][T16308] netlink: 'syz.6.2610': attribute type 9 has an invalid length. [ 659.161108][T16308] netlink: 146452 bytes leftover after parsing attributes in process `syz.6.2610'. [ 659.354153][T16310] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2612'. [ 659.431125][T16321] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2612'. [ 659.751226][T16310] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2612'. [ 659.788125][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2622'. [ 660.080821][T16347] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.2624'. [ 660.173214][T16357] netlink: 'syz.6.2625': attribute type 3 has an invalid length. [ 660.181362][T16357] netlink: 199752 bytes leftover after parsing attributes in process `syz.6.2625'. [ 660.220080][T16358] netlink: 'syz.4.2627': attribute type 1 has an invalid length. [ 661.024944][T16369] netlink: 'syz.5.2630': attribute type 9 has an invalid length. [ 661.148288][T16370] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2631'. [ 661.165543][T16369] netlink: 146452 bytes leftover after parsing attributes in process `syz.5.2630'. [ 661.683098][T16379] netlink: 'syz.4.2633': attribute type 10 has an invalid length. [ 662.277707][T16385] netlink: 'syz.2.2634': attribute type 40 has an invalid length. [ 662.309466][T16372] delete_channel: no stack [ 662.361209][T16385] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.865628][T16416] netlink: 'syz.1.2642': attribute type 9 has an invalid length. [ 664.064548][T16416] __nla_validate_parse: 3 callbacks suppressed [ 664.064570][T16416] netlink: 146452 bytes leftover after parsing attributes in process `syz.1.2642'. [ 664.554938][T16420] netlink: 'syz.2.2645': attribute type 39 has an invalid length. [ 664.726648][T16431] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2647'. [ 664.792174][T16433] netlink: 'syz.6.2649': attribute type 10 has an invalid length. [ 664.844698][T16436] netlink: 'syz.1.2650': attribute type 10 has an invalid length. [ 664.884909][T16436] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2650'. [ 664.944548][T16433] geneve0: entered promiscuous mode [ 664.974060][T16436] bond0: entered promiscuous mode [ 665.054804][T16436] bond_slave_0: entered promiscuous mode [ 665.194037][T16436] bond_slave_1: entered promiscuous mode [ 665.200462][T16436] batadv0: entered promiscuous mode [ 665.226722][T16436] batadv_slave_0: entered promiscuous mode [ 665.524299][T16453] netlink: 948 bytes leftover after parsing attributes in process `syz.4.2654'. [ 666.228804][T16465] netlink: 'syz.5.2656': attribute type 2 has an invalid length. [ 666.240212][T16467] netlink: 'syz.2.2655': attribute type 21 has an invalid length. [ 666.252453][T16465] netlink: 'syz.5.2656': attribute type 1 has an invalid length. [ 666.260707][T16467] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2655'. [ 666.288780][T16465] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2656'. [ 669.659249][T16502] netlink: 'syz.4.2663': attribute type 9 has an invalid length. [ 669.667246][T16502] netlink: 146452 bytes leftover after parsing attributes in process `syz.4.2663'. [ 670.369495][T16514] : entered promiscuous mode [ 670.571687][T16516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.681094][T16516] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 670.791509][T16507] veth1_macvtap: left promiscuous mode [ 670.946228][T16522] netlink: 'syz.1.2671': attribute type 21 has an invalid length. [ 671.833250][T16535] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2675'. [ 671.864083][T16535] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 672.299397][T16553] netlink: 'syz.1.2679': attribute type 9 has an invalid length. [ 672.307796][T16553] netlink: 146452 bytes leftover after parsing attributes in process `syz.1.2679'. [ 672.708066][T16565] netlink: 'syz.1.2682': attribute type 21 has an invalid length. [ 673.723869][T16569] Can't find ip_set type bitmap:ip,mac [ 674.035009][T16550] netlink: 'syz.2.2678': attribute type 4 has an invalid length. [ 674.480599][T16590] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2689'. [ 674.849622][T16595] netlink: 'syz.4.2690': attribute type 9 has an invalid length. [ 675.054502][T16595] netlink: 146452 bytes leftover after parsing attributes in process `syz.4.2690'. [ 675.545824][T16600] netlink: 'syz.6.2692': attribute type 41 has an invalid length. [ 676.627220][T16614] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2695'. [ 677.587943][T16622] netlink: 'syz.5.2697': attribute type 10 has an invalid length. [ 677.853008][T16630] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2700'. [ 678.006426][T16622] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 678.045217][T16622] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 678.142734][T16632] veth1_macvtap: left promiscuous mode [ 678.160128][T16632] macsec0: entered allmulticast mode [ 678.214187][T16634] veth1_macvtap: entered promiscuous mode [ 678.267357][T16634] veth1_macvtap: entered allmulticast mode [ 678.320829][T16634] macsec0: entered promiscuous mode [ 679.576902][T16660] netlink: 'syz.5.2705': attribute type 9 has an invalid length. [ 679.638463][T16660] netlink: 146452 bytes leftover after parsing attributes in process `syz.5.2705'. [ 680.739435][T16684] netlink: 'syz.6.2713': attribute type 41 has an invalid length. [ 680.774347][T16684] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2713'. [ 681.790752][T16700] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2718'. [ 682.001715][T16695] cgroup: fork rejected by pids controller in /syz6 [ 682.985553][T16815] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2721'. [ 683.000590][T16815] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2721'. [ 683.093108][T16813] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2721'. [ 683.337128][T16812] netlink: 'syz.2.2722': attribute type 9 has an invalid length. [ 683.369160][T16812] netlink: 146452 bytes leftover after parsing attributes in process `syz.2.2722'. [ 683.689241][T16827] netlink: 'syz.5.2727': attribute type 15 has an invalid length. [ 685.045345][T16851] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 685.183828][T16853] netlink: 'syz.2.2733': attribute type 2 has an invalid length. [ 685.266110][T16853] netlink: 'syz.2.2733': attribute type 8 has an invalid length. [ 685.320216][T16853] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2733'. [ 685.437569][T13959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 685.448742][T13959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 685.457257][T13959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 685.469770][T13959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 685.480865][T13959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 686.123601][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.138117][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.892593][T14666] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.970996][T16864] netlink: 'syz.1.2737': attribute type 21 has an invalid length. [ 687.005641][T16864] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2737'. [ 687.220627][T14666] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.597362][ T5880] Bluetooth: hci2: command tx timeout [ 688.320555][T16879] netlink: 'syz.5.2740': attribute type 9 has an invalid length. [ 688.392544][T16879] netlink: 146452 bytes leftover after parsing attributes in process `syz.5.2740'. [ 688.527884][T14666] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.745097][T14666] netdevsim netdevsim6 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.766362][T16888] netlink: 'syz.1.2743': attribute type 10 has an invalid length. [ 688.877864][T16891] netlink: 'syz.4.2744': attribute type 5 has an invalid length. [ 689.253809][T16904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2746'. [ 689.634346][ T5880] Bluetooth: hci2: command tx timeout [ 690.588324][T16908] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 690.704624][T16855] chnl_net:caif_netlink_parms(): no params data found [ 690.858432][T16924] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2751'. [ 690.874385][T16924] openvswitch: netlink: Flow key attr not present in new flow. [ 691.705266][T16934] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 691.714431][ T5880] Bluetooth: hci2: command tx timeout [ 691.723958][T14666] bridge_slave_1: left allmulticast mode [ 691.732636][T14666] bridge_slave_1: left promiscuous mode [ 691.739653][T14666] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.782155][T14666] bridge_slave_0: left allmulticast mode [ 691.787946][T14666] bridge_slave_0: left promiscuous mode [ 691.793828][T14666] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.996160][T16948] netlink: 'syz.4.2755': attribute type 21 has an invalid length. [ 692.362377][T16951] openvswitch: netlink: Flow actions attr not present in new flow. [ 693.410841][T16855] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.420949][T16855] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.428372][T16855] bridge_slave_0: entered allmulticast mode [ 693.448093][T16855] bridge_slave_0: entered promiscuous mode [ 693.542441][T16855] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.550348][T16855] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.559446][T16855] bridge_slave_1: entered allmulticast mode [ 693.567969][T16855] bridge_slave_1: entered promiscuous mode [ 693.800835][ T5880] Bluetooth: hci2: command tx timeout [ 694.012143][T16855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.027841][T16855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.208571][T16855] team0: Port device team_slave_0 added [ 694.239151][T14666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.247031][T14666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.256942][T14666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.265612][T14666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.286346][T14666] veth0_macvtap: left promiscuous mode [ 694.292095][T14666] veth1_vlan: left promiscuous mode [ 694.297738][T14666] veth0_vlan: left promiscuous mode [ 694.368101][T16987] netlink: 'syz.1.2763': attribute type 16 has an invalid length. [ 694.384700][T16987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2763'. [ 694.497339][T16989] netlink: 'syz.4.2765': attribute type 21 has an invalid length. [ 694.501785][T16990] netlink: 'syz.4.2765': attribute type 21 has an invalid length. [ 694.892927][T14666] team0 (unregistering): Port device team_slave_1 removed [ 694.935432][T14666] team0 (unregistering): Port device team_slave_0 removed [ 695.362322][T16855] team0: Port device team_slave_1 added [ 695.499861][T16855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.510000][T16855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.540894][T16995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2766'. [ 695.544027][T16855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.795182][T16855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.802188][T16855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.836224][T16855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.847425][T16997] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.2767'. [ 696.200137][T17008] netlink: 'syz.1.2769': attribute type 4 has an invalid length. [ 696.282917][T17008] netlink: 'syz.1.2769': attribute type 1 has an invalid length. [ 696.321497][T17010] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2770'. [ 696.357723][T17008] netlink: 'syz.1.2769': attribute type 2 has an invalid length. [ 696.405911][T17008] netlink: 198236 bytes leftover after parsing attributes in process `syz.1.2769'. [ 696.456234][T16855] hsr_slave_0: entered promiscuous mode [ 696.463055][T16855] hsr_slave_1: entered promiscuous mode [ 697.169244][T17026] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2775'. [ 697.860436][T17034] netlink: 'syz.4.2778': attribute type 2 has an invalid length. [ 697.897551][T17034] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2778'. [ 698.319827][T17047] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2783'. [ 698.331688][T17045] netlink: 'syz.5.2782': attribute type 64 has an invalid length. [ 698.378483][T17047] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 698.519644][T16855] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 698.582984][T16855] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 698.648454][T16855] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 698.656141][T17055] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2785'. [ 698.698238][T16855] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 699.090695][T16855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.189441][T16855] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.219989][T17074] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2789'. [ 699.270222][T12566] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.277527][T12566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.761996][T12566] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.769286][T12566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.071702][T17078] syzkaller0: entered promiscuous mode [ 700.090913][T17078] syzkaller0: entered allmulticast mode [ 701.591878][T16855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.430083][T17165] netlink: 'syz.4.2810': attribute type 9 has an invalid length. [ 703.491851][T17165] __nla_validate_parse: 3 callbacks suppressed [ 703.491871][T17165] netlink: 146452 bytes leftover after parsing attributes in process `syz.4.2810'. [ 706.698428][T17198] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2817'. [ 706.719360][T17199] netlink: 'syz.2.2817': attribute type 2 has an invalid length. [ 706.770131][T17199] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2817'. [ 706.840417][T17197] netlink: 'syz.2.2817': attribute type 2 has an invalid length. [ 706.870462][T17197] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2817'. [ 708.637782][T16855] veth0_vlan: entered promiscuous mode [ 708.651775][T16855] veth1_vlan: entered promiscuous mode [ 708.660790][ T30] audit: type=1107 audit(1755449649.041:4): pid=17213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 708.718778][T16855] veth0_macvtap: entered promiscuous mode [ 708.743876][T16855] veth1_macvtap: entered promiscuous mode [ 708.857327][T17221] netlink: 'syz.2.2823': attribute type 10 has an invalid length. [ 708.909137][T17223] netlink: 'syz.1.2824': attribute type 21 has an invalid length. [ 709.163228][T17221] wlan1: mtu less than device minimum [ 709.178221][T17221] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 709.188752][T17231] netlink: 'syz.5.2821': attribute type 9 has an invalid length. [ 709.198989][T17231] netlink: 146452 bytes leftover after parsing attributes in process `syz.5.2821'. [ 709.282768][T17217] syzkaller0: entered promiscuous mode [ 709.288647][T17217] syzkaller0: entered allmulticast mode [ 709.306179][T17223] netlink: 'syz.1.2824': attribute type 6 has an invalid length. [ 709.313974][T17223] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2824'. [ 709.356835][T16855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.453245][T16855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.577981][T17247] delete_channel: no stack [ 711.741645][T14972] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.765733][T14972] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.829901][T14972] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.841077][T14972] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.304538][T17269] netlink: 'syz.4.2833': attribute type 1 has an invalid length. [ 712.337933][T17270] netlink: 'syz.4.2833': attribute type 1 has an invalid length. [ 712.409837][T17269] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2833'. [ 712.436926][T17270] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2833'. [ 712.821689][T14971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.842549][T14971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.878060][T17286] netlink: 'syz.2.2836': attribute type 9 has an invalid length. [ 712.893176][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.902277][T17286] netlink: 146452 bytes leftover after parsing attributes in process `syz.2.2836'. [ 712.915057][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.062982][T17289] netlink: 'syz.2.2839': attribute type 39 has an invalid length. [ 713.230651][T17295] netlink: 'syz.1.2838': attribute type 2 has an invalid length. [ 713.556302][T17299] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.567591][T17299] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.695230][T17299] bridge0: entered allmulticast mode [ 713.891896][T17312] syzkaller0: entered promiscuous mode [ 713.916648][T17312] syzkaller0: entered allmulticast mode [ 714.367508][T17324] netlink: 'syz.4.2844': attribute type 21 has an invalid length. [ 715.138316][T17335] netlink: 'syz.6.2847': attribute type 3 has an invalid length. [ 715.151818][T17335] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2847'. [ 715.180618][T17336] netlink: 'syz.6.2847': attribute type 3 has an invalid length. [ 715.200340][T17330] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2847'. [ 715.211374][T17336] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2847'. [ 715.252990][T17338] netlink: 'syz.5.2848': attribute type 21 has an invalid length. [ 715.268523][T17335] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2847'. [ 715.515034][T17342] netlink: 'syz.2.2849': attribute type 9 has an invalid length. [ 715.540183][T17342] netlink: 146452 bytes leftover after parsing attributes in process `syz.2.2849'. [ 715.610149][T17330] bridge_slave_0 (unregistering): left allmulticast mode [ 715.620478][T17330] bridge_slave_0 (unregistering): left promiscuous mode [ 715.631919][T17330] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.836054][T17355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2853'. [ 716.321768][T17368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.777803][T17385] netlink: 'syz.1.2860': attribute type 21 has an invalid length. [ 717.379855][T17394] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2864'. [ 717.730223][T17402] netlink: 146936 bytes leftover after parsing attributes in process `syz.2.2866'. [ 717.757193][T17402] openvswitch: netlink: Message has 6 unknown bytes. [ 717.872715][T17405] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2867'. [ 720.049630][T17410] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 720.061710][T17410] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 720.077004][T17410] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 720.423835][T17437] netlink: 'syz.6.2875': attribute type 9 has an invalid length. [ 720.432237][T17437] netlink: 'syz.6.2875': attribute type 8 has an invalid length. [ 720.448152][T17437] netlink: 143452 bytes leftover after parsing attributes in process `syz.6.2875'. [ 721.001330][T17458] netlink: 'syz.5.2878': attribute type 21 has an invalid length. [ 722.100534][T17480] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2886'. [ 722.110014][T17480] hsr0: entered promiscuous mode [ 722.115520][T17480] hsr0: entered allmulticast mode [ 722.120808][T17480] hsr_slave_0: entered allmulticast mode [ 722.126892][T17480] hsr_slave_1: entered allmulticast mode [ 722.749055][T17496] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2891'. [ 723.802558][T17548] netlink: 'syz.4.2904': attribute type 46 has an invalid length. [ 723.814814][T17548] netlink: 212868 bytes leftover after parsing attributes in process `syz.4.2904'. [ 724.613988][T17551] netdevsim netdevsim5 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 725.092771][T17573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2908'. [ 725.156068][T17575] netlink: 372 bytes leftover after parsing attributes in process `syz.4.2908'. [ 725.205549][T17573] netlink: 125 bytes leftover after parsing attributes in process `syz.4.2908'. [ 725.224571][T17574] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2909'. [ 725.304393][T17573] netlink: 142 bytes leftover after parsing attributes in process `syz.4.2908'. [ 725.313500][T17573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2908'. [ 725.568495][T13959] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 725.582576][T13959] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 725.596391][T13959] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 725.605765][T13959] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 725.630056][T13959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 725.909042][T17588] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.2912'. [ 726.117834][T17577] chnl_net:caif_netlink_parms(): no params data found [ 726.843902][T17613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2918'. [ 726.967540][T17577] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.008937][T17577] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.026029][T17577] bridge_slave_0: entered allmulticast mode [ 727.040219][T17577] bridge_slave_0: entered promiscuous mode [ 727.050399][T17608] mac80211_hwsim hwsim20 .3#c„±: renamed from wlan1 (while UP) [ 727.118778][T17577] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.146082][T17577] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.153624][T17577] bridge_slave_1: entered allmulticast mode [ 727.167093][T17577] bridge_slave_1: entered promiscuous mode [ 727.284183][T17577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.310894][T17577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.351646][T17620] ================================================================== [ 727.359763][T17620] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x868/0xcf0 [ 727.367608][T17620] Write of size 8 at addr ffff8880613eca58 by task syz.4.2922/17620 [ 727.375590][T17620] [ 727.377930][T17620] CPU: 0 UID: 0 PID: 17620 Comm: syz.4.2922 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 727.377951][T17620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 727.377960][T17620] Call Trace: [ 727.377967][T17620] [ 727.377973][T17620] dump_stack_lvl+0x189/0x250 [ 727.377996][T17620] ? __virt_addr_valid+0x1c8/0x5c0 [ 727.378017][T17620] ? rcu_is_watching+0x15/0xb0 [ 727.378032][T17620] ? __kasan_check_byte+0x12/0x40 [ 727.378055][T17620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 727.378074][T17620] ? rcu_is_watching+0x15/0xb0 [ 727.378089][T17620] ? lock_release+0x4b/0x3e0 [ 727.378113][T17620] ? __virt_addr_valid+0x1c8/0x5c0 [ 727.378134][T17620] ? __virt_addr_valid+0x4a5/0x5c0 [ 727.378155][T17620] print_report+0xca/0x240 [ 727.378171][T17620] ? __bpf_get_stackid+0x868/0xcf0 [ 727.378193][T17620] kasan_report+0x118/0x150 [ 727.378215][T17620] ? __bpf_get_stackid+0x868/0xcf0 [ 727.378239][T17620] ? push_jmp_history+0x1cc/0x6f0 [ 727.378260][T17620] __bpf_get_stackid+0x868/0xcf0 [ 727.378287][T17620] ? bpf_prog_b724608cae728045+0x27/0x2f [ 727.378301][T17620] bpf_get_stackid_raw_tp+0x196/0x210 [ 727.378322][T17620] bpf_prog_b724608cae728045+0x27/0x2f [ 727.378334][T17620] bpf_trace_run2+0x284/0x4b0 [ 727.378353][T17620] ? bpf_trace_run2+0x186/0x4b0 [ 727.378373][T17620] ? __pfx_bpf_trace_run2+0x10/0x10 [ 727.378392][T17620] ? krealloc_noprof+0x1cd/0x340 [ 727.378415][T17620] ? rcu_is_watching+0x15/0xb0 [ 727.378429][T17620] ? krealloc_noprof+0x1cd/0x340 [ 727.378449][T17620] kfree+0x3a0/0x440 [ 727.378469][T17620] krealloc_noprof+0x1cd/0x340 [ 727.378491][T17620] push_jmp_history+0x1cc/0x6f0 [ 727.378515][T17620] check_cond_jmp_op+0x13e7/0x2910 [ 727.378543][T17620] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 727.378566][T17620] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 727.378585][T17620] ? do_check+0x1853/0xe520 [ 727.378607][T17620] do_check+0x6751/0xe520 [ 727.378634][T17620] ? __kasan_kmalloc+0x93/0xb0 [ 727.378653][T17620] ? do_check_common+0x209/0x24f0 [ 727.378691][T17620] ? __pfx_do_check+0x10/0x10 [ 727.378711][T17620] ? init_func_state+0x1ddf/0x2d20 [ 727.378734][T17620] do_check_common+0x1949/0x24f0 [ 727.378761][T17620] bpf_check+0x1746a/0x1d2d0 [ 727.378786][T17620] ? __pfx_perf_tp_event+0x10/0x10 [ 727.378814][T17620] ? perf_trace_run_bpf_submit+0xee/0x170 [ 727.378831][T17620] ? perf_trace_preemptirq_template+0x280/0x340 [ 727.378855][T17620] ? perf_trace_run_bpf_submit+0xee/0x170 [ 727.378873][T17620] ? perf_trace_preemptirq_template+0x280/0x340 [ 727.378894][T17620] ? irqentry_enter+0x3d/0x60 [ 727.378923][T17620] ? __pfx_bpf_check+0x10/0x10 [ 727.378944][T17620] ? irqentry_exit+0x74/0x90 [ 727.378963][T17620] ? lockdep_hardirqs_on+0x9c/0x150 [ 727.378987][T17620] ? security_bpf_prog_load+0x1e/0x310 [ 727.379010][T17620] ? bpf_lsm_bpf_prog_load+0x4/0x20 [ 727.379031][T17620] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 727.379050][T17620] ? security_bpf_prog_load+0x7f/0x310 [ 727.379073][T17620] bpf_prog_load+0x1318/0x1930 [ 727.379100][T17620] ? __pfx_bpf_prog_load+0x10/0x10 [ 727.379130][T17620] ? bpf_lsm_bpf+0x9/0x20 [ 727.379148][T17620] ? security_bpf+0x7e/0x300 [ 727.379170][T17620] __sys_bpf+0x528/0x870 [ 727.379191][T17620] ? __pfx___sys_bpf+0x10/0x10 [ 727.379223][T17620] __x64_sys_bpf+0x7c/0x90 [ 727.379241][T17620] do_syscall_64+0xfa/0x3b0 [ 727.379263][T17620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.379278][T17620] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 727.379294][T17620] ? clear_bhb_loop+0x60/0xb0 [ 727.379311][T17620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.379326][T17620] RIP: 0033:0x7fdc7f78ebe9 [ 727.379341][T17620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.379355][T17620] RSP: 002b:00007fdc80613038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 727.379373][T17620] RAX: ffffffffffffffda RBX: 00007fdc7f9b5fa0 RCX: 00007fdc7f78ebe9 [ 727.379385][T17620] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 727.379396][T17620] RBP: 00007fdc7f811e19 R08: 0000000000000000 R09: 0000000000000000 [ 727.379406][T17620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.379416][T17620] R13: 00007fdc7f9b6038 R14: 00007fdc7f9b5fa0 R15: 00007ffd25eb49a8 [ 727.379434][T17620] [ 727.379439][T17620] [ 727.800030][T17620] Allocated by task 17620: [ 727.804449][T17620] kasan_save_track+0x3e/0x80 [ 727.809147][T17620] __kasan_kmalloc+0x93/0xb0 [ 727.813770][T17620] __kmalloc_node_noprof+0x276/0x4e0 [ 727.819062][T17620] bpf_map_area_alloc+0x64/0x180 [ 727.824007][T17620] prealloc_elems_and_freelist+0x86/0x1d0 [ 727.829722][T17620] stack_map_alloc+0x33f/0x4c0 [ 727.834490][T17620] map_create+0xaa0/0x14d0 [ 727.838911][T17620] __sys_bpf+0x60f/0x870 [ 727.843176][T17620] __x64_sys_bpf+0x7c/0x90 [ 727.847592][T17620] do_syscall_64+0xfa/0x3b0 [ 727.852102][T17620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.857993][T17620] [ 727.860314][T17620] The buggy address belongs to the object at ffff8880613ec800 [ 727.860314][T17620] which belongs to the cache kmalloc-cg-1k of size 1024 [ 727.874625][T17620] The buggy address is located 24 bytes to the right of [ 727.874625][T17620] allocated 576-byte region [ffff8880613ec800, ffff8880613eca40) [ 727.889202][T17620] [ 727.891524][T17620] The buggy address belongs to the physical page: [ 727.897947][T17620] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x613e8 [ 727.906718][T17620] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 727.915234][T17620] memcg:ffff888079a4ad01 [ 727.919471][T17620] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 727.927018][T17620] page_type: f5(slab) [ 727.931000][T17620] raw: 00fff00000000040 ffff88801a44b280 dead000000000100 dead000000000122 [ 727.939585][T17620] raw: 0000000000000000 0000000080100010 00000000f5000000 ffff888079a4ad01 [ 727.948174][T17620] head: 00fff00000000040 ffff88801a44b280 dead000000000100 dead000000000122 [ 727.956840][T17620] head: 0000000000000000 0000000080100010 00000000f5000000 ffff888079a4ad01 [ 727.965513][T17620] head: 00fff00000000003 ffffea000184fa01 00000000ffffffff 00000000ffffffff [ 727.974197][T17620] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 727.982883][T17620] page dumped because: kasan: bad access detected [ 727.989305][T17620] page_owner tracks the page as allocated [ 727.995023][T17620] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5237, tgid 5237 (udevd), ts 45957004193, free_ts 45690887638 [ 728.015784][T17620] post_alloc_hook+0x240/0x2a0 [ 728.020567][T17620] get_page_from_freelist+0x21e4/0x22c0 [ 728.026112][T17620] __alloc_frozen_pages_noprof+0x181/0x370 [ 728.031920][T17620] alloc_pages_mpol+0x232/0x4a0 [ 728.036786][T17620] allocate_slab+0x8a/0x370 [ 728.041305][T17620] ___slab_alloc+0xbeb/0x1410 [ 728.046006][T17620] __kmalloc_noprof+0x305/0x4f0 [ 728.050891][T17620] alloc_pipe_info+0x1fd/0x4d0 [ 728.055680][T17620] create_pipe_files+0x8a/0x7e0 [ 728.060541][T17620] __do_pipe_flags+0x46/0x1f0 [ 728.065224][T17620] do_pipe2+0x9c/0x170 [ 728.069308][T17620] __x64_sys_pipe2+0x5a/0x70 [ 728.073910][T17620] do_syscall_64+0xfa/0x3b0 [ 728.078507][T17620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.084401][T17620] page last free pid 5357 tgid 5357 stack trace: [ 728.090720][T17620] __free_frozen_pages+0xbc4/0xd30 [ 728.095837][T17620] __put_partials+0x156/0x1a0 [ 728.100533][T17620] put_cpu_partial+0x17c/0x250 [ 728.105314][T17620] __slab_free+0x2d5/0x3c0 [ 728.109745][T17620] qlist_free_all+0x97/0x140 [ 728.114345][T17620] kasan_quarantine_reduce+0x148/0x160 [ 728.119810][T17620] __kasan_slab_alloc+0x22/0x80 [ 728.124673][T17620] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 728.130139][T17620] vm_area_alloc+0x24/0x140 [ 728.134691][T17620] mmap_region+0xdc7/0x20c0 [ 728.139197][T17620] do_mmap+0xc45/0x10d0 [ 728.143354][T17620] vm_mmap_pgoff+0x2a6/0x4d0 [ 728.147943][T17620] ksys_mmap_pgoff+0x51f/0x760 [ 728.152707][T17620] do_syscall_64+0xfa/0x3b0 [ 728.157216][T17620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.163128][T17620] [ 728.165451][T17620] Memory state around the buggy address: [ 728.171089][T17620] ffff8880613ec900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 728.179145][T17620] ffff8880613ec980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 728.187206][T17620] >ffff8880613eca00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 728.195259][T17620] ^ [ 728.202191][T17620] ffff8880613eca80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 728.210249][T17620] ffff8880613ecb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 728.218307][T17620] ================================================================== [ 728.231171][T13959] Bluetooth: hci4: command tx timeout [ 728.233803][T17620] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 728.233822][T17620] CPU: 0 UID: 0 PID: 17620 Comm: syz.4.2922 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 728.233847][T17620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 728.233859][T17620] Call Trace: [ 728.233867][T17620] [ 728.233875][T17620] dump_stack_lvl+0x99/0x250 [ 728.233901][T17620] ? __asan_memcpy+0x40/0x70 [ 728.233923][T17620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 728.233944][T17620] ? __pfx__printk+0x10/0x10 [ 728.233976][T17620] vpanic+0x281/0x750 [ 728.233996][T17620] ? __pfx_print_hex_dump+0x10/0x10 [ 728.234023][T17620] ? __pfx_vpanic+0x10/0x10 [ 728.234044][T17620] ? irqentry_exit+0x74/0x90 [ 728.234069][T17620] ? lockdep_hardirqs_on+0x9c/0x150 [ 728.234095][T17620] panic+0xb9/0xc0 [ 728.234115][T17620] ? __pfx_panic+0x10/0x10 [ 728.234137][T17620] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 728.234162][T17620] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 728.234194][T17620] ? __bpf_get_stackid+0x868/0xcf0 [ 728.234221][T17620] check_panic_on_warn+0x89/0xb0 [ 728.234246][T17620] ? __bpf_get_stackid+0x868/0xcf0 [ 728.234272][T17620] end_report+0x78/0x160 [ 728.234296][T17620] kasan_report+0x129/0x150 [ 728.234322][T17620] ? __bpf_get_stackid+0x868/0xcf0 [ 728.234351][T17620] ? push_jmp_history+0x1cc/0x6f0 [ 728.234376][T17620] __bpf_get_stackid+0x868/0xcf0 [ 728.234408][T17620] ? bpf_prog_b724608cae728045+0x27/0x2f [ 728.234425][T17620] bpf_get_stackid_raw_tp+0x196/0x210 [ 728.234450][T17620] bpf_prog_b724608cae728045+0x27/0x2f [ 728.234465][T17620] bpf_trace_run2+0x284/0x4b0 [ 728.234488][T17620] ? bpf_trace_run2+0x186/0x4b0 [ 728.234511][T17620] ? __pfx_bpf_trace_run2+0x10/0x10 [ 728.234535][T17620] ? krealloc_noprof+0x1cd/0x340 [ 728.234562][T17620] ? rcu_is_watching+0x15/0xb0 [ 728.234580][T17620] ? krealloc_noprof+0x1cd/0x340 [ 728.234604][T17620] kfree+0x3a0/0x440 [ 728.234628][T17620] krealloc_noprof+0x1cd/0x340 [ 728.234655][T17620] push_jmp_history+0x1cc/0x6f0 [ 728.234682][T17620] check_cond_jmp_op+0x13e7/0x2910 [ 728.234716][T17620] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 728.234743][T17620] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 728.234766][T17620] ? do_check+0x1853/0xe520 [ 728.234792][T17620] do_check+0x6751/0xe520 [ 728.234823][T17620] ? __kasan_kmalloc+0x93/0xb0 [ 728.234846][T17620] ? do_check_common+0x209/0x24f0 [ 728.234891][T17620] ? __pfx_do_check+0x10/0x10 [ 728.234913][T17620] ? init_func_state+0x1ddf/0x2d20 [ 728.234942][T17620] do_check_common+0x1949/0x24f0 [ 728.234973][T17620] bpf_check+0x1746a/0x1d2d0 [ 728.235001][T17620] ? __pfx_perf_tp_event+0x10/0x10 [ 728.235033][T17620] ? perf_trace_run_bpf_submit+0xee/0x170 [ 728.235055][T17620] ? perf_trace_preemptirq_template+0x280/0x340 [ 728.235084][T17620] ? perf_trace_run_bpf_submit+0xee/0x170 [ 728.235106][T17620] ? perf_trace_preemptirq_template+0x280/0x340 [ 728.235137][T17620] ? irqentry_enter+0x3d/0x60 [ 728.235162][T17620] ? __pfx_bpf_check+0x10/0x10 [ 728.235193][T17620] ? irqentry_exit+0x74/0x90 [ 728.235216][T17620] ? lockdep_hardirqs_on+0x9c/0x150 [ 728.235245][T17620] ? security_bpf_prog_load+0x1e/0x310 [ 728.235272][T17620] ? bpf_lsm_bpf_prog_load+0x4/0x20 [ 728.235298][T17620] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 728.235321][T17620] ? security_bpf_prog_load+0x7f/0x310 [ 728.235347][T17620] bpf_prog_load+0x1318/0x1930 [ 728.235377][T17620] ? __pfx_bpf_prog_load+0x10/0x10 [ 728.235411][T17620] ? bpf_lsm_bpf+0x9/0x20 [ 728.235433][T17620] ? security_bpf+0x7e/0x300 [ 728.235457][T17620] __sys_bpf+0x528/0x870 [ 728.235482][T17620] ? __pfx___sys_bpf+0x10/0x10 [ 728.235518][T17620] __x64_sys_bpf+0x7c/0x90 [ 728.235539][T17620] do_syscall_64+0xfa/0x3b0 [ 728.235565][T17620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.235583][T17620] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 728.235602][T17620] ? clear_bhb_loop+0x60/0xb0 [ 728.235622][T17620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.235640][T17620] RIP: 0033:0x7fdc7f78ebe9 [ 728.235656][T17620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.235674][T17620] RSP: 002b:00007fdc80613038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 728.235696][T17620] RAX: ffffffffffffffda RBX: 00007fdc7f9b5fa0 RCX: 00007fdc7f78ebe9 [ 728.235711][T17620] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 728.235724][T17620] RBP: 00007fdc7f811e19 R08: 0000000000000000 R09: 0000000000000000 [ 728.235737][T17620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.235749][T17620] R13: 00007fdc7f9b6038 R14: 00007fdc7f9b5fa0 R15: 00007ffd25eb49a8 [ 728.235771][T17620] [ 728.236850][T17620] Kernel Offset: disabled