last executing test programs: 6m21.34838058s ago: executing program 4 (id=282): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061116d0000000000850000004400000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x2, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x2, 0x4, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x2e]}}, 0x0, 0x35, 0x0, 0x1}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0xd}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x3, 0xfff9, 0x9cf, 0x0, 0x56fd7b6c, 0x5ca50b64}}, {0x4}}]}, @qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x1b) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12) 6m19.994601716s ago: executing program 4 (id=293): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2a2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x7, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0xffffffffffffffff, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8=r5], 0x9a) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xa353}, 0x320, 0x7, 0x0, 0x2, 0xe1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r6, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc0, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@generic={0x8, 0x5, 0x4, 0x6, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x8, '\x00', r7, 0x18, r6, 0x8, &(0x7f0000000800)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x386b, r4, 0x4, &(0x7f0000000880)=[r8, r1], &(0x7f00000008c0)=[{0x1, 0x3, 0x10, 0x6}, {0x2, 0x2, 0x3, 0xa}, {0x0, 0x2, 0xd, 0x9}, {0x4, 0x5, 0xc, 0x2}], 0x10, 0x690f}, 0x94) (async) socket$kcm(0x15, 0x5, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r9, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0) (async) close(0x3) 6m19.783558296s ago: executing program 4 (id=298): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0xf9, 0x2, 0x8, 0x4, 0x0, 0xc, 0x50845, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x10400, 0x5}, 0x800, 0xa, 0x8000, 0x9, 0x4, 0x1000, 0x8, 0x0, 0x51, 0x0, 0x7}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x7}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700840000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x20004800) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0xa38, 0x0, 0x0, 0x2, 0x9, 0x2, 0x0, 0x0, 0x3ff, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000640), 0x4) r4 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r4, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2040) r5 = socket(0x840000000002, 0x3, 0xff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x8000000, 0xc, 0xc, 0x2, [@enum={0x4}]}}, 0x0, 0x18, 0x0, 0x8}, 0x28) sendmsg$rds(r5, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0x29}], 0x1, 0x0, 0x0, 0x8000}, 0x48004) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffa8, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2280, 0x0) fstat(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r7, 0x400454cc, r8) 6m19.41537545s ago: executing program 4 (id=301): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8993, &(0x7f0000001a80)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x2, 0x2, 0x9, 0x1, 0x8, 0x9}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000034c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "076f21bed455e2c750197ae2706a67fbc7"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 6m18.384641784s ago: executing program 4 (id=314): mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, 0x0) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x64}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 6m18.061752111s ago: executing program 32 (id=314): mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, 0x0) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x64}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 4m57.103641004s ago: executing program 2 (id=933): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0xfffffff2, 0x9, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x5, 0x65, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYRES32=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x7fffffff}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x18}}, 0x20008808) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2c}, 0x94) (async) r6 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x114, 0x1d, 0x0, 0xfea5) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x4}, @CTA_LABELS_MASK={0x4}]}, 0x6c}}, 0x0) (async) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) 4m56.846610321s ago: executing program 2 (id=938): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8ec, 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x35c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) close(0x3) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81004d8800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) (async) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000140)) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x8, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=ANY=[@ANYBLOB="fcff0000040000aefad3da67807f58eac2e50004", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000030400"/28], 0x48) 4m56.641809461s ago: executing program 2 (id=941): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="84010000100001000000000000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf000000030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000009670000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000100000000000000000000800000000000000000000000000000000000000000000000000000000000000000020000004c00000000000000480002006362632873657270656e7429000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400686d61632873"], 0x184}}, 0x0) 4m56.196864788s ago: executing program 2 (id=945): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x3, 0x10) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x6, 0x3fe, 0x80000002}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x91, 0x0, 0x11}, 0x8850) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000250009011fbd566903333489643c00000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) (async) socket$kcm(0xa, 0x3, 0x3a) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x822c0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4cda, 0x8}, 0x0, 0x3, 0x8, 0xc, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x8) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x4, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x1, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80000001}}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000000000000900010073797a30000000000900030073797a32000000007c000000062a01000000000000401f000100000008000b400600000000000000340001800b000100657874686472000024000280080001400000000f0800034000000001080004400000002205000200830000001c0001800a00010072656469720000000c00028008000140000000140900010073797a0000140000001100010000000000000000000000000a000000"], 0xf0}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) 4m55.80803957s ago: executing program 2 (id=948): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x1080860, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x80108906, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8906, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x56, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x128, 0x24, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x2, 0xfff1}, {0xf, 0x7}, {0x5, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1d5e}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_EGRESS_BLOCK={0x8}, @TCA_STAB={0x60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x8, 0xfffc, 0x3, 0x0, 0x1ff, 0x7ff, 0x3}}, {0xa, 0x2, [0x9, 0xae, 0x6]}}, {{0x1c, 0x1, {0x8, 0x9, 0x3, 0x8000, 0x0, 0x8, 0x5, 0x9}}, {0x16, 0x2, [0xb586, 0x6000, 0x7fff, 0x3ff, 0x2, 0x4, 0x0, 0x8, 0x1]}}]}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x5, 0x2, 0x7e, 0x0, 0xffffff08, 0x8, 0x7}}, {0x12, 0x2, [0x1, 0xd, 0x5, 0x40, 0x40, 0x2, 0x8001]}}, {{0x1c, 0x1, {0x8, 0x4, 0xa, 0x9, 0x2, 0x1, 0x7}}, {0x4}}]}, @qdisc_kind_options=@q_gred={{0x9}, {0x2c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x8, 0xf, 0x0, 0x8}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x1559}, @TCA_GRED_DPS={0x10, 0x3, {0x6, 0xf, 0x1, 0x8}}]}}]}, 0x128}}, 0x20000004) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x37, 0x107, 0xfffffffe, 0x25dfdbfe, {0x5, 0x7c}, [@nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048091}, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x80000000}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) 4m51.3147503s ago: executing program 2 (id=971): r0 = socket$kcm(0x2, 0x2, 0x73) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000009c0)="2e00000011008188e6b62aa73772cc891ba1f848430000005e14060200007026b29029001000000002e0c536a8bfd4b4d9", 0x31}], 0x1}, 0x24004000) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x1}], 0x1}, 0x900000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x49}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socketpair(0x22, 0x0, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x806) 4m36.02153138s ago: executing program 33 (id=971): r0 = socket$kcm(0x2, 0x2, 0x73) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000009c0)="2e00000011008188e6b62aa73772cc891ba1f848430000005e14060200007026b29029001000000002e0c536a8bfd4b4d9", 0x31}], 0x1}, 0x24004000) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x1}], 0x1}, 0x900000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x49}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socketpair(0x22, 0x0, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x806) 4m33.427542975s ago: executing program 1 (id=1077): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair(0x10, 0x1, 0x0, 0x0) (async) socketpair(0x10, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x1306, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r6, &(0x7f0000000140), 0x12) (async) write$cgroup_pid(r6, &(0x7f0000000140), 0x12) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000), 0x8) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000), 0x8) gettid() syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2b42c0191725dc4c, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000000000000, 0x10012, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x11, 0x5}, 0x0, 0xfffffffffffff000, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) 4m32.90542827s ago: executing program 1 (id=1083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a32"], 0x88}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x5, 0x0, 0x0, {0x4, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0xc, 0x17, [0x3, 0x9]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000094}, 0x4c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x88}}}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m29.861400941s ago: executing program 1 (id=1086): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0xffffff81, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, r2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0xfffffffffffffffb) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYRES8=r7, @ANYBLOB="01"], 0x9a) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 4m29.624968334s ago: executing program 1 (id=1087): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = getpid() r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$kcm(0x11, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x9c}}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000003800010326bd700203dcdf0512"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004814) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33) setsockopt$sock_attach_bpf(r5, 0x107, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xb0a3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0xffff, 0xfffffff3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m27.592032129s ago: executing program 1 (id=1099): syz_clone(0x1e824000, 0x0, 0xffffffb1, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]}) 4m27.405240081s ago: executing program 1 (id=1102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd28, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008080) write$cgroup_devices(r0, &(0x7f0000002d80)=ANY=[], 0xffdd) 4m12.286896716s ago: executing program 34 (id=1102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd28, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008080) write$cgroup_devices(r0, &(0x7f0000002d80)=ANY=[], 0xffdd) 2m49.042546924s ago: executing program 7 (id=1762): socket$kcm(0x29, 0xf7098d0c787240b, 0x0) (async) socketpair(0x1, 0x2, 0x1000, &(0x7f00000004c0)={0xffffffffffffffff}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) (async) sendmsg(r2, &(0x7f0000006640)={0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000004480)="50e5", 0x2}], 0x1}, 0x8800) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x11, &(0x7f0000000000), 0x8) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x19, 0x7, 0xb8, 0x1, 0x0, 0x7, 0x40, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000180), 0xa}, 0xa1c, 0x6, 0x81, 0x5, 0x6, 0x0, 0x3, 0x0, 0x200, 0x0, 0x9}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xc) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000010000000ac1414bb00ea00000000000000000000ac1414bb000000000000000000000000000000064e24000c0a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000040000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000080000000000000000000000000000000000000000000000000000003000000008400050064010102000000000000000000000000000000003200000000000000fe8000000000000000000000000000330000000002000000000000000000000000000000fe8000000000000000000000000000aa000004d4ff000000000500007f000001000000000000000000000000030000000400"/244], 0x13c}}, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0xff03}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x70}}, 0x0) (async) close(r7) (async) close(0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000000107e14d823bd510f6d1b0400000090800054000000003e79bf4e256e022208ce1327621c531e6a7dedee53b6f2c48b288d5ab59e0dede338c609ab3fbff85b427ffa9fa07555a98c8d503cdb79e50ae3fd5b7c3aa9c1580ca5b842957532e3c4136a6c0e5e98c80c9dd88476bd7a97693e265942b27cc0ffc8e25b2278572459996d7fb"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200004d851a82aa1808e762e00028000480240001800b000100736f636b6574000014000280080002400000000308000140000000000900010073797a30000000000900020073797a32000000001400000011cc000000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="020b00060d0000002cbd7000fedbdf2502000100000004d4050760020000008002000100000004d603026b000100008002000100000004d3060276040df1610605001a006401010200000000000000c7086b09aafd03e7c94652d77f4e767c000000000000000000"], 0x68}}, 0x4040804) ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x7f7c2739efff) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8905, &(0x7f0000000240)='\x9fL\xfd\xd5\x9d\xc8\xf1\x0e\x85\x9e\xb6nm\x9c\xfc\xfa\x1c*Zu Ip\xbf\xb8\xea~i\x17\xbc\xc15\x8a>\x1c\xb1\x12\x90\x05M;J\x1d\xeb5\xd4\x85\x14J\xc9E\xf8\x01eb\a\xc3RL\x9aU\x02\xd7\xcd\x1e\x7f\xe0\x87\x06p\xa1\x9b:\x12\xed\xb2\x94\xa0\xa10\x81%\x8f*\x04\x00\x00\x00\x00\x00\x00\x00/y\xef%N\x9ae\xfet\x94wo\xb0z\x1d\x05\xd3:\x03W\x90M\x01\x97vn0q!N\x0e\\F\xe9\'\xa9\x80\x8f.Dw\xb4\xb3k\x19\xd6\xb6\x87d\x867\x93Hi\xe8\xfa\x9e\x0e`\xe6\xc6\x82\x0eJ\xe6\xfb\xd3\xc2Ue\n\x80\xd2\xa4\xda\x9cLY\x92*\xce\xf2\xbdU\xaa\xf0\xe0G\x19A$\x12\xf7\a\xc2\x99B\xbc\xd4e\x9byl\xa6\xbc\xa6\xa5s\x00\x9d\xee\xd7\xdd\xee}\v\xaa\xe1\x19\xd9I\xb8\x8e7BW\xe7\x8cr{(\x06e\x8c*o\xdas\xfe9\xfd\xc4I5,O\xf8\x16i?A\x9e!\xb7b\t\xdf\xff\xdd\xe7\xa6\xab\xc2\xa6\x89`J\xcf\xb5U\a^\xb2\x01\x01\x00\x00\x00\x00\x00\x00z\x10\b\xd7\xd5\xbfZ\x88\x1e\xe1\x93,\x1eL\x8c\xbe\xc1Fs\x1b\xf98\x9f\xe0\xac\x04=\xa57\x95\xb1\xcb\x10\n\xeaE\xab\xbf\xb8lV\xf4\x1b\x87yy_\xa9\x13\xd2z7\x9b\xfb\xc8\x04\x89m\x04\xee\xd0\xf2(#\xb9H\a\x17\x0f-\xb3\xeesSb\x1a\x9a\x1f\xab/\xcd\xd3h \xae\x87wz\xfav\x1c\x1a\xf7BR\xcat~\xe1uj\x9d \xb5\xc1?IE\x17\x84\xe2NZ;\\\x13\xdf\xfd\xade\xa2\x93@Z\r\xc4_\xb952P\xa4\b\x81S\xf1\x8c\xfc\x95C\xa9\xfdp\xac\xa8duM\x84\xb9\xf0\x81\xcc\x9a\xa1\x98 \x10\n\x82?A\xe2\xe8\xdc\x0e\xe5\xaa?\a\xb1(L\xb4\x00\xb3B\x06\xea6\x8e\xa4\xd1\xf1\x13\x14\"4\x0e\xd8S\xd7,\xab\x0f\xf4/\xecG\xd1\xe6\xce\x14\x00\x19\xcf\xf8\x81G') 2m48.599854201s ago: executing program 7 (id=1767): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3ff, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10048, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x1004, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000040) close(r1) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000040)="25a688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m48.30030586s ago: executing program 7 (id=1770): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x800, 0x3}, 0x10}, 0x94) (async) r0 = getpid() (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0xe, 0x0, 0x0, 0x0, 0xf, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0x194a}, 0x0, 0x0, 0x0, 0x7, 0x7fff, 0xfc89, 0x3, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0x106) (async) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8090) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x106, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a990053", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001800010324bd7002fadbdf252e"], 0x14}}, 0x804) r6 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r6, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3c, 0x301, 0x70bd25, 0xfffffffc, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @uid=r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x48030) (async) sendmsg$nl_generic(r5, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000600)={0x468, 0x35, 0x400, 0x70bd29, 0x25dfdbfb, {0x10}, [@typed={0x4, 0x105}, @generic="4cf8ce809050f1e928a6e2f01618998587fee636c5d7e7d93464d108a76017f92a1c08e7f8f8895f4a4be96c1ae39ffe825665076fb79cd8d1d62912f957aa0ff8ebceae28f3e1048cd6286c4e7ae23c39d4d93d99af37864f35aef96b4a6da5ccbfa86b4621ac6f561517531b9dbefcc7716cef95c77371e4a6da", @typed={0xc, 0x14f, 0x0, 0x0, @u64=0x7}, @typed={0xc, 0x18, 0x0, 0x0, @u64=0x5}, @generic="f85903c6fdfe7368be1f1ce255ad74f3c071c34d18d5d303a0280e115143329c1fa5530957a71f5c9cf1aaacfe271289bf3a45b008bdbdb2b688e70935ad23e57cba4cf82ab9a60146e585adef93fefa47ddf72b0c7ba1fd12a1c0598c2bcbb68ce6b9c5c5c3c7ae3c69831547319ed3a587b5bfbd6453d105af6106b767ff993220edd3f19db403ac4039e19b1e4e58bb1552c438bb9e18918211ab60112fa33c353fb8a378c9315e2104baca42ffc5f893c2", @nested={0x169, 0x4d, 0x0, 0x1, [@generic="f48f7ea03871739dd0ee6e125f6a8b8809d520a9a98c3a0d1894fa15e1967539e156969eb6c3c54e90c7bb618edd7cd73cdc264e08021f31173b5e1de827f61edeb9cac8e5a854f937aa6adac1ca4cf8d8df1e41ba1c7e5f83ed138eeb3e34e76d93ab98b51c6097f15b16f58613a159f1eaa4201173179c4ae30816a4fc97e0dabe308acb2b255a54aa0cf406158f973a052c700ea080f67106b137d7f31f3242b8e800dc6d49bd7ca2e27b41e0f8b40edc97c5e3a4b49bfecc0bfb440f10564bec4a5887565dc33f69e024cf8a46a95576b91da9b214ee5bed975190599d32d12cbc5d6a0cc29fc9b48ea6f2e33f97211fd493fd", @typed={0x4, 0x2c}, @generic="fc62ad0e247ec37da78e79177c866e374a85aa23d2e46711eba003ff3db29085329678de46ff4db159d9e0d8ec03bd337dea6899918ba0d7d3824bd4121db62b12131bc83446557670001bf29ea223410331bdfaa089ba3696667eacddea2562a00bf34329a63f5ad2a5695b"]}, @nested={0x88, 0xc4, 0x0, 0x1, [@generic="b2ff1447e6c173075f83b9", @generic="f3b72bc501e72ac6e8682a9632797315394b335e2f360c9ff45f2f25cd192ca193260329ab4df5421cc11dcbf18d92232a502e81eacf3b4cd3f89bbdb6a8433623e00b2690088f141b75f6f2c72d0538698ed2310515d46bbbf0a1d21dff80ed9b2d1809b4897688639ddc564e007e0e0a", @nested={0x4, 0x12c}, @nested={0x4, 0x141}]}, @typed={0x4, 0x115}, @nested={0x10e, 0x7b, 0x0, 0x1, [@typed={0x8, 0xdb, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x141}, @nested={0x4, 0x2e}, @nested={0x4, 0x48}, @generic="edfb8ccd8c74d0923adca8013b615eb4144a42de0e2e453a4a3431b0e8", @generic="5d929a3c5966d4725bc566db99e06c345bf9d22de14b0069c95081d5112d3c3e659f44a0e5137cacd03f6ba0615004905c5eeceac1eade5815d011d42728be9521b206ad74f5b8ab7dd99bffd3b931b9c8d05c23c61f0aab3fd223601b9c2eaae3bd7bc2c8629548e03b294ee8df927f962a248eb1dff9e2725aed9faa17276d4152aaebb9ea29cf1982a81dc1320018e773216b21b76c90b310e63f0c0b2ae08343b2db9b863da471c3a9866c584a246154915b4bcc7372e179cb7ce31b0efe4fd778fcc6509b27d65888ef4aca109bc8", @typed={0x8, 0xee, 0x0, 0x0, @pid=r0}]}]}, 0x468}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) socket$kcm(0x1e, 0x4, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 2m47.901035596s ago: executing program 7 (id=1775): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0xf242, 0x9, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64) socket$kcm(0x2d, 0x2, 0x0) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000feff030000000000", @ANYRES32, @ANYBLOB="0701a000000000000004005c0bc3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 32) socket$kcm(0x2, 0x5, 0x84) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x0, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)}, 0x20000000) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) socketpair(0x1, 0x1, 0x800, &(0x7f00000001c0)) close(0xffffffffffffffff) r1 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000085000000ba0000006d0000000000000018000000ffff0000000000000000000095000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) (async, rerun: 32) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) (async, rerun: 32) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) perf_event_open(0x0, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0xb, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x111, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x8) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r2) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) sendmsg$inet(r3, 0x0, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000000a0000000c0002006e6c38000431310000000000000000e9ff00"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40058) (async, rerun: 32) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)=""/104, 0x68}, {&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000001880)=""/4101, 0x1005}, {&(0x7f00000031c0)=""/4110, 0x100e}], 0x5}, 0x40000000) (rerun: 32) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x12040) 2m46.700466642s ago: executing program 7 (id=1781): r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x10, 0x2, 0x0, 0xff, 0x0, 0xcbf0, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_config_ext={0xffff8880b8709000, 0x1}, 0x0, 0x2, 0xffffffff, 0x0, 0x4, 0xfffffffc, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000002000018200000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000001d40)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x20}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)="d80000001a0081044e81f682db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200004400400e000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4806b302dca46638e14c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xd8}], 0x1}, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) unlink(&(0x7f00000000c0)='./file0\x00') socket$kcm(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x200, 0x5dd}, 0x0, 0x1, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000102010100000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c000280040001", @ANYRESHEX=r6, @ANYRES8=r6], 0x50}}, 0x0) 2m46.126017743s ago: executing program 7 (id=1785): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000004000008500000082000000850000000700000095"], &(0x7f00000010c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1b}, 0x94) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000100)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)="14da575907f7015d8c70de635890f269db095affa6ae81e04c35186621ba94924981d3d507b0a6889e87d32f806ac85cc85b5341fb6174cdbd01fd33e27abd66e46f16046b4504c0ebc99ffe95fb6e8f228394fd169c02036f682009a7af608f0b6f70838a1b2163d70dab9a177e1aa5389fc26e5e451e3e11177a1695", 0x7d}, {&(0x7f0000000000)="0d9d6492", 0x4}, {&(0x7f0000000200)="16468ad3760f221296dc684c5c8fc51cca0080f70e25aa1be4ce789b3a4d352142b58228cb585f15c6a933fa1589a88cffe30f", 0x33}, {&(0x7f0000000580)="bc862db165d86202ae13543bf8286602edd11251290641620860f68e8afd1b31e2476f8d1dcf3925f29115bd3adc5ad55e46e13c94cc0c2cd5cab59e94e362c50972d18a9a19617824bb2a156ed33ff0e70e7df87ea8687524bc81aec829041a05c3045788fe523ffc503a83cee6ae28a2fe67f4d7a9b4682202e643a527e6efca39c187428b2697c86f70808ca03a1d1bb5605ce451b0f0f5ed2a447a4395ccf953c1f6deadfccf8ffff16479d4890edef29b00d6c94302ce6f7758b8817ce74e3ff4d2ff32148a7569f0d52616547f8aadeecd636852586a0fee1174e8a13de592b36ccb5c30bbf5175f", 0xeb}, {&(0x7f0000000240)="afaa33a6675a89f57d20e44cb611f09fcbd64b39eae08522f7b85eac251c8e8ecaac2ea5458c3b867a2f3230e69656d2ee2b24afdff55582da7683b874f029003930439015e6a2f3a750f8218a62ab3b4a425d18fde91ce8a55d4b", 0x5b}], 0x5, &(0x7f0000000680)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xa3c}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffff01}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @mark={{0x14, 0x1, 0x24, 0x8000}}], 0x78}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x88}, 0x1, 0x7}, 0x0) 2m30.885137708s ago: executing program 35 (id=1785): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000004000008500000082000000850000000700000095"], &(0x7f00000010c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1b}, 0x94) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000100)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)="14da575907f7015d8c70de635890f269db095affa6ae81e04c35186621ba94924981d3d507b0a6889e87d32f806ac85cc85b5341fb6174cdbd01fd33e27abd66e46f16046b4504c0ebc99ffe95fb6e8f228394fd169c02036f682009a7af608f0b6f70838a1b2163d70dab9a177e1aa5389fc26e5e451e3e11177a1695", 0x7d}, {&(0x7f0000000000)="0d9d6492", 0x4}, {&(0x7f0000000200)="16468ad3760f221296dc684c5c8fc51cca0080f70e25aa1be4ce789b3a4d352142b58228cb585f15c6a933fa1589a88cffe30f", 0x33}, {&(0x7f0000000580)="bc862db165d86202ae13543bf8286602edd11251290641620860f68e8afd1b31e2476f8d1dcf3925f29115bd3adc5ad55e46e13c94cc0c2cd5cab59e94e362c50972d18a9a19617824bb2a156ed33ff0e70e7df87ea8687524bc81aec829041a05c3045788fe523ffc503a83cee6ae28a2fe67f4d7a9b4682202e643a527e6efca39c187428b2697c86f70808ca03a1d1bb5605ce451b0f0f5ed2a447a4395ccf953c1f6deadfccf8ffff16479d4890edef29b00d6c94302ce6f7758b8817ce74e3ff4d2ff32148a7569f0d52616547f8aadeecd636852586a0fee1174e8a13de592b36ccb5c30bbf5175f", 0xeb}, {&(0x7f0000000240)="afaa33a6675a89f57d20e44cb611f09fcbd64b39eae08522f7b85eac251c8e8ecaac2ea5458c3b867a2f3230e69656d2ee2b24afdff55582da7683b874f029003930439015e6a2f3a750f8218a62ab3b4a425d18fde91ce8a55d4b", 0x5b}], 0x5, &(0x7f0000000680)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xa3c}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffff01}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @mark={{0x14, 0x1, 0x24, 0x8000}}], 0x78}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x88}, 0x1, 0x7}, 0x0) 14.02588731s ago: executing program 0 (id=2768): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0xfe33) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x11, &(0x7f0000000000)=r7, 0x8) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 12.610862447s ago: executing program 3 (id=2777): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) r1 = gettid() (async) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$kcm(0x11, 0x0, 0x300) (async) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffb, 0x6}, 0x0, 0x0, 0x6, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x4000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10000, 0x3, 0xfffffffe, 0x3, 0x20006, 0x35, 0xffff, 0x0, 0x0, 0x0, 0xe246}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r7) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x66bf}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000005c", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) (async) recvmsg(r0, 0x0, 0xa2) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x4}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200), 0x4) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r2], 0x14}}, 0x0) (async) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x2400}, 0x0) (async) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00') 12.338263714s ago: executing program 3 (id=2779): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000106050000000000000000000000000275c2c937ab85d65b5983dcd5f298f5602a9255daa287b2ae934c"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4001040) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x810) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000007060300000000000000000001009ced"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) 11.82171556s ago: executing program 3 (id=2781): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8fe9cb7907021175f37538e486dd6317ce22667f2f"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10000000000002, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0xc8, 0xffff, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x0, 0x60000000, 0x2e, 0xfffffe99, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0xf}, {0x0, 0x0, 0x0, 0x81}]}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) 11.676663079s ago: executing program 3 (id=2784): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) (async) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x9, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000b80)=""/251, 0xfb}, {&(0x7f0000000a80)=""/203, 0xcb}, {&(0x7f0000000980)=""/189, 0xbd}, {&(0x7f0000000d40)=""/318, 0x13e}, {&(0x7f0000002040)=""/4156, 0x103c}], 0x6}, 0x40012002) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000700)="14000000350094fb0100fc6022f388a500000000", 0x14}], 0x1}, 0x4000800) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2008c0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2008c0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'batadv_slave_1\x00', 0x1012}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r4}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r4, &(0x7f0000000440), &(0x7f0000000000), 0x2}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xe, 0x3}]}, @enum={0xd, 0x9, 0x0, 0x6, 0x4, [{0x8, 0x4398}, {0x6, 0xff}, {0xd, 0x49}, {0x7, 0x2}, {0xd, 0x10}, {0x7, 0x101}, {0xc, 0x4}, {0xc, 0x9}, {0xc, 0x1}]}, @restrict={0x5, 0x0, 0x0, 0xb, 0x6}, @const={0x7, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x30, 0x2e, 0x30, 0x0]}}, &(0x7f00000005c0)=""/60, 0x9e, 0x3c, 0x0, 0xfa}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f00000002c0)='GPL\x00', 0x101, 0xb, &(0x7f0000000300)=""/11, 0x41000, 0x10, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000680)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x9, 0x101, 0xfff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 11.401335052s ago: executing program 3 (id=2785): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x2, 0x0, 0x0, 0x13, 0x1, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28, 0x0, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12) 11.204073383s ago: executing program 3 (id=2787): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000009c0)=r3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="141dd328da07c1ae895a0000003a00010329bd70000900ffff040000001cca1c612de621a6f0e5e50c4e494b4a924a60d2538ac52f1e709f75535b8eced6fb4b2f78aa3ec39e4648682e74b1a61bd0c9d15a307a2dcc540ca555f04e4e888f232db2033b356edcccb37a617b7fb55bb6bef3e3738e2324396d7c5f259b85e7b9f5ca9187dd7f5acc7af61be8fb432edddb01a758de56a8e6639b61a6c3d3b856bd17d75e580b6bf02f00d3e06a6b17ff3d7226d0b27be62d64a3b65745f5ef1ee34df13e1a89bae4ec22781ba3048829e26390638296a25007ff5c12d4d0c1b5053343cbdeb2979704ef"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 6.913351949s ago: executing program 5 (id=2808): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000016000000b40000000300000000000000", @ANYRES32, @ANYBLOB="000000000000200000000000000000000000000075e2598a779b3ed795f04b78dd4c5b82ce5736a350b15e413e2f3bb31b89c8c31349834dfda7602250af415763e30c958f480f0f2bc6713d27536e14b24d7fe6f50221e136f1ad65c5fd0c6e7505ee6d4f1a46d16ea690a5facc6f47237003c4c5db0c4f5381ffb19930bf99c702fe283d1fe88bf91b3d2911c42096b16ca9e985de37ce9082b63fc6aee99cc832aa27bea1914f48ee87064b416d8ce52b58fd2a6935ce736b6e8c8a8ed99323d95a19", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xffffffffffffffff}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x2, [@volatile={0xd, 0x0, 0x0, 0x9, 0x4}, @enum64={0x6, 0x1, 0x0, 0x13, 0x1, 0xb, [{0xd, 0x8000, 0x1}]}, @fwd={0x5}, @typedef={0xf, 0x0, 0x0, 0x8, 0x4}, @fwd={0xb}]}}, 0x0, 0x62, 0x0, 0x1, 0x46}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10010}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x7, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x80) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000380)={'gretap0\x00', @broadcast}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180b0000a71bee83b0000000000000000700000095000000003b2c7f3b8c6546556e89258c16a9400c633ae432a802de34364996e45f252da5d3daff4bbfb82e59fdf4f984be8f7a585856c1b072f8ad7fb38b6ba6fe0300d1b9faf917b2b6540aeb2a3bf95ea97dd591ed690adf053fddf62b6872cebf1b1a2f698aaad92adef45d6fb29d6622f36ac37f0967370dfb69fa408af276"], 0x0, 0xfffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000005240)=""/4125, 0x101d}, {0x0}, {&(0x7f0000002b40)=""/194, 0xc2}, {&(0x7f0000004200)=""/4113, 0x1011}, {0x0}, {&(0x7f00000007c0)=""/180, 0xb4}, {&(0x7f0000002f00)=""/4096, 0x1000}, {0x0}], 0x8}, 0x10100) r6 = socket(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x96) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES64=r5], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x4880) r9 = socket$kcm(0x2, 0x5, 0x84) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x7c, &(0x7f0000000000)=r10, 0x62) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x9}, 0x94) close(r5) 6.871080334s ago: executing program 8 (id=2809): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004000000ff"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x7c}}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x17, &(0x7f0000000440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000480), &(0x7f0000000500), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@int={0x3, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, 0x4, 0x5}, @union={0x1, 0x1, 0x0, 0x5, 0x1, 0x9, [{0x4, 0x3, 0xa5}]}]}, {0x0, [0x61, 0x0, 0x5f, 0x30, 0x30]}}, &(0x7f0000000900)=""/4096, 0x47, 0x1000, 0x1, 0xf2}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x80000001, '\x00', r7, r8, 0x1, 0x0, 0x3}, 0x50) setsockopt$sock_attach_bpf(r3, 0x29, 0x4c, &(0x7f00000000c0)=r6, 0x4) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r9, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x232081526239e763}, 0x4040084) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00ff050000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 6.553799519s ago: executing program 8 (id=2811): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @private=0xa010102}, 0x4, 0x83, 0x3, 0x3}}, 0x80, 0x0}, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000200000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) 6.504368557s ago: executing program 5 (id=2812): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x100, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.events\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x49, 0x3, 0xe, 0x6, 0x0, 0x5, 0x88004, 0xd, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x53, 0x0, @perf_bp={0x0, 0x4}, 0x20000, 0x3, 0x8, 0x1, 0x6, 0x9, 0x4, 0x0, 0x40, 0x0, 0x89bc}, r1, 0x4, r0, 0x4) socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="670000008c400000760000000000000027000000000000009500000000000000dbfd0b9b7cea8f79e657849ff83588bc3ea414a717"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x408003, 0xaea}, 0x14105, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xd, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000140)='cpu<-0Z\a\x00\x00\x00\x00\xf5\x00\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xef96aef, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000300)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x3, 0x7, 0x2}, 0x10, r3, 0xffffffffffffffff, 0x1, &(0x7f0000000380)=[r1, r1, r1], &(0x7f00000003c0)=[{0x1, 0x2, 0x2, 0x7}], 0x10, 0xd2}, 0x94) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8994, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') 6.437756049s ago: executing program 8 (id=2813): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() r2 = perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$sock(r4, 0x0, 0x8004) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) mount$bpf(0x20000000f0ff, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000000), 0x40, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffd11}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0/file0\x00', r5}, 0x18) unlink(&(0x7f0000000140)='./file0/file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r6}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000040)={0x2}, 0x75) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) sendmsg$inet(r8, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x6c, 0x15, 0xa, 0x0, 0x0, 0x0, {0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1000}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000011}, 0x40000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0xc020, 0x0, 0x3, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xf, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.52978758s ago: executing program 6 (id=2814): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.528511835s ago: executing program 8 (id=2815): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8000, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x2ff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000140)) 5.427106125s ago: executing program 6 (id=2816): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x9}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x9}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x20, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x4, 0x1}, @typed={0x4, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000005380)='ns/ipc\x00') (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000005380)='ns/ipc\x00') socket$kcm(0x18, 0x0, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) socket$kcm(0x21, 0x2, 0x2) 5.361443844s ago: executing program 5 (id=2817): r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000019008111e0020f060d8107040a6009fffdbed7f95c0255a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c316fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x4000000) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8000}, 0x115905, 0x4, 0x0, 0x2, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000200000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) sendmsg$unix(r4, &(0x7f0000004c40)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x100000000002, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000006c0)={'dvmrp1\x00', 0xa00}) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}, @jmp={0x5, 0x1, 0x2, 0x5, 0x1, 0xffffffffffffffe0}, @call={0x85, 0x0, 0x0, 0x65}, @generic={0x2, 0xe, 0x1, 0xc, 0x4}, @generic={0x1d, 0xb, 0x1, 0x10, 0x5}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x8, 0x3, 0xd, 0x10, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xa1}], &(0x7f0000000100)='GPL\x00', 0x5, 0xed, &(0x7f0000000140)=""/237, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x6}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x20000, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x53, &(0x7f0000000000), 0x4) write$cgroup_subtree(r7, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0212000c020900002abd7000ffdbdf25"], 0x10}}, 0x4000) write$cgroup_int(r7, &(0x7f0000000540)=0x3, 0x12) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000004d31, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000700), 0xa}, 0x6002, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r12, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1802000000000080000000000b000010850000003700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.025146482s ago: executing program 6 (id=2818): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c00000000040000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911048000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = getpid() r4 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0xfb, 0x15, 0x9e, 0x0, 0x4, 0x20110, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf2, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x0, 0x80000001, 0x7, 0x1, 0x5, 0x1, 0xfff, 0x0, 0xffff0001, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, r2, 0x1) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x1, 0x9, 0x69, 0x6, 0x0, 0xfffffffffffffff8, 0x8000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000200), 0x6}, 0x600, 0x5, 0x7, 0x7, 0xffffffffffffffff, 0xf647, 0xfff7, 0x0, 0x86b8, 0x0, 0x8}, r3, 0xe, r4, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x22, 0x2, 0x1, &(0x7f0000000080)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000fc24c043ac7c8aaebfa9ffffff000000000b0000000cfba0226fedb4cb5e7b2c4c3b7ed72d50ca509eeea7dfe2633a588168a28ac4cc282938b0f8e67545d02ccfc60a3ddaecfe3de04535c484ebb5826b1f1c7c37a9f807611998eea3e74371479aded3b8ca2d8dfc0d159cb1da19c2a0ef9f358f4ff938cf835d69ca4f3cc4d20202"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001540)={{}, 0x0, &(0x7f0000001500)='%-5lx \x00'}, 0x20) (async) r7 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) (async) recvmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2020) (async) recvmsg$kcm(r7, 0x0, 0x40000100) (async) recvmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x14, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r8, &(0x7f0000000000), 0x0}, 0x20) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005401c02000008000640"], 0x6c}}, 0x0) 4.731238087s ago: executing program 6 (id=2819): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x80, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4100}, 0x8800) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000000240)=""/143, 0x0, 0x8f, 0x0, 0xf}, 0x28) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000250001012cbd7000fbfffffe5775d26a0800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28850) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$inet(0x2, 0x2, 0x1) socket$kcm(0xa, 0x2, 0x3a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x30}]}, &(0x7f0000000180)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2600c055) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000040)=r5, 0x4) 4.024618275s ago: executing program 0 (id=2820): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$kcm(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@phonet, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/221, 0xdd}, {&(0x7f0000000240)=""/113, 0x71}, {&(0x7f00000002c0)=""/125, 0x7d}, {&(0x7f0000000340)=""/44, 0x2c}], 0x4, &(0x7f00000003c0)=""/49, 0x31}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000440)={r1}) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x400c180) socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000580)={r3, r0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x1, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x60, 0x140b, 0x200, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x8d5) socket$l2tp6(0xa, 0x2, 0x73) socket$kcm(0x29, 0x1, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x1, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x400040, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000940)={'ip6_vti0\x00', 0x1}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x58, 0x1410, 0x10, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000ac0)) r5 = perf_event_open$cgroup(&(0x7f0000000c00)={0x3, 0x80, 0x2, 0x6, 0x3, 0x6, 0x0, 0xe, 0x11940, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000bc0), 0x4}, 0x1080, 0x1, 0x4, 0x4, 0x28000000000, 0x6, 0x7, 0x0, 0x3, 0x0, 0x9}, r0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000b40)={0x4, 0x80, 0x3, 0x79, 0x10, 0x8, 0x0, 0x8, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000b00), 0xf}, 0x0, 0x5, 0x401, 0x6, 0xff6, 0x8001, 0x7000, 0x0, 0x7ff, 0x0, 0x3ff}, 0xffffffffffffffff, 0x2, r5, 0x2) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000d40)={&(0x7f0000000c80), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, 0x1, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x4086040) ioctl$TUNGETVNETBE(r4, 0x800454df, &(0x7f0000000d80)=0x1) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000002100)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000020c0)={&(0x7f0000000e00)={0x12b4, 0x1, 0x5, 0x101, 0x0, 0x0, {0xc, 0x0, 0x1}, [{{0x254, 0x1, {{0x1, 0xfbfd}, 0xf7, 0xf7, 0x100, 0x0, 0x3, 'syz0\x00', "cc582b387cfd3c40879ac1718fc0eb1e1ecdfc3a58c246666c3901089654fdc1", "e5790799574097194ef30b0b91f39d9bdd029b2b16cbd8028363c9d1e827ca0d", [{0x6, 0xd034, {0x3, 0xfffffffe}}, {0x6, 0xfff, {0x1, 0x62e1c1d5}}, {0x0, 0xff, {0x2, 0xff}}, {0x7, 0x7, {0x0, 0x1ff}}, {0x7, 0x1, {0x1, 0x5d88}}, {0x1, 0x3f, {0x0, 0x7}}, {0x80, 0xff, {0x1, 0x8}}, {0x8, 0x776, {0x2, 0x6}}, {0x8, 0x6, {0x0, 0xfffffffb}}, {0x13, 0x9, {0x3, 0xeec}}, {0x7964, 0x1, {0x0, 0x1}}, {0x1, 0x0, {0x3, 0xfcfb}}, {0x5, 0x39a, {0x2, 0x200}}, {0x6, 0xe, {0x1, 0x3}}, {0x7, 0x3, {0x0, 0x2}}, {0x7, 0x2, {0x2, 0x7f}}, {0x7, 0x401, {0x2, 0x9}}, {0x7fff, 0x1ff, {0x1, 0xfffffff7}}, {0x4, 0x7ff, {0x3, 0xb18}}, {0xfffa, 0x409, {0x0, 0xbe}}, {0x5, 0xff1a, {0x2}}, {0x1, 0xf54c, {0x3}}, {0xa999, 0x5, {0x2, 0x80000001}}, {0xfffe, 0x1ff, {0x0, 0x922e}}, {0x2, 0x5, {0x0, 0x4}}, {0x6, 0x5, {0x2, 0x1}}, {0x592, 0x1ff, {0x3, 0x7}}, {0x0, 0xfffd, {0x3, 0x7}}, {0xfff7, 0x7fff, {0x0, 0xe9}}, {0x1, 0xa, {0x1}}, {0x5, 0xf83, {0x1, 0xfff}}, {0x3, 0x5, {0x0, 0x9}}, {0x2, 0x3, {0x2, 0xd1}}, {0x9, 0x10, {0x2, 0x400}}, {0x1ff, 0x10, {0x3, 0x7fffffff}}, {0xff00, 0x6, {0x3, 0x2}}, {0x6, 0x9, {0x3, 0x1}}, {0x3, 0x4, {0x3, 0x1}}, {0xb55, 0x2, {0x2, 0x6}}, {0x7, 0xa1b8, {0x0, 0xfb18}}]}}}, {{0x254, 0x1, {{0x2}, 0x2, 0x7, 0x5, 0x55, 0x13, 'syz1\x00', "0dbd2f75e03b4245f09dc3e48f7d0c4e2c9da1c81533dc2564102ddc9f7a1509", "561cabc2a99a39c784e788bc41fa7414f6e7246d5393b19d2c2ffec3d92ba94a", [{0xffff, 0x6, {0x1, 0x5}}, {0x6, 0x6, {0x2, 0x5}}, {0x8, 0x1, {0x3, 0x1}}, {0x102d, 0x6, {0x3}}, {0x8, 0x7, {0x0, 0x7c}}, {0x7, 0x9, {0x0, 0x8}}, {0x0, 0xa, {0x3, 0x7}}, {0x8, 0x5, {0x3, 0x573429d9}}, {0xff80, 0x3, {0x3, 0x81}}, {0x2, 0x10, {0x1, 0x1}}, {0x1000, 0x2, {0x3, 0x3b30044e}}, {0x0, 0x1000, {0x3, 0x40}}, {0x6, 0x1000, {0x1, 0x7fffffff}}, {0x89, 0x401, {0x1, 0x8882}}, {0x2e0, 0x2, {0x3, 0xa}}, {0x2, 0xdd, {0x3, 0x2}}, {0x81, 0x8, {0x3, 0x2}}, {0x1, 0x6, {0x0, 0x5}}, {0xfe11, 0x5, {0x0, 0x2}}, {0x88da, 0x1, {0x0, 0x10001}}, {0x4, 0x2c6, {0x1, 0x9}}, {0x7a0d, 0x8, {0x0, 0x8000}}, {0x87b, 0x1, {0x0, 0x291cc267}}, {0xf, 0xde96, {0x1, 0x8f}}, {0x401, 0x8, {0x2, 0x6}}, {0x9, 0x51, {0x2, 0x2}}, {0x401, 0x8001, {0x2, 0x5}}, {0xe, 0x3, {0x1, 0x73}}, {0xcc43, 0x8, {0x3, 0xfffffff9}}, {0x9, 0x6, {0x2, 0xff}}, {0x0, 0x117, {0x0, 0xfff}}, {0x1, 0x3, {0xc627769cc535819e, 0x3}}, {0x1010, 0x4, {0x2, 0x4}}, {0xd, 0xc6, {0x3, 0x9}}, {0x4, 0xd0f, {0x0, 0x8}}, {0x3, 0x6, {0x3, 0x2}}, {0x9b, 0x5, {0x1, 0x6}}, {0x5, 0x7ff, {0x3, 0xfffffff7}}, {0x9, 0x5, {0x3, 0x279}}, {0x101, 0x8000, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0xff, 0xb, 0x40, 0x3, 0x24, 'syz1\x00', "ac1479dda9f25aa730ea833572245ebaf0fc2b1037ac8c90fe8a3c55c2cbdcad", "eddf23a511805283809d948b62fabeff42e62d9e61bbd602f0ec1620f216be8f", [{0x707, 0x8, {0x1, 0x4}}, {0xc71, 0x401, {0x2, 0xf226}}, {0x4, 0x7, {0x3, 0x2ec5}}, {0x0, 0xc, {0x0, 0x6}}, {0xf4, 0xfd, {0x1, 0x7fc00000}}, {0x10, 0x3, {0x1, 0x9}}, {0x2, 0x70, {0x3, 0xb}}, {0x4, 0x2, {0x1, 0x1ff}}, {0x657, 0x8, {0x1, 0x8}}, {0x694d, 0x2, {0x0, 0x2}}, {0xd632, 0xa, {0x0, 0x5}}, {0x0, 0x8001, {0x2, 0x2}}, {0x3, 0xfc01, {0x3, 0xfffffff0}}, {0x8, 0x0, {0x2, 0x81}}, {0x2, 0x3, {0x1, 0x23f}}, {0x7, 0x6, {0x2, 0x401}}, {0xf, 0x66af, {0x0, 0xfffffffb}}, {0x5, 0x100, {0x3, 0xfffffffd}}, {0x578f, 0x8000, {0x3, 0x2}}, {0x1, 0x1, {0x1, 0x7}}, {0x84, 0x401, {0x0, 0x6}}, {0x0, 0x2, {0x1, 0x7}}, {0x6, 0x4, {0x1, 0xe1}}, {0x7f, 0xced, {0x2, 0x7}}, {0x9, 0x2, {0x0, 0x1}}, {0x4, 0x3, {0x0, 0x80000001}}, {0x7ff, 0xbf28, {0x3, 0xffffffff}}, {0x8001, 0x100, {0x1, 0x10001}}, {0x7, 0x8}, {0xdb4b, 0xc2, {0x0, 0x8}}, {0x4, 0x10, {0x0, 0x1138b27a}}, {0x401, 0x9, {0x2, 0x17}}, {0x6, 0x10, {0x0, 0xfffffc25}}, {0xd646, 0x2, {0x2, 0x1}}, {0x4, 0x8000, {0x3, 0x1}}, {0xc650, 0x0, {0x0, 0x1}}, {0x976a, 0xfff7, {0x2, 0x1}}, {0x4, 0x8000, {0x3, 0x4}}, {0x4, 0xfffd, {0x3, 0xd5e0}}, {0x6, 0x800, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x6b3fbec11f306601, 0x400}, 0xb, 0x0, 0x1, 0x0, 0x11, 'syz1\x00', "e927509b934296ba5058204574774e1b6f383651f54fcf304d73055ff4f87578", "15c57f2c154bedc8df4888133912db6120962754e678a76a4d8cc3c769e7c443", [{0x4, 0x9, {0x1, 0x800}}, {0xff, 0x4, {0x0, 0x3}}, {0x2, 0x620, {0x1, 0x4}}, {0x6, 0x50}, {0x2, 0x9, {0x3, 0x200}}, {0x9, 0x1, {0x0, 0x6}}, {0x1, 0xd, {0x3, 0x1000}}, {0xf, 0x7, {0x3, 0x7}}, {0x3, 0x5, {0x2, 0x5}}, {0x6, 0x8, {0x0, 0xe0e0}}, {0x6, 0x7, {0x1, 0xfff}}, {0x8, 0xff, {0x1, 0xd7}}, {0xd3, 0xf, {0x0, 0x9}}, {0x7fff, 0x1, {0x1, 0x1}}, {0x7, 0x5, {0x1, 0x7}}, {0x7, 0x0, {0x2, 0x3}}, {0x4, 0x7f, {0x0, 0x250}}, {0x81, 0x6, {0x2, 0xb2}}, {0xfc, 0x1, {0x2, 0x3d4}}, {0x6, 0xb69e, {0x1, 0x67c}}, {0x9, 0x82ab, {0x3, 0x80000000}}, {0x5, 0xff, {0x2, 0xd}}, {0x3, 0xfffe, {0x0, 0x5}}, {0x2, 0x0, {0x2, 0x8000}}, {0x3, 0x6, {0x1, 0x6fc5}}, {0xb4, 0x5, {0x3, 0x200}}, {0x1, 0x7, {0x7b28a051d0f86acb, 0x7fffffff}}, {0x200, 0x0, {0x2, 0x4}}, {0xb, 0x7ff, {0x0, 0xfffff739}}, {0x3, 0x5, {0x2, 0x7fff}}, {0x7, 0x1, {0x1, 0x1}}, {0x10, 0x35, {0x2, 0x8001}}, {0x2, 0xccbc, {0x1, 0x6a39bf68}}, {0x4, 0x7f3, {0x3, 0x9}}, {0x2, 0xe, {0x1, 0xb}}, {0x5, 0x6, {0x0, 0x3}}, {0x5, 0x935b, {0x0, 0x3}}, {0x6, 0x40, {0x2, 0x7}}, {0xfffe, 0x0, {0x2, 0x8}}, {0x2197, 0x0, {0x2, 0xfffffff8}}]}}}, {{0x254, 0x1, {{0x0, 0x31}, 0x5, 0x2, 0x0, 0x6, 0x6, 'syz0\x00', "0fc8fd8e5aebd3869888760d64176ceaecc2d126b3b34b6cd343c82f1a4f9edb", "89bb33ec11caf96e19d71469d8cf1f9db8be2b660d18cf54b930daab3ccea54e", [{0x6, 0x5, {0x3, 0xfe4}}, {0xfbff, 0x6, {0x3, 0x5}}, {0x6, 0x1, {0x2, 0xdf}}, {0xfffa, 0x44, {0x3, 0x8}}, {0x42a9, 0x6, {0x0, 0x5}}, {0xfff9, 0x9, {0x3, 0x9}}, {0x4, 0x80, {0x3, 0x10001}}, {0x7, 0x8, {0x1, 0xb}}, {0x9, 0xffff, {0x3, 0xe0e}}, {0x2, 0x8, {0x0, 0x9}}, {0x8, 0x1000, {0x0, 0xfffff000}}, {0x3ff, 0x3, {0x0, 0x8}}, {0x1800, 0x2, {0x1, 0x2}}, {0x7, 0x751, {0x2, 0x3}}, {0x9, 0x400, {0x2, 0x800}}, {0x5, 0x12ec, {0x3, 0xd0f}}, {0x7, 0xffff, {0x1, 0x5}}, {0x5, 0xe4, {0x2, 0x7}}, {0x3, 0x7ff, {0x2}}, {0x200, 0x1, {0x1, 0xaa0}}, {0x800, 0x200, {0x1, 0x5}}, {0x3ff, 0x19, {0x2, 0x9}}, {0x252, 0x40, {0x1, 0x2}}, {0x3, 0x6, {0x3, 0xf}}, {0x4, 0x4, {0x1, 0x2}}, {0xa1, 0x9, {0x3, 0x3c}}, {0x2, 0x401, {0x3, 0xa}}, {0x40, 0x2, {0x1, 0x9}}, {0x5, 0x1, {0x1}}, {0x9, 0x7f, {0x0, 0xfffffff8}}, {0x4, 0x10, {0x2, 0x120000}}, {0x4, 0xd98, {0x2, 0x30}}, {0x2, 0x7, {0x0, 0x99c1}}, {0x5, 0x7, {0x3, 0x800}}, {0xfffb, 0x7, {0x2, 0x80000000}}, {0x0, 0x0, {0x0, 0x68}}, {0x1, 0x8, {0x3, 0x4}}, {0x3000, 0xb, {0x85829883cffb6c76, 0x6}}, {0x3, 0x8d9, {0x1, 0x5}}, {0x4, 0x2, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0xc1, 0xa, 0x8, 0x10, 0x14, 'syz0\x00', "4bbf9b02886b36058f4caca4f4b819a956157c406bc294c06a5a7762dfe86613", "7c722833ef98f638e71e988ee100bed170259e7eb404400e332c25306812c454", [{0x2, 0x100, {0x0, 0x8}}, {0x107, 0x2, {0x2}}, {0x6a83, 0x75, {0x2, 0x3ff}}, {0x9d20, 0x7, {0x2, 0x2}}, {0x0, 0x5, {0x3, 0x5}}, {0xff, 0xfff8, {0x0, 0x62}}, {0x2600, 0x800, {0x1, 0x10000}}, {0xbc, 0x4, {0x1, 0xe7e3}}, {0x4, 0x6, {0x1, 0x4}}, {0x1ff, 0x5, {0x3, 0x7}}, {0x8, 0x8001, {0x2, 0x9}}, {0xaec7, 0x9, {0x3, 0x3}}, {0x1, 0x2c, {0x0, 0x2}}, {0x2, 0x7, {0x3, 0x6}}, {0x9, 0x8, {0x2, 0x2d}}, {0x3, 0x9, {0x3, 0xe}}, {0xffff, 0x9da, {0x1, 0x1}}, {0x2, 0x2, {0x3, 0x8}}, {0x4, 0xa, {0x2, 0x8}}, {0x6, 0x5, {0x2, 0x3}}, {0x6, 0x7, {0x2, 0x4}}, {0x95, 0x5, {0x3, 0xd27c}}, {0x5, 0x2, {0x0, 0x7}}, {0x3ff, 0x1, {0x3, 0x9}}, {0xa5c, 0x6, {0x3, 0x56d}}, {0x2, 0x1b3, {0x2, 0x80}}, {0x2, 0xa, {0x1, 0x1}}, {0x0, 0x3, {0x1, 0x3}}, {0x9, 0xffff, {0x1, 0x8001}}, {0xd, 0x3be1, {0x0, 0x10}}, {0x4, 0x4, {0x3, 0x7}}, {0x8, 0xd, {0x2}}, {0xebea, 0x100, {0x1}}, {0xb0, 0x7}, {0x0, 0x4, {0x1, 0x100}}, {0x7, 0x7}, {0x5, 0xf3, {0x2, 0x4e0}}, {0x1, 0x1, {0x0, 0x4}}, {0x3, 0xff, {0x1, 0x2}}, {0xff, 0x6, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0xf21b}, 0x5, 0xff, 0xfff, 0x5b, 0xe, 'syz0\x00', "458d21cb0731946d3a311f4d0b49476c2faa7a1436951b97c4e46919d5fe0e9a", "26cebc5a9c57e28b171175d19f2cf0706e6733c494db0f1e34778c8c956224da", [{0x8, 0x1, {0x1, 0x6}}, {0x40, 0x8001, {0x0, 0xae}}, {0x9, 0x80, {0x1, 0x4}}, {0x7, 0x0, {0x2, 0xd50}}, {0x2, 0x5d20, {0x3, 0x7}}, {0xb95, 0xfff8, {0x0, 0x7f}}, {0x3, 0x2, {0x2, 0x4}}, {0x9, 0xee, {0x3, 0x7}}, {0xd3, 0x40, {0x1, 0x3}}, {0x708, 0x4, {0x1, 0x8}}, {0x1, 0x1, {0x1, 0x7b}}, {0x101, 0x6, {0x3, 0x7fffffff}}, {0x310d, 0x1000, {0x2, 0x80000}}, {0xbb5, 0x0, {0x3, 0xfffffff8}}, {0x3ff, 0x7, {0x2}}, {0x3, 0x5, {0x1, 0x3}}, {0x8, 0x5, {0x0, 0x9}}, {0xa2f, 0x3, {0x1, 0x7}}, {0xc, 0x0, {0x2, 0x7}}, {0x6, 0x3, {0x2, 0xbbc1}}, {0x7ff, 0xb71, {0x1, 0xa97f}}, {0xb7, 0x7, {0x2, 0x97}}, {0x116, 0x4, {0x0, 0x2}}, {0xff00, 0x200, {0x3, 0x2}}, {0xa828, 0x8001, {0x2, 0xc0000}}, {0x7, 0x8001, {0x0, 0xbd}}, {0x8, 0x5, {0x0, 0x1000}}, {0x2, 0x7ff, {0x2, 0x4}}, {0xd, 0x983, {0x3}}, {0x46d0, 0x5, {0x2, 0x3}}, {0x5, 0x7798, {0x3, 0x5}}, {0x1ff, 0xd, {0x0, 0x3}}, {0x2, 0x80, {0x1, 0x357}}, {0xb1, 0x7, {0x2, 0xd}}, {0x401, 0x8, {0x0, 0xd}}, {0x0, 0x8, {0x999ea881c9a6d582, 0x9}}, {0x4, 0x9, {0x3, 0xb}}, {0x2, 0x3, {0x2, 0x80000000}}, {0x401, 0x400, {0x1, 0x315}}, {0x7, 0x7fff, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0x5f1}, 0x3, 0x9, 0xa, 0xb, 0x8, 'syz0\x00', "662f8880ac385470acee412a42b4a953095ff7eefac7c1b87933089fe0dc762f", "1aca448b5dbc764bc3f246d51e419f9875cbf1a3ba8a4294e8bc273353af5b56", [{0x401, 0xe, {0x3, 0x3}}, {0x1, 0x2, {0x0, 0xc}}, {0x5, 0x0, {0x2, 0x5}}, {0x6, 0x4, {0x0, 0x86}}, {0xff, 0x8, {0x0, 0x5}}, {0xa, 0xc, {0x2, 0x6}}, {0x4, 0x1b14, {0x2, 0x101}}, {0x0, 0x5, {0x2, 0x9}}, {0xe6ef, 0x4, {0x1, 0xffffffff}}, {0x4, 0xe, {0x1, 0x80000}}, {0xfff, 0x6, {0x2, 0x7}}, {0x8, 0x57e, {0x1, 0x8000}}, {0x4661, 0x800, {0x7774a955c836190a, 0xfffffff7}}, {0x3, 0x6, {0x2, 0xffff}}, {0x8, 0x4, {0x3161414cb6e461df, 0x3}}, {0x3, 0x7, {0x1, 0x3}}, {0xfffa, 0x7ff, {0x3, 0xffff}}, {0xc2cf, 0x3, {0x3, 0x3}}, {0xd, 0x0, {0x2, 0xffffffff}}, {0x7fff, 0x41f3, {0x0, 0x3}}, {0x22c, 0xce, {0x3, 0x6}}, {0x1, 0x4, {0x0, 0x10}}, {0x4, 0x5, {0x3, 0xffff2fb9}}, {0x5, 0x600, {0x3, 0x3}}, {0x7, 0x4, {0x3, 0x1}}, {0xfffe, 0x3, {0x1, 0x9}}, {0x7f, 0xc17, {0x3, 0xfffffffa}}, {0x1, 0x34, {0x1, 0xef}}, {0x8, 0x8, {0x0, 0x1}}, {0x1, 0x8, {0x0, 0x2}}, {0x9, 0x6, {0x1}}, {0xf5a0, 0x0, {0x1, 0x1}}, {0xde49, 0xdc4, {0x3}}, {0x2, 0x4, {0x3, 0x30}}, {0x7f, 0x1, {0x2, 0xf7}}, {0x1, 0x4, {0x2, 0x4}}, {0x0, 0x8, {0x2, 0xe32}}, {0x5, 0x7, {0x3, 0x10000}}, {0x4, 0x1, {0x1, 0x8}}, {0x0, 0x5, {0x3, 0x1}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x8044}, 0x800) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x2c, 0x4, 0xa, 0x300, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x810) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$sock(r2, &(0x7f00000023c0)={&(0x7f0000002240)=@pppoe={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, 'ipvlan0\x00'}}, 0x80, &(0x7f0000002380)=[{&(0x7f00000022c0)="d1a993241e6a674d42f81f320924c4bfb99ea76fb1a1e95d5e8902353451965bbfee1f3ef02f3337813001c02ed6c8b86f00a27a859cb4bcf704797e368f9fd58dca62aadfa14ef057b85c6f203fb1a7b7bd5944324bd7ac2e2e302dc05d5156ad05b5bd772ccb740ac087ddf3b4d82f6ecb1263e1be16e9c86035eaefc3f94a0115379a4b0bb55cd103265868e67d0a7a1c80a639879783f5357f6fff23f8d93158", 0xa2}], 0x1}, 0x400) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000002400), 0x8) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000002440)={r7}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r8, &(0x7f00000030c0)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003080)={&(0x7f00000024c0)={0xbb8, 0x1, 0x5, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [{{0x254, 0x1, {{0x2, 0x9c}, 0x2, 0xfc, 0x8, 0xf21, 0xf, 'syz0\x00', "68fbc6cb94230af8bfc01e6a0bf10b29645d629fab4f9e59b17ef304afb5ed14", "019fe4d3bf7479f50f3391f1949897e75b61e92b0c1a28ff94af4aace8156b70", [{0x4, 0xf, {0x3, 0x4}}, {0xe45, 0x4, {0x0, 0x9}}, {0xb66, 0x1, {0x2}}, {0x8f9, 0x99, {0x2, 0xa3}}, {0x53a8, 0x6, {0x2, 0x372}}, {0x4, 0x1da, {0x0, 0x6}}, {0x1, 0x64c, {0x2, 0x2}}, {0x9, 0xffd, {0x0, 0x80}}, {0x3, 0xfff, {0x0, 0x4}}, {0x8000, 0x1, {0x1, 0x4}}, {0x7, 0x9, {0x2, 0x8000}}, {0xaf4, 0x92, {0x3, 0xea17}}, {0x6, 0x43cd, {0x1, 0x8}}, {0x8, 0xffff, {0x1, 0x4}}, {0x8, 0xcb, {0x3, 0xf}}, {0x7, 0x4, {0x1, 0x5}}, {0x7, 0x0, {0x2, 0x401}}, {0x32, 0x6, {0x2}}, {0x3, 0x6, {0x2, 0x2}}, {0x7, 0x200, {0x3, 0x8}}, {0x87d, 0x8, {0x0, 0x7}}, {0xffff, 0x3, {0x2, 0x3ff}}, {0x8001, 0xfffc, {0x3, 0x4}}, {0xdc6, 0x6, {0x2, 0xffff}}, {0x8, 0x5, {0x0, 0x7}}, {0x99, 0x0, {0x1, 0x4}}, {0x8, 0x2, {0x1, 0x1}}, {0x1, 0x2, {0x0, 0x3}}, {0x6a3, 0x6, {0x2, 0x9}}, {0x43f, 0x1, {0x2, 0xffffffff}}, {0x6, 0xd, {0x2, 0x7fffffff}}, {0x2, 0xa, {0x1, 0x1}}, {0xf, 0x6, {0x0, 0x6}}, {0x7, 0x3, {0x2, 0xfffffffc}}, {0xffff, 0x1, {0x3}}, {0xf, 0x9, {0x0, 0x7}}, {0x0, 0xaf84, {0x3, 0x2}}, {0x0, 0xffff, {0x2, 0x859}}, {0x4, 0x78d, {0x3, 0x8000}}, {0x6, 0x6}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x4, 0x1, 0x5, 0x8, 0x16, 'syz1\x00', "41a5fdb336d26149fe1ef61a1f39d7adf73e04fa1658b670b96b62c73ece4a3b", "ec67c7e5dcdb699f61f60c5a35442b0826dcaec437840bd5c47b7ce11ce44376", [{0x3, 0xe1, {0x3, 0xd}}, {0x10, 0x3, {0x0, 0x1}}, {0x7, 0x8, {0x3, 0x7a8}}, {0x9419, 0x2, {0x2, 0xeaa2}}, {0xb, 0x8, {0x3}}, {0x6, 0x198, {0x3, 0x72b3}}, {0x4, 0x7ff, {0x0, 0x80000000}}, {0x81, 0x5, {0x1, 0x6}}, {0x3, 0x3, {0x1, 0x4}}, {0x0, 0x0, {0x2}}, {0x5, 0x2, {0x1, 0x101}}, {0xfe01, 0x8, {0x2, 0x4}}, {0x200, 0x9, {0x0, 0x4}}, {0x5, 0x800, {0xd30c0ab8d224381c, 0x7}}, {0x7, 0x3, {0x0, 0x7fff}}, {0x9, 0xff, {0x1, 0xb0fc}}, {0x6b8e, 0x9, {0x0, 0x7}}, {0xd, 0x1, {0x2, 0x1200000}}, {0x2, 0x8, {0x2, 0x8}}, {0x5, 0xffc9, {0x0, 0x200}}, {0x7b, 0x4, {0x1, 0x8c}}, {0xfff9, 0x1722, {0x3, 0x9}}, {0x5, 0x5, {0x2, 0x6}}, {0xbab, 0x7, {0x3, 0x5}}, {0x1, 0x5, {0x1, 0x5}}, {0x0, 0x0, {0x3, 0xa08c}}, {0x89a6, 0x8, {0x0, 0x400}}, {0x6, 0xa9, {0x1, 0x140}}, {0x1ff, 0x5710, {0x1, 0x8c}}, {0x9, 0x4, {0x2, 0xa6f}}, {0xfffc, 0xca91, {0x1, 0x81}}, {0x2, 0x5, {0x0, 0x9}}, {0x5, 0xfff, {0x3, 0x240b}}, {0x6, 0xfff9, {0x2, 0x18}}, {0x6, 0xac, {0x2, 0x1}}, {0x2, 0xfe3, {0x0, 0x4b088156}}, {0x9, 0x4846, {0x1, 0x2}}, {0x200, 0x3f80, {0x1}}, {0x8, 0x77ea, {0x0, 0x8}}, {0x2566, 0x8, {0x0, 0xc8bc}}]}}}, {{0x254, 0x1, {{0x1, 0x6f}, 0x4, 0x6, 0xcc40, 0xc, 0x16, 'syz1\x00', "9bf9b72e84187509d28944802003a23fea6168f451e3da19d81f6fb5bddb4c9c", "9b69d5f39ae35c8f44fffbada70ffeaa2eabcf707c4d0fd569877295200c6ec6", [{0x3, 0x5}, {0x3, 0x1, {0x0, 0x1}}, {0x8, 0x7fff, {0x3, 0x6}}, {0x5, 0x401, {0x1, 0x3fe3}}, {0x9, 0x1, {0x0, 0x3}}, {0xfffe, 0x5, {0x2, 0x97}}, {0x693b, 0xfff, {0x1, 0xc8}}, {0x8, 0x5, {0x0, 0xc81d}}, {0x4, 0x800, {0x1, 0x2}}, {0x5, 0x5a40, {0x2, 0x9f}}, {0xfff8, 0x0, {0x0, 0x96}}, {0x0, 0x3, {0x1, 0x2}}, {0x1000, 0xfffc, {0x2, 0x3}}, {0x0, 0x0, {0x3, 0x80000000}}, {0x7, 0x2f, {0x0, 0x80}}, {0x0, 0xd4, {0x2, 0x2}}, {0xb, 0x14, {0x2, 0xf3be}}, {0x4000, 0x734, {0x3, 0x6}}, {0x1, 0x401, {0x1, 0x9}}, {0xef6c, 0xa83f, {0x1, 0xfe}}, {0x6b06, 0x1, {0x1, 0x1000}}, {0x1, 0x401, {0x2, 0x68666bb6}}, {0x1, 0x2, {0x2, 0x6}}, {0xff, 0x0, {0x2, 0x7fffffff}}, {0xfd, 0xfff9, {0x3, 0x10}}, {0x23b1, 0xb02e, {0x2, 0x1}}, {0xff7a, 0x9, {0x0, 0xd}}, {0x3, 0x3, {0x1, 0x1}}, {0xfff, 0x7f, {0x3, 0x401}}, {0x6, 0x6, {0x0, 0xc103}}, {0x8, 0x7, {0x1}}, {0x3, 0x7ff, {0x1, 0x4}}, {0x100, 0x8042, {0x0, 0x2}}, {0x3, 0x40, {0x3, 0x7}}, {0x6e17, 0x6, {0x0, 0xff}}, {0x4, 0x3, {0x0, 0x144a}}, {0x6, 0xff4f, {0x0, 0x2}}, {0xc6ba, 0x7f, {0x1, 0x5}}, {0x0, 0x100, {0x0, 0x1000}}, {0xd3, 0xff, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0x8, 0x54, 0x4, 0xf04, 0x2, 'syz0\x00', "3c29a64299d9b63e60d9d7986d3c0b906ef795005ca6fbaceb8e88a73fe34ac2", "5cfc6608b8f342d3e244d9d2c2c1d743383a0736442d35ccd367d495ddd304e8", [{0x56, 0x7, {0x3, 0x3}}, {0x4, 0x5, {0x1, 0x2}}, {0x1, 0x0, {0x3, 0x8}}, {0x8, 0xc6, {0x1, 0x3}}, {0x152, 0x3, {0x2, 0xb}}, {0x2a3c, 0x86, {0x1, 0xa}}, {0xffff, 0x2, {0x2, 0x4}}, {0x2, 0x0, {0x2, 0x6}}, {0x6f53, 0x1000, {0x2}}, {0xc9, 0xfff7, {0x2, 0xc}}, {0x0, 0x800, {0x3, 0x9c10}}, {0x0, 0x100, {0x3, 0x9}}, {0xb, 0xfffa, {0x2, 0xcc}}, {0x8, 0x7, {0x2, 0x18d}}, {0x4, 0x100, {0x2, 0x3}}, {0x9eda, 0x9, {0x3, 0x1}}, {0x852, 0x0, {0x1, 0x9}}, {0x0, 0x8, {0x2, 0x8001}}, {0x1, 0xfff8, {0x1, 0xd7f}}, {0x62, 0x8, {0x1}}, {0x677, 0xcf}, {0x9, 0x5, {0x1, 0x6}}, {0xfffe, 0x1000, {0x2, 0x1c}}, {0x7, 0x6, {0x1}}, {0xd15f, 0x9, {0x2, 0x1}}, {0x15, 0xeed, {0x1, 0x5}}, {0x2, 0x7, {0x3, 0x100}}, {0x101, 0x2, {0x2}}, {0x8, 0x8, {0x3, 0x9}}, {0x2, 0x9, {0x0, 0xcdb1}}, {0xb, 0x2, {0x2, 0x6}}, {0xd, 0xa, {0x3, 0x9}}, {0x2, 0x8e8b, {0x2, 0xbbda}}, {0xfffc, 0x9, {0x1, 0x2}}, {0x8, 0xeb, {0x0, 0x9}}, {0x3, 0x5, {0x3, 0x4}}, {0xfff, 0x8, {0x1, 0xfffffffe}}, {0x8, 0x7ff, {0x3, 0xfffffffe}}, {0xfff8, 0x942d, {0x0, 0x8}}, {0x2c7d, 0x82d, {0x2, 0x800}}]}}}, {{0x254, 0x1, {{0x2, 0xb}, 0x3, 0x1, 0x1, 0x5, 0x28, 'syz1\x00', "5d2374f1221b36689cf8151bac4c9ba00b022b21b07d666d4f0def2866e3fa75", "8e5b4e7d38c807d5856f2a232f3ed6f43541e881ed803a53c794f97eba32a526", [{0xc, 0x101, {0x3, 0x32ec}}, {0x1, 0x9, {0x3, 0x2}}, {0x7fff, 0x4, {0x1, 0x101}}, {0x2af, 0x0, {0x3, 0x22034fd5}}, {0x0, 0x7, {0x3, 0x5}}, {0x7, 0x3, {0x0, 0xd}}, {0x6, 0x4, {0x1}}, {0x6, 0xfffa, {0x1, 0x3bef}}, {0xe0af, 0xbdb3, {0x3}}, {0x780, 0x1ff, {0x1, 0xc0000000}}, {0x9, 0x0, {0x1, 0x3}}, {0x7864, 0x4, {0x2}}, {0xfff, 0xffff, {0x2, 0x800}}, {0x3, 0x9, {0x0, 0xc3d7}}, {0x5, 0x8e, {0x3, 0x3ff}}, {0x7, 0x9, {0x0, 0x6}}, {0x1ff, 0x2000, {0x2, 0xd37}}, {0x0, 0x8, {0x2, 0x2c}}, {0x7, 0x1, {0x0, 0xfffffffa}}, {0x2, 0x8001, {0x3, 0x7}}, {0x0, 0x7f, {0x1, 0x2e86}}, {0xd7, 0x6, {0x2, 0x40}}, {0x42b, 0x4, {0x0, 0x4}}, {0xb, 0xfff, {0x2, 0x6}}, {0x100, 0xfffa, {0x0, 0x7}}, {0x400, 0x100, {0x2, 0xfff}}, {0x8, 0x0, {0x2, 0x7}}, {0x3, 0x4, {0x1, 0xfffffff9}}, {0xd, 0x7, {0x2, 0x5}}, {0x6, 0x3, {0x1, 0xa}}, {0x8, 0x7, {0x0, 0x3}}, {0xf753, 0x2, {0x0, 0x9}}, {0x5, 0xf4bb, {0x0, 0x158d}}, {0x3, 0x3, {0x3, 0xd20}}, {0x5e4e, 0xf9, {0x1, 0x4}}, {0xffff, 0x9, {0x3, 0x8f76}}, {0x9, 0xc000, {0x3, 0x53}}, {0x1c00, 0xa12, {0x3, 0x7}}, {0x2, 0x3, {0x3, 0x8}}, {0x6, 0x51, {0x2, 0x40}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x20000010}, 0x11) 3.637478494s ago: executing program 0 (id=2821): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x25, &(0x7f0000000300)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff6e}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x8}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xf5}, @ringbuf_query, @generic={0x2, 0xa, 0x9, 0x1c2, 0x18}, @jmp={0x5, 0x1, 0xc, 0x9, 0x7, 0x57, 0x1}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x31}}], &(0x7f0000000040)='GPL\x00', 0xfffffff5, 0x97, &(0x7f0000000440)=""/151, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0x8, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x1, 0x3, 0x3, 0xa}, {0x1, 0x1, 0x4, 0x2}, {0x5, 0x2, 0x5, 0x9}, {0x0, 0x5, 0x10}], 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='svcrdma_encode_wseg\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x42, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0xb, 0x70bd2d, 0x25dfdbff, {}, [{0x64, 0x1, [@m_gact={0x60, 0x1, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x9, 0x8, 0x8, 0xfffffff6}}, @TCA_GACT_PROB={0x0, 0x3, {0x3, 0x1124, 0x5}}]}, {0x4, 0x6, "f1264d5c4f6a24cc77ac4f6c8150a62f4527ca2a201638fb630002a62339f42edcf88b803626a3e27a5227110e1816ed770e5a2dce3c9120f5e84103d19e9799fad076eaca6ba940f11fe9b6eb3d42d062d0fba7e7efe1eac99518621cca7b544f9165605ab5983f31199444641561894af40c59de80451c8c70d9ae943fd4789ef500"/142}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x78}}, 0x44) 766.733128ms ago: executing program 8 (id=2822): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000b8d1000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="0100"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x80, 0x4, 0x8, 0x340f771dd066f3af, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4040004) socket$kcm(0x10, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8104, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) 756.996123ms ago: executing program 6 (id=2823): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffc90000000000}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000001f00000005000000000000130200000000005f2e2e2e2e00"], 0x0, 0x2c, 0x0, 0x1}, 0x28) (async) close(0x3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x7fffffffffffffff}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) (async) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}}, 0x20000002) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x554}, 0x1, 0x0, 0x0, 0x40004}, 0xc800) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000002000, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000000), 0x40, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x60, 0x1410, 0x200, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0xffffffffffffff9f}, 0x1, 0x0, 0x0, 0x8010}, 0x4) 665.663023ms ago: executing program 0 (id=2824): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2d, 'rlimit'}, {0x2b, 'rdma'}, {0x2b, 'perf_event'}, {0x2d, 'blkio'}]}, 0x21) r0 = socket$kcm(0x10, 0x400000002, 0x0) socketpair(0x5, 0x800, 0xff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005200338f65277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2d, 'rlimit'}, {0x2b, 'rdma'}, {0x2b, 'perf_event'}, {0x2d, 'blkio'}]}, 0x21) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) socketpair(0x5, 0x800, 0xff, &(0x7f0000000040)) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005200338f65277b9b108b4ab51c"], 0xfe33) (async) 647.686345ms ago: executing program 5 (id=2825): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x3, 0x40, 0x37, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0x5}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000013c0)={0xffffffffffffffff, 0x20, &(0x7f0000001380)={&(0x7f0000000280)=""/4096, 0x1000, 0x0, &(0x7f0000001280)=""/221, 0xdd}}, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001440)=@generic={&(0x7f0000001400)='./file0\x00'}, 0x18) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001480)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x4, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0xb34, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x5, 0x5}, 0x10, r1, 0xffffffffffffffff, 0x0, &(0x7f0000001500)=[r2, r3], 0x0, 0x10, 0x2}, 0x94) r5 = socket$kcm(0x29, 0xe8c632ff0d80a768, 0x0) recvmsg$kcm(r5, &(0x7f0000003980)={&(0x7f0000001600)=@ax25={{0x3, @rose}, [@rose, @null, @null, @null, @rose, @netrom, @netrom, @rose]}, 0x80, &(0x7f0000003840)=[{&(0x7f0000001680)=""/121, 0x79}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/30, 0x1e}, {&(0x7f0000002740)=""/1, 0x1}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/161, 0xa1}], 0x6, &(0x7f00000038c0)=""/158, 0x9e}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003cc0)={r4, 0xe0, &(0x7f0000003bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000039c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000003a00)=[0x0, 0x0], &(0x7f0000003a40)=[0x0, 0x0, 0x0], 0x0, 0xee, &(0x7f0000003a80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000003b00), &(0x7f0000003b40), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000003b80)}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003e80)={&(0x7f0000003d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x3, [@var={0xf, 0x0, 0x0, 0xe, 0x2, 0x2}, @enum64={0x1, 0x6, 0x0, 0x13, 0x1, 0x7, [{0xf, 0xfffffffe, 0x9}, {0x5, 0x800, 0x4}, {0x4, 0x40, 0x7}, {0x5, 0x2, 0x2}, {0xa, 0x6, 0xffff7346}, {0x5, 0xd, 0x50f9}]}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x1}, @fwd={0xc}]}, {0x0, [0x0]}}, &(0x7f0000003dc0)=""/139, 0x97, 0x8b, 0x1, 0x8, 0x10000}, 0x28) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003ec0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x7, '\x00', r6, r8, 0x1, 0x3, 0x4}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000004040)=@bloom_filter={0x1e, 0x100, 0x81, 0xfffffffd, 0x300, 0xffffffffffffffff, 0x1, '\x00', 0x0, r8, 0x800, 0x1, 0x2, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004140)={0x18, 0x7, &(0x7f0000003f40)=@raw=[@generic={0x81, 0x0, 0x0, 0x5, 0x8}, @ldst={0x1, 0x1, 0x3, 0x4, 0x3, 0xfffffffffffffff8, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8f}], &(0x7f0000003f80)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x21, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003fc0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000004000)={0x5, 0xd, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000040c0)=[r2, r10, r9, r9, r2, r2], &(0x7f0000004100)=[{0x5, 0x1, 0xf, 0x2}], 0x10, 0x7}, 0x94) r11 = perf_event_open(&(0x7f0000004240)={0x3, 0x80, 0xcf, 0x7, 0x4, 0x2, 0x0, 0x3, 0x140e0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000004200), 0xa}, 0x200, 0x7, 0x3, 0x6, 0x2, 0x1, 0x9, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x2400, 0x3) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000042c0), 0x480000, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000004300)={'bridge0\x00', 0x313}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000004380)={r3, &(0x7f0000004340)="22daa78bf333d47e6b"}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000045c0)=@base={0x21, 0xb470, 0x7, 0x0, 0x1000, 0xffffffffffffffff, 0xb2a1, '\x00', r6, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004680)={0x6, 0x23, &(0x7f00000043c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2738}, [@exit, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, @generic={0x8, 0x1, 0x1, 0x4, 0xfff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @generic={0x2, 0x7, 0xa, 0x6, 0xca}]}, &(0x7f0000004500)='GPL\x00', 0x9, 0x4a, &(0x7f0000004540)=""/74, 0x40f00, 0x2, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004640)=[r3, 0x1, r0, r10, r9, r13, r0], 0x0, 0x10, 0xfff}, 0x94) socket$netlink(0x10, 0x3, 0x4) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r15, &(0x7f0000004900)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000048c0)={&(0x7f0000004780)={0x13c, 0x1, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x5d}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}]}, @CTA_TUPLE_ORIG={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}, @CTA_TUPLE_REPLY={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008085) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004ac0)={r9, 0x58, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000004c00)={{r0, 0xffffffffffffffff}, &(0x7f0000004b80), &(0x7f0000004bc0)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000004cc0)={0x2, 0x10, &(0x7f0000004940)=@raw=[@ldst={0x0, 0x2, 0x6, 0x2, 0x7, 0x10, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}], &(0x7f00000049c0)='GPL\x00', 0xc25, 0x27, &(0x7f0000004a00)=""/39, 0x40f00, 0x4, '\x00', r16, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000004b00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000004b40)={0x1, 0x4, 0x3, 0x7}, 0x10, r7, r14, 0x4, &(0x7f0000004c40)=[r9, r2, r0, r4, r9, r17], &(0x7f0000004c80)=[{0x0, 0x5, 0x1, 0x6}, {0x0, 0x5, 0x6, 0x9}, {0x2, 0x1, 0x6, 0x2}, {0x1, 0x2, 0x8, 0xb}], 0x10, 0x9}, 0x94) r18 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r18, &(0x7f0000004e80)={&(0x7f0000004d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004e40)={&(0x7f0000004dc0)={0x50, 0x1409, 0x300, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c001}, 0x8000) socket$netlink(0x10, 0x3, 0x8) sendmsg$IPSET_CMD_CREATE(r15, &(0x7f0000004f80)={&(0x7f0000004ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004f40)={&(0x7f0000004f00)={0x38, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000004fc0)) 465.007112ms ago: executing program 5 (id=2826): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="040000000000000000000000000000ffffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/10], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x1}, 0x4, 0x800000000000c8, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0xf, 0x0, 0x1}, 0x0, 0xfffffbfffeffffff, 0xffffffffffffffff, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x0, 0xfe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x6}, 0x1c2, 0x0, 0x0, 0x4, 0x0, 0x5, 0x8, 0x0, 0xb, 0x0, 0x100000000}, r1, 0x0, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x44080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x8d, &(0x7f0000000680)=""/141, 0x41100}, 0x94) 393.693504ms ago: executing program 0 (id=2827): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="d80000002100010028bd7000fcdbdf25e0000002000000000000000000000000ac14142a0000000000000000000000004e2000084e200000020080802e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b56b6e000000000050001100fc00000000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x8048044}, 0x4040) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x43c, 0x3f3, 0x200, 0x70bd2c, 0x25dfdbff, {0x3, 0x2, 0x38, [0x9, 0xf, 0x0, 0x8001, 0x2, 0x9, 0x3, 0x7, 0xf1c, 0x0, 0x64, 0x4, 0x0, 0xf8c, 0x9, 0xffff7fff, 0xf90a, 0x2, 0x0, 0x3, 0x8, 0x6, 0x53a148af, 0xb, 0xea4, 0x101, 0x7, 0x963, 0x8001, 0xb, 0x101, 0x7fffffff, 0x7, 0x5, 0x7, 0x3b3, 0xd, 0x16b, 0x400, 0x6, 0x3, 0x4, 0x0, 0x7, 0x800, 0x3, 0x10000, 0xed7, 0xd7, 0x8, 0x4, 0x4, 0x0, 0x100, 0x2, 0xffff7b04, 0xad, 0xb7f8, 0x3, 0x6, 0x6, 0xc, 0x400, 0x6], [0x6, 0x9, 0x5, 0x1, 0x2, 0x4, 0xfff, 0x1, 0x0, 0x7ff, 0x7, 0x0, 0x7, 0x7ff, 0x0, 0x6, 0x7, 0x0, 0x1, 0x8000, 0x3, 0x2, 0x2, 0xd92, 0x2d53e4d4, 0x4, 0x100, 0x1ff, 0x8, 0x3, 0x1cb, 0x8c, 0x7, 0x9, 0x0, 0x4, 0x8, 0xffffff20, 0x6, 0x7f, 0x5, 0x3, 0x4, 0x9, 0x80, 0x800, 0x6, 0x8, 0x3, 0xfbb, 0x6d, 0xb4, 0x7, 0x2b, 0x8, 0x3, 0x0, 0x8, 0x8, 0x5, 0x0, 0xfffffffd, 0x6, 0xc], [0x8, 0x9, 0x0, 0x42e, 0x8a95, 0x9, 0x7, 0x78, 0x2, 0x6000, 0x7fffffff, 0x1, 0x3, 0x1, 0x3, 0x7, 0xe, 0xfffffff7, 0x9, 0xfffffff8, 0x9, 0x9, 0xfffffffc, 0x7fff, 0x4, 0x0, 0x7, 0x3, 0x3, 0xfffffff9, 0x11, 0x1, 0xb, 0x7fff, 0x3, 0x5, 0x8001, 0x4, 0x8, 0xe0000000, 0x7fffffff, 0x1ff, 0x0, 0x0, 0x4, 0x69a8, 0x8, 0x9, 0x9, 0xb6, 0x3, 0x4, 0xfffffe01, 0x9, 0xb, 0x8, 0x1, 0x7f, 0x8, 0x0, 0x80b3b15, 0xffffff36, 0x8, 0x4bdf], [0xfffffffa, 0xfc, 0x4, 0xa, 0x10, 0x8000, 0x5, 0x81, 0xfffffff8, 0xffffff5b, 0x10, 0x6, 0x659c, 0x1e, 0x97000000, 0x7, 0xfff, 0x3, 0xffff, 0x8, 0x8001, 0x7, 0x71f1, 0x0, 0xffff, 0x4b, 0x7fffffff, 0x9, 0x401, 0x3, 0xf4d0, 0x6, 0xffff, 0x8001, 0xfff, 0x81, 0x42, 0x800000, 0x6, 0x101, 0x3, 0x8, 0x7fffffff, 0x1, 0xba, 0x7, 0x6d, 0xffffff00, 0x10, 0x7, 0x7, 0x60a, 0x6, 0x5, 0x2, 0x10000, 0xfffffffe, 0x3ff, 0x1, 0x7bdb, 0x1, 0x1, 0x4, 0x3], 0x1a, ['\x00', '*\x00', '(\x00', '##$[#,@(\x00', '\\:$\x00', '\x00', '\'-*\x00', ':-\x00']}, [""]}, 0x43c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000851) 392.830823ms ago: executing program 8 (id=2828): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40001) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x7, 0x9}, 0x0, 0x10003, 0xfffffffe, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async) write$cgroup_type(r1, &(0x7f0000000180), 0x40001) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x7, 0x9}, 0x0, 0x10003, 0xfffffffe, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) (async) 315.830391ms ago: executing program 6 (id=2829): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001e00050300000000", @ANYRES32=0x0], 0x24}, 0x1, 0x8000000}, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000080)}, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040)=r4, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r6, r7, 0x26, 0x0, @void}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e00000002000000ff000000b40b000000010000", @ANYRES32=r7, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000100020003000000e7ffffff0000000000000000"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xd9, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x10000, 0x0, r8, 0x1, '\x00', r9, r5, 0x1, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) 154.354848ms ago: executing program 0 (id=2830): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000002) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x3, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff51, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f00000001c0)='\x96{\xe3H\x13\xc6\xf9\xac'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000000000000000000000000000180000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1}, 0x0) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002110001180090001006c61737400000000480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000f10b00"], 0xdc}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a0091"], 0x82d7) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)}, 0x40) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 5 (id=2831): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$kcm(0x2, 0x5, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x8d, &(0x7f0000000680)=""/141, 0x41100}, 0x94) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000010008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r4}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f00000002c0)=@x25, 0x80, 0x0}, 0x8400) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): lticast mode [ 258.368708][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 258.466178][ T1104] team_slave_0 (unregistering): left promiscuous mode [ 258.473120][ T1104] team_slave_0 (unregistering): left allmulticast mode [ 258.497358][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 258.767835][ T7004] smc: removing ib device syz1 [ 259.496104][T10059] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 259.517511][T10076] erspan0 speed is unknown, defaulting to 1000 [ 259.524478][T10059] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 259.539243][T10059] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 259.614318][T10076] wlan1 speed is unknown, defaulting to 1000 [ 259.983553][ T9928] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.005681][ T9928] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.017486][ T9928] bridge_slave_0: entered allmulticast mode [ 260.040135][ T9928] bridge_slave_0: entered promiscuous mode [ 260.152475][ T9928] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.161130][ T9928] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.197011][ T9928] bridge_slave_1: entered allmulticast mode [ 260.257851][ T9928] bridge_slave_1: entered promiscuous mode [ 260.441179][T10098] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1118'. [ 260.865200][ T9928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.907864][ T9928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.112812][ T9928] team0: Port device team_slave_0 added [ 261.282955][ T9928] team0: Port device team_slave_1 added [ 261.294736][T10098] erspan0 speed is unknown, defaulting to 1000 [ 261.390370][T10098] wlan1 speed is unknown, defaulting to 1000 [ 261.811583][ T9928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.830706][ T9928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.858096][ T9928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.202481][ T9928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.222988][ T9928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.261561][ T9928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.560273][T10123] netlink: 'syz.5.1123': attribute type 39 has an invalid length. [ 262.675194][ T9928] hsr_slave_0: entered promiscuous mode [ 262.702578][ T9928] hsr_slave_1: entered promiscuous mode [ 262.719952][ T9928] debugfs: 'hsr0' already exists in 'hsr' [ 262.730748][ T9928] Cannot create hsr debugfs directory [ 263.936743][T10139] netlink: 'syz.3.1127': attribute type 1 has an invalid length. [ 263.948956][T10136] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1126'. [ 263.986586][T10138] delete_channel: no stack [ 264.515143][ T9928] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 264.545729][ T9928] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 264.562128][ T9928] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 264.601832][ T9928] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 264.781652][T10155] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1130'. [ 264.819262][ T9928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.867812][ T9928] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.890422][ T7018] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.897687][ T7018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.935427][ T7018] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.942623][ T7018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.617911][ T9928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.729235][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1136'. [ 265.982656][T10183] syz.0.1136 (10183) used obsolete PPPIOCDETACH ioctl [ 266.046971][T10189] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1137'. [ 266.547899][ T9928] veth0_vlan: entered promiscuous mode [ 266.561884][ T9928] veth1_vlan: entered promiscuous mode [ 266.657720][T10202] netlink: 'syz.5.1141': attribute type 39 has an invalid length. [ 266.672355][T10202] macvlan0: left promiscuous mode [ 266.707708][ T9928] veth0_macvtap: entered promiscuous mode [ 266.725969][ T9928] veth1_macvtap: entered promiscuous mode [ 266.781617][ T9928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.939268][ T9928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.013190][ T1104] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.053159][ T1104] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.062870][ T1104] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.085092][ T1104] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.237753][T10212] : entered promiscuous mode [ 267.287373][T10215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1145'. [ 267.378198][ T7004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.386165][ T7004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.424535][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.441744][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.791735][T10236] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1149'. [ 267.965625][T10247] netlink: 'syz.5.1154': attribute type 2 has an invalid length. [ 267.973982][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1154'. [ 268.027855][T10252] netlink: 'syz.5.1154': attribute type 6 has an invalid length. [ 268.052694][T10249] netlink: 'syz.6.1152': attribute type 33 has an invalid length. [ 268.073454][T10249] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1152'. [ 268.165313][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 268.207078][ T30] audit: type=1107 audit(1764721378.560:4): pid=10255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 269.236909][T10280] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1162'. [ 269.524936][T10291] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 270.066440][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1172'. [ 270.158236][T10308] netlink: 'syz.6.1171': attribute type 10 has an invalid length. [ 270.186823][T10308] veth1_vlan: entered allmulticast mode [ 270.511070][T10308] team0: Device veth1_vlan failed to register rx_handler [ 270.966601][T10326] openvswitch: netlink: Tunnel attr 152 out of range max 16 [ 271.061061][T10334] netlink: 'syz.3.1177': attribute type 10 has an invalid length. [ 271.165336][T10334] geneve0: entered promiscuous mode [ 271.308769][T10334] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 271.422336][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.434334][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.442516][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.461197][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.469856][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.717463][T10356] netlink: 'syz.0.1184': attribute type 2 has an invalid length. [ 271.739604][ T1104] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.773939][T10356] netlink: 'syz.0.1184': attribute type 11 has an invalid length. [ 271.781829][T10356] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1184'. [ 271.856916][T10347] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1183'. [ 272.312654][ T1104] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.340497][T10347] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1183'. [ 272.666605][ T1104] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.747757][T10342] erspan0 speed is unknown, defaulting to 1000 [ 272.826184][T10342] wlan1 speed is unknown, defaulting to 1000 [ 272.967919][ T1104] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.077226][T10379] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1190'. [ 273.157784][T10387] netlink: 'syz.6.1192': attribute type 10 has an invalid length. [ 273.183626][T10387] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1192'. [ 273.252017][T10387] dummy0: entered promiscuous mode [ 273.263662][T10387] dummy0: entered allmulticast mode [ 273.273761][T10387] bridge0: port 3(dummy0) entered blocking state [ 273.280395][T10387] bridge0: port 3(dummy0) entered disabled state [ 273.314432][T10387] bridge0: port 3(dummy0) entered blocking state [ 273.320985][T10387] bridge0: port 3(dummy0) entered forwarding state [ 273.527344][ T5838] Bluetooth: hci3: command tx timeout [ 273.564422][T10396] netlink: 'syz.3.1194': attribute type 2 has an invalid length. [ 273.603652][T10396] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1194'. [ 273.731117][T10402] netlink: 'syz.6.1195': attribute type 13 has an invalid length. [ 273.968245][T10402] bridge0: port 3(dummy0) entered disabled state [ 273.975068][T10402] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.983154][T10402] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.152030][T10407] netlink: 'syz.3.1197': attribute type 1 has an invalid length. [ 274.172276][T10407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1197'. [ 274.464129][T10402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.516706][T10402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.957440][ T1104] bridge_slave_1: left allmulticast mode [ 274.973469][ T1104] bridge_slave_1: left promiscuous mode [ 274.979327][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.079560][ T1104] bridge_slave_0: left allmulticast mode [ 275.094372][ T1104] bridge_slave_0: left promiscuous mode [ 275.106855][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.586221][T10418] netlink: 'syz.0.1200': attribute type 10 has an invalid length. [ 275.605915][T10418] netlink: 'syz.0.1200': attribute type 19 has an invalid length. [ 275.614622][ T5838] Bluetooth: hci3: command tx timeout [ 275.630128][T10418] netlink: 14536 bytes leftover after parsing attributes in process `syz.0.1200'. [ 276.088482][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.099870][ T1104] bond0 (unregistering): Released all slaves [ 276.126469][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.144911][T10418] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1200'. [ 276.164216][T10419] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1200'. [ 276.237343][T10342] chnl_net:caif_netlink_parms(): no params data found [ 276.279879][ T36] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.293424][ T36] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.318856][ T36] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.332909][T10444] syzkaller0: left promiscuous mode [ 277.338814][T10444] syzkaller0: left allmulticast mode [ 277.620336][T10468] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 277.685268][ T5838] Bluetooth: hci3: command tx timeout [ 279.763746][ T5838] Bluetooth: hci3: command tx timeout [ 280.634797][T10342] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.656597][T10342] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.664368][T10342] bridge_slave_0: entered allmulticast mode [ 280.672812][T10342] bridge_slave_0: entered promiscuous mode [ 280.761899][T10342] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.785575][T10342] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.792872][T10342] bridge_slave_1: entered allmulticast mode [ 280.815253][T10342] bridge_slave_1: entered promiscuous mode [ 280.829384][T10480] __nla_validate_parse: 5 callbacks suppressed [ 280.829404][T10480] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1213'. [ 280.872373][T10482] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 280.886148][T10485] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1213'. [ 280.964690][ T5838] Bluetooth: hci4: ACL packet for unknown connection handle 1 [ 281.095677][ T1104] hsr_slave_0: left promiscuous mode [ 281.102077][ T1104] hsr_slave_1: left promiscuous mode [ 281.114841][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.122897][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.133112][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.140924][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.164306][ T1104] veth1_macvtap: left promiscuous mode [ 281.170032][ T1104] veth0_macvtap: left promiscuous mode [ 281.176768][ T1104] veth1_vlan: left promiscuous mode [ 281.182317][ T1104] veth0_vlan: left promiscuous mode [ 281.290922][T10496] netlink: 'syz.6.1216': attribute type 4 has an invalid length. [ 281.300106][T10496] netlink: 'syz.6.1216': attribute type 17 has an invalid length. [ 281.400382][T10500] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1216'. [ 281.932602][T10342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.978271][T10499] @0: renamed from bond_slave_1 [ 282.007201][T10342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.047258][T10502] netlink: 'syz.5.1218': attribute type 21 has an invalid length. [ 282.118301][T10504] netlink: 'syz.6.1219': attribute type 1 has an invalid length. [ 282.129152][T10342] team0: Port device team_slave_0 added [ 282.143361][T10342] team0: Port device team_slave_1 added [ 282.382174][T10342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.393858][T10342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.422560][T10342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.471760][T10342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.486178][T10342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.521370][T10342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.613657][T10514] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1223'. [ 282.791439][T10512] syzkaller0: entered promiscuous mode [ 282.797231][T10512] syzkaller0: entered allmulticast mode [ 283.100768][T10540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.368142][T10342] hsr_slave_0: entered promiscuous mode [ 284.374721][T10342] hsr_slave_1: entered promiscuous mode [ 284.381013][T10342] debugfs: 'hsr0' already exists in 'hsr' [ 284.386951][T10342] Cannot create hsr debugfs directory [ 284.398961][T10538] : renamed from team_slave_1 (while UP) [ 284.554222][T10555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1233'. [ 284.565691][T10555] openvswitch: netlink: Flow key attr not present in new flow. [ 284.814994][T10566] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.1237'. [ 284.931478][T10342] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 284.959751][T10567] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 284.968649][T10567] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 284.986506][T10342] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 285.020268][T10342] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 285.074006][T10342] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 285.417365][T10342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.474409][T10342] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.501046][ T7004] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.508283][ T7004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.569602][ T7004] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.576879][ T7004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.688817][T10610] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 285.703823][T10611] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.1249'. [ 285.787182][T10613] netlink: 'syz.3.1250': attribute type 13 has an invalid length. [ 286.709641][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1254'. [ 286.819277][T10613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.844736][T10613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.397714][ T984] erspan0 speed is unknown, defaulting to 1000 [ 288.404307][ T984] syz2: Port: 1 Link DOWN [ 288.417017][ T7031] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.433488][ T7031] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.501919][ T7031] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.539478][T10650] netlink: 'syz.3.1259': attribute type 11 has an invalid length. [ 288.557857][T10650] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1259'. [ 288.584779][ T7031] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.720819][T10342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.733351][ T30] audit: type=1107 audit(1764721399.070:5): pid=10654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='?F' [ 288.798628][T10662] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1262'. [ 289.418824][ T5838] Bluetooth: hci1: ISO packet for unknown connection handle 20 [ 289.419776][T10678] netlink: 'syz.3.1264': attribute type 6 has an invalid length. [ 289.782792][T10342] veth0_vlan: entered promiscuous mode [ 289.830501][T10342] veth1_vlan: entered promiscuous mode [ 290.177276][T10695] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1268'. [ 290.197995][T10342] veth0_macvtap: entered promiscuous mode [ 290.228396][T10695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.377069][T10342] veth1_macvtap: entered promiscuous mode [ 290.395756][T10701] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.1269'. [ 290.455913][T10704] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1270'. [ 290.489040][T10704] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1270'. [ 290.521581][T10342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.538189][T10707] syzkaller0: entered promiscuous mode [ 290.547741][T10709] netlink: 'syz.6.1272': attribute type 1 has an invalid length. [ 290.548751][T10707] syzkaller0: entered allmulticast mode [ 290.561333][T10709] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1272'. [ 290.587129][T10342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.623939][ T7029] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.644418][ T7029] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.693193][ T7029] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.711319][ T7029] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.782155][T10716] netlink: 'syz.6.1273': attribute type 1 has an invalid length. [ 290.850138][T10722] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ} [ 290.861450][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.870117][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.966001][ T7026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.975279][ T7026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.136484][T10729] netlink: 14593 bytes leftover after parsing attributes in process `syz.6.1277'. [ 291.509607][T10739] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1279'. [ 292.036520][T10762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.398644][T10773] netlink: 'syz.6.1287': attribute type 1 has an invalid length. [ 292.409236][T10772] netlink: 'syz.0.1286': attribute type 10 has an invalid length. [ 292.562477][T10782] __nla_validate_parse: 1 callbacks suppressed [ 292.562501][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 292.643866][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1291'. [ 292.672961][T10782] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1291'. [ 292.697456][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1291'. [ 292.785585][T10789] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1289'. [ 292.823692][T10782] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1291'. [ 293.431740][T10787] erspan0 speed is unknown, defaulting to 1000 [ 293.461774][T10806] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1297'. [ 293.484825][T10801] netlink: 'syz.3.1296': attribute type 39 has an invalid length. [ 294.060347][T10814] netlink: 'syz.5.1300': attribute type 21 has an invalid length. [ 294.069079][T10814] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1300'. [ 294.083821][T10814] netlink: 'syz.5.1300': attribute type 5 has an invalid length. [ 294.098743][T10814] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1300'. [ 294.174886][T10819] option changes via remount are deprecated (pid=10817 comm=syz.7.1299) [ 294.291629][T10819] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1299'. [ 294.310857][T10826] netlink: 'syz.3.1302': attribute type 1 has an invalid length. [ 294.349475][T10829] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 295.306619][T10853] netlink: 'syz.0.1312': attribute type 3 has an invalid length. [ 295.314849][T10853] netlink: 'syz.0.1312': attribute type 1 has an invalid length. [ 296.379749][T10877] netlink: 'syz.6.1320': attribute type 9 has an invalid length. [ 297.423197][T10899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.534244][T10905] netlink: 'syz.3.1327': attribute type 17 has an invalid length. [ 298.460253][T10909] __nla_validate_parse: 9 callbacks suppressed [ 298.460275][T10909] netlink: 10 bytes leftover after parsing attributes in process `syz.7.1328'. [ 298.500588][T10914] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1329'. [ 298.648397][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1331'. [ 298.853228][T10935] netlink: 'syz.7.1333': attribute type 10 has an invalid length. [ 298.943505][T10940] netlink: 'syz.7.1333': attribute type 10 has an invalid length. [ 298.995982][T10935] team0: Port device dummy0 added [ 299.088939][T10940] team0: Port device dummy0 removed [ 299.126124][T10940] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 299.136607][T10943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'. [ 299.318546][T10943] netlink: 'syz.0.1337': attribute type 29 has an invalid length. [ 299.479660][T10945] netlink: 'syz.6.1338': attribute type 3 has an invalid length. [ 299.493060][T10953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1341'. [ 299.502525][T10945] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1338'. [ 299.518599][T10953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1341'. [ 300.069008][T10976] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1348'. [ 301.257651][T11016] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1358'. [ 301.380587][T11018] netlink: 'syz.7.1355': attribute type 1 has an invalid length. [ 301.389918][T11019] netlink: 'syz.7.1355': attribute type 1 has an invalid length. [ 301.952573][T11041] netlink: 763 bytes leftover after parsing attributes in process `syz.5.1364'. [ 302.526742][T11073] netlink: 'syz.0.1373': attribute type 10 has an invalid length. [ 302.542973][T11073] geneve0: entered promiscuous mode [ 302.582871][T11073] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 302.845653][T11087] tmpfs: Bad value for 'mode' [ 304.295568][T11119] netlink: 'syz.5.1387': attribute type 3 has an invalid length. [ 304.631454][T11141] __nla_validate_parse: 5 callbacks suppressed [ 304.631474][T11141] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1394'. [ 304.760820][T11139] netlink: 'syz.6.1393': attribute type 1 has an invalid length. [ 304.772888][T11147] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1395'. [ 305.106297][ T5838] Bluetooth: hci1: unexpected subevent 0x0a length: 15 < 30 [ 305.110101][ T7031] tipc: Subscription rejected, illegal request [ 305.166055][T11168] netlink: 'syz.6.1403': attribute type 2 has an invalid length. [ 305.185708][T11168] netlink: 134 bytes leftover after parsing attributes in process `syz.6.1403'. [ 305.213786][T11168] netlink: 264 bytes leftover after parsing attributes in process `syz.6.1403'. [ 305.265638][T11168] netlink: 'syz.6.1403': attribute type 2 has an invalid length. [ 305.285377][T11168] netlink: 134 bytes leftover after parsing attributes in process `syz.6.1403'. [ 306.289263][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 306.306078][T11213] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1413'. [ 306.341568][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1416'. [ 306.362237][ T7031] tipc: Subscription rejected, illegal request [ 306.492235][T11221] netlink: 253 bytes leftover after parsing attributes in process `syz.0.1416'. [ 306.528144][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 306.892748][T11248] netlink: 'syz.0.1421': attribute type 29 has an invalid length. [ 309.715368][T11269] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1427'. [ 309.796811][T11278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1429'. [ 309.863817][T11276] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 309.969530][T11282] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1430'. [ 310.024394][T11289] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1430'. [ 310.398569][T11299] netlink: 'syz.7.1435': attribute type 6 has an invalid length. [ 310.406849][T11299] netlink: 'syz.7.1435': attribute type 4 has an invalid length. [ 310.416966][T11299] netlink: 'syz.7.1435': attribute type 6 has an invalid length. [ 310.455344][T11299] netlink: 'syz.7.1435': attribute type 5 has an invalid length. [ 310.490115][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1435'. [ 311.289104][T11337] netlink: 'syz.5.1447': attribute type 2 has an invalid length. [ 311.315952][T11337] !: entered promiscuous mode [ 311.341952][T11337] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1447'. [ 311.395944][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1446'. [ 311.405254][T11345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.939841][T11373] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1455'. [ 311.950844][T11373] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1455'. [ 312.106404][T11373] syzkaller0: entered promiscuous mode [ 312.114997][T11373] syzkaller0: entered allmulticast mode [ 312.199700][T11380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.411452][T11400] netlink: 'syz.3.1461': attribute type 10 has an invalid length. [ 312.463544][T11400] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1461'. [ 312.698110][ T30] audit: type=1107 audit(1764721423.050:6): pid=11401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='?F' [ 313.897161][T11400] veth0_vlan: left promiscuous mode [ 313.902634][T11400] veth0_vlan: entered promiscuous mode [ 313.908513][T11400] veth0_vlan: entered allmulticast mode [ 313.919003][T11400] bridge0: port 4(veth0_vlan) entered blocking state [ 313.928649][T11400] bridge0: port 4(veth0_vlan) entered disabled state [ 313.946495][T11400] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 314.949748][T11435] __nla_validate_parse: 1 callbacks suppressed [ 314.949774][T11435] netlink: 14565 bytes leftover after parsing attributes in process `syz.5.1474'. [ 315.612671][T11460] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1482'. [ 316.017813][T11463] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1481'. [ 316.089473][T11451] erspan0 speed is unknown, defaulting to 1000 [ 316.166546][T11470] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1484'. [ 316.194943][T11470] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1484'. [ 316.435597][T11460] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1482'. [ 316.480311][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1484'. [ 316.502604][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1484'. [ 316.750181][T11476] netlink: 14593 bytes leftover after parsing attributes in process `syz.6.1485'. [ 316.987330][T11483] netlink: 'syz.0.1488': attribute type 1 has an invalid length. [ 317.024557][T11486] netlink: 'syz.3.1487': attribute type 7 has an invalid length. [ 317.113429][T11483] netlink: 'syz.0.1488': attribute type 1 has an invalid length. [ 317.296966][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.304588][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.545366][T11511] netlink: 'syz.3.1495': attribute type 1 has an invalid length. [ 317.596019][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1493'. [ 318.043461][ T7004] wlan1: Trigger new scan to find an IBSS to join [ 318.879902][T11553] netlink: 'syz.0.1507': attribute type 10 has an invalid length. [ 318.891231][T11553] team0: left allmulticast mode [ 318.918438][T11553] team_slave_0: left allmulticast mode [ 318.931120][T11553] team_slave_1: left allmulticast mode [ 318.940805][T11553] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 318.948521][T11553] team0: left promiscuous mode [ 318.955984][T11553] team_slave_0: left promiscuous mode [ 318.967471][T11553] team_slave_1: left promiscuous mode [ 319.015946][T11553] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 319.050345][T11553] bridge0: port 3(team0) entered disabled state [ 319.157883][T11553] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.193077][T11553] bond0: (slave team0): Enslaving as an active interface with an up link [ 319.391137][T11577] netlink: 'syz.6.1513': attribute type 10 has an invalid length. [ 319.401354][T11577] veth1_vlan: left promiscuous mode [ 319.408012][T11577] team0: Device veth1_vlan failed to register rx_handler [ 320.061308][T11598] __nla_validate_parse: 5 callbacks suppressed [ 320.061357][T11598] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1519'. [ 320.087248][T11602] netlink: 3084 bytes leftover after parsing attributes in process `syz.7.1520'. [ 320.110608][T11605] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1522'. [ 320.124920][T11602] netlink: 191644 bytes leftover after parsing attributes in process `syz.7.1520'. [ 320.761831][T11637] delete_channel: no stack [ 320.795383][T11632] @: renamed from bond_slave_0 [ 320.808175][T11637] delete_channel: no stack [ 320.901339][T11637] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 320.926558][T11637] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 320.945524][T11637] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 320.958155][T11637] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 320.972264][T11637] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 320.984111][T11637] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 320.994524][T11637] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 321.004714][T11637] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 321.015471][T11637] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 321.026301][T11637] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 321.043641][ T7018] wlan1: Trigger new scan to find an IBSS to join [ 321.867310][T11666] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1535'. [ 321.885473][T11663] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1536'. [ 322.155480][T11669] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1536'. [ 324.003787][ T7026] wlan1: Trigger new scan to find an IBSS to join [ 324.280680][T11705] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1545'. [ 324.343540][T11705] netlink: 'syz.7.1545': attribute type 10 has an invalid length. [ 324.351722][T11705] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1545'. [ 324.361518][T11705] team0: entered promiscuous mode [ 324.387950][T11705] team_slave_0: entered promiscuous mode [ 324.425015][T11705] team_slave_1: entered promiscuous mode [ 324.434177][T11712] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1547'. [ 324.491367][T11705] team0: entered allmulticast mode [ 324.523537][T11705] team_slave_0: entered allmulticast mode [ 324.527457][T11726] netlink: 'syz.5.1551': attribute type 10 has an invalid length. [ 324.539925][T11705] team_slave_1: entered allmulticast mode [ 324.564326][T11705] bridge0: port 3(team0) entered blocking state [ 324.583840][T11733] netlink: 'syz.5.1551': attribute type 10 has an invalid length. [ 324.593849][T11705] bridge0: port 3(team0) entered disabled state [ 324.716011][T11705] bridge0: port 3(team0) entered blocking state [ 324.723215][T11705] bridge0: port 3(team0) entered forwarding state [ 324.800372][T11726] team0: Device ip6_vti0 is of different type [ 324.938948][ T7004] wlan1: Creating new IBSS network, BSSID 9e:3f:38:03:a8:a5 [ 325.505975][T11753] __nla_validate_parse: 4 callbacks suppressed [ 325.505997][T11753] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1556'. [ 326.256608][T11783] netlink: 'syz.0.1565': attribute type 64 has an invalid length. [ 326.294066][T11783] net_ratelimit: 1849 callbacks suppressed [ 326.294088][T11783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.387546][T11788] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.1567'. [ 326.397783][T11788] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 326.632501][T11805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1572'. [ 326.671915][T11805] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1572'. [ 326.829033][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1574'. [ 326.846603][T11815] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1574'. [ 327.321097][T11831] netlink: 'syz.7.1579': attribute type 2 has an invalid length. [ 327.411967][T11831] : entered promiscuous mode [ 327.458022][T11831] netlink: 64859 bytes leftover after parsing attributes in process `syz.7.1579'. [ 328.284123][T11834] netlink: 'syz.0.1580': attribute type 11 has an invalid length. [ 328.292034][T11834] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1580'. [ 328.368942][T11846] netlink: 61211 bytes leftover after parsing attributes in process `syz.7.1584'. [ 328.496901][T11851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1580'. [ 328.810993][T11853] netlink: 'syz.6.1585': attribute type 21 has an invalid length. [ 329.579712][T11864] tap0: tun_chr_ioctl cmd 1074812118 [ 329.883839][T11881] netlink: 'syz.6.1593': attribute type 4 has an invalid length. [ 329.891653][T11881] netlink: 'syz.6.1593': attribute type 3 has an invalid length. [ 330.006063][ T5838] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 330.304722][T11900] netlink: 'syz.3.1600': attribute type 1 has an invalid length. [ 330.819320][T11913] __nla_validate_parse: 4 callbacks suppressed [ 330.819339][T11913] netlink: 2116 bytes leftover after parsing attributes in process `syz.3.1605'. [ 331.169420][ T5838] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 331.263557][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1612'. [ 331.445019][T11945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.471365][T11976] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1622'. [ 332.550286][T11982] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1624'. [ 332.562369][T11982] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1624'. [ 332.681643][ T5838] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 332.960975][T11998] xt_l2tp: v2 tid > 0xffff: 16462212 [ 333.132276][T12010] netlink: 'syz.7.1631': attribute type 10 has an invalid length. [ 333.153439][T12010] netlink: 55 bytes leftover after parsing attributes in process `syz.7.1631'. [ 333.213586][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1632'. [ 334.130693][T12026] netlink: 4456 bytes leftover after parsing attributes in process `syz.6.1635'. [ 334.655806][T12030] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1636'. [ 335.202638][ T5838] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 335.312998][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1639'. [ 336.163856][T12054] netlink: 'syz.0.1643': attribute type 39 has an invalid length. [ 336.332253][T12053] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1644'. [ 336.900724][T12048] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1643'. [ 338.077994][ T5838] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 338.092186][T12078] netlink: 'syz.6.1653': attribute type 2 has an invalid length. [ 338.150460][T12077] netlink: 'syz.6.1653': attribute type 2 has an invalid length. [ 341.097514][ T5838] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 342.142275][ T5838] Bluetooth: hci4: unexpected event 0x09 length: 15 > 3 [ 342.729709][T12136] netlink: 'syz.5.1668': attribute type 10 has an invalid length. [ 342.765678][T12136] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1668'. [ 343.095662][T12143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1668'. [ 343.974093][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1675'. [ 344.047740][T12161] netlink: 'syz.7.1676': attribute type 1 has an invalid length. [ 344.339859][T12173] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1677'. [ 344.712133][ T5838] Bluetooth: hci4: unexpected event 0x09 length: 15 > 3 [ 344.843193][T12178] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1679'. [ 344.875488][T12178] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1679'. [ 344.895603][T12178] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1679'. [ 345.352917][T12184] netlink: 'syz.6.1680': attribute type 6 has an invalid length. [ 345.670777][T12200] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1684'. [ 346.659654][T12212] netlink: 'syz.7.1686': attribute type 21 has an invalid length. [ 347.093590][T12227] netlink: 'syz.5.1691': attribute type 7 has an invalid length. [ 347.132335][ T5838] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 347.352730][T12244] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1696'. [ 347.815743][T12244] bond_slave_1: entered promiscuous mode [ 347.821892][T12244] team_slave_0: entered promiscuous mode [ 347.828006][T12244] team_slave_1: entered promiscuous mode [ 347.833859][T12244] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 347.989240][T12249] C: renamed from team_slave_0 [ 348.063181][T12249] netlink: 'syz.3.1697': attribute type 1 has an invalid length. [ 348.072298][T12249] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1697'. [ 348.117813][T12249] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 348.422373][T12261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1701'. [ 348.939877][ T5838] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 349.251728][T12287] netlink: 'syz.3.1710': attribute type 10 has an invalid length. [ 349.274617][T12287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.314906][T12287] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 349.365604][T12294] netlink: 'syz.7.1711': attribute type 23 has an invalid length. [ 349.420715][T12294] netlink: 'syz.7.1711': attribute type 23 has an invalid length. [ 349.670753][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 349.746829][T12305] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1715'. [ 349.807359][T12311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.993614][ T5838] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 350.233822][T12326] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.1722'. [ 350.281304][T12323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.523667][T12333] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1723'. [ 350.573796][T12340] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1723'. [ 350.596168][T12342] C: renamed from team_slave_0 [ 351.022896][T12361] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 351.040520][T12361] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 351.086206][ T5838] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 351.312212][T12371] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.1734'. [ 351.745427][T12401] netlink: 40227 bytes leftover after parsing attributes in process `syz.5.1742'. [ 351.779390][T12400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1739'. [ 351.935453][ T5838] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 352.454825][T12429] syzkaller0: entered promiscuous mode [ 352.499329][T12429] syzkaller0: entered allmulticast mode [ 352.826730][T12441] netlink: 'syz.3.1756': attribute type 16 has an invalid length. [ 352.841312][T12440] netlink: zone id is out of range [ 352.853960][T12440] netlink: zone id is out of range [ 352.859416][T12440] netlink: zone id is out of range [ 352.865189][T12440] netlink: zone id is out of range [ 352.870661][T12440] netlink: zone id is out of range [ 352.893530][T12440] netlink: zone id is out of range [ 352.906378][T12440] netlink: zone id is out of range [ 353.263968][ T5838] Bluetooth: hci4: unexpected event 0x09 length: 15 > 3 [ 353.482025][T12473] netlink: 'syz.0.1765': attribute type 10 has an invalid length. [ 353.501253][T12473] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.530678][T12473] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.538207][T12473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.572998][T12475] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.580515][T12475] IPv6: NLM_F_CREATE should be set when creating new route [ 353.587853][T12475] IPv6: NLM_F_CREATE should be set when creating new route [ 353.595240][T12475] IPv6: NLM_F_CREATE should be set when creating new route [ 353.598775][T12473] bridge0: entered promiscuous mode [ 353.664045][T12473] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 353.683042][T12484] __nla_validate_parse: 2 callbacks suppressed [ 353.683063][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1768'. [ 354.277592][T12499] netlink: 'syz.3.1773': attribute type 21 has an invalid length. [ 354.286297][T12499] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1773'. [ 354.305760][T12499] netlink: 'syz.3.1773': attribute type 5 has an invalid length. [ 354.334792][T12499] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1773'. [ 355.060966][ T7013] wlan1: Trigger new scan to find an IBSS to join [ 355.191072][T12516] net_ratelimit: 6 callbacks suppressed [ 355.191228][T12516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.720101][T12534] netlink: 'syz.7.1781': attribute type 28 has an invalid length. [ 355.728133][T12534] netlink: 'syz.7.1781': attribute type 4 has an invalid length. [ 355.737165][T12534] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1781'. [ 355.818797][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1781'. [ 355.878842][T12537] unsupported nla_type 52263 [ 356.621345][T12575] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1791'. [ 357.152988][T12585] netlink: 'syz.3.1792': attribute type 1 has an invalid length. [ 357.515432][T12602] netlink: 'syz.6.1796': attribute type 10 has an invalid length. [ 357.581009][T12602] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1796'. [ 358.499690][T12607] netlink: 'syz.3.1798': attribute type 1 has an invalid length. [ 359.051819][ T6997] wlan1: Trigger new scan to find an IBSS to join [ 359.928405][T12638] debugfs: '1^!' already exists in 'ieee80211' [ 360.624180][T12666] netlink: 'syz.5.1811': attribute type 3 has an invalid length. [ 360.646734][T12667] netlink: 'syz.5.1811': attribute type 2 has an invalid length. [ 360.729521][T12671] netlink: 'syz.6.1810': attribute type 10 has an invalid length. [ 360.761173][T12671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.857931][T12671] team0: Port device bond0 added [ 360.871514][T12673] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 361.331504][T12682] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1815'. [ 361.584934][T12692] netlink: 'syz.0.1819': attribute type 1 has an invalid length. [ 361.592745][T12692] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1819'. [ 361.773667][T12699] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1821'. [ 361.897379][T12701] netlink: 'syz.0.1822': attribute type 6 has an invalid length. [ 361.905618][T12701] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1822'. [ 361.999582][T12714] netlink: 'syz.3.1825': attribute type 2 has an invalid length. [ 362.013682][ T7005] wlan1: Trigger new scan to find an IBSS to join [ 362.135164][ T7005] wlan1: Creating new IBSS network, BSSID 52:d9:23:4c:80:ab [ 362.191886][T12723] netlink: 'syz.5.1827': attribute type 21 has an invalid length. [ 362.233411][T12723] netlink: 'syz.5.1827': attribute type 5 has an invalid length. [ 362.797644][T12739] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1834'. [ 364.258536][T12763] netlink: 4068 bytes leftover after parsing attributes in process `syz.5.1838'. [ 364.330416][T12767] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1839'. [ 364.459748][T12770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1841'. [ 365.449056][T12794] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1846'. [ 365.638721][T12796] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1847'. [ 366.001896][T12801] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 367.696334][T12821] __nla_validate_parse: 2 callbacks suppressed [ 367.696355][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1856'. [ 367.784997][T12819] netlink: 16399 bytes leftover after parsing attributes in process `syz.6.1855'. [ 367.852143][T12828] netlink: 'syz.0.1857': attribute type 19 has an invalid length. [ 368.093098][T12835] netlink: 'syz.3.1862': attribute type 13 has an invalid length. [ 368.204519][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1862'. [ 368.311216][T12847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1863'. [ 368.318846][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1862'. [ 368.403397][T12841] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1862'. [ 368.412522][T12841] netlink: 424 bytes leftover after parsing attributes in process `syz.3.1862'. [ 370.563749][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 371.574150][T12867] delete_channel: no stack [ 371.857199][T12882] netlink: 'syz.0.1874': attribute type 13 has an invalid length. [ 371.911544][T12887] netlink: 'syz.0.1874': attribute type 6 has an invalid length. [ 371.920195][T12887] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1874'. [ 372.235251][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 372.249640][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 372.258922][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 372.279080][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 372.316087][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 372.623096][T12897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.299884][T12894] erspan0 speed is unknown, defaulting to 1000 [ 374.036388][T12894] chnl_net:caif_netlink_parms(): no params data found [ 374.182261][T12917] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1881'. [ 374.483562][ T5838] Bluetooth: hci5: command tx timeout [ 374.609536][T12894] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.634293][T12894] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.014086][T12894] bridge_slave_0: entered allmulticast mode [ 375.037982][T12894] bridge_slave_0: entered promiscuous mode [ 375.057557][T12894] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.073579][T12894] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.091674][T12894] bridge_slave_1: entered allmulticast mode [ 375.105677][T12894] bridge_slave_1: entered promiscuous mode [ 375.464689][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.473684][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.499949][T12894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.519491][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.528876][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.538748][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.574456][T12894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.655772][T12947] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1889'. [ 375.668298][T12947] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1889'. [ 375.677994][T12894] team0: Port device team_slave_0 added [ 375.703840][T12894] team0: Port device team_slave_1 added [ 375.786635][T12942] erspan0 speed is unknown, defaulting to 1000 [ 375.795464][T12894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.805759][T12894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.836153][T12894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.864362][T12894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.871558][T12894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.913754][T12894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.965998][T12961] netlink: 'syz.0.1893': attribute type 2 has an invalid length. [ 375.976083][T12961] netlink: 'syz.0.1893': attribute type 8 has an invalid length. [ 375.984104][T12961] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1893'. [ 376.176314][T12894] hsr_slave_0: entered promiscuous mode [ 376.183603][T12894] hsr_slave_1: entered promiscuous mode [ 376.190094][T12894] debugfs: 'hsr0' already exists in 'hsr' [ 376.196216][T12894] Cannot create hsr debugfs directory [ 376.466382][T12942] chnl_net:caif_netlink_parms(): no params data found [ 376.567048][ T5837] Bluetooth: hci5: command tx timeout [ 377.633567][ T5837] Bluetooth: hci2: command tx timeout [ 377.750680][T13002] netlink: 284 bytes leftover after parsing attributes in process `syz.5.1902'. [ 378.330630][T13014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1904'. [ 378.368311][T13014] netlink: 'syz.5.1904': attribute type 10 has an invalid length. [ 378.643479][ T5837] Bluetooth: hci5: command tx timeout [ 378.737533][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.744338][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.785365][T13013] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1904'. [ 378.873485][T12942] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.897549][T12942] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.914795][T12942] bridge_slave_0: entered allmulticast mode [ 378.929117][T12942] bridge_slave_0: entered promiscuous mode [ 378.962423][T13024] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1906'. [ 378.973960][T12942] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.981553][T12942] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.989315][T12942] bridge_slave_1: entered allmulticast mode [ 378.998453][T12942] bridge_slave_1: entered promiscuous mode [ 379.012114][T13024] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1906'. [ 379.075112][T13024] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1906'. [ 379.112388][T12942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.304804][T12942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.588435][T13028] syzkaller0: entered promiscuous mode [ 379.594465][T13028] syzkaller0: entered allmulticast mode [ 379.696107][ T5837] Bluetooth: hci2: command tx timeout [ 380.303228][T13045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1910'. [ 380.315102][T13045] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1910'. [ 380.348867][T12942] team0: Port device team_slave_0 added [ 380.614863][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1910'. [ 380.724224][ T5837] Bluetooth: hci5: command tx timeout [ 381.768460][ T5837] Bluetooth: hci2: command tx timeout [ 382.162814][T13044] netlink: 422 bytes leftover after parsing attributes in process `syz.3.1910'. [ 382.172795][T13044] bond0: vlans aren't supported yet for dev_uc|mc_add() [ 382.192836][T12942] team0: Port device team_slave_1 added [ 382.262987][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'. [ 382.291665][T12894] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 382.321841][T12942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.353820][T12942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.403712][T12942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.417528][T12942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.426430][T12942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.460203][T12942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.476750][T12894] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 382.524183][T12894] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 382.558516][T12894] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 382.588514][T12942] hsr_slave_0: entered promiscuous mode [ 382.595919][T12942] hsr_slave_1: entered promiscuous mode [ 382.602640][T12942] debugfs: 'hsr0' already exists in 'hsr' [ 382.611053][T12942] Cannot create hsr debugfs directory [ 383.161654][T12894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.244671][T12894] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.264646][ T7003] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.271849][ T7003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.347268][T13094] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1921'. [ 383.362662][ T7003] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.369902][ T7003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.380142][T13096] netlink: 'syz.5.1922': attribute type 1 has an invalid length. [ 383.530106][T13101] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1925'. [ 383.560037][T13102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1925'. [ 383.660385][T12942] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 383.684094][T12942] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 383.726962][T12942] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 383.759196][T12942] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 383.830138][T13114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.849060][ T5837] Bluetooth: hci2: command tx timeout [ 384.080331][T12894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.112350][T12942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.148572][T12942] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.194426][ T7001] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.201689][ T7001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.225248][ T7001] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.232510][ T7001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.305477][T13141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1930'. [ 384.332720][T13144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.358963][T13145] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1931'. [ 384.571351][T13156] netlink: 'syz.0.1933': attribute type 27 has an invalid length. [ 385.002137][T12894] veth0_vlan: entered promiscuous mode [ 385.056446][T12894] veth1_vlan: entered promiscuous mode [ 385.101477][T12942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.167452][T12894] veth0_macvtap: entered promiscuous mode [ 385.181497][T12894] veth1_macvtap: entered promiscuous mode [ 385.231557][T12894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.255909][T12894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.294027][ T6997] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.309362][ T6997] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.332178][ T6997] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.404954][ T6997] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.593559][ T6997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.625270][T13184] netlink: 'syz.0.1939': attribute type 46 has an invalid length. [ 385.653378][ T6997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.685813][T13184] __nla_validate_parse: 6 callbacks suppressed [ 385.685905][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1939'. [ 385.726895][T13188] bridge0: port 2(gretap0) entered blocking state [ 385.733593][T13183] netlink: 'syz.5.1938': attribute type 6 has an invalid length. [ 385.733848][T13188] bridge0: port 2(gretap0) entered disabled state [ 385.758143][T13188] gretap0: entered allmulticast mode [ 385.766324][T13188] gretap0: entered promiscuous mode [ 385.772458][T13188] bridge0: port 2(gretap0) entered blocking state [ 385.779433][T13188] bridge0: port 2(gretap0) entered forwarding state [ 385.783506][T13183] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1938'. [ 385.909988][ T7005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.918887][ T7005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.050238][T12942] veth0_vlan: entered promiscuous mode [ 386.096743][T12942] veth1_vlan: entered promiscuous mode [ 386.166425][T12942] veth0_macvtap: entered promiscuous mode [ 386.172043][T13199] netlink: 'syz.5.1942': attribute type 6 has an invalid length. [ 386.188438][T12942] veth1_macvtap: entered promiscuous mode [ 386.200870][T13199] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1942'. [ 386.224648][T13196] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1867'. [ 386.270119][T12942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.326528][T12942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.359305][ T7005] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.371164][ T7005] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.396192][ T7005] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.418001][ T7005] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.679365][T13229] syzkaller0: entered promiscuous mode [ 386.688256][T13229] syzkaller0: entered allmulticast mode [ 386.717889][ T7013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.738536][ T7013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.867921][ T7001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.894181][ T7001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.276381][T13260] netlink: 'syz.5.1957': attribute type 1 has an invalid length. [ 388.008498][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1962'. [ 388.216690][T13282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.234590][T13283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.389008][T13296] netlink: 'syz.5.1965': attribute type 21 has an invalid length. [ 388.397416][T13296] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1965'. [ 388.408130][T13296] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1965'. [ 388.419974][T13296] netlink: 'syz.5.1965': attribute type 4 has an invalid length. [ 388.449904][T13296] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1965'. [ 388.455575][T13302] netlink: 'syz.0.1964': attribute type 39 has an invalid length. [ 388.460119][T13296] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 388.501098][T13293] netlink: 'syz.8.1966': attribute type 10 has an invalid length. [ 389.544147][T13323] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1971'. [ 389.663772][T13293] team0 (unregistering): Port device team_slave_0 removed [ 389.741986][T13293] team0 (unregistering): Port device team_slave_1 removed [ 389.919120][T13308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1968'. [ 390.035308][T13327] netlink: 'syz.6.1973': attribute type 1 has an invalid length. [ 390.061858][T13310] erspan0 speed is unknown, defaulting to 1000 [ 390.333015][T13337] netlink: 'syz.0.1976': attribute type 10 has an invalid length. [ 390.438249][T13339] netlink: 'syz.5.1977': attribute type 2 has an invalid length. [ 390.446369][T13339] netlink: 'syz.5.1977': attribute type 2 has an invalid length. [ 390.709439][T13342] netlink: 'syz.8.1978': attribute type 2 has an invalid length. [ 390.744998][T13342] netlink: 'syz.8.1978': attribute type 8 has an invalid length. [ 390.766482][T13342] __nla_validate_parse: 7 callbacks suppressed [ 390.766505][T13342] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1978'. [ 391.354705][T13367] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1986'. [ 393.439281][T13432] netlink: 212084 bytes leftover after parsing attributes in process `syz.0.2001'. [ 394.122634][T13452] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2009'. [ 394.167187][T13456] validate_nla: 2 callbacks suppressed [ 394.167209][T13456] netlink: 'syz.6.2008': attribute type 2 has an invalid length. [ 394.209447][T13458] netlink: 10420 bytes leftover after parsing attributes in process `syz.8.2010'. [ 394.262176][T13456] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2008'. [ 394.432692][T13473] netlink: 40227 bytes leftover after parsing attributes in process `syz.6.2012'. [ 394.453773][T13472] netlink: 40227 bytes leftover after parsing attributes in process `syz.6.2012'. [ 394.620714][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2018'. [ 394.852832][T13484] netlink: 'syz.5.2018': attribute type 49 has an invalid length. [ 395.467245][T13484] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2018'. [ 395.807219][T13484] netlink: 'syz.5.2018': attribute type 10 has an invalid length. [ 395.902076][T13484] macvlan0: entered promiscuous mode [ 395.938948][T13484] macvlan0: entered allmulticast mode [ 397.352709][T13526] netlink: 'syz.0.2030': attribute type 2 has an invalid length. [ 397.360743][T13526] __nla_validate_parse: 1 callbacks suppressed [ 397.360762][T13526] netlink: 4856 bytes leftover after parsing attributes in process `syz.0.2030'. [ 397.464944][T13528] netlink: zone id is out of range [ 397.470158][T13528] netlink: zone id is out of range [ 397.517503][T13528] netlink: set zone limit has 8 unknown bytes [ 398.291367][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2034'. [ 398.499535][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2034'. [ 399.119294][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2037'. [ 399.707753][T13558] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2040'. [ 399.743679][T13560] netlink: 119 bytes leftover after parsing attributes in process `syz.8.2039'. [ 400.103633][T13569] netlink: 7064 bytes leftover after parsing attributes in process `syz.8.2043'. [ 400.134732][T13569] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 400.322556][T13569] tap0: tun_chr_ioctl cmd 1074025677 [ 400.330064][T13569] tap0: linktype set to 1 [ 400.351794][T13569] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 401.628218][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2054'. [ 402.276754][T13617] netlink: 'syz.8.2056': attribute type 2 has an invalid length. [ 402.285473][T13617] netlink: 'syz.8.2056': attribute type 2 has an invalid length. [ 402.470157][T13619] netlink: 'syz.8.2057': attribute type 13 has an invalid length. [ 402.779817][T13642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2062'. [ 402.915322][T13619] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.924400][T13619] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.184268][T13619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.207014][T13619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.360540][T13637] netlink: 'syz.3.2063': attribute type 1 has an invalid length. [ 403.406535][ T7005] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.430064][ T7005] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.506151][ T7005] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.541349][ T7005] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.553506][T13657] tc_dump_action: action bad kind [ 403.889593][T13676] netlink: 'syz.5.2072': attribute type 1 has an invalid length. [ 403.919781][T13673] netlink: 'syz.5.2072': attribute type 1 has an invalid length. [ 404.061277][T13679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2073'. [ 404.344444][T13684] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2075'. [ 405.035758][T13693] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2077'. [ 405.559427][T13709] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2080'. [ 405.861685][T13712] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 405.868703][T13712] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 406.336263][T13738] wg0 speed is unknown, defaulting to 1000 [ 406.352506][T13738] wg0 speed is unknown, defaulting to 1000 [ 406.360024][T13738] wg0 speed is unknown, defaulting to 1000 [ 406.428081][T13738] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 406.517736][T13738] wg0 speed is unknown, defaulting to 1000 [ 406.530452][T13738] wg0 speed is unknown, defaulting to 1000 [ 406.561503][T13738] wg0 speed is unknown, defaulting to 1000 [ 406.581596][T13738] wg0 speed is unknown, defaulting to 1000 [ 406.606320][T13738] wg0 speed is unknown, defaulting to 1000 [ 406.625591][T13738] wg0 speed is unknown, defaulting to 1000 [ 406.634569][T13738] wg0 speed is unknown, defaulting to 1000 [ 407.014029][T13722] netlink: 763 bytes leftover after parsing attributes in process `syz.5.2086'. [ 407.460976][T13776] netlink: 'syz.5.2096': attribute type 1 has an invalid length. [ 407.483508][T13776] netlink: 10084 bytes leftover after parsing attributes in process `syz.5.2096'. [ 407.807789][T13789] pimreg: tun_chr_ioctl cmd 1074025678 [ 407.815432][T13789] pimreg: group set to 0 [ 408.243045][T13815] syz.0.2108: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 408.264111][T13815] CPU: 0 UID: 0 PID: 13815 Comm: syz.0.2108 Not tainted syzkaller #0 PREEMPT(full) [ 408.264148][T13815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 408.264166][T13815] Call Trace: [ 408.264175][T13815] [ 408.264184][T13815] dump_stack_lvl+0x189/0x250 [ 408.264221][T13815] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 408.264256][T13815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.264284][T13815] ? __pfx__printk+0x10/0x10 [ 408.264308][T13815] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 408.264337][T13815] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 408.264377][T13815] warn_alloc+0x214/0x310 [ 408.264399][T13815] ? stack_depot_save_flags+0x41b/0x860 [ 408.264428][T13815] ? __pfx_warn_alloc+0x10/0x10 [ 408.264452][T13815] ? kasan_save_track+0x3e/0x80 [ 408.264470][T13815] ? __kasan_kmalloc+0x93/0xb0 [ 408.264493][T13815] ? xsk_setsockopt+0x57b/0x8d0 [ 408.264521][T13815] ? do_sock_setsockopt+0x17c/0x1b0 [ 408.264553][T13815] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 408.264581][T13815] ? do_syscall_64+0xfa/0xfa0 [ 408.264600][T13815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.264634][T13815] __vmalloc_node_range_noprof+0x125/0x12d0 [ 408.264696][T13815] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 408.264723][T13815] ? __kasan_kmalloc+0x93/0xb0 [ 408.264753][T13815] vmalloc_user_noprof+0xad/0xf0 [ 408.264775][T13815] ? xskq_create+0xbf/0x170 [ 408.264807][T13815] xskq_create+0xbf/0x170 [ 408.264844][T13815] xsk_init_queue+0xb0/0x110 [ 408.264880][T13815] xsk_setsockopt+0x57b/0x8d0 [ 408.264913][T13815] ? __pfx_xsk_setsockopt+0x10/0x10 [ 408.264948][T13815] ? __pfx_aa_sk_perm+0x10/0x10 [ 408.264983][T13815] ? aa_sock_opt_perm+0xff/0x1b0 [ 408.265010][T13815] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 408.265034][T13815] ? __pfx_xsk_setsockopt+0x10/0x10 [ 408.265066][T13815] do_sock_setsockopt+0x17c/0x1b0 [ 408.265098][T13815] __x64_sys_setsockopt+0x13f/0x1b0 [ 408.265131][T13815] do_syscall_64+0xfa/0xfa0 [ 408.265150][T13815] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.265170][T13815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.265191][T13815] ? clear_bhb_loop+0x60/0xb0 [ 408.265218][T13815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.265238][T13815] RIP: 0033:0x7f3f7798f749 [ 408.265259][T13815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.265278][T13815] RSP: 002b:00007f3f75bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 408.265301][T13815] RAX: ffffffffffffffda RBX: 00007f3f77be6090 RCX: 00007f3f7798f749 [ 408.265316][T13815] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 408.265330][T13815] RBP: 00007f3f77a13f91 R08: 0000000000000004 R09: 0000000000000000 [ 408.265343][T13815] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 408.265357][T13815] R13: 00007f3f77be6128 R14: 00007f3f77be6090 R15: 00007fff59a66358 [ 408.265398][T13815] [ 408.265413][T13815] Mem-Info: [ 408.437647][T13824] netlink: 'syz.6.2110': attribute type 13 has an invalid length. [ 408.444899][T13815] active_anon:17404 inactive_anon:0 isolated_anon:0 [ 408.444899][T13815] active_file:19014 inactive_file:40017 isolated_file:0 [ 408.444899][T13815] unevictable:768 dirty:140 writeback:0 [ 408.444899][T13815] slab_reclaimable:7113 slab_unreclaimable:144390 [ 408.444899][T13815] mapped:38821 shmem:12962 pagetables:1047 [ 408.444899][T13815] sec_pagetables:0 bounce:0 [ 408.444899][T13815] kernel_misc_reclaimable:0 [ 408.444899][T13815] free:1261127 free_pcp:11226 free_cma:0 [ 408.522805][T13824] netlink: 'syz.6.2110': attribute type 17 has an invalid length. [ 408.582381][T13815] Node 0 active_anon:72616kB inactive_anon:0kB active_file:76056kB inactive_file:159868kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:155284kB dirty:560kB writeback:0kB shmem:53312kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13036kB pagetables:3972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 408.677310][T13824] gretap0: refused to change device tx_queue_len [ 408.689082][T13815] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 408.691291][T13824] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 408.719744][T13815] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 408.793086][T13815] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 408.799992][T13815] Node 0 DMA32 free:1128448kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:75216kB inactive_anon:0kB active_file:76056kB inactive_file:159868kB unevictable:1536kB writepending:560kB zspages:0kB present:3129332kB managed:2565128kB mlocked:0kB bounce:0kB free_pcp:30768kB local_pcp:10708kB free_cma:0kB [ 408.846784][T13815] lowmem_reserve[]: 0 0 0 0 0 [ 408.851971][T13829] netlink: 'syz.5.2112': attribute type 1 has an invalid length. [ 408.861972][T13815] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 408.891681][T13829] netlink: 'syz.5.2112': attribute type 3 has an invalid length. [ 408.901770][T13829] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2112'. [ 408.915636][T13815] lowmem_reserve[]: 0 0 0 0 0 [ 408.920481][T13815] Node 1 Normal free:3894600kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15428kB local_pcp:10400kB free_cma:0kB [ 408.982435][T13815] lowmem_reserve[]: 0 0 0 0 0 [ 408.987642][T13815] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 409.054511][T13815] Node 0 DMA32: 725*4kB (UM) 185*8kB (U) 105*16kB (UME) 653*32kB (UE) 272*64kB (UME) 73*128kB (UME) 163*256kB (UME) 117*512kB (UME) 55*1024kB (UME) 16*2048kB (UME) 214*4096kB (U) = 1120972kB [ 409.165299][T13815] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 409.237135][T13815] Node 1 Normal: 196*4kB (UE) 49*8kB (UME) 45*16kB (UME) 85*32kB (UME) 31*64kB (UME) 11*128kB (UME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (U) 947*4096kB (UM) = 3894600kB [ 409.307881][T13815] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.343409][T13815] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 409.361359][T13815] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.381385][T13815] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 409.432876][T13815] 75884 total pagecache pages [ 409.438023][T13815] 0 pages in swap cache [ 409.442217][T13815] Free swap = 124996kB [ 409.473525][T13815] Total swap = 124996kB [ 409.477926][T13815] 2097051 pages RAM [ 409.487423][T13815] 0 pages HighMem/MovableOnly [ 409.499124][T13815] 424127 pages reserved [ 409.515652][T13815] 0 pages cma reserved [ 409.760057][T13838] netlink: 3084 bytes leftover after parsing attributes in process `syz.8.2114'. [ 409.791378][T13838] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.2114'. [ 410.130576][T13855] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2117'. [ 410.942994][T13857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2118'. [ 410.973592][ T5837] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 411.062258][T13871] netlink: 'syz.8.2122': attribute type 13 has an invalid length. [ 411.087066][T13872] netlink: 'syz.5.2121': attribute type 12 has an invalid length. [ 411.105550][T13872] netlink: 212332 bytes leftover after parsing attributes in process `syz.5.2121'. [ 411.420748][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2123'. [ 411.509384][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2123'. [ 411.546176][T13874] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2123'. [ 411.871083][T13885] netlink: 'syz.8.2127': attribute type 10 has an invalid length. [ 412.184997][T13876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2124'. [ 413.479375][T13952] netlink: 'syz.6.2145': attribute type 25 has an invalid length. [ 413.534139][T13952] netlink: 'syz.6.2145': attribute type 7 has an invalid length. [ 414.297193][T13979] __nla_validate_parse: 3 callbacks suppressed [ 414.297214][T13979] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2152'. [ 414.335090][T13979] netlink: 'syz.6.2152': attribute type 1 has an invalid length. [ 414.356130][T13979] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2152'. [ 415.060748][T13998] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2157'. [ 415.557161][T14008] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2162'. [ 415.584102][T14008] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 416.109386][T14036] netlink: 'syz.0.2170': attribute type 22 has an invalid length. [ 416.138082][T14036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2170'. [ 416.905830][T14056] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2172'. [ 419.923003][T14067] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2176'. [ 419.978965][T14067] bond_slave_1: entered promiscuous mode [ 421.505062][T14089] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2181'. [ 424.569264][ T7035] bridge0: port 3(dummy0) entered disabled state [ 424.623052][ T7035] bridge_slave_1: left allmulticast mode [ 424.668833][ T7035] bridge_slave_1: left promiscuous mode [ 424.687800][ T7035] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.776274][ T7035] bridge_slave_0: left allmulticast mode [ 424.782227][ T7035] bridge_slave_0: left promiscuous mode [ 424.848376][ T7035] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.350683][T14095] netlink: 'syz.5.2184': attribute type 21 has an invalid length. [ 425.403530][T14095] netlink: 'syz.5.2184': attribute type 15 has an invalid length. [ 425.541160][T14099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2183'. [ 425.678620][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2183'. [ 426.052881][ T7035] team0: Port device bond0 removed [ 426.071931][ T7035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.093008][ T7035] bond0 (unregistering): (slave 4@0): Releasing backup interface [ 426.115820][ T7035] bond0 (unregistering): Released all slaves [ 426.170871][T14092] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2182'. [ 426.360014][T14105] netlink: 'syz.8.2185': attribute type 11 has an invalid length. [ 426.394253][T14105] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2185'. [ 426.447889][T14112] netlink: 'syz.3.2187': attribute type 11 has an invalid length. [ 426.475413][T14112] netlink: 199804 bytes leftover after parsing attributes in process `syz.3.2187'. [ 427.302501][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2192'. [ 427.322348][T14134] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2192'. [ 427.422783][T14119] netlink: 'syz.5.2188': attribute type 4 has an invalid length. [ 427.454094][T14125] -1: renamed from syzkaller0 [ 427.662984][T14138] delete_channel: no stack [ 427.684398][T14138] delete_channel: no stack [ 427.821905][ T7035] hsr_slave_0: left promiscuous mode [ 427.883216][ T7035] hsr_slave_1: left promiscuous mode [ 427.891735][ T7035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.912868][ T7035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.765375][T14169] netlink: 'syz.5.2202': attribute type 2 has an invalid length. [ 428.773379][T14169] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2202'. [ 429.188048][ T7035] team0 (unregistering): Port device team_slave_1 removed [ 429.242584][ T7035] team0 (unregistering): Port device C removed [ 429.869062][T14183] IPv6: pim6reg1: Disabled Multicast RS [ 430.254852][T14207] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2211'. [ 430.528100][T14198] netlink: 'syz.8.2208': attribute type 10 has an invalid length. [ 430.538850][T14198] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2208'. [ 430.713585][T14198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.355774][T14238] openvswitch: netlink: IP tunnel dst address not specified [ 432.235046][T14255] erspan0 speed is unknown, defaulting to 1000 [ 432.243154][T14255] wg0 speed is unknown, defaulting to 1000 [ 432.339130][T14273] netlink: 'syz.3.2227': attribute type 21 has an invalid length. [ 432.347155][T14273] netlink: 'syz.3.2227': attribute type 4 has an invalid length. [ 432.363814][T14273] netlink: 14497 bytes leftover after parsing attributes in process `syz.3.2227'. [ 432.622410][T14287] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2230'. [ 432.947633][T14299] netlink: 'syz.3.2234': attribute type 304 has an invalid length. [ 434.461130][T14314] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2238'. [ 434.741643][T14315] netlink: 17 bytes leftover after parsing attributes in process `syz.8.2237'. [ 435.098956][T14334] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 435.516259][T14344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2243'. [ 435.578089][T14336] netlink: 294 bytes leftover after parsing attributes in process `syz.3.2243'. [ 435.720884][T14336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.122754][T14364] netlink: 'syz.0.2249': attribute type 10 has an invalid length. [ 437.457846][T14386] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2256'. [ 437.515304][T14383] netlink: 763 bytes leftover after parsing attributes in process `syz.8.2253'. [ 438.100859][T14408] pim6reg1: tun_chr_ioctl cmd 2147767521 [ 438.148201][T14408] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2260'. [ 438.165175][T14408] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2260'. [ 440.080698][T14453] netlink: 'syz.6.2272': attribute type 10 has an invalid length. [ 440.202355][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.220244][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.257704][T14453] bridge0: port 3(macsec0) entered blocking state [ 440.312921][T14453] bridge0: port 3(macsec0) entered disabled state [ 440.355290][T14453] macsec0: entered allmulticast mode [ 440.367964][T14453] veth1_macvtap: entered allmulticast mode [ 440.397537][T14453] macsec0: entered promiscuous mode [ 440.411878][T14453] bridge0: port 3(macsec0) entered blocking state [ 440.419526][T14453] bridge0: port 3(macsec0) entered forwarding state [ 440.520420][T14468] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2276'. [ 440.771366][T14481] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2281'. [ 440.806986][T14481] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2281'. [ 440.836073][T14481] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2281'. [ 440.857000][T14481] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2281'. [ 441.268056][T14485] netlink: 'syz.3.2283': attribute type 10 has an invalid length. [ 441.276630][T14485] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2283'. [ 441.294036][T14485] ipvlan1: entered promiscuous mode [ 441.299613][T14485] ipvlan1: entered allmulticast mode [ 441.320008][T14485] bridge0: port 4(ipvlan1) entered blocking state [ 441.327342][T14485] bridge0: port 4(ipvlan1) entered disabled state [ 441.357883][T14485] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 441.542235][T14500] openvswitch: netlink: IP tunnel dst address not specified [ 442.107479][T14528] netlink: 'syz.0.2297': attribute type 1 has an invalid length. [ 442.116594][T14529] netlink: 'syz.3.2296': attribute type 3 has an invalid length. [ 442.159966][T14529] netlink: 'syz.3.2296': attribute type 4 has an invalid length. [ 442.484215][T14535] __nla_validate_parse: 4 callbacks suppressed [ 442.484260][T14535] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.2299'. [ 442.521915][T14537] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2300'. [ 442.637682][T14544] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2302'. [ 442.846690][T14556] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2303'. [ 442.868182][T14553] netlink: 'syz.6.2304': attribute type 10 has an invalid length. [ 442.905083][T14553] team0: Device ipvlan1 failed to register rx_handler [ 443.742654][T14588] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2312'. [ 443.860173][T14583] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2310'. [ 446.522136][T14606] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2317'. [ 446.624402][T14607] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2316'. [ 446.780983][T14620] netlink: 'syz.0.2321': attribute type 2 has an invalid length. [ 447.158511][T14626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2322'. [ 450.608124][ T30] audit: type=1107 audit(1764721560.960:7): pid=14650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='S@ΤI7|<:,G*&82bd3π${6U9@7]9TVgl[Bƙg6'lT, 4eΚ$d [ 450.608124][ T30] ڀ U~yTOwV%%J:.GfrH7gyюn?8 Ի2^8Eh&' [ 451.275199][T14642] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2325'. [ 451.589580][T14673] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2338'. [ 451.655163][T14681] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2338'. [ 452.239269][T14705] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2345'. [ 452.306583][T14708] netlink: 'syz.3.2346': attribute type 1 has an invalid length. [ 452.348899][T14708] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2346'. [ 452.464923][T14704] netlink: 763 bytes leftover after parsing attributes in process `syz.6.2344'. [ 453.437361][T14711] team0: Port device team_slave_0 removed [ 453.445708][T14711] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 453.672382][T14711] erspan0 speed is unknown, defaulting to 1000 [ 453.734758][T14725] netlink: 'syz.3.2351': attribute type 21 has an invalid length. [ 453.752444][T14724] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2348'. [ 453.805073][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2351'. [ 453.830256][T14722] netlink: 'syz.8.2349': attribute type 10 has an invalid length. [ 453.838793][T14722] netlink: 'syz.8.2349': attribute type 16 has an invalid length. [ 453.847593][T14722] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2349'. [ 453.858225][T14711] wg0 speed is unknown, defaulting to 1000 [ 453.874131][T14725] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2351'. [ 455.161940][T14784] netlink: 'syz.3.2368': attribute type 10 has an invalid length. [ 456.023810][T14813] netdevsim netdevsim3 : renamed from netdevsim0 [ 456.371815][T14826] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 456.476078][T14826] __nla_validate_parse: 9 callbacks suppressed [ 456.476118][T14826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2381'. [ 456.934673][T14833] netlink: 'syz.5.2382': attribute type 29 has an invalid length. [ 457.554381][T14857] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2389'. [ 457.916508][T14878] netlink: 14585 bytes leftover after parsing attributes in process `syz.5.2396'. [ 458.016151][T14885] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2399'. [ 458.025608][T14885] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2399'. [ 458.043319][T14885] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2399'. [ 458.382433][T14897] erspan0 speed is unknown, defaulting to 1000 [ 458.391488][T14897] wg0 speed is unknown, defaulting to 1000 [ 458.764821][T14917] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2408'. [ 459.401300][T14932] netlink: 'syz.8.2413': attribute type 29 has an invalid length. [ 459.461666][T14932] netlink: 'syz.8.2413': attribute type 29 has an invalid length. [ 459.540621][T14932] netlink: 4444 bytes leftover after parsing attributes in process `syz.8.2413'. [ 459.565022][T14932] netlink: 4444 bytes leftover after parsing attributes in process `syz.8.2413'. [ 459.707328][T14948] netlink: 'syz.6.2419': attribute type 1 has an invalid length. [ 459.916874][T14959] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2422'. [ 460.569925][T14974] netlink: 'syz.8.2426': attribute type 10 has an invalid length. [ 463.442713][T14980] __nla_validate_parse: 7 callbacks suppressed [ 463.442783][T14980] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2428'. [ 464.038353][T14998] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2430'. [ 464.254698][T15000] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2432'. [ 464.524711][T15012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2435'. [ 464.583416][T15012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2435'. [ 464.613179][T15012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2435'. [ 464.633425][T15012] netlink: 'syz.0.2435': attribute type 5 has an invalid length. [ 465.250963][T15032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.344884][T15034] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.2443'. [ 465.454741][T15035] netlink: 763 bytes leftover after parsing attributes in process `syz.8.2442'. [ 466.277693][ T6997] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.312704][T15058] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2450'. [ 466.375560][ T6997] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.603198][ T6997] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.705703][ T6997] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.974211][ T6997] bridge0: port 3(team0) entered disabled state [ 467.019655][ T6997] bridge_slave_1: left allmulticast mode [ 467.028000][ T6997] bridge_slave_1: left promiscuous mode [ 467.053369][ T6997] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.068998][ T6997] bridge_slave_0: left allmulticast mode [ 467.093271][ T6997] bridge_slave_0: left promiscuous mode [ 467.104799][ T6997] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.455353][ T30] audit: type=1107 audit(1764721577.730:8): pid=15105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 467.861017][ T6997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.872771][ T6997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.885038][ T6997] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 467.899457][ T6997] bond0 (unregistering): Released all slaves [ 467.917163][T15108] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2460'. [ 467.957895][ T6997] : left promiscuous mode [ 468.215611][T15120] netlink: 'syz.6.2468': attribute type 6 has an invalid length. [ 468.899146][ T6997] hsr_slave_0: left promiscuous mode [ 468.922553][ T6997] hsr_slave_1: left promiscuous mode [ 468.929363][ T6997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.937992][ T6997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.949246][ T6997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.973657][ T6997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.097441][ T6997] veth1_macvtap: left promiscuous mode [ 469.111701][ T6997] veth0_macvtap: left promiscuous mode [ 469.122951][ T6997] veth1_vlan: left promiscuous mode [ 469.132997][T15156] __nla_validate_parse: 2 callbacks suppressed [ 469.133049][T15156] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2478'. [ 469.137820][ T6997] veth0_vlan: left promiscuous mode [ 469.155079][T15156] openvswitch: netlink: Flow key attr not present in new flow. [ 469.608314][ T6997] team_slave_1 (unregistering): left promiscuous mode [ 469.617307][ T6997] team_slave_1 (unregistering): left allmulticast mode [ 469.627701][ T6997] team0 (unregistering): Port device team_slave_1 removed [ 469.665820][ T6997] team_slave_0 (unregistering): left promiscuous mode [ 469.673009][ T6997] team_slave_0 (unregistering): left allmulticast mode [ 469.682451][ T6997] team0 (unregistering): Port device team_slave_0 removed [ 470.058538][T15162] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2480'. [ 470.215743][T15167] netlink: 'syz.3.2482': attribute type 6 has an invalid length. [ 470.231497][T15167] netlink: 360 bytes leftover after parsing attributes in process `syz.3.2482'. [ 470.319713][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2486'. [ 470.334665][T15175] xt_l2tp: v2 sid > 0xffff: 603979776 [ 470.357628][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2486'. [ 470.404172][T15184] netlink: 'syz.3.2488': attribute type 10 has an invalid length. [ 470.432175][T15184] team0: Port device wlan1 added [ 470.444581][T15187] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2487'. [ 470.530865][T15189] bpf: Bad value for 'mode' [ 470.539074][T15185] erspan0 speed is unknown, defaulting to 1000 [ 470.547456][T15185] wg0 speed is unknown, defaulting to 1000 [ 470.553502][T15190] bpf: Bad value for 'mode' [ 470.753392][T15202] xt_bpf: check failed: parse error [ 471.600767][T15225] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2495'. [ 471.614354][T15225] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2495'. [ 471.793139][T15239] bridge_slave_0: mtu greater than device maximum [ 471.814573][T15236] netlink: 'syz.5.2498': attribute type 10 has an invalid length. [ 472.189017][T15236] veth0_vlan: left promiscuous mode [ 472.363754][T15236] veth0_vlan: entered promiscuous mode [ 472.406759][T15236] team0: Device veth0_vlan failed to register rx_handler [ 472.654788][T15236] syz.5.2498 (15236) used greatest stack depth: 17240 bytes left [ 474.275241][T15291] netlink: 'syz.5.2514': attribute type 10 has an invalid length. [ 474.313997][T15291] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2514'. [ 474.490789][T15300] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 474.585831][T15305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 474.664456][T15305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 474.698246][T15305] hsr0: entered promiscuous mode [ 474.712886][T15305] hsr0: entered allmulticast mode [ 474.729143][T15307] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2519'. [ 474.729863][T15305] hsr_slave_0: entered allmulticast mode [ 474.773488][T15305] hsr_slave_1: entered allmulticast mode [ 475.323828][T15326] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2526'. [ 475.337915][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2526'. [ 475.477791][T15331] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2529'. [ 475.825477][T15344] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2532'. [ 476.081284][T15346] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280 [ 476.454276][T15358] netlink: 'syz.3.2536': attribute type 10 has an invalid length. [ 476.490220][T15358] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 476.682422][T15372] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2534'. [ 476.703552][T15372] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2534'. [ 476.761996][T15374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.147580][T15383] netlink: 14565 bytes leftover after parsing attributes in process `syz.0.2540'. [ 478.025383][T15394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2544'. [ 478.089211][T15395] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 478.761412][T15405] netlink: 'syz.8.2547': attribute type 12 has an invalid length. [ 479.202920][T15431] netlink: 'syz.6.2554': attribute type 1 has an invalid length. [ 479.380923][T15434] netlink: 'syz.5.2555': attribute type 3 has an invalid length. [ 479.413101][T15434] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 479.579909][T15448] netlink: 'syz.8.2559': attribute type 4 has an invalid length. [ 480.388871][T15468] __nla_validate_parse: 8 callbacks suppressed [ 480.388890][T15468] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2565'. [ 480.434875][T15471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2565'. [ 480.684346][T15479] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2567'. [ 480.787795][T15479] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2567'. [ 480.905518][T15479] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2567'. [ 480.965906][T15484] netlink: 'syz.3.2570': attribute type 10 has an invalid length. [ 480.974193][T15484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.058257][T15484] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 481.080839][T15488] netlink: 'syz.0.2571': attribute type 2 has an invalid length. [ 481.094877][T15488] netlink: 'syz.0.2571': attribute type 1 has an invalid length. [ 481.116494][T15488] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2571'. [ 481.203851][T15479] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2567'. [ 481.225162][T15479] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2567'. [ 481.262078][T15479] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2567'. [ 481.311704][T15492] netlink: 'syz.5.2572': attribute type 1 has an invalid length. [ 481.457658][T15495] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2573'. [ 481.692550][T15509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.113834][T15513] netlink: zone id is out of range [ 482.119042][T15513] netlink: zone id is out of range [ 482.125967][T15513] netlink: zone id is out of range [ 482.131772][T15513] netlink: set zone limit has 8 unknown bytes [ 482.312617][T15520] netlink: 'syz.3.2579': attribute type 13 has an invalid length. [ 483.066814][T15544] netlink: 'syz.5.2584': attribute type 16 has an invalid length. [ 483.083445][T15544] netlink: 'syz.5.2584': attribute type 17 has an invalid length. [ 484.062001][T15544] veth0_vlan: left promiscuous mode [ 484.109493][T15544] veth0_vlan: entered promiscuous mode [ 484.126743][T15544] veth1_vlan: entered allmulticast mode [ 484.132953][T15544] macvlan0: left promiscuous mode [ 484.139426][T15544] macvlan0: left allmulticast mode [ 484.145035][T15544] veth1_vlan: left allmulticast mode [ 484.167940][T15544] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 484.175297][T15544] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 484.190875][T15544] mac80211_hwsim hwsim18 wlan1: left promiscuous mode [ 484.199468][T15544] mac80211_hwsim hwsim18 wlan1: left allmulticast mode [ 484.367109][T15576] xt_NFQUEUE: number of queues (65297) out of range (got 111634) [ 484.510648][T15583] netlink: 'syz.5.2593': attribute type 10 has an invalid length. [ 485.409299][T15608] __nla_validate_parse: 3 callbacks suppressed [ 485.409320][T15608] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2599'. [ 485.554157][T15610] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2599'. [ 485.619945][T15612] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 485.706798][T15614] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2599'. [ 485.716445][T15593] netlink: 'syz.8.2596': attribute type 2 has an invalid length. [ 485.743376][T15593] netlink: 134 bytes leftover after parsing attributes in process `syz.8.2596'. [ 485.758195][T15593] netlink: 228 bytes leftover after parsing attributes in process `syz.8.2596'. [ 485.780252][T15593] netlink: 'syz.8.2596': attribute type 2 has an invalid length. [ 485.813381][T15593] netlink: 134 bytes leftover after parsing attributes in process `syz.8.2596'. [ 485.887795][T15625] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2603'. [ 485.908285][T15625] netlink: 'syz.5.2603': attribute type 29 has an invalid length. [ 485.918217][T15625] netlink: 'syz.5.2603': attribute type 29 has an invalid length. [ 486.028299][T15631] netlink: 'syz.5.2605': attribute type 39 has an invalid length. [ 486.095191][T15634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2606'. [ 486.253501][T15639] netlink: 'syz.6.2607': attribute type 10 has an invalid length. [ 486.276197][T15639] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2607'. [ 486.324749][T15639] batman_adv: batadv0: Adding interface: virt_wifi0 [ 486.350612][T15639] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.381658][T15639] batman_adv: batadv0: Interface activated: virt_wifi0 [ 486.391213][T15645] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.2610'. [ 488.051930][T15701] veth1_macvtap: left promiscuous mode [ 488.537751][T15715] netlink: 'syz.0.2628': attribute type 39 has an invalid length. [ 488.816234][T15728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.863593][T15727] delete_channel: no stack [ 488.868176][T15727] delete_channel: no stack [ 488.976144][T15733] netlink: 'syz.0.2634': attribute type 32 has an invalid length. [ 489.539680][T15733] netlink: 'syz.0.2634': attribute type 32 has an invalid length. [ 489.622641][T15753] IPv6: NLM_F_CREATE should be specified when creating new route [ 489.783734][T15758] netlink: 'syz.6.2636': attribute type 39 has an invalid length. [ 489.808025][T15764] netlink: 'syz.3.2639': attribute type 4 has an invalid length. [ 489.815962][T15764] netlink: 'syz.3.2639': attribute type 17 has an invalid length. [ 489.880268][T15769] netlink: 'syz.0.2640': attribute type 1 has an invalid length. [ 490.471515][T15785] netlink: 'syz.3.2644': attribute type 2 has an invalid length. [ 490.655574][T15791] erspan0 speed is unknown, defaulting to 1000 [ 490.698915][T15791] wg0 speed is unknown, defaulting to 1000 [ 491.432186][T15823] netlink: 'syz.5.2653': attribute type 6 has an invalid length. [ 492.002158][T15843] __nla_validate_parse: 9 callbacks suppressed [ 492.002177][T15843] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2659'. [ 492.020050][T15843] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2659'. [ 492.342281][T15851] netlink: 'syz.5.2662': attribute type 7 has an invalid length. [ 493.653300][T15863] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2665'. [ 493.662617][T15864] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2665'. [ 493.703642][T15865] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2665'. [ 493.847640][T15872] netlink: 'syz.5.2668': attribute type 12 has an invalid length. [ 493.873857][T15872] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2668'. [ 493.947885][T15872] netlink: 'syz.5.2668': attribute type 39 has an invalid length. [ 494.255125][T15898] netlink: 'syz.5.2676': attribute type 29 has an invalid length. [ 494.286339][T15898] netlink: 'syz.5.2676': attribute type 29 has an invalid length. [ 494.302773][T15898] netlink: 500 bytes leftover after parsing attributes in process `syz.5.2676'. [ 494.317903][T15898] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2676'. [ 494.352422][T15898] netlink: 'syz.5.2676': attribute type 29 has an invalid length. [ 494.472428][T15902] netlink: 'syz.8.2678': attribute type 25 has an invalid length. [ 494.481633][T15902] netlink: 2418 bytes leftover after parsing attributes in process `syz.8.2678'. [ 494.545156][T15910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2667'. [ 494.774638][T15919] cgroup: fork rejected by pids controller in /syz5 [ 495.059557][T16026] debugfs: '&%Q0@æjʫ} }!' already exists in 'ieee80211' [ 495.115051][T15926] delete_channel: no stack [ 495.270801][T16040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.502943][T16046] netlink: 'syz.0.2694': attribute type 3 has an invalid length. [ 495.987247][T16066] netlink: 'syz.8.2699': attribute type 13 has an invalid length. [ 496.427748][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 496.438587][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 496.446737][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 496.455167][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 496.463300][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 496.527070][T16086] erspan0 speed is unknown, defaulting to 1000 [ 496.535739][T16086] wg0 speed is unknown, defaulting to 1000 [ 496.742865][T16099] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 496.793100][T16086] chnl_net:caif_netlink_parms(): no params data found [ 496.793923][T16099] netlink: 'syz.0.2709': attribute type 10 has an invalid length. [ 498.129258][T16138] netlink: 'syz.6.2717': attribute type 10 has an invalid length. [ 498.181656][T16128] mac80211_hwsim hwsim9 .3c: renamed from wlan1 [ 498.484273][ T5149] Bluetooth: hci3: command tx timeout [ 498.564159][ T5149] Bluetooth: hci5: command 0x0406 tx timeout [ 498.570335][ T5149] Bluetooth: hci2: command 0x0406 tx timeout [ 500.567510][ T5837] Bluetooth: hci3: command tx timeout [ 500.764901][T16138] veth1_vlan: entered allmulticast mode [ 500.787172][T16138] team0: Device veth1_vlan failed to register rx_handler [ 500.804023][T16086] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.815292][T16086] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.822710][T16086] bridge_slave_0: entered allmulticast mode [ 500.831691][T16086] bridge_slave_0: entered promiscuous mode [ 500.841494][T16086] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.848901][T16086] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.856631][T16086] bridge_slave_1: entered allmulticast mode [ 500.865025][T16086] bridge_slave_1: entered promiscuous mode [ 500.946607][T16086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.960511][T16086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.016791][T16086] team0: Port device team_slave_0 added [ 501.030527][T16086] team0: Port device team_slave_1 added [ 501.058337][T16172] netlink: 'syz.0.2724': attribute type 12 has an invalid length. [ 501.068388][T16172] __nla_validate_parse: 11 callbacks suppressed [ 501.068421][T16172] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2724'. [ 501.083469][T16179] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2727'. [ 501.161968][T16086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.183283][T16086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.224738][T16086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.237527][T16086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.249231][T16086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.493853][T16086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.620636][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.627131][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.653392][ T5837] Bluetooth: hci3: command tx timeout [ 504.009002][T16201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2731'. [ 504.064791][T16203] netlink: 6 bytes leftover after parsing attributes in process `syz.8.2732'. [ 504.092980][T16086] hsr_slave_0: entered promiscuous mode [ 504.104758][T16086] hsr_slave_1: entered promiscuous mode [ 504.112679][T16086] debugfs: 'hsr0' already exists in 'hsr' [ 504.119433][T16086] Cannot create hsr debugfs directory [ 504.314980][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2734'. [ 504.472898][T16086] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.730087][ T5837] Bluetooth: hci3: command tx timeout [ 505.156848][T16086] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.494422][T16086] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.705318][T16086] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.861386][T16289] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.002784][T16293] openvswitch: netlink: Unknown nsh attribute 0 [ 506.076471][T16289] bridge_slave_1 (unregistering): left allmulticast mode [ 506.094251][T16289] bridge_slave_1 (unregistering): left promiscuous mode [ 506.101329][T16289] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.156240][T16295] netlink: 61211 bytes leftover after parsing attributes in process `syz.8.2757'. [ 506.225535][ T5837] Bluetooth: hci5: unexpected event 0x36 length: 15 > 7 [ 506.227125][T16295] netlink: 61211 bytes leftover after parsing attributes in process `syz.8.2757'. [ 506.328759][T16086] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 506.339220][T16302] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2760'. [ 506.370761][T16086] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 506.398102][T16303] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2758'. [ 506.442718][T16303] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2758'. [ 506.593592][T16086] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 506.660875][T16086] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 507.316571][T16086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.399511][T16086] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.458405][ T7003] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.465939][ T7003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.577665][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2762'. [ 507.616637][ T7005] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.624189][ T7005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.706346][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2762'. [ 508.395122][T16086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.489655][T16372] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2774'. [ 509.572681][T16086] veth0_vlan: entered promiscuous mode [ 509.615964][T16086] veth1_vlan: entered promiscuous mode [ 509.707586][T16086] veth0_macvtap: entered promiscuous mode [ 509.738117][T16086] veth1_macvtap: entered promiscuous mode [ 509.789243][T16086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.895045][T16388] netlink: 'syz.6.2778': attribute type 17 has an invalid length. [ 509.918008][T16086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.968393][T16388] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2778'. [ 509.979452][T16390] netlink: 'syz.3.2779': attribute type 21 has an invalid length. [ 510.013384][T16390] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2779'. [ 510.107953][T16390] netlink: 'syz.3.2779': attribute type 4 has an invalid length. [ 510.126619][T16390] netlink: 'syz.3.2779': attribute type 5 has an invalid length. [ 510.301874][ T7003] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.363364][ T7003] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.372287][ T7003] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.440553][ T7003] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.492456][T16400] netlink: 'syz.6.2782': attribute type 32 has an invalid length. [ 510.710467][T16407] netlink: 'syz.3.2784': attribute type 29 has an invalid length. [ 510.818902][ T7001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.833405][ T7001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.949000][ T6996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.967432][ T6996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.290103][T16421] netlink: 'syz.5.2696': attribute type 10 has an invalid length. [ 511.299758][T16421] __nla_validate_parse: 4 callbacks suppressed [ 511.299795][T16421] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2696'. [ 511.338046][T16421] ipvlan1: entered promiscuous mode [ 511.357491][T16421] ipvlan1: entered allmulticast mode [ 511.362932][T16421] veth0_vlan: entered allmulticast mode [ 511.453660][T16421] bridge0: port 3(ipvlan1) entered blocking state [ 511.484346][T16421] bridge0: port 3(ipvlan1) entered disabled state [ 511.532077][T16421] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 512.540267][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 512.554116][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 512.562184][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 512.576782][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 512.595442][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 512.654411][T16440] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2792'. [ 512.720994][T16442] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2792'. [ 512.851806][T16437] erspan0 speed is unknown, defaulting to 1000 [ 512.910149][T16437] wg0 speed is unknown, defaulting to 1000 [ 513.231560][T16454] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.2796'. [ 513.286791][ T7013] team0: Port device removed [ 513.766348][ T7013] veth0_to_bridge: left allmulticast mode [ 513.784505][ T7013] veth0_to_bridge: left promiscuous mode [ 513.790590][ T7013] bridge0: port 3(veth0_to_bridge) entered disabled state [ 513.841321][ T7013] bridge_slave_1: left allmulticast mode [ 513.851894][ T7013] bridge_slave_1: left promiscuous mode [ 513.863223][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.894213][T16469] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2800'. [ 513.916905][ T7013] bridge_slave_0: left promiscuous mode [ 513.922838][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.392391][ T7013] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 514.587707][ T7013] bond0 (unregistering): (slave 5a): Releasing backup interface [ 514.598245][ T7013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.610414][ T7013] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 514.625115][ T7013] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 514.638961][ T7013] bond0 (unregistering): Released all slaves [ 514.653657][ T5837] Bluetooth: hci1: command tx timeout [ 514.669044][T16437] chnl_net:caif_netlink_parms(): no params data found [ 514.851207][T16488] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2805'. [ 514.880098][T16488] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2805'. [ 514.903563][T16490] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2805'. [ 514.931427][T16437] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.940593][T16437] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.952020][T16437] bridge_slave_0: entered allmulticast mode [ 514.970924][T16437] bridge_slave_0: entered promiscuous mode [ 515.001113][T16437] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.012964][T16437] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.029031][T16437] bridge_slave_1: entered allmulticast mode [ 515.037679][T16437] bridge_slave_1: entered promiscuous mode [ 515.367359][T16437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.378536][T16499] netlink: 'syz.8.2809': attribute type 11 has an invalid length. [ 515.395886][T16499] netlink: 140 bytes leftover after parsing attributes in process `syz.8.2809'. [ 515.409338][T16437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.514141][ T7013] team0: Port device .3c removed [ 515.598141][T16437] team0: Port device team_slave_0 added [ 515.620416][T16437] team0: Port device team_slave_1 added [ 516.396850][T16437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.404432][T16437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.457021][T16437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.525790][T16437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.566647][T16437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.633283][T16437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.684009][ T7013] hsr_slave_0: left promiscuous mode [ 516.690564][ T7013] hsr_slave_1: left promiscuous mode [ 516.696841][ T7013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.733448][ T5837] Bluetooth: hci1: command tx timeout [ 518.819109][ T5837] Bluetooth: hci1: command tx timeout [ 520.176245][ T7013] team0 (unregistering): Port device 26 removed [ 520.254162][ T7013] team0 (unregistering): Port device C removed [ 520.884919][ T5837] Bluetooth: hci1: command tx timeout [ 521.370804][T16541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2821'. [ 521.382546][T16541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2821'. [ 521.403335][T16541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2821'. [ 521.497582][T16437] hsr_slave_0: entered promiscuous mode [ 521.506849][T16437] hsr_slave_1: entered promiscuous mode [ 521.534144][T16437] debugfs: 'hsr0' already exists in 'hsr' [ 521.554023][T16437] Cannot create hsr debugfs directory [ 521.912304][T16563] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2827'. [ 522.029937][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2829'. [ 522.400563][ T7013] ------------[ cut here ]------------ [ 522.407879][ T7013] WARNING: CPU: 0 PID: 7013 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0 [ 522.419358][ T7013] Modules linked in: [ 522.423551][ T7013] CPU: 0 UID: 0 PID: 7013 Comm: kworker/u8:28 Not tainted syzkaller #0 PREEMPT(full) [ 522.433125][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 522.443532][ T7013] Workqueue: netns cleanup_net [ 522.448353][ T7013] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 522.454104][ T7013] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 fb 7a 3a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 5e 1a f8 e8 24 66 d4 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 16 66 d4 f7 90 0f 0b 90 e9 60 fe ff ff [ 522.457414][T16574] raw_sendmsg: syz.5.2831 forgot to set AF_INET. Fix it! [ 522.473840][ T7013] RSP: 0018:ffffc90003467878 EFLAGS: 00010293 [ 522.473901][ T7013] RAX: ffffffff89eba0bc RBX: ffff8880325f2480 RCX: ffff888058569e40 [ 522.473919][ T7013] RDX: 0000000000000000 RSI: ffffffff8d8f5a0a RDI: ffff888058569e40 [ 522.473934][ T7013] RBP: ffffc90003467990 R08: ffffffff8f7cee77 R09: 1ffffffff1ef9dce [ 522.473951][ T7013] R10: dffffc0000000000 R11: fffffbfff1ef9dcf R12: ffffffff8f3c6e80 [ 522.473969][ T7013] R13: 1ffff9200068cf3c R14: ffff8880325f3940 R15: dffffc0000000000 [ 522.473987][ T7013] FS: 0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000 [ 522.537442][ T7013] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 522.544105][ T7013] CR2: 0000001b2f820000 CR3: 000000002d886000 CR4: 00000000003526f0 [ 522.552112][ T7013] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 522.560151][ T7013] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 522.568284][ T7013] Call Trace: [ 522.571587][ T7013] [ 522.574632][ T7013] xfrm_net_exit+0x2d/0x70 [ 522.579106][ T7013] ops_undo_list+0x49a/0x990 [ 522.583952][ T7013] ? __pfx_ops_undo_list+0x10/0x10 [ 522.588500][T16575] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2830'. [ 522.598114][ T7013] ? do_raw_spin_unlock+0x122/0x240 [ 522.598189][ T7013] cleanup_net+0x4d8/0x820 [ 522.598246][ T7013] ? __pfx_cleanup_net+0x10/0x10 [ 522.598297][ T7013] ? _raw_spin_unlock_irq+0x23/0x50 [ 522.598338][ T7013] ? process_scheduled_works+0x9ef/0x17b0 [ 522.598369][ T7013] ? process_scheduled_works+0x9ef/0x17b0 [ 522.598417][ T7013] process_scheduled_works+0xae1/0x17b0 [ 522.598611][ T7013] ? __pfx_process_scheduled_works+0x10/0x10 [ 522.598754][ T7013] worker_thread+0x8a0/0xda0 [ 522.598946][ T7013] kthread+0x711/0x8a0 [ 522.599011][ T7013] ? __pfx_worker_thread+0x10/0x10 [ 522.599047][ T7013] ? __pfx_kthread+0x10/0x10 [ 522.599105][ T7013] ? _raw_spin_unlock_irq+0x23/0x50 [ 522.599148][ T7013] ? lockdep_hardirqs_on+0x9c/0x150 [ 522.599173][ T7013] ? __pfx_kthread+0x10/0x10 [ 522.599222][ T7013] ret_from_fork+0x4bc/0x870 [ 522.683720][ T7013] ? __pfx_ret_from_fork+0x10/0x10 [ 522.688943][ T7013] ? __switch_to_asm+0x39/0x70 [ 522.693829][ T7013] ? __switch_to_asm+0x33/0x70 [ 522.698647][ T7013] ? __pfx_kthread+0x10/0x10 [ 522.703400][ T7013] ret_from_fork_asm+0x1a/0x30 [ 522.708318][ T7013] [ 522.711392][ T7013] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 522.718711][ T7013] CPU: 0 UID: 0 PID: 7013 Comm: kworker/u8:28 Not tainted syzkaller #0 PREEMPT(full) [ 522.728321][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 522.738602][ T7013] Workqueue: netns cleanup_net [ 522.743430][ T7013] Call Trace: [ 522.746758][ T7013] [ 522.749740][ T7013] dump_stack_lvl+0x99/0x250 [ 522.754397][ T7013] ? __asan_memcpy+0x40/0x70 [ 522.759054][ T7013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.764325][ T7013] ? __pfx__printk+0x10/0x10 [ 522.769129][ T7013] vpanic+0x237/0x6d0 [ 522.773194][ T7013] ? __pfx_vpanic+0x10/0x10 [ 522.777818][ T7013] panic+0xb9/0xc0 [ 522.781603][ T7013] ? __pfx_panic+0x10/0x10 [ 522.786176][ T7013] __warn+0x31b/0x4b0 [ 522.790211][ T7013] ? xfrm_state_fini+0x26d/0x2f0 [ 522.795217][ T7013] ? xfrm_state_fini+0x26d/0x2f0 [ 522.800209][ T7013] report_bug+0x2be/0x4f0 [ 522.804590][ T7013] ? xfrm_state_fini+0x26d/0x2f0 [ 522.809648][ T7013] ? xfrm_state_fini+0x26d/0x2f0 [ 522.814639][ T7013] ? xfrm_state_fini+0x26f/0x2f0 [ 522.819616][ T7013] handle_bug+0x84/0x160 [ 522.824085][ T7013] exc_invalid_op+0x1a/0x50 [ 522.828622][ T7013] asm_exc_invalid_op+0x1a/0x20 [ 522.833494][ T7013] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 522.839076][ T7013] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 fb 7a 3a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 5e 1a f8 e8 24 66 d4 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 16 66 d4 f7 90 0f 0b 90 e9 60 fe ff ff [ 522.858711][ T7013] RSP: 0018:ffffc90003467878 EFLAGS: 00010293 [ 522.864814][ T7013] RAX: ffffffff89eba0bc RBX: ffff8880325f2480 RCX: ffff888058569e40 [ 522.872810][ T7013] RDX: 0000000000000000 RSI: ffffffff8d8f5a0a RDI: ffff888058569e40 [ 522.880801][ T7013] RBP: ffffc90003467990 R08: ffffffff8f7cee77 R09: 1ffffffff1ef9dce [ 522.888797][ T7013] R10: dffffc0000000000 R11: fffffbfff1ef9dcf R12: ffffffff8f3c6e80 [ 522.896790][ T7013] R13: 1ffff9200068cf3c R14: ffff8880325f3940 R15: dffffc0000000000 [ 522.904813][ T7013] ? xfrm_state_fini+0x26c/0x2f0 [ 522.909810][ T7013] ? xfrm_state_fini+0x26c/0x2f0 [ 522.914805][ T7013] xfrm_net_exit+0x2d/0x70 [ 522.919250][ T7013] ops_undo_list+0x49a/0x990 [ 522.923889][ T7013] ? __pfx_ops_undo_list+0x10/0x10 [ 522.929036][ T7013] ? do_raw_spin_unlock+0x122/0x240 [ 522.934286][ T7013] cleanup_net+0x4d8/0x820 [ 522.938756][ T7013] ? __pfx_cleanup_net+0x10/0x10 [ 522.943781][ T7013] ? _raw_spin_unlock_irq+0x23/0x50 [ 522.949021][ T7013] ? process_scheduled_works+0x9ef/0x17b0 [ 522.954817][ T7013] ? process_scheduled_works+0x9ef/0x17b0 [ 522.960580][ T7013] process_scheduled_works+0xae1/0x17b0 [ 522.966280][ T7013] ? __pfx_process_scheduled_works+0x10/0x10 [ 522.972364][ T7013] worker_thread+0x8a0/0xda0 [ 522.977340][ T7013] kthread+0x711/0x8a0 [ 522.981473][ T7013] ? __pfx_worker_thread+0x10/0x10 [ 522.986608][ T7013] ? __pfx_kthread+0x10/0x10 [ 522.991232][ T7013] ? _raw_spin_unlock_irq+0x23/0x50 [ 522.996459][ T7013] ? lockdep_hardirqs_on+0x9c/0x150 [ 523.001670][ T7013] ? __pfx_kthread+0x10/0x10 [ 523.006304][ T7013] ret_from_fork+0x4bc/0x870 [ 523.010943][ T7013] ? __pfx_ret_from_fork+0x10/0x10 [ 523.016114][ T7013] ? __switch_to_asm+0x39/0x70 [ 523.020896][ T7013] ? __switch_to_asm+0x33/0x70 [ 523.025672][ T7013] ? __pfx_kthread+0x10/0x10 [ 523.030297][ T7013] ret_from_fork_asm+0x1a/0x30 [ 523.035153][ T7013] [ 523.038480][ T7013] Kernel Offset: disabled [ 523.042825][ T7013] Rebooting in 86400 seconds..