last executing test programs: 3m46.493736395s ago: executing program 4 (id=5): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0xe900) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf100, 0x0, 0x0, 0x0, 0x2000000}, [@printk={@p, {0x3, 0x3, 0x6}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000300)='GPL\x00', 0x1}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000514210626bd7000ecffffff070001"], 0x20}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5, 0x4}, 0x80, 0x0}, 0x24000001) close(r1) sendmsg$inet(r1, 0x0, 0x4004004) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000700)="d1", 0x1}], 0x1}, 0x48010) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x98}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x400007, 0x8}, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 3m43.653045117s ago: executing program 4 (id=12): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x5a}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) socket$kcm(0x2, 0x922000000001, 0x106) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pI4 \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f0000000380)}, 0x10) perf_event_open(&(0x7f0000001340)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x3, 0x0, 0x8, 0x3be, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x54000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000480)={'caif0\x00', 0x20}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9d, 0x9, 0x7, 0x8, 0x4e19}}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]}) 3m42.961512513s ago: executing program 4 (id=15): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1f, 0xaf, 0x27f, 0x6, 0x800, 0xffffffffffffffff, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r8, 0x11, 0x0, 0x0, @void, @value=r7}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0x1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1100000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000080000000000000000000500439a6462fd54f"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r10, &(0x7f0000000940)="12"}, 0x20) r11 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x2, 0x7, 0x2, 0xb, 0x0, 0x9, 0x90400, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x80000001, 0x2}, 0x8, 0x21, 0x6, 0x6, 0xde5, 0x9, 0x0, 0x0, 0x6, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xf) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r11, 0x2) r12 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r12) ioctl$TUNSETQUEUE(r12, 0x400454d9, &(0x7f0000000280)={'rose0\x00', 0x400}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r12, 0x20, &(0x7f0000000240)={&(0x7f0000000500)=""/126, 0x7e, 0x0, &(0x7f0000000680)=""/241, 0xf1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000", @ANYRESDEC=r10, @ANYRESHEX=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%+9llu \x00'}, 0x20) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0x8, 0x10}, 0xc) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x2d, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x7, 0x1, 0x0, r1}, @alu={0x4, 0x0, 0x6, 0x2, 0xa, 0x6, 0xfffffffffffffff0}, @exit, @cb_func={0x18, 0xe, 0x4, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0x1ff, 0x0, 0x0, 0x40f00, 0x1, '\x00', r9, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[r14, 0xffffffffffffffff, r15, r16, r17], &(0x7f0000000840), 0x10, 0x8}, 0x94) r18 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r18, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r18, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff01c}, {0x6, 0x0, 0x2}]}) 3m27.732615916s ago: executing program 32 (id=15): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1f, 0xaf, 0x27f, 0x6, 0x800, 0xffffffffffffffff, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r8, 0x11, 0x0, 0x0, @void, @value=r7}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0x1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1100000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000080000000000000000000500439a6462fd54f"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r10, &(0x7f0000000940)="12"}, 0x20) r11 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x2, 0x7, 0x2, 0xb, 0x0, 0x9, 0x90400, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x80000001, 0x2}, 0x8, 0x21, 0x6, 0x6, 0xde5, 0x9, 0x0, 0x0, 0x6, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xf) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r11, 0x2) r12 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r12) ioctl$TUNSETQUEUE(r12, 0x400454d9, &(0x7f0000000280)={'rose0\x00', 0x400}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r12, 0x20, &(0x7f0000000240)={&(0x7f0000000500)=""/126, 0x7e, 0x0, &(0x7f0000000680)=""/241, 0xf1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000", @ANYRESDEC=r10, @ANYRESHEX=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%+9llu \x00'}, 0x20) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0x8, 0x10}, 0xc) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x2d, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x7, 0x1, 0x0, r1}, @alu={0x4, 0x0, 0x6, 0x2, 0xa, 0x6, 0xfffffffffffffff0}, @exit, @cb_func={0x18, 0xe, 0x4, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0x1ff, 0x0, 0x0, 0x40f00, 0x1, '\x00', r9, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[r14, 0xffffffffffffffff, r15, r16, r17], &(0x7f0000000840), 0x10, 0x8}, 0x94) r18 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r18, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r18, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff01c}, {0x6, 0x0, 0x2}]}) 16.373569736s ago: executing program 1 (id=903): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000002d00092f27bd70000000000006"], 0x1c}}, 0x84) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf2504"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) recvmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1da}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) r6 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setsockopt$sock_attach_bpf(r6, 0x29, 0x30, &(0x7f0000000100), 0x5000) 15.257982039s ago: executing program 1 (id=909): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8080, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7deb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x20004010) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="08000000030000000800000004c0ff0002040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000002c0), &(0x7f0000000340)='%ps \x00'}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(r1, 0x4004743b, 0x0) 14.028237146s ago: executing program 1 (id=913): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffa702000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x400}) r4 = openat$cgroup_ro(r2, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r4, 0x20, &(0x7f0000000580)={&(0x7f0000000440)=""/68, 0x44, 0x0, &(0x7f00000004c0)=""/130, 0x82}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cd32941a815e3f3ceafe3065b9594fdcb24ebb6eddb9e87c9ecec7a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aefcb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5b0300000026d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984ae4e679107a14bbb24851f6199eaf9a1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a55594616020f72f1c55ee3d325c7496a7c2f10cfeae16ae436751227378f0b1ee78bd33c50206700dd90b96a330f92bff736c83ca53e7f02b734d1a9292337e2be3896f7e7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cde00995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d420e7b2a9e2f87f7b44949fe14c00000000000f47030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982ebddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bffc30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c20024032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7b8419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000e1000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba3759fa55249b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be5732f29eed98d5b3688d80f7c66f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bb850f8035040ad9e57abe58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc053e64bfcfd057980136d6e9faca03b24fa300ef90bfe4ad364256937796f941c2fead94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd40080361427b6b9c118e5c9a0a1d5ca24886eb8a78796540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3815bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df745ae7a4e446ca16d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3d46e45e7949c5b5069103009693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000b84b11308b6636b735b3c654cbc0000000000000019a4e9a9c2cbc906f97fd6eb00b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea02023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6085100d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac4bf5c06c6398c1b28bdd3f4c2353c330d8457cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a99d747d38ef5042053299b8e95decc637a022a49664742606cfdb2a3258498a6a0a82369d70177433e52b851ac396163ca09e6c22ad796a565cf23d87ae9be7235553aa6b8ab74842d3d4ba738b3fa997f079d225335f2af55644478e514aed8ba202805ad458d9ae6ab8d156f11f3cfe7def690f2bbbb463063664625223d23386540e0db96d8eb1755ad49ae817683de97a6dd32d584391302e65594b12bb2e6630217401031c8a1b964ca32f735421bbf64c9f1f9329e5cfda139ea79619e1d00a9a3ab49993362f30d191aa3387101feaa3e326190804eae2114437f8f4b27480900dd6511844a643886588fbdee7f8863a8dfdd75a9e128c6c15166a5f92d3c2d4952e5d07c59bfce0724a02600094c3369be3024edf451ff76a59855fd90353a0de907834bb77a059c56e92eed2f1415b3d8178453c7aecd8fbd161e2ffd66bcf2be175e45184f06bafd1c1c4fd7006a6c90d8afd126f1c51ee0f724ffbbed25a286c95d17c8b4297f8bba8efd565ecb157f0be244fb9657f737354b20e3a5012abb36052eec7a4fe9bc5b5283581b208d90d28d78f1c5422c3bcad67278e8bb88d7e6ccf72dd61319b44aa617d667000000000000a5edbd3e8605225681090853fc66a20e30fb9938e5886ae748236f5e071278763e070b2b75ce0a9e6870033d25dd19733152b01b507d812216e0f7fc89bbe200806f079e9515dd886a781a46ebe3da4c8307885b535109bb1678d08eeef3717bea30f64282ee844b6d64ec51b1221d175b59c1537089dfa803275ab6dcd40b1fe4e851597c1993a477c225201087b7b0977be62a71927bb01b705267aabe967add451795dfd5114726193415cc3e0784a37db8ab8b97a171bc4ad9593f7c750ad440a26b93d24ee8f080de0f2a16cbd5cd1f370bc1235d88d5cbd25acf91daa392731dab4c9c15015de2fded6332b6ebccf6e1588f3f1a5a3e853587a6843ee1a3f3c270e3ab4462bcff01c70b03e8f8c9d816d7d69e4040155e9f999ce4e366a816c6e7224f41df7eead6d6d214ed98708e1d269f4b469af2e2a2559258439758f4fded2780e736568c7eea209c5ed54a1beaf06013bb4b330d39518528a46d68b277faf926672650cad335ae285aeb0b0130a9c7016580a857722b9c51a5a37a856ccb9b6673f58ebfa66f1db4d041741e104cdd91efa4b3248ebecff3568f31b547b19a939708c3b4b45f46377b4a345248489ddef4bc87426717971de1c0049006d2fb99c311fa91c364749917ee81ea8fd51365449d568eadbad6aead6101b7e6582e793670492d814d58e4a9faa8a4a3027b230e8f5b2349fb3ff3c4365df6bd85aa7f76c388ef94f0155c81b04863624fb4708f83ebf93a51d1438d7761d4b1b929d9aa8faef691676834a2591b75205ede2e4a709c3a9899d06c5cb5a571159402e429c5cf839f49957aed76dc7db43f9fdc754e40d7c662ad7939a09bfdbc31deb0d327895afae1eca61820e09abc2c0ed5ce083aceb89c8e24ad45483d3128f0547869970dc84c8787a06046bf79f28a7678b03baeff239ce600d91a07236e255ff7ea441ff0602bb38d7aaa1c414a94c4e143ea2cca9d14a01bb70ff93057a03288bd71c45b025731765ca5250b162f08be1a29460a53f213bfb88a8e80e4c46dbfa5936894a95d27c4e90c151748f8ee457c29cb7e21deb805a9c5c6abf373a4bad5e1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1200000008000000040000000200000000000000c6f2983138da268b12d7c45fb902fb48315750310a5ad5d4b461b1f0be5907b4d92a358102379d44c51599212378e783d9facdad4dcfedb65780f039f14858a0260884fc93000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1180015000600142603600e120800110000810401040016000a001040", 0x38}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, 0x0, 0x24040894) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000000000000000000008500000053000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x5}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe33) 12.627393433s ago: executing program 1 (id=921): r0 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/233, 0xe9}, {&(0x7f0000000100)=""/64, 0x40}], 0x2, &(0x7f0000000180)=""/88, 0x58}, 0x40000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$kcm(r0, &(0x7f00000008c0)={&(0x7f0000000300)=@xdp={0x2c, 0x3, r1, 0x40}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000380)="aef594802fff90ff7dc6fa64e16482bdc11c345db78059feada57b749091209d0872c961767754393d8ef2ee3aa7b62793a70f226a3957abaed868cf6527fb5d3481a227a9cbdbd453f94d7309c64d29bf82392950709afdc028fe7e4d3b324dd7ed43b4d4988c3c5d8d84af7b62ca547ef2e46f883f4c2203009f31815c237b7478ca33e94b09ec67613ae4bf6afd6108a60fb84c2089ea97f11b7455b7c2cf7e0ab32e4c4806b215a17a7631bee1f5f790d062f34a0de834", 0xb9}, {&(0x7f0000000440)="977189099316c92a185ece16b8b5fe6d8d5fd8a733adb05170bf1688155aa5362af6794621e22729217066760ce04589abd5e29149d91468af02860b4779bc89a4ddac50d24028bf6c2b7dcda4e22f546f13c527e74a1fcd26abf16dc8f1962933d907138c503afe19398ba2070f5627f6dc8c70e676f3cf8405486675fa0045e8335efb7e993fc134ac4ffccac0776155cb24b0db8d631e8fcb444e2affa14026a0b9a587684b6768637dd34c0deba6ce867ef4acd84765b11f4533812bfab4998aba67fb0b43c0b623c4c44053b904bdaeea11c9ba38df57f0", 0xda}, {&(0x7f0000000540)="fad6bf9b8a2727b6b2054a86ef63c42881d9835759ca6ac6db7bcced29f4412528c85deb3856f6a748a0de5487f1757ab30acfa0d741ca17fc557acfd3eb4a0e830d83a7109d74fa8aac4382bd8f47b9080384db3ecad6486952d6833ed3e27eef93b6917b8d5056748856d90ef820a186dd5c78a4c6d2d21257b595c4290846a5335a4fe94209", 0x87}, {&(0x7f0000000600)="82f86dc620456432ba60ee2886bc35c9c67bf692f7856414449db4c526e5850e739f3dbaacea7e6769e930f9c76cdc9906008394b30aa6ef047f8a84d3a66f0d931e1fcbc214246482a5a95d7ac1bcc502e7c2622b79c8827c38ef2387677639bddd065983c1731a345b50b24e0f0b2dae", 0x71}, {&(0x7f0000000680)="729ca8221e2bb90c1f936be2e2ab33c5af2cd46de085e9b3e7aaf0db55bb20ec23ec26ff26be8aa6a1570a8f4f65796651cfa9d744c0b68dd5e88bb8281ea0a9f5751ae48b2cc353b543e12f3ec6d8bf52ac4967cdeda572a51a0942f8630ba72738d47d593b9d0e48e0fb989e1e89f1e883f966c474727085e027d77ca0e6f62df9d86074ce02ae5ae89c3d6f1463dae1bd4412c0b9279176b63314e2410ff6dc7aea9a5cb1da344969e35eea37e26d9fd7caedc0197f460ffffaeebd7625490225a7070b469680cb08959b0531", 0xce}, {&(0x7f0000000780)="953afa5e1745b26c1dc53c333f0f8c94b3ab4e975cacbceacafcbbdf3c72656a3acfef7958c45f0afe5a45bec2256ccf7dc2b80267ba4c31e7", 0x39}, {&(0x7f00000007c0)="5a48099933140a78e95069e7acf78a71aeef81efafcd1594803e8e3b4ff55743b938f43931d7cdceac3c7f53799e70406fabade77dc95e70cf7a1e89e02c4c6e4ce365ea492e1ea23a17d51c707cc1872f210b474d8308035715cc28572054c9e8c6", 0x62}], 0x7}, 0x4000880) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone(0x40000000, &(0x7f0000000a00)='RZ', 0x2, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)="98b65e42fbb695435cd9a247f88f8462d6aa13a9c491784c5ad96b1bf348e4f52ff6f1ac2cafc45c04f1aec39c40c3e976d2835e6751ef1bcf5e94a43c43dcf0894d70dad005674472894497e1aabc93431789bacf9c5d7e7ffa18436e41b5bd0f2e0c742eeb407eca440a4580f7fe55f07238b32c8a4da986874b3728914e398130ceb5da41d592eec9b81d0d654262abac66fac8834db3f333b16b879e3df12dacca1ddbc1410e721e73b398ac31139a65740db3b07c6170358e85b489169ce4379ac42de36012c30c5c3c") (async) r4 = getpid() (async) fstat(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f00000010c0)={&(0x7f0000000900)=@kern={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001040)=[{0xfffffffffffffffd}, {&(0x7f0000000940)={0xb0, 0x37, 0x4, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x14, 0xf2, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8c, 0x53, 0x0, 0x0, @binary="50c7cc6f46ea89020480b00d6853de5f4a31c95a8697dec89449485a4e342f8f4735a1052fd1f8e666ae868533791f94c336d6cf69eacf4f148c2e1eeb45900ccee4fc7dd1574de52ba2326081b80d8055cde5effc143f221889036e230f56ba8aa89079b19614134fba3ddeb950f714f73e061c646d01b45405bdd0c3e6c9b35c4d46c82e6f5a97"}]}, 0xb0}, {&(0x7f0000000bc0)={0x254, 0x31, 0x800, 0x70bd2c, 0x25dfdbff, "", [@typed={0x14, 0x101, 0x0, 0x0, @ipv6=@private0}, @nested={0x227, 0x9c, 0x0, 0x1, [@typed={0x8, 0x3ff7, 0x0, 0x0, @pid=r3}, @generic="7b474b6c6f763048dd0e1b94c376e553dfac21fd4ff41adaac16e2641e595f912613817eeff3f5083197d100aa68c9ec9abb358d680eacfef0499fdd3ad0f0cb2a6b53d6ea0c44a07216a1a1dc3789b01a7ee7ed41d222ec373204943b472cc25bc4fa30cb8808830a357d446bebc2e25024be8f0527135e428da10fa4a959a30c66d068dedb115b9b47c6272b09df933a3782581760a904dd2ffdac373c4cd6dc11b273914597b3513009f902d6a17fa0060aea98da4fe2d1ce065ae282ca8a1ce909d11dc78fcfe7ef054ca8", @typed={0x8, 0xbd, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x12b}, @generic="c6f5c6c130d12e55248a99f3ab2e26e7a5bdd4849debbb54850dd2f99354eb8dc286cc3f6063ae7c4cac4b0fd0e8c934b516c676d55a9d3be3091c707a62d81ae15954a78f59356f105e332a3d4df4c31023044387ebd4c9a1cf28655b41c9bdfcc7a184864cf9f5198b2e0c49d9f397e2587a5e9b996fd25151d2f2ec255150b662ac687fd9f055b50bdbc144d33fb061a761cb450de20c15b09dbf6ea85a079c9fc2fb14c4b77d58532acb29fed61c8857cbb0cfb2f1ccc4f72614f3db2d2ef8038cd60f7882f45b5092f3f3", @generic="00e7f1f525b9f76ff31e15aaf6e330f3a55b21514d43a70c26b091ac9890c09aec0037d066970a020d715d0b13fe808ad0f9a1a3e99954feb31c3c093b82cfed81f27f146bb6587a8c4d1ce72c2d5ef49c7fffa9168cb47471", @nested={0x4, 0x21}, @typed={0x8, 0x99, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xc, 0xbf, 0x0, 0x0, @u64=0x80000001}, @nested={0x4, 0x95}]}, @generic="854f2d96ab"]}, 0x254}, {&(0x7f0000000e40)={0x110, 0x15, 0x2, 0x70bd2a, 0x25dfdbfb, "", [@generic="77c9e42b5873cff8864ddddb6bac9d2c4b1cdcee3353b9e1fc5f507bfa3e99253208f399e6200958ef6ff4cca861878737073fb9f1a1d5dd03f6fbbb4f3a07ef89bdfdbca1978005fe90ced65ede32b7a924a681fb4ccc56b281bf244e9f3dd4000b2c8a2f285502a76d77b9d8a16f53d523838fe8c6400fe03c6f0942504a5666e2ac15342f300850e425360c11244f8d87fc69ac46063a4b5b5376caaff8e9118689d0c7de1b835b6198c0bd6e7032ecfb73212adc1e9a7c3e2a39da7e5a5f49b4fca71779b61557f96147ab39e38d42ee563aa13855b34d8eb89378ed09294c5cc1", @generic="9f7e3ed87fe2818138e81c05837271a37ac9", @typed={0x8, 0x1e, 0x0, 0x0, @fd=r0}]}, 0x110}, {&(0x7f0000001000)={0x18, 0x29, 0x8, 0x70bd27, 0x25dfdbfc, "", [@typed={0x8, 0x101, 0x0, 0x0, @uid=r5}]}, 0x18}], 0x5, 0x0, 0x0, 0x40044}, 0x80) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x240040c0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001200)={0x1b, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001280)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000012c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) (async) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001580), 0x4) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001640)={0x1b, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x20, '\x00', r1, r2, 0x3, 0x4, 0x4}, 0x50) (async) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000016c0)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x2c, &(0x7f0000001340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1511}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe}, @ldst={0x1, 0x3, 0xaf4d17fba8d2ea40, 0x7, 0x2, 0xffffffffffffffe0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xac000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x2, 0x5, 0x0, 0x9, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000}, @generic={0x4, 0x2, 0x5, 0x5, 0x5}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xc6c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000014c0)='GPL\x00', 0xfffffff9, 0x7a, &(0x7f0000001500)=""/122, 0xc1100, 0x0, '\x00', r1, 0x25, r10, 0x8, &(0x7f00000015c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001600)={0x2, 0x2, 0x0, 0xc}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001700)=[0xffffffffffffffff, r11, r0, r12], &(0x7f0000001740), 0x10, 0xffffffff}, 0x94) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7ff}, [@NFULA_CFG_MODE={0xa, 0x2, {0x9782, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0xd, 0x2}}]}, 0x2c}}, 0x0) (async) r13 = openat$cgroup_ro(r12, &(0x7f0000001940)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001980)={r13, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@base={0x20, 0x7718d217, 0x0, 0x8, 0x40804, r14, 0x1, '\x00', r1, r8, 0x4, 0x4, 0x4}, 0x50) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001a40)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0xda32, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x2}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001ac0)="0ada70f8eb69291a6a6d64e81be91cd64b140119b5a3293c789030d10f9c9286950c720b24e4a5251e02a7f392be347246708a35e151509091a7719f25570c587ef4968e1a87a728e7c0fb1048f2af678b64467b8c6ae18e9efbdb79e452a03fe934cfd7332ee41348d2ff6c4aaf25cc7e829f18a31dccd96154d0ea345c1ec3a7d587f82c9586af99f259e0c2c59047269eb88a2dd5ef87647d87981c5b0bf71bb4881ac18a076b89e252f2cf9a46484747e12f1e2a873f674d2b35dd3b2b", 0xbf}, {&(0x7f0000001b80)="1055eb38580c51dfcc58872dc52eeeb7834d97a8c63bd5144edd2aee369619424d43af26f0fcb2b1739626b3d5fa423c75b0c0aa8fc892f812b8330a0372a5f29a93ccbff01e3a8b0bef2b5a83b5d81edca46289b97cd75cfcc32cb923580e", 0x5f}, {&(0x7f0000001c00)="1fc0d366dd064c0051ec60bbd982f65892e4e525572fb301dd9a691133406aec87cb6f1a0d493aba", 0x28}], 0x3}, 0x8000) (async) socket$packet(0x11, 0x2, 0x300) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000001cc0)) (async) ioctl$TUNGETDEVNETNS(r12, 0x54e3, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r6, &(0x7f0000002240)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002200)={&(0x7f0000001d40)={0x4bc, 0x1, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [{{0x254, 0x1, {{0x0, 0x3}, 0xc, 0x0, 0x7, 0x30a, 0x0, 'syz0\x00', "6fcd4fd4b867f3b0a053f32aa76122a0ef638595f7074d38562befe78498f100", "f5da8ad9a99d0d5bf162418d84b8cfbcb7fda6ecd18c1c96a5005286c2cd3f06", [{0x0, 0x0, {0x1, 0x1}}, {0x7, 0x6, {0x0, 0xa}}, {0x8000, 0x5, {0x3, 0x3000000}}, {0x1, 0x95d1, {0x3, 0xb}}, {0x3, 0x1, {0x1, 0x6}}, {0xffff, 0xfff, {0x0, 0x4}}, {0x6, 0x0, {0x3, 0x401}}, {0x3f, 0x8, {0x0, 0x10000}}, {0x8, 0x6, {0x1, 0x4}}, {0x1000, 0x0, {0x0, 0x4}}, {0x4, 0x9, {0x0, 0x8}}, {0x1, 0x2, {0x3, 0x2}}, {0xf, 0x9, {0x1, 0x4}}, {0x7, 0x4, {0x1, 0x81}}, {0x6, 0x9, {0x2, 0x4}}, {0x2, 0x0, {0x2, 0x7}}, {0x5, 0x9, {0x1, 0xfffffff2}}, {0x8, 0xd, {0x0, 0xed}}, {0x9, 0x6, {0x0, 0xe}}, {0x386e, 0x1, {0x2, 0x7}}, {0x6, 0xe45, {0x1, 0x72}}, {0x8, 0x2, {0x3, 0x7}}, {0x0, 0x7, {0x3, 0x7f}}, {0x5, 0x5, {0x3, 0x80}}, {0xff, 0x7, {0x3, 0x83}}, {0x8, 0x8, {0x2, 0x9}}, {0x0, 0xea7b, {0x2, 0x800}}, {0x3ff, 0x7, {0x1, 0x5}}, {0x9, 0x6, {0x3, 0x2}}, {0x6, 0x2, {0x3, 0x5}}, {0x5, 0x1, {0x3, 0x10001}}, {0x0, 0x100, {0x0, 0x3}}, {0x101, 0x4, {0x2, 0x6}}, {0x5, 0xba6, {0x1, 0x6}}, {0x8, 0xf, {0x3, 0x7}}, {0x7, 0x7fff, {0x1, 0x6}}, {0x6, 0x6, {0x1, 0x10}}, {0x9, 0x4, {0x2, 0x4}}, {0x3, 0xdfd3, {0x0, 0x4}}, {0x5, 0x0, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x5}, 0x6, 0x0, 0x6ab, 0xfff, 0x0, 'syz0\x00', "d79e9608dc5b0a1083295eb0eb80c3a731ee71ab82222a4356ae8cd24fbd2b1d", "1ea32a095aa2fc07ddc297feb092971175a4e36e9ef91e37898b5a92abb6f3a3", [{0x8000, 0x7, {0x3, 0xb}}, {0x4, 0xe9cc, {0x2, 0x2341}}, {0x0, 0xce93, {0x0, 0x20000}}, {0x7, 0x0, {0x1, 0x7}}, {0x66, 0x923f, {0x1}}, {0x5f2, 0x2, {0x0, 0x401}}, {0x40, 0x0, {0x3, 0x2}}, {0x4, 0x1, {0x0, 0x1}}, {0xcf4d, 0x9, {0x2, 0x7f}}, {0x5, 0x2, {0x3, 0xdf}}, {0x3, 0xc, {0x1, 0x401}}, {0x7f, 0x100, {0x1, 0x4}}, {0x5, 0x7, {0x0, 0x6}}, {0x7, 0x200, {0x3, 0x40}}, {0xb, 0xfff9, {0x2, 0xffffffff}}, {0xfff9, 0x900, {0x2, 0x5}}, {0x7, 0x4, {0x2, 0x20a8}}, {0x438, 0x75a6, {0x0, 0x7}}, {0x7, 0x2, {0x2, 0x800}}, {0x8, 0x4, {0x2, 0x1}}, {0x4, 0x1, {0x3, 0x7}}, {0x147, 0x3, {0x3, 0x80000000}}, {0x1e0, 0x8, {0x0, 0x7}}, {0x401, 0x5, {0x2, 0x6}}, {0x800, 0x1, {0x2, 0xffffffff}}, {0x6, 0x6, {0x0, 0x1}}, {0x1ff, 0x3, {0x0, 0x6}}, {0xaa, 0x910, {0x3, 0x5}}, {0x2, 0x0, {0x0, 0x9}}, {0x9, 0x7, {0x0, 0x1000}}, {0x3, 0x3, {0x3, 0xb9}}, {0xd16a, 0xda, {0x3, 0x1}}, {0xc, 0x1, {0x3, 0xffffff80}}, {0x100, 0x9, {0x2, 0x1}}, {0x2, 0x9, {0x3, 0x4}}, {0xc8d, 0x7b89, {0x3, 0x8}}, {0xfffb, 0xb, {0x0, 0x9}}, {0x4, 0x5, {0x1, 0x3}}, {0x4, 0x7cc4, {0x2, 0x4}}, {0x5, 0xfe, {0x3}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x1}, 0x840) sendmsg$SOCK_DESTROY(r12, &(0x7f0000002500)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000024c0)={&(0x7f00000022c0)={0x1c4, 0x15, 0x100, 0x70bd25, 0x25dfdbff, {0x10, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x29, 0x1, "aea9429440738ed487166c19087be896021df8bb4dc6ad2a59e3a92b4a90ebe3f9d26afa58"}, @INET_DIAG_REQ_BYTECODE={0x44, 0x1, "faa740b4191cf893c726044732d1af6fcb20f43e812a9406248b97c6c60b432cf4a6a37f98e2742c745d69c55df5c503a3961dbe1bf14d44e527858666dce0ed"}, @INET_DIAG_REQ_BYTECODE={0xfa, 0x1, "702d7f445d42c1fc3ea79e41afd971349304d3e93cc7795548aec3475713368cdfd026721b2fa31f5dcc6992286769d4b4c45149ad3e58ef2eca14db3e08ff37dcfc754fe645fe1652e1f13a50a8ee9b744f73bbc74456d7cb6a748d6ca88ada4df03b99cf3efef7d9fd54c91588bf2310801fe6dcc0559b9c1816ec9c4a9ee853f48c4c13fb3da42d939f3896f7b701f000ed294266aa629a48254ca37e422707bbcbc2a207c6113a117d392bc384823ed84b7ad813f4ef92af17be5548d12bfd4c56825e316a6750f2e309cf4383d993df0307824239cf5e16bbaa86a085c663c2a3a53f00939d22cc894aac0dde45bbf83ed9731c"}, @INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "d10c35d2ed2b088df612cea89b895774172bc62e0f30"}, @INET_DIAG_REQ_BYTECODE={0x25, 0x1, "5b81530d26a7e4acd84bf5afadba57508133f7b6619d9a3c82f7c200e78be47e90"}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x404c801}, 0x4008854) (async) sendmsg$inet(r2, &(0x7f0000002e40)={&(0x7f0000002540)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000002ac0)=[{&(0x7f0000002580)="a836a3696fc2350a9c950602d26aa3130c614d8c3086a2cff69350b0dd44683fc2fe4e425cd1d41729ca2ac340c0c66e3a64b7b173eae287164863abc566822c06e90640a20d155916780d8b04e94f793d46b68266dc7b55818cfdae9b0d14e078755a0ea6ab4e2e09f80216331388aa093cd505324310fc3d764604879d7558532ff35001b406073de88356cdbca5f1e9963198293047bfc1d757789d473e359027a1474ca7d179b2fcd78c7674c59a7c75d99a35f9800e68f6552bc64581aa81335922d1f96b04892a9748b0b5d28085a277d27c48467648e395fc827a2702d4f5e29d", 0xe4}, {&(0x7f0000002680)="ad53d902fc2d47a81b656610c9420426c44f5d827dfa23cab44f", 0x1a}, {&(0x7f00000026c0)="fa56f383468170c860e3adebaebd11e2716efa110711e4ed47d081f5f5fe9b9e351f22171f6a4f17f4331b33a9368bbaebe6ab21076564f9023eb8a06b8f2dcd39320ef307362e3f6c1a021f451dd6a38b41f6694ea3c52087428d7c0ddd7f4c7a1dde6c566fb54015466fae299dc2fd8de9d355ead4baa51efa24c2bc877500c9b6c54fd589f11e187c8d07076aed4998d2df0354936be2883724f5e3cc9f01dcac0adb9ec5dedabad7179d4b4bd127e7d16e353b56a2168d0912e86606", 0xbe}, {&(0x7f0000002780)="143f3b07a7d0c9473bef8453414a2b2f06cc592f92b78e5a7e5d6e09dd168ffe427656a6bc39ab69089c838427030844dfa8f2f94989afb684982a4e5c1c7267dc40a9bc115d6a09dea25b77540eb938b19c38f309abbebe007bb34aa55f4f3277895e63a6519e180bfdd895e31e27854f6e282fdfd01d6bc8ebbefd1b645954d166e2326930e4a559c14ae901221aec08b43e1a2259b9fd29ffaa55e8864566c04b92fe54a5978a", 0xa8}, {&(0x7f0000002840)="de5a6ab0d31cedd4ffa61f92847e8531ac77df1fcf6200fd201498fb66e5685f267438e8ebab3edc973834b7849aa994f10eaa9056ae2cf67c611f6fcbd7b1613c9a4f05dd58028c679c747ae7cfb78f12a65a78d33600772d3e6cd62915b41c243b0bf2c9b9107db24dab5866bd9342b347914bdf350d0942b3e8854aff7047043a763fbf4602372efe34d6f3a83d2caa256f4fb016585befd0", 0x9a}, {&(0x7f0000002900)="7c1f149f28f7526be7eaa9a0123c24af8a89248fd076dfb3a4b525628b515c7491800156", 0x24}, {&(0x7f0000002940)="9779edd142f8a3d4193f0ed1cd788018239ffcc20231dcfe6514e350240ee4a65d7b96b63fb5e62a08700d1046c4bf1c71df8cfbbf8bebba9daa15ad6866cbf7b460d152a4e241ed680c204b9879f89fcff6330c3e4ebe14c6a0b12e673832cb057a830863840e9a3a1e86d3ee5441721bf99f4512c678a1d286b9eeb1c7b135d14c177a9a4282a6b25854be3fbce6c923bcc458fb1ddd89c0577ee02dd5a4e861a78bea4ce8e38bd04ed870a3993cd5a98e08e506a46cc4d4f4c49baca1902a1dbf39629cad9571bc6ef55313a43b52ecc921a1fc0cd8efae0a45", 0xdb}, {&(0x7f0000002a40)="4d57211f4b93b191e663083664851b5faea066ab22f25070db845f9e0fdc65d9fba5e57ffee5b81a19abdad10089df6c51761e0ed0948d7ca40ddcb5c292f9d080c5f7cc92f50b8be09383fd3e32ad41804c839e2452c79d1fef09aacb8464557ef8ce0d1780046a4aa9ba185e5f53c7b6fe6f3dbf34f9f6815af965", 0x7c}], 0x8, &(0x7f0000002b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @loopback}}}, @ip_retopts={{0x100, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x15, 0x3, 0x0, [{@empty}, {@private=0xa010100}, {@broadcast, 0x7fffffff}]}, @generic={0x82, 0x7, "bae51091c3"}, @timestamp_prespec={0x44, 0x2c, 0xb0, 0x3, 0x6, [{@multicast1, 0x10001}, {@loopback, 0x5}, {@private=0xa010102, 0xfffffffa}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x33}, 0xffffd56a}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x5a, 0x3, [{0x2, 0xe, "0f78bd5288c1265277597628"}, {0x1, 0x8, "e0c323f724db"}, {0x5, 0xe, "64ab4b1804c455ac11bc2145"}, {0x2, 0xb, "e26cb8682031db5028"}, {0x0, 0x12, "11de5ba593ec336e48c46504c2cf7a92"}, {0x1, 0x5, "833379"}, {0x0, 0xe, "b422cba34e775c0f022d9cca"}]}, @end, @end, @cipso={0x86, 0x3d, 0xfffffffffffffffc, [{0x7, 0x7, "34942de10c"}, {0x6, 0xc, "20df7f9975a22fc179c7"}, {0x5, 0x2}, {0x4, 0xa, "b974f1638ad8faee"}, {0x5, 0xe, "68f80d9c53264f9d201f2d7d"}, {0x1, 0xa, "397d5b8d0433efc5"}]}, @generic={0x94, 0x4, "0fed"}]}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@cipso={0x86, 0x28, 0x2, [{0x6, 0x6, "2dd4bc56"}, {0x1, 0x4, '8^'}, {0x2, 0x10, "06615c2f79abc09d36068e8d65b4"}, {0x2, 0x8, "2e125bd3a09e"}]}, @lsrr={0x83, 0x2b, 0x23, [@empty, @remote, @multicast2, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x32}, @empty, @broadcast, @multicast1, @empty, @local]}, @timestamp_addr={0x44, 0xc, 0x46, 0x1, 0x0, [{@multicast1, 0x401}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010102, @multicast2}}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@rr={0x7, 0x17, 0x40, [@empty, @multicast1, @broadcast, @broadcast, @private=0xa010102]}, @cipso={0x86, 0x6c, 0x1dd2d2c819b44b73, [{0x6, 0x10, "2489d0628ffde0357e3fd2612ca0"}, {0x0, 0xe, "6b26a7fda883414d8e397bd0"}, {0x1, 0x6, "6168bfbd"}, {0x6, 0x12, "9c9ac1721bd167e2aec353cb6d58d996"}, {0x1, 0xe, "43708a7383211205948fd253"}, {0x0, 0x11, "8f11dd6732466d567e028da1699dd4"}, {0x5, 0x11, "c845ff1c710c5012d3a5247ce37001"}]}, @end, @timestamp_prespec={0x44, 0x24, 0x26, 0x3, 0x1, [{@multicast2}, {@rand_addr=0x64010101, 0xfff}, {@multicast2, 0x800000}, {@rand_addr=0x64010101, 0xb}]}, @ssrr={0x89, 0xf, 0x5f, [@empty, @local, @private=0xa010100]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x100}}, @ip_tos_u8={{0x11}}], 0x2c8}, 0x0) 6.130647896s ago: executing program 2 (id=942): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a0f0400000000000000000a00fffd0900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001008000140000000010900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 5.453123676s ago: executing program 3 (id=946): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x30}, 0x40880) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, 0x0, 0x0}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f00000002c0)=""/99, 0x0, 0x63, 0x1, 0x4}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000500)='GPL\x00', 0x7, 0xb1, &(0x7f0000000600)=""/177, 0x41100, 0x10, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000007c0)=[{0x0, 0x3, 0x6, 0x4}], 0x10, 0xeb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x5, 0x3fe, 0x7fffffff, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair(0x28, 0x1, 0x28, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.927982325s ago: executing program 2 (id=948): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0xffffffff, 0x1, 0x2, 0x2, {0xa, 0x4e1d, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x398e32d3}}}, 0x80, 0x0}, 0x2600c055) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x10010, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x37) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcb15, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) close(r0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r2, &(0x7f00000026c0)={&(0x7f0000002440)={0x2, 0x4621, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, &(0x7f0000002640)=[{&(0x7f0000002480)="a9", 0x1}], 0x1}, 0x40044) setsockopt$sock_attach_bpf(r0, 0x29, 0x3b, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac8180"], 0xfe33) 4.702229622s ago: executing program 5 (id=949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xc4, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xe}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x83}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8020}, 0x4c050) openat$cgroup_devices(r3, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) openat$cgroup_devices(r3, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 4.096971659s ago: executing program 5 (id=951): unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000280)="ac2f6ff680269dddae701fcdfe72a0d1459b99e6a71440715b6362cf0dd60648f22acade5babe489af47c825a7482dc86f47554feaa36e21bd1c6ad9d9e9e673b195563234e33ef279ee2ee1508d7c83069f4cc961a2f62fa1988978c9c8bb018894176ec63e6b6112cfe994121534e55689ba6be00e2b6a501e1e03", &(0x7f0000000300)=""/47, &(0x7f0000000340)="782592c085febad07a2859d7e21da383cc70d040b03e4cf436d23a01c8ef3992809dba7a2b075867eb0d9b716a65d5ec46e9e2c4f233266b648e69cfe3da3b73c7293983eab19874785781eb2504be5a6a44e1062c23ec855c85ef164f0d5c", &(0x7f0000000440)="68101169cd7ec06d3ce9f1d224f8dc5db7781a0392f72ad6b9261f784b375088a9f46c00991d44c649f45e65c6ba5072b874d83d5bf2b743644b09dcb1262f38f0330610fbc48643fa64bf94b7f1316e55784da17b6459b4bea9d3686696bc95a2bc0c4f088de0705c8bd9822c0027b874", 0x1a6b8dc4, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000200)='./cgroup\x00') bpf$PROG_LOAD(0x5, 0x0, 0xffffffc1) socket$kcm(0x10, 0x2, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.current\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'syz_tun\x00', @random="0200ac7fac14"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40001) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'batadv0\x00', @remote}) r3 = gettid() r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0x400, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, r3, 0xffffffffffffffff, r4, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={r3, r4, 0x0, 0x3, &(0x7f0000000a40)='*\'\x00'}, 0x17) socket$kcm(0x10, 0x2, 0x0) 4.003291023s ago: executing program 2 (id=952): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94) (async, rerun: 32) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (rerun: 32) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) (async) perf_event_open(0x0, 0x0, 0x4, r2, 0xa) (async) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xb3) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x5450, 0xffffffffffffffff) (async) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000a8ffffff000000000300080085000000550000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000bc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) (async) r5 = syz_clone(0x80000, &(0x7f0000000280)="400e89b652800b98f9aada5ef3da2bf1ff74f461d04e31d3bc9d", 0x1a, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f00000003c0)="8d0fdc949abe137d5ee3d095b34a40f32cd0b8d0a6e0e9741af953ce10d0c0ed16455da575dc7ca7e9db7e8464c439ac6dd2bc400347d24a9ba24f5559cc7b08864e436b08cd46d75c4ff0ff91b6632201af5f700a1315890202362d15b865d62aac4dfaf57477b68c70f232a497da325e41a24d1942842e966fa4e6fd5c01c6e531b7954e4304aecfe98266de537b19247be45a5a529678a899380b16a05d839fc40a9a8b0d268ea6867d083311d2da5cdd417ba71ed09c8251e11b787c9cb2a019de") r6 = perf_event_open(0x0, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000000)={'dummy0\x00', @random="e80300001000"}) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=@deltfilter={0x68, 0x2d, 0x310, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x3, 0xffff}, {0xa, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x9}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xfff5) (async) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000206010200000000000000000300000514000780080012400000000c08001140000000810500010006000000050005000200000005000400000000000900020073797a300000100015000300686173683a69702c706f72742c6e6574"], 0x64}, 0x1, 0x0, 0x0, 0x24000040}, 0x24000800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r3, @ANYRES32=r6, @ANYRES32=r7], 0xc4}, 0x1, 0x0, 0x0, 0x40015}, 0x2c000810) (async) sendmsg$nl_xfrm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) syz_clone(0x4180080, 0x0, 0x0, 0x0, 0x0, 0x0) 3.9877745s ago: executing program 3 (id=953): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb6e8c05f8baea14d, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb6e8c05f8baea14d, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x12}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r2}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000001140)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xe0c}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000f00)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x60) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0xfffffffffffffd56, 0x0}, 0x220) (async) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0xfffffffffffffd56, 0x0}, 0x220) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fed, 0x82, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x1}, 0x4005, 0x0, 0xfffffbff, 0x3, 0x1, 0x2, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f00000005c0)={&(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, 0xfe97, &(0x7f0000000200)=[{&(0x7f0000000a40)="00cc36584f1c702bbb7791540bc304b0dd8cb1f61915cf473623a611409625da209514206fe91249b63b6dffe4773814817625b95890447cbf657473e57df74347c07155f69f7bd1587ab9958ec1e522e006b50eecd56835938fe2aefb5119aeddb429cd4bec99fce450833c5ea46cf5299e810a2a51f61ebba942c6dd5688a8fc2ecb4f0cbf49d744b65a9d33203dbf2a2f2fc7f7c9bcff97", 0x1}, {&(0x7f0000000180)="23480d95ed94c4265b88f5532b5a63b5a84615cc674c206880d2eade17b1b60edf2ac4126ba663cce2046c70b60f7f5cfd0c621f483e40757769dbdf76ebcf74e4400bc1d6a8", 0xffe0}], 0x3a}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ca02496a00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x13, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}, @jmp={0x5, 0x1, 0x5, 0x1, 0x7, 0x38, 0x4}, @ldst={0x2, 0x0, 0x4, 0x8, 0x6, 0xc, 0x8000000000000004}, @map_fd={0x18, 0x7, 0x1, 0x0, r6}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x13, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}, @jmp={0x5, 0x1, 0x5, 0x1, 0x7, 0x38, 0x4}, @ldst={0x2, 0x0, 0x4, 0x8, 0x6, 0xc, 0x8000000000000004}, @map_fd={0x18, 0x7, 0x1, 0x0, r6}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000280)={r0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYRES64], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r9 = socket$kcm(0x2c, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/86, 0x56}, {0x0}], 0x2, &(0x7f0000000280)}, 0x10100) 2.944814924s ago: executing program 0 (id=954): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000009300000000000000ee46be68c79813c70100003cca46e00017dfff78af00ea8d0ef76e27a9df13b52f7d7416e0af9dc1d7f25f3fdf4a48", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000000000095000000000000008709000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) socketpair(0x2c, 0xa, 0x9, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f0000000480)=@isdn={0x22, 0x8, 0x8, 0x6, 0x2}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000500)="527ebe475b79c59c626c063253793b3fae4cb238b8eb1d7dff8f76b34139e4498ba6540905ec90b605b1e7dd8e860aa487a4f9eba578436c24048a4fda177841efc8d1ed", 0x44}, {&(0x7f0000000180)="a658", 0x2}, {&(0x7f0000000680)="148456e2ecc6e0e8b57929afff00c969a9485185d9f220ba755f89c219cc537fc6d22a076aaf98019746f8e08a36cd2d244aa324d5e7c19e64d9ee51f40bfc33f1afeded2a5a3137d505dcd48d3993eeb0dd31ab821ed780fde3ce864c6d30e5f871e5494d8c1e816f4f9e032b767d8796ae16fcad69b691e5dc90d4ba49de1260016845c8c061ed1e89b4fbe33c42bde40282dc357279b922928ea98b543c8807d3873d9199d89e6a0d7333408d1b8d9996958b7af0a912dfe693e68219", 0xbe}, {&(0x7f0000000800)="83050e4d97a32d808a4300b1f184021bb91f52ed92f1237833ddb59e6924b13f553be5291eeccf974fdd2d813423f1fa2b7e6b4d5b8e9710d436342e38890714119a510f9f97a01de7827e8363c395767d2a7fed096df8fd20688dd571b3bc5d113c0e9f6b2c8190394bbfe5106cefbaac71f5b0c32ea33de7e66739", 0x7c}, {&(0x7f0000000880)="591f2bd034c6158eec41974c2cdb8bcc16691e41cff83a807653cb45036f15360ec9d17b69bf89e43dfabe6b7637bd810891eb4563570cc8e422930ad49eca979bc1654ccc93604b17203489bd3cb866a8de4466e738e250aee3fc0f17e6ef996301372f466a9144f5ff5d64c2b395e26ff87aac9d04d808d6f56667314718ebb1f5b9b90acc1c87a601054bca69f117f36a692450679dceec859417175d2b4d15858775fe6433c9aa89", 0xaa}, {&(0x7f0000000940)="cd05cbffcd1e377b6cb392620c88ea42dc6be66963953bc1c578fa2af5f3c0a9b1577beeeb56edd0cee7f31ae284e5ea8a95160fb2bdd9cb9f4126e41b9d681c4c24f5f5415ac8b5f374326e20f05171ccedfb75c450f99aa9afd31b80540a6cc30d13c2d2601a9906b35e30eee8f01a1099a051", 0x74}, {&(0x7f0000000240)="07afe1eff9a002ca46cc", 0xa}], 0x7}, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c00034000000000bbeedaff0900020073797a32000000000900010073797a30"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@newqdisc={0x98, 0x24, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x8}, {0xfff2, 0x10}, {0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xfffffffc, 0x1}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fff}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8}}}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x1}]}}, @qdisc_kind_options=@q_drr={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fff}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}, @TCA_RATE={0x6, 0x5, {0xc0, 0x4}}]}, 0x98}, 0x1, 0x0, 0x0, 0x10004}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xe97, 0x30ac}, 0x100, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x6, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="147b272dbc2f07000000000000005e00", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x4000801}, 0xd0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup/syz0\x00', 0x200002, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047459, &(0x7f0000001200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x110e22fff6) openat$cgroup_ro(r7, &(0x7f00000001c0)='devices.list\x00', 0x0, 0x0) write$cgroup_type(r9, &(0x7f0000000100), 0x9) r10 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000000)={r10}) recvmsg$unix(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@rights={{0x10}}], 0x10}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.943762009s ago: executing program 3 (id=955): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000f50f0000030000000021110100", @ANYRES32, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000400), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r6, 0x0) fstat(0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x11, 0x2, 0x300, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) close(r7) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="033093f987df6fec6dd60200f4000000040000cd2470d614efac00040000000a", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000020000000850000000c000000b7000600000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) gettid() syz_clone(0x4020000, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) 2.901312103s ago: executing program 2 (id=956): socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/45, 0x2e}, {&(0x7f0000000c40)=""/4093, 0xffd}], 0x2, 0x0, 0x4}, 0x40000022) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0xe, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8902, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="ff", 0x1}], 0x1}, 0x400100f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) 2.842456716s ago: executing program 5 (id=957): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x11f2, 0x4}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='i2c_write\x00', r3, 0xe4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000000000000000000071104f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) close(0xffffffffffffffff) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r7}, 0x0, 0x0}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r6, 0x84, 0x17, &(0x7f0000000000)=r9, 0x10) 2.16087799s ago: executing program 2 (id=958): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a0f0400000000000000000a00fffd0900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001008000140000000010900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1.760646766s ago: executing program 3 (id=959): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r2, 0x16, 0x0, @void}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r3, &(0x7f0000000440)}, 0x20) 1.562300895s ago: executing program 0 (id=960): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) (async) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'rdma'}, {0x2d, 'blkio'}, {0x2b, 'net_prio'}, {0x2d, 'devices'}, {0x2b, 'net'}, {0x2b, 'net'}, {0x2b, 'freezer'}, {0x2d, 'net_cls'}, {0x2b, 'io'}]}, 0x40) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x480, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'ipvlan0\x00', @multicast}) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8c00, 0x0) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) (async) sendmsg$inet(r4, &(0x7f0000001380)={&(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000200)="7d192ded", 0x4}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="614fff9025b5da48c2ee2df88447290d79497a3bd5d925a201b5630c240583d849d789cf9d02e9300a6a00cc9efefa7c861d3ce8df2034941c2a92f93c449f39dd4aee99cb6a09b91487dc30bdd565ebac134a0f780f58cc65fc77d252b1175023c329a2a1446b8cae0dbf7262f2ba947edf40c7683ac448f6d26ce718da07aae4e50037b96184c5818352cf731451e881126a0b7638c4c8f502413acf5622", 0x9f}], 0x3, &(0x7f0000001340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x18}, 0x800) (async) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f00000013c0)) (async) r6 = perf_event_open(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x8, 0x6, 0x7, 0x0, 0x9, 0x14002, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xad, 0x4, @perf_bp={&(0x7f0000001400)}, 0x4, 0xfffffffffffffffc, 0x101, 0x5, 0x5, 0xd, 0x9, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x8) (async) sendmsg$tipc(r3, &(0x7f0000001700)={&(0x7f00000014c0)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x2, 0x2}}, 0x10, &(0x7f0000001600)=[{&(0x7f0000001500)="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", 0xfd}], 0x1, &(0x7f0000001640)="d164af0420d0da7aa2ac17545494996170db1a7ffa72902aae7a9328c3adabc949eb116735172471a8ee1ce93340084115cdd6e51c5468f339c2136c38c54229748fd4a32cdfb519835641fa462e7474121087dcd066f32f701c334a12d42d344ba175d4e4911f877df37b9480b600ada194ff29e4d217e5ea527898cf52017df4d6aedd7485aada13e0", 0x8a, 0x20004013}, 0x41) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001980)={0x1, 0x58, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a40)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ac0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x46ac, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b40)={0x1b, 0x0, 0x0, 0x80000001, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x16, &(0x7f0000001740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @generic={0x4, 0xc, 0xf, 0x401, 0x7}, @jmp={0x5, 0x0, 0x5, 0x9, 0x1, 0xffffffffffffffc0, 0x10}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001800)='syzkaller\x00', 0x9, 0x97, &(0x7f0000001840)=""/151, 0x40f00, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000019c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001a00)={0x5, 0x3, 0xe0, 0xd3c9}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001bc0)=[r8, r9, r10], &(0x7f0000001c00)=[{0x3, 0x1, 0x0, 0x3}, {0x5, 0x2, 0x3, 0x3}, {0x1, 0x4, 0x6, 0x4}, {0x3, 0x4, 0xa, 0x2}, {0x3, 0x1, 0x10, 0xa}, {0x5, 0x1, 0x4, 0x4}, {0x4, 0x3, 0xf}, {0x3, 0x1, 0x5, 0x8}], 0x10, 0x7}, 0x94) (async) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x7fffffffffffffff) (async) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001d40), 0x2, 0x0) (async) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000001d80)=0x1) fstat(r6, &(0x7f0000001dc0)) (async) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001e40)={0x1b, 0x0, 0x0, 0x0, 0x0, r9, 0x800, '\x00', r7, 0xffffffffffffffff, 0x4, 0x1}, 0x50) (async) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002080)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000021c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000002140), &(0x7f0000002180)=r11}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002240)={0x6, 0x13, &(0x7f0000001ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff91b1}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x35}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001f80)='syzkaller\x00', 0x5, 0x8f, &(0x7f0000001fc0)=""/143, 0x40f00, 0x1a, '\x00', r7, 0x25, r13, 0x8, &(0x7f00000020c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000002100)={0x4, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002200)=[r8, r9, r8, r14, r9], 0x0, 0x10, 0x8}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r15 = gettid() perf_event_open(&(0x7f0000002340)={0x2, 0x80, 0x3, 0x1c, 0x1e, 0x7, 0x0, 0xfff, 0x1004, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x10001, 0x2, @perf_bp={&(0x7f0000002300), 0x9}, 0x8042, 0x21e772ea, 0x3, 0x2, 0x5, 0x7ff, 0x2, 0x0, 0x8, 0x0, 0x7}, r15, 0x4, r6, 0x3) 1.472001715s ago: executing program 5 (id=961): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000680)=@hci={0x1f, 0xff7f, 0x4}, 0x80, &(0x7f0000000580), 0x0, 0x0, 0xffffffffffffffde}, 0x0) r2 = socket$kcm(0x25, 0x1, 0x0) sendmsg(r2, 0x0, 0x4) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, 0x0, 0x0) recvmsg(r3, &(0x7f0000000a40)={&(0x7f0000000480)=@ieee802154, 0x80, &(0x7f0000000940), 0x0, &(0x7f00000009c0)=""/94, 0x5e}, 0x23) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x72, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) socket$kcm(0x11, 0x3, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000680)=@hci={0x1f, 0xff7f, 0x4}, 0x80, &(0x7f0000000580), 0x0, 0x0, 0xffffffffffffffde}, 0x0) (async) socket$kcm(0x25, 0x1, 0x0) (async) sendmsg(r2, 0x0, 0x4) (async) socket$kcm(0xa, 0x5, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) (async) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, 0x0, 0x0) (async) recvmsg(r3, &(0x7f0000000a40)={&(0x7f0000000480)=@ieee802154, 0x80, &(0x7f0000000940), 0x0, &(0x7f00000009c0)=""/94, 0x5e}, 0x23) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) socket$kcm(0x2, 0x3, 0x2) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x72, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) (async) 1.345039654s ago: executing program 0 (id=962): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x27, &(0x7f0000000100), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x12, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000d0ff0000000100000000000085100027da67dfaa83ec47002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7f8ffff07000000b70300000200000085000000060000006608000000000000180000000000000000000000000000009500000000000000360a00000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0xda, &(0x7f0000000340)=""/218, 0x0, 0xc}, 0x94) 1.214409419s ago: executing program 3 (id=963): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000), 0xfdef) recvmsg$unix(r4, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000001c0)=""/182, 0xb6}, {&(0x7f0000000340)=""/186, 0xba}, {&(0x7f0000000400)=""/134, 0x86}, {&(0x7f00000000c0)=""/97, 0x61}, {&(0x7f0000000640)=""/219, 0xdb}, {&(0x7f00000004c0)=""/172, 0xac}, {&(0x7f0000000280)=""/1, 0x1}, {&(0x7f0000000740)=""/50, 0x32}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x9}, 0x160) setsockopt$sock_attach_bpf(r2, 0x110, 0x2, 0x0, 0x34) 1.146347327s ago: executing program 0 (id=964): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0xfffffffc, {0x2, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0xb, 0x1}, {0x4, 0x8}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xfc, 0x3, 0xa, 0x1, 0x0, 0x7c}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x49, 0x1c, 0x1, 0x2, 0x10001, 0x7f}}, {0x4}}]}]}, 0x68}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0019402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xf1de, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000940)={0x78, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x4d2c}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x78}}, 0x4c0d1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000008c0)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000001680)='syzkaller\x00'}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r6, r5}, 0xc) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x9}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%-010d \x00'}, 0x20) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0xcc4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x17, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0xb3}, @generic={0x81, 0x0, 0x0, 0x8, 0x7}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}, @alu={0x4, 0x1, 0x0, 0x3, 0x5, 0x20, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc5a}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x20, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[r4, r5, r7, r8, r9, 0xffffffffffffffff, r0], &(0x7f0000000700)=[{0x5, 0x4, 0x5, 0x2}, {0x2, 0x3, 0xf, 0xb}], 0x10, 0x6}, 0x94) 848.872063ms ago: executing program 2 (id=965): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x40044) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) mkdir(0x0, 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x6, &(0x7f0000000200)=r1, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x51) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xc23, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5, @perf_config_ext={0xff, 0xa}, 0x3442, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000002440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0400e542591ca4c233005800a09ef4b2f9cd20237e55c4dd59afbba9046f8c109469a6ef5673fd76723e2798431aad5e3f15c019404a1804ad451cedca85db6e14e5ef89b5734d16212c5fefd402b32bde1e98df1e2a1cc0ec37d40baf2a965e14a0051073186e362fb2c1843da29462b569a18ff7ccd08380cdc394a12e7331538bae057d63152e95a7f9a1ba34e94053e4d385480cc8cc7687909a5b4471198379bbe4df0d234096f3d92ae51bbc156420b0c56333cbadd46c1c315f1637e40800ebb15794952c4066434b8f8545221047593104cfb717471f764be0e382e3139dc42b9b3186", @ANYRES32, @ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000019e700e12c2ecf847f2d19e7ea967657582b713d58ca59e67a144ad83045754a84d14c08e0f9ea32b7563fc1525ed2ee", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000"], 0x0, 0x28}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x5, 0x605, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5b9, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x7, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c00000400428014000129d6b37d00800a000006001200800a000004004a80"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 848.51898ms ago: executing program 1 (id=966): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100200, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x22) 754.076687ms ago: executing program 5 (id=967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/191, 0xbf}], 0x1, &(0x7f00000001c0)=""/227, 0xe3}, 0x40) 698.900358ms ago: executing program 0 (id=968): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8c42, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xf}, 0x1000, 0x2, 0xa9eb, 0x8, 0x0, 0x0, 0x806}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904", 0x10}], 0x1}, 0x0) (async) r1 = socket$kcm(0x15, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40}, 0x94) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) (async) socket$kcm(0x29, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7fffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000440)='!\x00') (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000002100)="b9ff03076003008cb89e08f088a8d599887f", 0x0, 0xfe7, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 588.881642ms ago: executing program 1 (id=969): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000f50f0000030000000021110100", @ANYRES32, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000400), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r6, 0x0) fstat(0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x11, 0x2, 0x300, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) close(r7) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="033093f987df6fec6dd60200f4000000040000cd2470d614efac00040000000a", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000020000000850000000c000000b7000600000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) gettid() syz_clone(0x4020000, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r9, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) 246.53621ms ago: executing program 5 (id=970): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000, r8}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x21, 0x5, 0x7, 0x5, 0x8080, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r10, r11}, 0xc) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x80) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_clone(0x613c8300, 0x0, 0x0, 0x0, 0x0, 0x0) 51.480699ms ago: executing program 0 (id=971): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0x2, &(0x7f00000002c0), 0x4) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000440)="9b", 0x1}], 0x1}, 0x4000044) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 0s ago: executing program 3 (id=972): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x15838, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0xfffffffffffff000, 0x80000000, 0xfffc, 0x0, 0x80, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffef, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0), 0x4}, 0x0, 0x2, 0xfffffffe, 0x0, 0xbf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(r2, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="100004000000820f012c7b0000000000fb44acc4130b7542f1f6821fddb84f6b7ce3e10b63c8a53e220d379040a3334db8a56a1d965d23fa36c4d9bbec751af0950dc759b6ea6eda7080a6cc139f94d6473549c9816d25ebc13f43c7e771bc06c99b139c789a56868a9f0c9d57e49fcb6d916e9e9929ddf44b3cbfd2bc8c4b156384e4ec3d0dfb22d3368ca4fd6c293a40142d062c579626bc0f8171b4212110b83bf2574739885c9bb29b98dc89f2b710a829606b2e3d0103f614d3112cb5"], 0x10}, 0x86c2892d25325e62) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x1fffff80, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff, 0x80000001}, 0x10}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x908c, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=0xffffffffffffffff, @ANYRES16=r1], 0x128}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0xc, &(0x7f0000000140)=ANY=[@ANYRES8=r5, @ANYRES16=r0, @ANYRES8=r3, @ANYRESDEC, @ANYRESOCT=r2, @ANYRES16=r7], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x8, 0x0, 0x0, 0x400000000000000b, 0x8954b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x5, 0x10000}, 0x11bcfa, 0x4, 0x98, 0x2, 0x2, 0xfffff271, 0x8009, 0x0, 0x0, 0x0, 0x5}, r8, 0x0, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts. [ 83.980639][ T5853] cgroup: Unknown subsys name 'net' [ 84.132359][ T5853] cgroup: Unknown subsys name 'cpuset' [ 84.141921][ T5853] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.929684][ T5853] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.493023][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.544208][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.553081][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.553354][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.564433][ T5877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.570376][ T5874] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.576665][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.582307][ T5874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.590336][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.596547][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.611466][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.619378][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.626668][ T5874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.627247][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.634566][ T5874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.650250][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.657686][ T5874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.671232][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.675049][ T5880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.686611][ T5874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.697288][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.707376][ T5871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.707569][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.714753][ T5874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.751932][ T5874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.506913][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 89.539134][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 89.616309][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 89.633085][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 89.705244][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 89.864728][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.872181][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.880726][ T5864] bridge_slave_0: entered allmulticast mode [ 89.887862][ T5864] bridge_slave_0: entered promiscuous mode [ 89.949648][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.956823][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.964446][ T5864] bridge_slave_1: entered allmulticast mode [ 89.971690][ T5864] bridge_slave_1: entered promiscuous mode [ 90.009604][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.016809][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.024332][ T5863] bridge_slave_0: entered allmulticast mode [ 90.031573][ T5863] bridge_slave_0: entered promiscuous mode [ 90.052540][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.060983][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.068329][ T5872] bridge_slave_0: entered allmulticast mode [ 90.075595][ T5872] bridge_slave_0: entered promiscuous mode [ 90.111526][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.119029][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.126213][ T5863] bridge_slave_1: entered allmulticast mode [ 90.134179][ T5863] bridge_slave_1: entered promiscuous mode [ 90.154456][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.162223][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.170178][ T5872] bridge_slave_1: entered allmulticast mode [ 90.177282][ T5872] bridge_slave_1: entered promiscuous mode [ 90.202165][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.226145][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.233434][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.241842][ T5878] bridge_slave_0: entered allmulticast mode [ 90.249883][ T5878] bridge_slave_0: entered promiscuous mode [ 90.273359][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.280650][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.287819][ T5875] bridge_slave_0: entered allmulticast mode [ 90.296428][ T5875] bridge_slave_0: entered promiscuous mode [ 90.306550][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.356832][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.364282][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.371756][ T5878] bridge_slave_1: entered allmulticast mode [ 90.379352][ T5878] bridge_slave_1: entered promiscuous mode [ 90.400419][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.407583][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.415283][ T5875] bridge_slave_1: entered allmulticast mode [ 90.422450][ T5875] bridge_slave_1: entered promiscuous mode [ 90.446401][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.474195][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.499260][ T5864] team0: Port device team_slave_0 added [ 90.507589][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.549574][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.576118][ T5864] team0: Port device team_slave_1 added [ 90.599559][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.626180][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.640261][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.664060][ T5863] team0: Port device team_slave_0 added [ 90.673076][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.719846][ T51] Bluetooth: hci0: command tx timeout [ 90.735246][ T5863] team0: Port device team_slave_1 added [ 90.756717][ T5872] team0: Port device team_slave_0 added [ 90.778983][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.785971][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.798527][ T51] Bluetooth: hci4: command tx timeout [ 90.816769][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.817696][ T5874] Bluetooth: hci3: command tx timeout [ 90.828242][ T5880] Bluetooth: hci1: command tx timeout [ 90.834273][ T5874] Bluetooth: hci2: command tx timeout [ 90.846294][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.853505][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.884954][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.954943][ T5872] team0: Port device team_slave_1 added [ 90.962507][ T5875] team0: Port device team_slave_0 added [ 90.979323][ T5875] team0: Port device team_slave_1 added [ 90.985857][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.993012][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.019482][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.032623][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.039985][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.066765][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.080470][ T5878] team0: Port device team_slave_0 added [ 91.137808][ T5878] team0: Port device team_slave_1 added [ 91.159665][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.166640][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.193189][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.207237][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.214276][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.240328][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.271178][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.278234][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.304889][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.373641][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.381147][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.407623][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.434530][ T5864] hsr_slave_0: entered promiscuous mode [ 91.441243][ T5864] hsr_slave_1: entered promiscuous mode [ 91.452569][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.459651][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.485698][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.499037][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.506007][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.532240][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.576098][ T5863] hsr_slave_0: entered promiscuous mode [ 91.583197][ T5863] hsr_slave_1: entered promiscuous mode [ 91.589875][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 91.595685][ T5863] Cannot create hsr debugfs directory [ 91.712765][ T5872] hsr_slave_0: entered promiscuous mode [ 91.719952][ T5872] hsr_slave_1: entered promiscuous mode [ 91.725970][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 91.732578][ T5872] Cannot create hsr debugfs directory [ 91.770776][ T5875] hsr_slave_0: entered promiscuous mode [ 91.777019][ T5875] hsr_slave_1: entered promiscuous mode [ 91.783453][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 91.789607][ T5875] Cannot create hsr debugfs directory [ 91.916876][ T5878] hsr_slave_0: entered promiscuous mode [ 91.923818][ T5878] hsr_slave_1: entered promiscuous mode [ 91.933563][ T5878] debugfs: 'hsr0' already exists in 'hsr' [ 91.939442][ T5878] Cannot create hsr debugfs directory [ 92.001552][ T1221] cfg80211: failed to load regulatory.db [ 92.502368][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.516949][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.528042][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.552431][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.623575][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.666261][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.678272][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.691787][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.775529][ T5878] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.790648][ T5878] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.803183][ T5874] Bluetooth: hci0: command tx timeout [ 92.813139][ T5878] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.854909][ T5878] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.884720][ T5871] Bluetooth: hci4: command tx timeout [ 92.884740][ T5880] Bluetooth: hci3: command tx timeout [ 92.890905][ T5871] Bluetooth: hci2: command tx timeout [ 92.901675][ T5874] Bluetooth: hci1: command tx timeout [ 92.945368][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.966845][ T5872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.989472][ T5872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.029962][ T5872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.072913][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.089593][ T5872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.113371][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.120792][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.164684][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.171874][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.221366][ T5875] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.237899][ T5875] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.251694][ T5875] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.275595][ T5875] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.397823][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.472920][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.549676][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.556879][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.581780][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.589170][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.605549][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.652783][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.695618][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.756486][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.825662][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.832828][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.843669][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.850875][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.865336][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.877108][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.921420][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.928612][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.941841][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.949184][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.974402][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.981591][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.007542][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.014728][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.062236][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.310902][ T5864] veth0_vlan: entered promiscuous mode [ 94.352986][ T5864] veth1_vlan: entered promiscuous mode [ 94.566762][ T5864] veth0_macvtap: entered promiscuous mode [ 94.610662][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.646937][ T5864] veth1_macvtap: entered promiscuous mode [ 94.758190][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.794192][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.831355][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.891444][ T5874] Bluetooth: hci0: command tx timeout [ 94.898171][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.906514][ T2948] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.921313][ T2948] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.943325][ T2948] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.952361][ T2948] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.964226][ T5874] Bluetooth: hci3: command tx timeout [ 94.969844][ T5874] Bluetooth: hci4: command tx timeout [ 94.975277][ T5874] Bluetooth: hci1: command tx timeout [ 94.978791][ T5871] Bluetooth: hci2: command tx timeout [ 95.104046][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.239496][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.248724][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.312510][ T5875] veth0_vlan: entered promiscuous mode [ 95.320726][ T5872] veth0_vlan: entered promiscuous mode [ 95.354788][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.356095][ T5872] veth1_vlan: entered promiscuous mode [ 95.364446][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.386352][ T5875] veth1_vlan: entered promiscuous mode [ 95.432671][ T5878] veth0_vlan: entered promiscuous mode [ 95.487745][ T5878] veth1_vlan: entered promiscuous mode [ 95.506590][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.543405][ T5863] veth0_vlan: entered promiscuous mode [ 95.564435][ T5863] veth1_vlan: entered promiscuous mode [ 95.596444][ T5875] veth0_macvtap: entered promiscuous mode [ 95.641329][ T5872] veth0_macvtap: entered promiscuous mode [ 95.664899][ T5872] veth1_macvtap: entered promiscuous mode [ 95.693766][ T5875] veth1_macvtap: entered promiscuous mode [ 95.727602][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.777724][ T5863] veth0_macvtap: entered promiscuous mode [ 95.795236][ T5863] veth1_macvtap: entered promiscuous mode [ 95.817172][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.861392][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.871715][ T5878] veth0_macvtap: entered promiscuous mode [ 95.885425][ T1041] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.910204][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.926624][ T1041] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.935882][ T1041] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.958979][ T5878] veth1_macvtap: entered promiscuous mode [ 95.971640][ T2948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.985230][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.998123][ T2948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.015771][ T5988] syz.1.2 (5988) used greatest stack depth: 17064 bytes left [ 96.042391][ T2948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.054931][ T2948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.080003][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.137995][ T2948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.194386][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.205640][ T2948] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.247966][ T2948] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.258974][ T2948] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.278583][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.290999][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.304233][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.307602][ T5871] Bluetooth: hci1: ISO packet for unknown connection handle 20 [ 96.314535][ T2948] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.412681][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.430703][ T2948] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.440408][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.442412][ T2948] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.481658][ T2948] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.491692][ T2948] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.569233][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.577100][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.713434][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.741654][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.786175][ T5995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 96.815091][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.823026][ C1] hrtimer: interrupt took 34166 ns [ 96.840765][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.886070][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.961185][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.971372][ T5871] Bluetooth: hci0: command tx timeout [ 97.012904][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.044536][ T5996] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 97.074758][ T5871] Bluetooth: hci2: command tx timeout [ 97.080592][ T5871] Bluetooth: hci1: command tx timeout [ 97.086085][ T5871] Bluetooth: hci4: command tx timeout [ 97.091729][ T5871] Bluetooth: hci3: command tx timeout [ 97.098691][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.216747][ T5996] team0: Device ip6_vti0 is of different type [ 97.528896][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.536785][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.162705][ T6010] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 98.206861][ T6008] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9'. [ 98.413492][ T6009] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9'. [ 98.509632][ T6007] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9'. [ 100.008931][ T6018] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.146893][ T6016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'. [ 100.215968][ T6023] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 100.398125][ T6023] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3'. [ 100.451045][ T6013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.674084][ T6032] ======================================================= [ 100.674084][ T6032] WARNING: The mand mount option has been deprecated and [ 100.674084][ T6032] and is ignored by this kernel. Remove the mand [ 100.674084][ T6032] option from the mount to silence this warning. [ 100.674084][ T6032] ======================================================= [ 100.736549][ T6032] sysfs: Unknown parameter 'subj_type' [ 100.956969][ T6037] netlink: 'syz.0.13': attribute type 10 has an invalid length. [ 101.017193][ T6037] netlink: 55 bytes leftover after parsing attributes in process `syz.0.13'. [ 101.501251][ T6039] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14'. [ 101.605069][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14'. [ 101.974734][ T6042] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.16'. [ 102.537093][ T6053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.539949][ T6045] netlink: 'syz.1.18': attribute type 21 has an invalid length. [ 102.586406][ T6045] netlink: 128 bytes leftover after parsing attributes in process `syz.1.18'. [ 102.753838][ T6045] netlink: 3 bytes leftover after parsing attributes in process `syz.1.18'. [ 104.935711][ T6091] netlink: 68 bytes leftover after parsing attributes in process `syz.1.27'. [ 105.958040][ T6102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.30'. [ 106.001979][ T6102] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 106.123100][ T6107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.345720][ T6105] Zero length message leads to an empty skb [ 106.427212][ T6107] netlink: 60 bytes leftover after parsing attributes in process `syz.2.30'. [ 106.508018][ T6109] netlink: 132 bytes leftover after parsing attributes in process `syz.0.32'. [ 106.586863][ T6113] netlink: 60 bytes leftover after parsing attributes in process `syz.2.30'. [ 106.653429][ T6119] netlink: 60 bytes leftover after parsing attributes in process `syz.2.30'. [ 107.068239][ T6130] netlink: 4332 bytes leftover after parsing attributes in process `syz.1.35'. [ 107.084829][ T6130] netlink: 6956 bytes leftover after parsing attributes in process `syz.1.35'. [ 107.514305][ T6136] netlink: 132 bytes leftover after parsing attributes in process `syz.0.37'. [ 110.681047][ T6150] mac80211_hwsim hwsim3 .3#c„±: renamed from wlan1 (while UP) [ 110.729341][ T6153] Illegal XDP return value 646578176 on prog (id 35) dev N/A, expect packet loss! [ 113.006443][ T6197] netlink: del zone limit has 4 unknown bytes [ 113.850503][ T6226] netlink: 830 bytes leftover after parsing attributes in process `syz.1.62'. [ 114.591233][ T6238] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.66'. [ 115.826677][ T6268] syzkaller0: entered promiscuous mode [ 115.888471][ T6268] syzkaller0: entered allmulticast mode [ 116.635175][ T6282] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.76'. [ 116.773599][ T6290] netlink: 'syz.0.79': attribute type 8 has an invalid length. [ 116.798899][ T6290] netlink: 156 bytes leftover after parsing attributes in process `syz.0.79'. [ 117.145727][ T5871] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 117.155895][ T5871] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 117.164630][ T5871] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 117.175620][ T5871] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 117.188703][ T5871] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 117.342965][ T6295] netlink: 4276 bytes leftover after parsing attributes in process `syz.2.80'. [ 117.352442][ T6295] netlink: 4276 bytes leftover after parsing attributes in process `syz.2.80'. [ 117.654267][ T6306] netlink: 176 bytes leftover after parsing attributes in process `syz.1.82'. [ 119.279071][ T5871] Bluetooth: hci5: command tx timeout [ 119.717592][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 119.823821][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 120.039192][ T6306] netlink: 15678 bytes leftover after parsing attributes in process `syz.1.82'. [ 120.225709][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.510902][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.571632][ T6326] option changes via remount are deprecated (pid=6325 comm=syz.2.87) [ 121.364135][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.372492][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.462201][ T5871] Bluetooth: hci5: command tx timeout [ 121.905276][ T6328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.939049][ T6328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.818822][ T6334] netlink: 160 bytes leftover after parsing attributes in process `syz.3.90'. [ 122.842366][ T1041] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.882748][ T1041] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.006735][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.498721][ T6353] delete_channel: no stack [ 123.529492][ T5871] Bluetooth: hci5: command tx timeout [ 123.561404][ T1041] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.811518][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.897513][ T1041] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.376633][ T6397] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.105'. [ 125.412929][ T59] bridge_slave_1: left allmulticast mode [ 125.422370][ T59] bridge_slave_1: left promiscuous mode [ 125.429096][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.433675][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 125.522277][ T6398] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 125.597408][ T6398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.606739][ T5871] Bluetooth: hci5: command tx timeout [ 126.183768][ T6410] netlink: 'syz.0.106': attribute type 2 has an invalid length. [ 126.220309][ T6410] netlink: 'syz.0.106': attribute type 8 has an invalid length. [ 126.248174][ T6410] netlink: 132 bytes leftover after parsing attributes in process `syz.0.106'. [ 126.259232][ T59] bridge_slave_0: left allmulticast mode [ 126.264939][ T59] bridge_slave_0: left promiscuous mode [ 126.283362][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.558765][ T6411] netlink: 'syz.0.106': attribute type 10 has an invalid length. [ 127.106681][ T6422] can: request_module (can-proto-0) failed. [ 127.197578][ T6428] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 127.685312][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.696482][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.707703][ T59] bond0 (unregistering): Released all slaves [ 127.753253][ T6411] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.782776][ T6411] bond0: (slave team0): Enslaving as an active interface with an up link [ 128.109796][ T6292] chnl_net:caif_netlink_parms(): no params data found [ 128.269554][ T6455] netlink: 'syz.0.117': attribute type 13 has an invalid length. [ 128.277350][ T6455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.117'. [ 128.833107][ T6449] tap0: tun_chr_ioctl cmd 1074025677 [ 128.854544][ T6449] tap0: linktype set to 773 [ 128.884414][ T6455] bond0: entered promiscuous mode [ 128.899861][ T6455] bond_slave_0: entered promiscuous mode [ 128.905957][ T6455] bond_slave_1: entered promiscuous mode [ 128.912388][ T6455] team0: entered promiscuous mode [ 128.917514][ T6455] team_slave_0: entered promiscuous mode [ 128.930228][ T6455] team_slave_1: entered promiscuous mode [ 128.936470][ T6455] bond0: entered allmulticast mode [ 128.949730][ T6455] bond_slave_0: entered allmulticast mode [ 128.955498][ T6455] bond_slave_1: entered allmulticast mode [ 128.983161][ T6455] team0: entered allmulticast mode [ 128.998895][ T6455] team_slave_0: entered allmulticast mode [ 129.004676][ T6455] team_slave_1: entered allmulticast mode [ 129.037204][ T6455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.625505][ T6489] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.121'. [ 129.713808][ T6494] netlink: 'syz.3.122': attribute type 4 has an invalid length. [ 129.738268][ T6494] netlink: 140 bytes leftover after parsing attributes in process `syz.3.122'. [ 129.927824][ T59] hsr_slave_0: left promiscuous mode [ 129.940195][ T59] hsr_slave_1: left promiscuous mode [ 129.946759][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.955739][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.966199][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.976129][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.013614][ T59] veth1_macvtap: left promiscuous mode [ 130.020320][ T59] veth0_macvtap: left promiscuous mode [ 130.026173][ T59] veth1_vlan: left promiscuous mode [ 130.032492][ T59] veth0_vlan: left promiscuous mode [ 130.825362][ T6509] netlink: 104 bytes leftover after parsing attributes in process `syz.3.127'. [ 131.282207][ T6514] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.130'. [ 131.759798][ T59] team0 (unregistering): Port device team_slave_1 removed [ 131.955756][ T59] team0 (unregistering): Port device team_slave_0 removed [ 132.966118][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.972781][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.564346][ T6513] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 133.579901][ T6513] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 133.622929][ T6529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.135'. [ 133.644228][ T6529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.135'. [ 133.707635][ T6529] netlink: 80 bytes leftover after parsing attributes in process `syz.3.135'. [ 134.079797][ T6292] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.087799][ T6292] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.121312][ T6292] bridge_slave_0: entered allmulticast mode [ 134.138960][ T6292] bridge_slave_0: entered promiscuous mode [ 134.771483][ T6292] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.799294][ T6292] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.832591][ T6292] bridge_slave_1: entered allmulticast mode [ 134.850925][ T6292] bridge_slave_1: entered promiscuous mode [ 134.922063][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 134.934125][ T6540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.138'. [ 135.449923][ T6550] netlink: 5717 bytes leftover after parsing attributes in process `syz.2.140'. [ 135.514901][ T6292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.802513][ T6292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.861312][ T6560] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.142'. [ 136.181041][ T6292] team0: Port device team_slave_0 added [ 136.200271][ T6292] team0: Port device team_slave_1 added [ 136.543695][ T6579] syz.2.146 uses obsolete (PF_INET,SOCK_PACKET) [ 137.639585][ T6584] warning: `syz.2.146' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 137.723736][ T6292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.757352][ T6292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.784651][ T6292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.802169][ T6292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.838587][ T6292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.873922][ T6292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.346111][ T6292] hsr_slave_0: entered promiscuous mode [ 138.353004][ T6292] hsr_slave_1: entered promiscuous mode [ 138.360947][ T6292] debugfs: 'hsr0' already exists in 'hsr' [ 138.366763][ T6292] Cannot create hsr debugfs directory [ 138.402394][ T6592] netlink: 152 bytes leftover after parsing attributes in process `syz.2.148'. [ 138.912701][ T6618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.155'. [ 139.216689][ T6611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.230560][ T6611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.326468][ T6611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.338179][ T6611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.392581][ T6634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.160'. [ 140.504555][ T6634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.470068][ T6645] netlink: 'syz.0.161': attribute type 3 has an invalid length. [ 142.508536][ T6645] netlink: 'syz.0.161': attribute type 2 has an invalid length. [ 142.527557][ T6645] netlink: 130500 bytes leftover after parsing attributes in process `syz.0.161'. [ 142.837286][ T6664] netlink: 'syz.2.165': attribute type 21 has an invalid length. [ 142.861639][ T6661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.906705][ T6666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.166'. [ 142.942342][ T6666] netlink: 'syz.0.166': attribute type 2 has an invalid length. [ 143.001298][ T6667] netlink: 448 bytes leftover after parsing attributes in process `syz.0.166'. [ 143.144317][ T6664] netlink: 'syz.2.165': attribute type 6 has an invalid length. [ 143.159086][ T6664] netlink: 132 bytes leftover after parsing attributes in process `syz.2.165'. [ 143.662539][ T6292] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 143.987883][ T6292] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 144.023908][ T6292] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 144.106158][ T6696] netlink: 'syz.1.174': attribute type 13 has an invalid length. [ 144.127475][ T6696] netlink: 'syz.1.174': attribute type 17 has an invalid length. [ 144.343896][ T6292] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 144.936274][ T6292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.100524][ T6727] netlink: 'syz.3.180': attribute type 10 has an invalid length. [ 145.301646][ T6727] netlink: 40 bytes leftover after parsing attributes in process `syz.3.180'. [ 145.369026][ T6732] netlink: 64 bytes leftover after parsing attributes in process `syz.0.178'. [ 145.768424][ T6292] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.910043][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.917699][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.034136][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.041360][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.080863][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.182'. [ 146.225963][ T6746] netlink: 132 bytes leftover after parsing attributes in process `syz.0.184'. [ 147.460304][ T6764] netlink: 'syz.0.187': attribute type 4 has an invalid length. [ 147.468016][ T6764] netlink: 'syz.0.187': attribute type 1 has an invalid length. [ 147.504789][ T6764] netlink: 'syz.0.187': attribute type 2 has an invalid length. [ 147.527428][ T6292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.552606][ T6764] netlink: 198236 bytes leftover after parsing attributes in process `syz.0.187'. [ 148.953837][ T6292] veth0_vlan: entered promiscuous mode [ 149.015404][ T6292] veth1_vlan: entered promiscuous mode [ 149.223196][ T6292] veth0_macvtap: entered promiscuous mode [ 149.275261][ T6292] veth1_macvtap: entered promiscuous mode [ 149.353909][ T6292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.595266][ T6292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.694193][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.740117][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.961776][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.988010][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.602889][ T6803] netlink: 68 bytes leftover after parsing attributes in process `syz.3.191'. [ 151.842546][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.877461][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.959572][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.980746][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.996735][ T6811] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 152.291172][ T6831] netlink: 'syz.5.77': attribute type 3 has an invalid length. [ 152.319654][ T6831] netlink: 132 bytes leftover after parsing attributes in process `syz.5.77'. [ 152.475153][ T6852] netlink: 'syz.2.199': attribute type 6 has an invalid length. [ 152.748891][ T6876] netlink: 'syz.0.202': attribute type 10 has an invalid length. [ 153.494032][ T6894] netlink: 'syz.1.204': attribute type 10 has an invalid length. [ 153.647878][ T6898] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.204'. [ 153.755088][ T6876] bond0: (slave team0): Releasing backup interface [ 153.800909][ T6876] team0 (unregistering): left promiscuous mode [ 153.817418][ T6876] team_slave_0: left promiscuous mode [ 153.827789][ T6876] team_slave_1: left promiscuous mode [ 153.870099][ T6876] team0 (unregistering): left allmulticast mode [ 153.886654][ T6876] team_slave_0: left allmulticast mode [ 153.906936][ T6876] team_slave_1: left allmulticast mode [ 153.907473][ T6910] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 153.950295][ T6876] team0 (unregistering): Port device team_slave_0 removed [ 153.972913][ T6876] team0 (unregistering): Port device team_slave_1 removed [ 154.490167][ T6921] netlink: 'syz.2.209': attribute type 10 has an invalid length. [ 154.860445][ T6894] team0 (unregistering): Port device team_slave_0 removed [ 154.883237][ T6894] team0 (unregistering): Port device team_slave_1 removed [ 154.955883][ T6921] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 155.697627][ T6953] netlink: 'syz.1.220': attribute type 10 has an invalid length. [ 155.846878][ T6946] wg2: entered promiscuous mode [ 155.858677][ T6946] wg2: entered allmulticast mode [ 157.104726][ T6980] netlink: 20 bytes leftover after parsing attributes in process `syz.0.227'. [ 157.128462][ T6984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.128491][ T6984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.177485][ T6984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.198518][ T6984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.800943][ T7025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.734983][ T7051] netlink: 2 bytes leftover after parsing attributes in process `syz.1.244'. [ 159.993168][ T7063] netlink: 'syz.0.246': attribute type 10 has an invalid length. [ 160.100388][ T7058] : entered promiscuous mode [ 160.264653][ T7051] netlink: 68 bytes leftover after parsing attributes in process `syz.1.244'. [ 160.289219][ T7066] netlink: 'syz.1.244': attribute type 2 has an invalid length. [ 160.301446][ T7066] netlink: 'syz.1.244': attribute type 7 has an invalid length. [ 160.330946][ T7066] netlink: 85 bytes leftover after parsing attributes in process `syz.1.244'. [ 160.345474][ T7066] netlink: 129496 bytes leftover after parsing attributes in process `syz.1.244'. [ 160.448122][ T7066] netlink: 'syz.1.244': attribute type 2 has an invalid length. [ 160.533439][ T7066] netlink: 'syz.1.244': attribute type 7 has an invalid length. [ 160.599002][ T7066] netlink: 85 bytes leftover after parsing attributes in process `syz.1.244'. [ 162.348184][ T7082] netlink: 'syz.1.249': attribute type 29 has an invalid length. [ 167.131846][ T7170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.264'. [ 167.157982][ T7170] netlink: 60 bytes leftover after parsing attributes in process `syz.3.264'. [ 168.147118][ T7186] netlink: 340 bytes leftover after parsing attributes in process `syz.5.266'. [ 168.181322][ T7185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'. [ 168.313244][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.5.266'. [ 168.880937][ T7208] netlink: 32 bytes leftover after parsing attributes in process `syz.0.274'. [ 169.719012][ T7208] tun0: tun_chr_ioctl cmd 1074025675 [ 169.725429][ T7208] tun0: persist enabled [ 169.735157][ T7218] tun0: tun_chr_ioctl cmd 1074025675 [ 169.755520][ T7218] tun0: persist disabled [ 169.773079][ T7219] raw_sendmsg: syz.2.276 forgot to set AF_INET. Fix it! [ 172.842934][ T7256] netlink: 'syz.5.284': attribute type 7 has an invalid length. [ 173.275210][ T7253] netlink: 'syz.2.282': attribute type 10 has an invalid length. [ 176.524215][ T7292] netlink: 'syz.1.290': attribute type 10 has an invalid length. [ 178.281423][ T7273] netlink: 'syz.5.287': attribute type 21 has an invalid length. [ 179.169488][ T7308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.491332][ T7315] netlink: 'syz.5.296': attribute type 4 has an invalid length. [ 179.588914][ T7315] netlink: 'syz.5.296': attribute type 17 has an invalid length. [ 180.413037][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 180.454329][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 181.594601][ T7347] netlink: 'syz.2.303': attribute type 3 has an invalid length. [ 181.680126][ T7347] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.303'. [ 182.348099][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 182.408459][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.305'. [ 182.493822][ T7358] netlink: 33 bytes leftover after parsing attributes in process `syz.3.305'. [ 182.510232][ T7360] netlink: 'syz.5.306': attribute type 4 has an invalid length. [ 182.518016][ T7360] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.306'. [ 182.631567][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.305'. [ 182.678777][ T7358] netlink: 33 bytes leftover after parsing attributes in process `syz.3.305'. [ 186.648230][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.315'. [ 187.296641][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.315'. [ 187.849626][ T7411] netlink: 'syz.5.315': attribute type 29 has an invalid length. [ 187.882012][ T7428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.320'. [ 189.933245][ T7458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.076715][ T7460] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.328'. [ 191.506175][ T7467] : entered promiscuous mode [ 191.712654][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.329'. [ 192.577374][ T7485] netlink: 'syz.5.334': attribute type 19 has an invalid length. [ 192.585821][ T7485] netlink: 40 bytes leftover after parsing attributes in process `syz.5.334'. [ 194.579904][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.611862][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.928864][ T7510] žÿ: renamed from team_slave_1 [ 195.722816][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'. [ 197.855046][ T7553] netdevsim netdevsim5 : renamed from netdevsim0 (while UP) [ 199.057943][ T7563] netlink: 56 bytes leftover after parsing attributes in process `syz.3.352'. [ 199.244269][ T7547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.979507][ T7569] openvswitch: netlink: Message has 4 unknown bytes. [ 200.406532][ T7572] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.354'. [ 200.612890][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.354'. [ 202.132278][ T7579] syzkaller0: entered promiscuous mode [ 202.161080][ T7579] syzkaller0: entered allmulticast mode [ 206.169669][ T7621] netlink: 60 bytes leftover after parsing attributes in process `syz.5.362'. [ 207.906403][ T7629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.342968][ T7644] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 208.363538][ T7644] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 210.281003][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.289732][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.801054][ T7715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.385'. [ 211.842365][ T5870] Bluetooth: hci2: command 0x0406 tx timeout [ 211.848992][ T5870] Bluetooth: hci3: command 0x0406 tx timeout [ 211.854058][ T5187] Bluetooth: hci1: command 0x0406 tx timeout [ 211.861892][ T5868] Bluetooth: hci4: command 0x0406 tx timeout [ 212.544383][ T7754] netlink: 68 bytes leftover after parsing attributes in process `syz.1.393'. [ 213.110946][ T7763] netlink: 'syz.3.395': attribute type 4 has an invalid length. [ 213.119456][ T7763] netlink: 'syz.3.395': attribute type 1 has an invalid length. [ 213.142527][ T7763] netlink: 'syz.3.395': attribute type 2 has an invalid length. [ 213.155086][ T7763] netlink: 198236 bytes leftover after parsing attributes in process `syz.3.395'. [ 215.853272][ T7802] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.926473][ T7804] netdevsim netdevsim0: Direct firmware load for Ö failed with error -2 [ 215.946134][ T7804] netdevsim netdevsim0: Falling back to sysfs fallback for: Ö [ 216.327671][ T7807] netlink: 24 bytes leftover after parsing attributes in process `syz.5.407'. [ 216.963549][ T7815] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.409'. [ 217.794189][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.415'. [ 218.027967][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.415'. [ 218.205164][ T7841] veth0_macvtap: left promiscuous mode [ 218.229080][ T7836] netlink: 'syz.1.416': attribute type 10 has an invalid length. [ 218.364609][ T7841] netlink: 10 bytes leftover after parsing attributes in process `syz.2.414'. [ 221.302044][ T7893] netlink: 68 bytes leftover after parsing attributes in process `syz.5.429'. [ 221.395050][ T7896] netlink: 7 bytes leftover after parsing attributes in process `syz.0.427'. [ 221.523299][ T7896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.427'. [ 221.735416][ T7893] netlink: 10 bytes leftover after parsing attributes in process `syz.5.429'. [ 221.862354][ T51] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 223.345611][ T7937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 226.735630][ T8013] netlink: 'syz.1.457': attribute type 10 has an invalid length. [ 226.755629][ T8013] netlink: 'syz.1.457': attribute type 16 has an invalid length. [ 226.807119][ T8013] netlink: 156 bytes leftover after parsing attributes in process `syz.1.457'. [ 227.547592][ T8038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.727465][ T8076] netlink: 'syz.5.474': attribute type 10 has an invalid length. [ 228.966345][ T8076] team0: Port device syz_tun added [ 228.972064][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.474'. [ 229.130236][ T8080] : entered promiscuous mode [ 229.269191][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.475'. [ 229.391136][ T8091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.732541][ T8103] netlink: 'syz.3.483': attribute type 9 has an invalid length. [ 229.778626][ T8103] netlink: 'syz.3.483': attribute type 8 has an invalid length. [ 229.858672][ T8103] netlink: 143452 bytes leftover after parsing attributes in process `syz.3.483'. [ 230.070518][ T51] Bluetooth: hci1: ISO packet for unknown connection handle 16 [ 230.134869][ T8111] netlink: 'syz.5.486': attribute type 1 has an invalid length. [ 230.203217][ T8116] openvswitch: netlink: Flow actions attr not present in new flow. [ 230.942548][ T8114] delete_channel: no stack [ 231.076300][ T8114] netlink: 17 bytes leftover after parsing attributes in process `syz.2.488'. [ 231.119337][ T8114] netlink: zone id is out of range [ 231.124777][ T8114] netlink: zone id is out of range [ 231.168019][ T8114] netlink: zone id is out of range [ 231.206356][ T8114] netlink: zone id is out of range [ 231.264464][ T8114] netlink: zone id is out of range [ 231.330333][ T8114] netlink: zone id is out of range [ 231.335526][ T8114] netlink: zone id is out of range [ 235.767730][ T8164] net_ratelimit: 78 callbacks suppressed [ 235.767751][ T8164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.819287][ T8166] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.500'. [ 237.079562][ T8186] netlink: 'syz.3.506': attribute type 29 has an invalid length. [ 237.162714][ T8186] netlink: 'syz.3.506': attribute type 3 has an invalid length. [ 237.216243][ T8186] netlink: 132 bytes leftover after parsing attributes in process `syz.3.506'. [ 237.238133][ T8187] pim6reg1: entered promiscuous mode [ 237.245460][ T8187] pim6reg1: entered allmulticast mode [ 237.387556][ T8188] netlink: 'syz.3.506': attribute type 29 has an invalid length. [ 237.421029][ T8188] netlink: 'syz.3.506': attribute type 3 has an invalid length. [ 237.465455][ T8188] netlink: 132 bytes leftover after parsing attributes in process `syz.3.506'. [ 237.565799][ T8200] netlink: 44 bytes leftover after parsing attributes in process `syz.0.509'. [ 239.624896][ T8254] netlink: 60 bytes leftover after parsing attributes in process `syz.3.522'. [ 241.079907][ T8280] netlink: 'syz.3.530': attribute type 3 has an invalid length. [ 241.099021][ T8280] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.530'. [ 242.292546][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 242.297619][ T8311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.539'. [ 242.560013][ T5871] Bluetooth: hci5: command 0x0406 tx timeout [ 242.814941][ T8338] netlink: 'syz.0.541': attribute type 2 has an invalid length. [ 242.871083][ T8338] netlink: 'syz.0.541': attribute type 1 has an invalid length. [ 242.930145][ T8338] netlink: 179572 bytes leftover after parsing attributes in process `syz.0.541'. [ 243.169081][ T8326] netlink: 228 bytes leftover after parsing attributes in process `syz.0.541'. [ 243.286874][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 243.298691][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'. [ 243.574540][ T8361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.657329][ T8364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.050055][ T8377] netlink: 76 bytes leftover after parsing attributes in process `syz.3.556'. [ 244.473541][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.561'. [ 244.518506][ T8389] netlink: 'syz.3.561': attribute type 2 has an invalid length. [ 244.578070][ T8389] netlink: 52 bytes leftover after parsing attributes in process `syz.3.561'. [ 245.043435][ T8399] netlink: 'syz.0.563': attribute type 29 has an invalid length. [ 245.177086][ T8388] netlink: 'syz.3.561': attribute type 2 has an invalid length. [ 245.208519][ T8388] netlink: 'syz.3.561': attribute type 9 has an invalid length. [ 245.217406][ T8388] netlink: 132 bytes leftover after parsing attributes in process `syz.3.561'. [ 246.000017][ T8437] netlink: 'syz.0.573': attribute type 3 has an invalid length. [ 246.083170][ T8437] bridge0: port 3(hsr_slave_1) entered blocking state [ 246.109131][ T8437] bridge0: port 3(hsr_slave_1) entered disabled state [ 246.116648][ T8437] hsr_slave_1: entered allmulticast mode [ 246.181238][ T8437] hsr_slave_1: left allmulticast mode [ 247.446050][ T8475] __nla_validate_parse: 4 callbacks suppressed [ 247.446071][ T8475] netlink: 20 bytes leftover after parsing attributes in process `syz.5.582'. [ 247.482711][ T8476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.590719][ T8475] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 247.661615][ T8471] netlink: 'syz.5.582': attribute type 2 has an invalid length. [ 247.878487][ T8480] netlink: 'syz.2.584': attribute type 10 has an invalid length. [ 251.290629][ T23] sched: DL replenish lagged too much [ 251.298004][ T8471] k›*·: entered promiscuous mode [ 251.646532][ T8495] netlink: 60 bytes leftover after parsing attributes in process `syz.5.587'. [ 251.677033][ T8496] netlink: 60 bytes leftover after parsing attributes in process `syz.5.587'. [ 251.731293][ T8495] netlink: 60 bytes leftover after parsing attributes in process `syz.5.587'. [ 251.926889][ T8504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.588'. [ 252.466550][ T8511] netlink: 'syz.5.593': attribute type 21 has an invalid length. [ 255.327196][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 255.603372][ T8550] netlink: 64 bytes leftover after parsing attributes in process `syz.2.604'. [ 255.676033][ T8576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.693993][ T8575] netlink: 'syz.5.612': attribute type 3 has an invalid length. [ 255.718766][ T8575] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.612'. [ 255.851446][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.857805][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.987489][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'. [ 255.999546][ T8592] netlink: 'syz.0.617': attribute type 21 has an invalid length. [ 256.041953][ T8592] netlink: 'syz.0.617': attribute type 1 has an invalid length. [ 256.072025][ T8592] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.617'. [ 256.264744][ T8598] netlink: 'syz.5.620': attribute type 27 has an invalid length. [ 256.308260][ T8598] netlink: 'syz.5.620': attribute type 1 has an invalid length. [ 256.363432][ T8598] bridge0: port 1(bridge_slave_0) entered learning state [ 256.893969][ T8605] netlink: 'syz.5.623': attribute type 10 has an invalid length. [ 256.901889][ T8605] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.623'. [ 256.944905][ T8605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.082128][ T8621] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 257.139176][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.623'. [ 257.188479][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.623'. [ 257.310361][ T8621] : entered promiscuous mode [ 257.915889][ T8627] netlink: 'syz.0.626': attribute type 2 has an invalid length. [ 257.959311][ T8627] netlink: 'syz.0.626': attribute type 1 has an invalid length. [ 257.990822][ T8627] netlink: 132 bytes leftover after parsing attributes in process `syz.0.626'. [ 258.722600][ T8637] netlink: 'syz.0.631': attribute type 2 has an invalid length. [ 258.745587][ T8637] netlink: 'syz.0.631': attribute type 8 has an invalid length. [ 258.788799][ T8637] netlink: 132 bytes leftover after parsing attributes in process `syz.0.631'. [ 260.579924][ T8674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.641'. [ 260.808089][ T8686] validate_nla: 2 callbacks suppressed [ 260.808107][ T8686] netlink: 'syz.1.643': attribute type 1 has an invalid length. [ 260.866667][ T8686] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.643'. [ 260.877459][ T8688] netlink: 'syz.2.645': attribute type 10 has an invalid length. [ 260.979303][ T8678] bond0: (slave .3#c„±): Enslaving as an active interface with an up link [ 261.131676][ T8688] bond0: (slave bond_slave_0): Releasing backup interface [ 262.309061][ T8699] netlink: 40 bytes leftover after parsing attributes in process `syz.1.650'. [ 263.244420][ T8707] netlink: 64 bytes leftover after parsing attributes in process `syz.1.652'. [ 263.406841][ T8707] netlink: 26 bytes leftover after parsing attributes in process `syz.1.652'. [ 263.413524][ T8714] netlink: 'syz.5.654': attribute type 10 has an invalid length. [ 263.472024][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'. [ 263.652722][ T8718] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.654'. [ 263.950169][ T8714] team0 (unregistering): Port device team_slave_0 removed [ 263.973061][ T8714] team0 (unregistering): Port device team_slave_1 removed [ 263.996406][ T8714] team0 (unregistering): Port device syz_tun removed [ 264.982269][ T8759] netlink: 'syz.3.666': attribute type 3 has an invalid length. [ 264.990214][ T8759] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.666'. [ 266.545698][ T8758] netlink: 56 bytes leftover after parsing attributes in process `syz.3.666'. [ 268.163736][ T8757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.182511][ T8784] netlink: 'syz.5.671': attribute type 29 has an invalid length. [ 268.337579][ T8794] netlink: 44 bytes leftover after parsing attributes in process `syz.0.672'. [ 268.363403][ T8796] netlink: 'syz.0.672': attribute type 3 has an invalid length. [ 268.409411][ T8796] netlink: 'syz.0.672': attribute type 1 has an invalid length. [ 268.650975][ T8812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.681'. [ 268.680772][ T8813] netlink: 10 bytes leftover after parsing attributes in process `syz.1.680'. [ 268.753233][ T8813] netlink: 132 bytes leftover after parsing attributes in process `syz.1.680'. [ 268.803608][ T8813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.680'. [ 269.104966][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.684'. [ 269.894477][ T8846] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.688'. [ 270.218772][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'. [ 270.617734][ T8863] netlink: 'syz.5.692': attribute type 10 has an invalid length. [ 270.841691][ T8873] pim6reg1: entered allmulticast mode [ 270.861098][ T8876] netlink: 'syz.0.694': attribute type 29 has an invalid length. [ 270.923482][ T8877] netlink: 'syz.0.694': attribute type 29 has an invalid length. [ 270.961379][ T8876] netlink: 'syz.0.694': attribute type 29 has an invalid length. [ 273.532591][ T8956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.595139][ T8967] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 274.649970][ T8940] sctp: [Deprecated]: syz.0.712 (pid 8940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.649970][ T8940] Use struct sctp_sack_info instead [ 274.841369][ T8977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.722'. [ 274.858136][ T8978] netlink: 'syz.5.721': attribute type 10 has an invalid length. [ 275.124028][ T8978] netlink: 55 bytes leftover after parsing attributes in process `syz.5.721'. [ 275.321506][ T8988] netlink: 'syz.3.725': attribute type 2 has an invalid length. [ 275.338604][ T8987] netlink: 'syz.3.725': attribute type 2 has an invalid length. [ 275.348873][ T8988] netlink: 164 bytes leftover after parsing attributes in process `syz.3.725'. [ 275.401103][ T8987] netlink: 164 bytes leftover after parsing attributes in process `syz.3.725'. [ 275.582648][ T8996] netlink: 'syz.2.726': attribute type 10 has an invalid length. [ 276.131754][ T8996] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 276.870898][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.734'. [ 277.039598][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.734'. [ 278.503631][ T9049] ªªªªªª: renamed from vlan0 (while UP) [ 279.399041][ T9066] netlink: 'syz.3.742': attribute type 49 has an invalid length. [ 279.616519][ T9077] netlink: 60 bytes leftover after parsing attributes in process `syz.0.744'. [ 280.320077][ T9103] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 280.644349][ T9114] netlink: 'syz.3.753': attribute type 10 has an invalid length. [ 280.654058][ T9114] macvlan0: entered promiscuous mode [ 280.701987][ T9114] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 283.847167][ T9181] netlink: 'syz.0.768': attribute type 6 has an invalid length. [ 283.917209][ T9181] netlink: 'syz.0.768': attribute type 25 has an invalid length. [ 283.999430][ T9181] netlink: 'syz.0.768': attribute type 27 has an invalid length. [ 284.011628][ T9181] netlink: 'syz.0.768': attribute type 28 has an invalid length. [ 284.039405][ T9181] netlink: 'syz.0.768': attribute type 29 has an invalid length. [ 284.141018][ T9181] netlink: 'syz.0.768': attribute type 30 has an invalid length. [ 284.444939][ T9209] netlink: 'syz.1.771': attribute type 10 has an invalid length. [ 284.509789][ T9209] netlink: 2 bytes leftover after parsing attributes in process `syz.1.771'. [ 284.584112][ T9209] bond0: entered promiscuous mode [ 284.628656][ T9209] bond_slave_0: entered promiscuous mode [ 284.652440][ T9209] bond_slave_1: entered promiscuous mode [ 284.667367][ T9209] mac80211_hwsim hwsim3 .3#c„±: entered promiscuous mode [ 284.689306][ T9217] netlink: 'syz.1.771': attribute type 16 has an invalid length. [ 284.735864][ T9209] bridge0: port 3(bond0) entered blocking state [ 284.754436][ T9217] netlink: 152 bytes leftover after parsing attributes in process `syz.1.771'. [ 284.771667][ T9209] bridge0: port 3(bond0) entered disabled state [ 284.799322][ T9209] bond0: entered allmulticast mode [ 284.828810][ T9209] bond_slave_0: entered allmulticast mode [ 284.834710][ T9209] bond_slave_1: entered allmulticast mode [ 284.978595][ T9209] mac80211_hwsim hwsim3 .3#c„±: entered allmulticast mode [ 285.086928][ T9209] bridge0: port 3(bond0) entered blocking state [ 285.093814][ T9209] bridge0: port 3(bond0) entered forwarding state [ 285.238450][ T9215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.771'. [ 285.247496][ T9215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.771'. [ 285.860339][ T9250] tc_dump_action: action bad kind [ 286.626442][ T9255] netlink: 830 bytes leftover after parsing attributes in process `syz.2.784'. [ 287.166715][ T9273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.861735][ T9277] netlink: 16 bytes leftover after parsing attributes in process `syz.5.789'. [ 288.918713][ T9285] netlink: 96 bytes leftover after parsing attributes in process `syz.1.791'. [ 289.090181][ T9291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.794'. [ 290.528906][ T9302] netlink: 140 bytes leftover after parsing attributes in process `syz.5.794'. [ 290.892419][ T9309] netlink: 'syz.5.794': attribute type 39 has an invalid length. [ 291.375386][ T9322] netlink: 2755 bytes leftover after parsing attributes in process `syz.0.801'. [ 291.417754][ T9322] bpf: Bad value for 'gid' [ 292.738973][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'. [ 292.758594][ T9346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.807'. [ 293.186967][ T9363] IPv6: Can't replace route, no match found [ 294.254905][ T9393] netlink: 'syz.5.820': attribute type 10 has an invalid length. [ 294.832687][ T9410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.952966][ T9415] netlink: 'syz.2.826': attribute type 5 has an invalid length. [ 296.018365][ T9415] netlink: 130080 bytes leftover after parsing attributes in process `syz.2.826'. [ 296.106538][ T9426] netlink: 48 bytes leftover after parsing attributes in process `syz.0.827'. [ 296.127654][ T9414] netlink: 88 bytes leftover after parsing attributes in process `syz.2.826'. [ 297.614378][ T9462] netlink: 'syz.1.839': attribute type 10 has an invalid length. [ 297.893807][ T9475] netlink: 'syz.1.839': attribute type 1 has an invalid length. [ 297.980379][ T9475] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.839'. [ 298.861389][ T9496] netlink: 'syz.3.848': attribute type 21 has an invalid length. [ 299.286377][ T9509] netlink: 'syz.5.851': attribute type 25 has an invalid length. [ 299.362222][ T9509] netlink: 'syz.5.851': attribute type 28 has an invalid length. [ 299.533029][ T9513] netlink: 'syz.3.853': attribute type 15 has an invalid length. [ 299.568751][ T9513] netlink: 'syz.3.853': attribute type 5 has an invalid length. [ 299.618843][ T9513] netlink: 144 bytes leftover after parsing attributes in process `syz.3.853'. [ 300.219449][ T9522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.854'. [ 300.922331][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.858'. [ 300.966046][ T9534] netlink: 152 bytes leftover after parsing attributes in process `syz.0.858'. [ 301.003506][ T9541] netlink: 'syz.5.859': attribute type 40 has an invalid length. [ 301.066227][ T9539] netlink: 48 bytes leftover after parsing attributes in process `syz.0.858'. [ 301.682586][ T9547] syzkaller0: entered promiscuous mode [ 301.743108][ T9547] syzkaller0: entered allmulticast mode [ 302.479691][ T9577] netlink: 40 bytes leftover after parsing attributes in process `syz.5.870'. [ 302.887765][ T9580] netlink: 'syz.5.870': attribute type 21 has an invalid length. [ 303.053759][ T9577] netlink: 40 bytes leftover after parsing attributes in process `syz.5.870'. [ 303.424081][ T9587] netlink: 'syz.1.871': attribute type 13 has an invalid length. [ 303.460767][ T9587] netlink: 'syz.1.871': attribute type 17 has an invalid length. [ 304.827612][ T9580] netlink: 'syz.5.870': attribute type 6 has an invalid length. [ 304.837824][ T9580] netlink: 132 bytes leftover after parsing attributes in process `syz.5.870'. [ 305.021227][ T9587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.237563][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.874'. [ 305.532228][ T9615] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.881'. [ 305.855172][ T9627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.886'. [ 305.920708][ T9627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.886'. [ 306.468951][ T9635] netlink: 104 bytes leftover after parsing attributes in process `syz.3.889'. [ 306.770002][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.893'. [ 307.681962][ T9681] netlink: 'syz.0.902': attribute type 214 has an invalid length. [ 307.878192][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.903'. [ 308.402585][ T9697] netlink: 48 bytes leftover after parsing attributes in process `syz.5.906'. [ 310.218984][ T9730] netlink: 388 bytes leftover after parsing attributes in process `syz.5.915'. [ 310.465690][ T9733] netlink: 'syz.2.914': attribute type 7 has an invalid length. [ 310.550549][ T9735] netlink: 'syz.2.914': attribute type 2 has an invalid length. [ 310.566365][ T9735] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.914'. [ 310.583725][ T9735] nbd: must specify at least one socket [ 310.997855][ T9732] netlink: 'syz.1.913': attribute type 17 has an invalid length. [ 311.056496][ T9732] netlink: 'syz.1.913': attribute type 16 has an invalid length. [ 311.108855][ T9732] netlink: 88 bytes leftover after parsing attributes in process `syz.1.913'. [ 311.910962][ T9762] netlink: 'syz.2.920': attribute type 2 has an invalid length. [ 311.950358][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.920'. [ 311.998946][ T9762] netlink: 17259 bytes leftover after parsing attributes in process `syz.2.920'. [ 312.649223][ T9769] netlink: 'syz.5.923': attribute type 2 has an invalid length. [ 312.708532][ T9769] netlink: 'syz.5.923': attribute type 8 has an invalid length. [ 312.757974][ T9769] netlink: 132 bytes leftover after parsing attributes in process `syz.5.923'. [ 314.942242][ T9791] netlink: 'syz.0.931': attribute type 10 has an invalid length. [ 315.016254][ T9791] netlink: 40 bytes leftover after parsing attributes in process `syz.0.931'. [ 315.051638][ T9791] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 315.082566][ T9791] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.142045][ T9791] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 315.325007][ T9798] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 317.419917][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.426456][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.679574][ T9839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.933767][ T9846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.968057][ T9855] pim6reg1: entered promiscuous mode [ 320.008442][ T9855] pim6reg1: entered allmulticast mode [ 321.555548][ T9878] netlink: 56 bytes leftover after parsing attributes in process `syz.2.956'. [ 321.625486][ T9878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.956'. [ 323.167149][ T9910] netlink: 'syz.0.964': attribute type 4 has an invalid length. [ 323.213768][ T9910] netlink: 152 bytes leftover after parsing attributes in process `syz.0.964'. [ 323.337785][ T9910] netlink: 6 bytes leftover after parsing attributes in process `syz.0.964'. [ 323.346836][ T9910] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 323.731718][ T9915] openvswitch: netlink: Flow key attr not present in new flow. [ 324.138052][ T9927] ================================================================== [ 324.146195][ T9927] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450 [ 324.154486][ T9927] Read of size 1 at addr ffff888033445430 by task syz.1.969/9927 [ 324.162243][ T9927] [ 324.164607][ T9927] CPU: 0 UID: 0 PID: 9927 Comm: syz.1.969 Not tainted syzkaller #0 PREEMPT(full) [ 324.164631][ T9927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.164643][ T9927] Call Trace: [ 324.164654][ T9927] [ 324.164665][ T9927] dump_stack_lvl+0x189/0x250 [ 324.164700][ T9927] ? __virt_addr_valid+0x1c8/0x5c0 [ 324.164734][ T9927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.164756][ T9927] ? __virt_addr_valid+0x1c8/0x5c0 [ 324.164786][ T9927] ? lock_release+0x4b/0x3e0 [ 324.164848][ T9927] ? __virt_addr_valid+0x4a5/0x5c0 [ 324.164889][ T9927] print_report+0xca/0x240 [ 324.164916][ T9927] ? __xfrm_state_insert+0x8af/0x1450 [ 324.164936][ T9927] kasan_report+0x118/0x150 [ 324.164981][ T9927] ? __xfrm_state_insert+0x8af/0x1450 [ 324.165037][ T9927] __xfrm_state_insert+0x8af/0x1450 [ 324.165089][ T9927] ? xfrm_state_insert+0x44/0x60 [ 324.165125][ T9927] xfrm_state_insert+0x54/0x60 [ 324.165151][ T9927] ipcomp6_init_state+0x655/0x900 [ 324.165204][ T9927] __xfrm_init_state+0xa76/0x13f0 [ 324.165228][ T9927] ? __xfrm_init_state+0x7ef/0x13f0 [ 324.165273][ T9927] xfrm_init_state+0x18/0xa0 [ 324.165299][ T9927] pfkey_add+0x1d38/0x2e00 [ 324.165391][ T9927] ? __pfx_pfkey_add+0x10/0x10 [ 324.165407][ T9927] ? kmem_cache_free+0x18f/0x400 [ 324.165496][ T9927] pfkey_sendmsg+0xbfe/0x1090 [ 324.165588][ T9927] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 324.165616][ T9927] ? trace_call_bpf+0x5ba/0x850 [ 324.165725][ T9927] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 324.165748][ T9927] ? aa_sock_msg_perm+0xf1/0x1d0 [ 324.165779][ T9927] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 324.165803][ T9927] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 324.165842][ T9927] __sock_sendmsg+0x21c/0x270 [ 324.165888][ T9927] ____sys_sendmsg+0x505/0x830 [ 324.165935][ T9927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 324.165996][ T9927] ? import_iovec+0x74/0xa0 [ 324.166040][ T9927] ___sys_sendmsg+0x21f/0x2a0 [ 324.166077][ T9927] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.166179][ T9927] ? __fget_files+0x2a/0x420 [ 324.166247][ T9927] ? __fget_files+0x2a/0x420 [ 324.166265][ T9927] ? __fget_files+0x3a0/0x420 [ 324.166326][ T9927] __x64_sys_sendmsg+0x19b/0x260 [ 324.166363][ T9927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 324.166436][ T9927] ? rcu_is_watching+0x15/0xb0 [ 324.166480][ T9927] ? do_syscall_64+0xbe/0x3b0 [ 324.166528][ T9927] do_syscall_64+0xfa/0x3b0 [ 324.166556][ T9927] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.166586][ T9927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.166608][ T9927] ? clear_bhb_loop+0x60/0xb0 [ 324.166646][ T9927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.166666][ T9927] RIP: 0033:0x7f57a5f8ebe9 [ 324.166691][ T9927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.166708][ T9927] RSP: 002b:00007f57a6ebb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.166731][ T9927] RAX: ffffffffffffffda RBX: 00007f57a61b6090 RCX: 00007f57a5f8ebe9 [ 324.166745][ T9927] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 324.166758][ T9927] RBP: 00007f57a6011e19 R08: 0000000000000000 R09: 0000000000000000 [ 324.166771][ T9927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.166782][ T9927] R13: 00007f57a61b6128 R14: 00007f57a61b6090 R15: 00007fffa37ce308 [ 324.166856][ T9927] [ 324.166863][ T9927] [ 324.494511][ T9927] Allocated by task 8919: [ 324.498871][ T9927] kasan_save_track+0x3e/0x80 [ 324.503568][ T9927] __kasan_slab_alloc+0x6c/0x80 [ 324.508432][ T9927] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 324.514079][ T9927] xfrm_state_alloc+0x24/0x2f0 [ 324.518860][ T9927] __find_acq_core+0x8a7/0x1c00 [ 324.523805][ T9927] xfrm_find_acq+0x78/0xa0 [ 324.528226][ T9927] xfrm_alloc_userspi+0x6b3/0xc90 [ 324.533289][ T9927] xfrm_user_rcv_msg+0x7a0/0xab0 [ 324.538354][ T9927] netlink_rcv_skb+0x205/0x470 [ 324.543155][ T9927] xfrm_netlink_rcv+0x79/0x90 [ 324.547863][ T9927] netlink_unicast+0x82c/0x9e0 [ 324.552650][ T9927] netlink_sendmsg+0x805/0xb30 [ 324.557428][ T9927] __sock_sendmsg+0x21c/0x270 [ 324.562116][ T9927] ____sys_sendmsg+0x505/0x830 [ 324.566901][ T9927] ___sys_sendmsg+0x21f/0x2a0 [ 324.571633][ T9927] __x64_sys_sendmsg+0x19b/0x260 [ 324.576583][ T9927] do_syscall_64+0xfa/0x3b0 [ 324.581100][ T9927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.587000][ T9927] [ 324.589332][ T9927] Freed by task 24: [ 324.593145][ T9927] kasan_save_track+0x3e/0x80 [ 324.597830][ T9927] kasan_save_free_info+0x46/0x50 [ 324.602876][ T9927] __kasan_slab_free+0x5b/0x80 [ 324.607653][ T9927] kmem_cache_free+0x18f/0x400 [ 324.612514][ T9927] xfrm_state_gc_task+0x52d/0x6b0 [ 324.617547][ T9927] process_scheduled_works+0xae1/0x17b0 [ 324.623096][ T9927] worker_thread+0x8a0/0xda0 [ 324.627691][ T9927] kthread+0x711/0x8a0 [ 324.631768][ T9927] ret_from_fork+0x3f9/0x770 [ 324.636374][ T9927] ret_from_fork_asm+0x1a/0x30 [ 324.641181][ T9927] [ 324.643508][ T9927] The buggy address belongs to the object at ffff888033445100 [ 324.643508][ T9927] which belongs to the cache xfrm_state of size 928 [ 324.657504][ T9927] The buggy address is located 816 bytes inside of [ 324.657504][ T9927] freed 928-byte region [ffff888033445100, ffff8880334454a0) [ 324.671308][ T9927] [ 324.673729][ T9927] The buggy address belongs to the physical page: [ 324.680165][ T9927] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888033445100 pfn:0x33444 [ 324.690325][ T9927] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 324.698835][ T9927] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 324.706398][ T9927] page_type: f5(slab) [ 324.710565][ T9927] raw: 00fff00000000040 ffff88801a5e8a00 dead000000000122 0000000000000000 [ 324.719333][ T9927] raw: ffff888033445100 00000000800f000c 00000000f5000000 0000000000000000 [ 324.727931][ T9927] head: 00fff00000000040 ffff88801a5e8a00 dead000000000122 0000000000000000 [ 324.736628][ T9927] head: ffff888033445100 00000000800f000c 00000000f5000000 0000000000000000 [ 324.745315][ T9927] head: 00fff00000000002 ffffea0000cd1101 00000000ffffffff 00000000ffffffff [ 324.754087][ T9927] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 324.762760][ T9927] page dumped because: kasan: bad access detected [ 324.769173][ T9927] page_owner tracks the page as allocated [ 324.774898][ T9927] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7545, tgid 7542 (syz.5.349), ts 197420726146, free_ts 196403594710 [ 324.794282][ T9927] post_alloc_hook+0x240/0x2a0 [ 324.799063][ T9927] get_page_from_freelist+0x21e4/0x22c0 [ 324.804613][ T9927] __alloc_frozen_pages_noprof+0x181/0x370 [ 324.810425][ T9927] alloc_pages_mpol+0x232/0x4a0 [ 324.815286][ T9927] allocate_slab+0x8a/0x370 [ 324.819804][ T9927] ___slab_alloc+0xbeb/0x1410 [ 324.824594][ T9927] kmem_cache_alloc_noprof+0x283/0x3c0 [ 324.830090][ T9927] xfrm_state_alloc+0x24/0x2f0 [ 324.834868][ T9927] xfrm_add_sa+0x17d1/0x4070 [ 324.839473][ T9927] xfrm_user_rcv_msg+0x7a0/0xab0 [ 324.844432][ T9927] netlink_rcv_skb+0x205/0x470 [ 324.849209][ T9927] xfrm_netlink_rcv+0x79/0x90 [ 324.853895][ T9927] netlink_unicast+0x82c/0x9e0 [ 324.858671][ T9927] netlink_sendmsg+0x805/0xb30 [ 324.863447][ T9927] __sock_sendmsg+0x21c/0x270 [ 324.868139][ T9927] ____sys_sendmsg+0x505/0x830 [ 324.872908][ T9927] page last free pid 7529 tgid 7529 stack trace: [ 324.879246][ T9927] __free_frozen_pages+0xbc4/0xd30 [ 324.884386][ T9927] __slab_free+0x303/0x3c0 [ 324.888810][ T9927] qlist_free_all+0x97/0x140 [ 324.893410][ T9927] kasan_quarantine_reduce+0x148/0x160 [ 324.898879][ T9927] __kasan_slab_alloc+0x22/0x80 [ 324.903828][ T9927] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 324.909305][ T9927] start_this_handle+0x37c/0x21c0 [ 324.914346][ T9927] jbd2__journal_start+0x2c1/0x5b0 [ 324.919473][ T9927] __ext4_journal_start_sb+0x227/0x5c0 [ 324.924942][ T9927] ext4_dirty_inode+0x93/0x110 [ 324.929710][ T9927] __mark_inode_dirty+0x2ce/0xdf0 [ 324.934834][ T9927] touch_atime+0x59b/0x6d0 [ 324.939369][ T9927] ext4_file_mmap_prepare+0x24d/0x440 [ 324.944754][ T9927] mmap_region+0xb3e/0x20c0 [ 324.949268][ T9927] do_mmap+0xc45/0x10d0 [ 324.953438][ T9927] vm_mmap_pgoff+0x2a6/0x4d0 [ 324.958036][ T9927] [ 324.960371][ T9927] Memory state around the buggy address: [ 324.966011][ T9927] ffff888033445300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 324.974152][ T9927] ffff888033445380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 324.982243][ T9927] >ffff888033445400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 324.990306][ T9927] ^ [ 324.995944][ T9927] ffff888033445480: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 325.004005][ T9927] ffff888033445500: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 325.012067][ T9927] ================================================================== [ 325.020499][ T9927] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 325.027723][ T9927] CPU: 0 UID: 0 PID: 9927 Comm: syz.1.969 Not tainted syzkaller #0 PREEMPT(full) [ 325.036959][ T9927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.047048][ T9927] Call Trace: [ 325.050374][ T9927] [ 325.053343][ T9927] dump_stack_lvl+0x99/0x250 [ 325.058118][ T9927] ? __asan_memcpy+0x40/0x70 [ 325.062906][ T9927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.068162][ T9927] ? __pfx__printk+0x10/0x10 [ 325.072856][ T9927] vpanic+0x281/0x750 [ 325.076901][ T9927] ? __pfx_vpanic+0x10/0x10 [ 325.081454][ T9927] ? irqentry_exit+0x74/0x90 [ 325.086196][ T9927] panic+0xb9/0xc0 [ 325.090405][ T9927] ? __pfx_panic+0x10/0x10 [ 325.094880][ T9927] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 325.100822][ T9927] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 325.106792][ T9927] ? __xfrm_state_insert+0x8af/0x1450 [ 325.112208][ T9927] check_panic_on_warn+0x89/0xb0 [ 325.117296][ T9927] ? __xfrm_state_insert+0x8af/0x1450 [ 325.122717][ T9927] end_report+0x78/0x160 [ 325.127018][ T9927] kasan_report+0x129/0x150 [ 325.131676][ T9927] ? __xfrm_state_insert+0x8af/0x1450 [ 325.137117][ T9927] __xfrm_state_insert+0x8af/0x1450 [ 325.142399][ T9927] ? xfrm_state_insert+0x44/0x60 [ 325.147400][ T9927] xfrm_state_insert+0x54/0x60 [ 325.152211][ T9927] ipcomp6_init_state+0x655/0x900 [ 325.157298][ T9927] __xfrm_init_state+0xa76/0x13f0 [ 325.162380][ T9927] ? __xfrm_init_state+0x7ef/0x13f0 [ 325.167643][ T9927] xfrm_init_state+0x18/0xa0 [ 325.172285][ T9927] pfkey_add+0x1d38/0x2e00 [ 325.176834][ T9927] ? __pfx_pfkey_add+0x10/0x10 [ 325.181622][ T9927] ? kmem_cache_free+0x18f/0x400 [ 325.186739][ T9927] pfkey_sendmsg+0xbfe/0x1090 [ 325.191531][ T9927] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 325.196689][ T9927] ? trace_call_bpf+0x5ba/0x850 [ 325.201672][ T9927] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 325.207782][ T9927] ? aa_sock_msg_perm+0xf1/0x1d0 [ 325.212768][ T9927] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 325.218097][ T9927] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 325.223436][ T9927] __sock_sendmsg+0x21c/0x270 [ 325.228168][ T9927] ____sys_sendmsg+0x505/0x830 [ 325.233002][ T9927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.238368][ T9927] ? import_iovec+0x74/0xa0 [ 325.242928][ T9927] ___sys_sendmsg+0x21f/0x2a0 [ 325.247752][ T9927] ? __pfx____sys_sendmsg+0x10/0x10 [ 325.253671][ T9927] ? __fget_files+0x2a/0x420 [ 325.258340][ T9927] ? __fget_files+0x2a/0x420 [ 325.262965][ T9927] ? __fget_files+0x3a0/0x420 [ 325.267717][ T9927] __x64_sys_sendmsg+0x19b/0x260 [ 325.272699][ T9927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 325.278265][ T9927] ? rcu_is_watching+0x15/0xb0 [ 325.283080][ T9927] ? do_syscall_64+0xbe/0x3b0 [ 325.287812][ T9927] do_syscall_64+0xfa/0x3b0 [ 325.292802][ T9927] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.298079][ T9927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.304175][ T9927] ? clear_bhb_loop+0x60/0xb0 [ 325.308902][ T9927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.314822][ T9927] RIP: 0033:0x7f57a5f8ebe9 [ 325.319271][ T9927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.339094][ T9927] RSP: 002b:00007f57a6ebb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.347557][ T9927] RAX: ffffffffffffffda RBX: 00007f57a61b6090 RCX: 00007f57a5f8ebe9 [ 325.355560][ T9927] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 325.363653][ T9927] RBP: 00007f57a6011e19 R08: 0000000000000000 R09: 0000000000000000 [ 325.371657][ T9927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.379742][ T9927] R13: 00007f57a61b6128 R14: 00007f57a61b6090 R15: 00007fffa37ce308 [ 325.387802][ T9927] [ 325.391338][ T9927] Kernel Offset: disabled [ 325.395660][ T9927] Rebooting in 86400 seconds..