last executing test programs: 1m27.037966373s ago: executing program 3 (id=1097): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x5}, 0x100066, 0x2, 0xdffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x2, 0x80, 0x96, 0x5, 0x81, 0x97, 0x0, 0x3, 0x61080, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x6, 0x15d7}, 0x1a30, 0x9, 0x1800000, 0x8, 0x6, 0x40, 0x582, 0x0, 0xe707, 0x0, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x6, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20c0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x40}, 0x8) getpid() r5 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008814}, 0x8090) perf_event_open(0x0, 0x0, 0xa, r0, 0x3) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x2, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000026000100fdff07000010b2897e"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000090002", @ANYRES64=r2, @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 1m26.21197039s ago: executing program 3 (id=1103): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x7}, 0x20, 0x400000, 0xba, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x1, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_rdma(0x10, 0x3, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd831, 0x4, @perf_config_ext={0x10000, 0x3}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000010500000010000000000000000100008500000000000000070000a8ae0000000000080000"], 0x0, 0x42}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x2, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000007c0)={'ipvlan0\x00', @remote}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x14, 0x2e, 0x301, 0x670bd24, 0x25dfdbfb, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x24008002) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000440)={0x0, 0x1}, 0x8}, 0x94) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001900010000000000fcdbdf2500000000000000000000000000000000fc000000000000000000000000000001000300034e24fffc0200002062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000002f813d5a00000000000000000000000300000001000000fdffffffbf1f000001000000000000000000000000d2e9000100020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x8040) 1m25.181962315s ago: executing program 3 (id=1109): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x8cb7}, 0x2000, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r3, &(0x7f0000000180)={&(0x7f0000000000), 0x2, &(0x7f0000000380)={&(0x7f0000000600)=@canfd={{0x4, 0x0, 0x1}, 0xe, 0x3, 0x0, 0x0, "4d0e9c76bf9c4fcd08b419029f1743aeee4f878df7d325a18f2216269763670cdca073aa13aef13678a345e55f01891758001a4ba9cd71f3126ee53697420270"}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r4}, &(0x7f0000000280), &(0x7f0000000400)='%ps \x00'}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003240)=ANY=[@ANYBLOB="300000002600090122bd7008f9ffffff0200000008003da0040022800900030047000000230000000800bd00", @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11efa, 0x4, 0x2, 0x2, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000009c0)=@generic={&(0x7f00000001c0)='./file0\x00', r6}, 0x18) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4) (async) bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 1m24.802852607s ago: executing program 3 (id=1114): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(0x0, 0x190) (async) mkdir(0x0, 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x40, 0x1405, 0x1, 0x70bd2a, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000}, 0x4015) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000004f0c0000000000fffc911080b5314fffffff9500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000004f0c0000000000fffc911080b5314fffffff9500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r3, &(0x7f0000000380)={&(0x7f00000002c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000340)}, 0x40) r4 = perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x5, 0x3, 0x5, 0xf4, 0x0, 0x7, 0x400, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4b5e6308, 0x0, @perf_config_ext={0xc5, 0x8}, 0x10000, 0xe9, 0xc, 0x4, 0x0, 0x7, 0x1, 0x0, 0x7f, 0x0, 0x81}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000440)='\x00') 1m24.515723621s ago: executing program 3 (id=1116): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d2", 0xe}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40080e4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x5}, 0x100066, 0x2, 0xdffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010104}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x62, 0xfd, 0x80000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x5f}]}, 0x98}}, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0xc, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) getpid() bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x4000, r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000026000100fdff07000010b2897e00000400000004000180b4f1"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000200), 0x11) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') 1m23.845076338s ago: executing program 3 (id=1121): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x6}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x54) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x44, 0x31, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x20008490) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)=r3}, 0x20) write$cgroup_type(r3, &(0x7f0000000000), 0x9) 1m22.660025062s ago: executing program 32 (id=1121): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x6}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x54) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x44, 0x31, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x20008490) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)=r3}, 0x20) write$cgroup_type(r3, &(0x7f0000000000), 0x9) 12.459173655s ago: executing program 4 (id=1415): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="94010000100001002cbc700000000000ff0200000000000000000000000000010a0100fe0000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x44050) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) r3 = syz_clone(0x4080, &(0x7f00000001c0)="f244a583e1ac2411a6fc4daecbffb968c6a718e8786e079efa2a10c1ab96a0b4149d57ee75444a0d0d39ce68e652efb231d89cf012ff2301fc2a4981997c33b986289228175357bbe84eeb66f86eebbcc2dfeb3f097c9cd6f6ff2739286ff46c4f31316519376183ba7d23e04543", 0x6e, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000540)="bed425806c9855e94507834443a859a6a46282b25784dd933852f911a46f4c08841d88e93cf782614b32006f33baa4df42b1a702e43d2d59e39a2ea46380222ecb7706a468722d33633bdd7449664f5c437d2cbc95748e0bdc429697c55bf87ed54b82e607792f6b34b2c2a73923de9c74a9539a707a2546cf5d440711e45d5fdde2d3134c92fc9c07d85fd7af9a70b8ef8fa008b8542073a162c1682edf00d7e342c17e1aa60787c9d464531c48b0854436e4ee99e4f05e66b30ae47cc85f25a5c7e6a8c08b5945b1f918537d242182b8639e3b6ab921dee783c568b467988a2d083040cd1dad37f65fbf4face4d3272d88c6") syz_open_procfs$namespace(r3, &(0x7f0000000640)='ns/net\x00') setsockopt$sock_attach_bpf(r2, 0x1, 0x3c, &(0x7f0000000500)=r1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000202000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000002e", @ANYRES64=r4], 0x0, 0x5e, 0x0, 0x1}, 0x28) sendmsg$can_j1939(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)="93f3893b39ae0dabab6957e35b29aae47cc9749af98c4b4e512b546d529480498abd4a25fb82b6f32844cf5559d649134dc66dec378c979a6ae418609b141b", 0x3f}, 0x1, 0x0, 0x0, 0x850}, 0x10d0) 12.189413963s ago: executing program 0 (id=1416): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="340000000406050000000000000000000a000004050001"], 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe40b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000200)=""/222, 0x0, 0x1e}, 0x94) 9.920083077s ago: executing program 0 (id=1420): bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0x6, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2f}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e00200001e00010029bd7000fcdbdf2514000000cc00f30077650b8a3ff9624abc1fd3da1bc0c6165a422c86814441545cb1b21b10faf9156b52762a3a585b0505a754f2b3179eb9f54b9c7acb9b63e89f0a7cf36901758b047a9eb5721469c5ab335e702191f66210049ccf5281e56ba05624adea5773915541647aa36afd4fe6e9efc6c4237cdaa06e90ba5706a8c99cea7cd91f817b9fc91850fb2a4c6d7e943728a3f01ab77f10dc4e665f9fe784621ce4dfd1662bdc3428b1289e486e77cdd873a5b74ef1f4ba2df6789b23d309453a83d6a43ba46ed5407dedb3d0695e08000c00", @ANYRES32, @ANYBLOB="8f0006"], 0x2e0}, 0x1, 0x0, 0x0, 0x890}, 0x20004080) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0x5f0bea6248e23fa5, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xb, 0x7f9, 0x8001}}, {0x4}}]}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004001}, 0x800) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x100, 0x31, 0x107, 0x70bd2b, 0x25dfdbfe, {0x5, 0x7c}, [@nested={0xc, 0x7e, 0x0, 0x1, [@typed={0x8, 0x63, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0xe0, 0x23, 0x0, 0x1, [@nested={0xdc, 0x1, 0x0, 0x1, [@generic="a959d0e80c6ef57ddb5c434fb84c36e2eb8d8035300fc494320c533713fbaf10ce41ed222967f19e1f4b8aaee281aa4003cb4ef8a785aa7c1e7f8bb48cd0dd97a0f51da2770c0f4a0d0903aa7ee41da9ec50c1e5f596c2537be7618b9ae1282a28ada7cd2902f7610d60db3bc56f69448cd324b3676d94fce1b78c313256ddc91a04d7bb3387b4428018339c48f63269bb94dbe11655c6b79aa5311948a2f06079c6a7f4a17eae8d7f9a47d409f7934131b519dc6c569dfcdf15cc759d95a56c0f61726c6ece49ef4b5247fb4d6a69f380061afd130820f3"]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x2004803c}, 0x4008030) socket$nl_netfilter(0x10, 0x3, 0xc) 9.550265712s ago: executing program 4 (id=1422): r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x29, 0x3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r0, 0x20, &(0x7f0000000540)={&(0x7f0000000300)=""/143, 0x8f, 0x0, 0x0}}, 0x10) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x0, 0x3, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x3, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20001850) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = getpid() syz_open_procfs$namespace(r6, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = socket(0x840000000002, 0x3, 0xff) sendmsg$rds(r7, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x13, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0xfd83}], 0x1, 0x0, 0x0, 0x20000000}, 0x48004) close(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) 8.839505488s ago: executing program 1 (id=1424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[], 0xa) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0xe0, 0x2, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x6f, 0x6, "90958dc3cfde0d1165ad29718de9beff0b4c1332f740063941bf1ddfd2ec1304a9c13f6aa15607774f6387f54d030cc4ea4f3531fb5b036eefe239678df60c6386c320af6b13ff9e6013626e98fa092d5e3acddbc2b3bd783e2c57400244e2ee28fce7ed6445b52dc5f688"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xe, 0x6, "26977f45ff61d22bd851"}, @NFTA_TABLE_USERDATA={0x26, 0x6, "7dd9c40dd12dab1910f3f8c3bb072cecea2e8d5d2f16d5f880dbd4584de8ee22b95d"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1a8}, 0x1, 0x0, 0x0, 0x24000080}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b00000000001010400000000000000000a0000023c0001802c00018014000300fc01000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000001010c00028005000100000000000800"], 0xb0}}, 0x40b0) close(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe4}}, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[], 0xffdd) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x10144, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x3, 0x8, 0x6, 0xa, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xdd, &(0x7f0000000500)=""/221, 0x0, 0x8}, 0x94) 8.732997383s ago: executing program 0 (id=1427): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000041401002dbd7000fddbdf250800e80002000000"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = gettid() fstat(r4, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_clone(0x6000400, &(0x7f0000001340)="df7c7bca001f7c3053eb95563abe60bf9183edead491b2fb2eb48297dd537bbe3cf082066378d56223cd439071c3e6350f06aa8ed3d69ad51b45ec9435b3ecbb9f1c698bc8cbe7278a5d724beaef52a67189f719ec91fad0bf6fda205eb39387ef0dd92b0f69e8f54ff4a711885f3282bc8a2f40141219f02050e108d16641b106565f7febc997cf63aba0f580c6042ddf6dfe", 0x93, &(0x7f00000014c0), &(0x7f0000001500), &(0x7f00000025c0)="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") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003d00)={r2, 0xe0, &(0x7f0000003c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xee, &(0x7f0000003b00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000003b40), &(0x7f0000003b80), 0x8, 0x36, 0x8, 0x8, &(0x7f0000003bc0)}}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$packet(0x11, 0x2, 0x300) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000180)=r11, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r12 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x200, 0x70bd27, 0x0, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x5, 0x0, 0x3, 0xa, 0x60, 0x0, 0x0, 0x0, r13}, {0x0, 0xae, 0xfff, 0xffffffffffffffff, 0x400, 0x2, 0x7fffffff, 0x10000}, {0x0, 0x6, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003a80)={r1, 0x0, 0x65, 0xd5, &(0x7f0000003700)="71ec7c803032904ce5f6df1a50e4ceea33c7a2ea7e412fc304cad75a07492f105f5ec67069cc645a72197b52462934b2f67a9729ab2be7792a2d7649b430319edf06917237ee8854e3acf6022fadbb359ab0e37500ee79ca40e72c75808bf212e436c27d58", &(0x7f0000003780)=""/213, 0xd, 0x0, 0xe8, 0xe5, &(0x7f0000003880)="6412c22fbb4c830010b46486a62731d7e80515b1600e9ecb2195fe7cdc247b7819dfbfdeb0fc7dbf28d1827700ab456497cb32e966e25288c95eee476ebb13dc8340225cc96a64ae588cf4d48dfae09a66356ab8a1185aa1a79b05e18ff142b8343a05e2b35c0263b1cad6ddb674de40ea826ff7bd00e8e82b9ac18181e07c8cc0eac3a38fd4551981c4a8192b7e977cb3394e04f8963e62b8aee0ce0d421ec0afd43469c84c7cf15a1ebfaff569911d71fd6a2b0dd9fc070ecc606b95274309b47d14715d0989fdcb2d8561f2eddbda5339bd63f89bc95b2e21a1325d41c3c0eb9e65382c86eaae", &(0x7f0000003980)="579e3753cff49b1b9f1ddf2dd4eb3d928042f32b18c6002bf8c774940071a44124bf586d195d8b9b8e786578f8c5a3f9aea4bf58942e6f19c1cd8bf52a53051036ba683c5e51c8f2c6c777e4ac66f3d3b982688eedb48f5423cd106191fe9edbc780f877937ed3b4ddda08aa3b9fdb57707be2314db6e9dd28819d5ee7ffdbf077e483091d1b04d864d892d20ae0729b84289a30eab2643f2c8a9254b54c087090056256b7c9e4b8d984c19b0e541ff900ac1c819c6904a1a7d01ea90e925e3c1967d85cb47268ab7c9ae5d948b2aa5a5dd105be0775abb8f99f409b9c1f80fdb2eceb5ef4", 0x2, 0x0, 0xff}, 0x50) fstat(r3, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)={&(0x7f0000000fc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000001080)="76f72b2a43edd1f1fc86f0c1ed1d446a32c70f0b8394242cec88135dc9fd1520f4071c73f1e69308eeaf02fa8b6ce2f5f222f31f16c917728b24a5c33663d55d211994a93e257502d1d56a1d29b930bc1736e41a5f436cec4a07e9781b48b6470a21f03b2f3a51003e", 0x69}, {&(0x7f0000001180)="4ff8fe0d4832298652d5f2384244b2a6611c43d527a438a38dd6868ccb183c35adfc586e4c5fe8b991aae46b0cc60afba186c26a66324c0e2d44d1c7a61dd02b2c0a4c4110e89307a1519f755e948920974a24e773e755c035fc5fa4d70cb0e5cdf5ae08aadf0fe0289f3098a0ea24079bc1273f10", 0x75}], 0x2, &(0x7f0000003640)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0200", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x90}, 0x8811) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 7.857085569s ago: executing program 5 (id=1428): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0xd, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(r3) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000002b80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002b40)={&(0x7f00000017c0)=ANY=[@ANYBLOB="541300001200100028744f8ba84c0600b7ccbd7000fcdbdf25180607f64e204e230e00000003000008080000000500000005000000050000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1354}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) (async, rerun: 32) socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xd}, 0x112018, 0x4, 0x98, 0x5, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) (async) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES32=r8], 0x9a) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={r5, 0xffffffffffffffff, 0x2e, 0x0, @void}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x687313d62b04008, 0x42, '\x00', 0x0, 0x1c, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1b27f, r9, 0x0, 0x0, 0x0, 0x10, 0xfffff800}, 0x94) r10 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x9, 0x954b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3ff, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x4, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0xfffffe84, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000020006fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) sendmsg$nl_generic(r11, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000000)={0x14, 0x39, 0x1, 0x70bd28, 0x25dfdbfe, {0x17}}, 0x14}}, 0x8000) 7.445138889s ago: executing program 2 (id=1429): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'pimreg\x00', @random="010000201000"}) 7.145805684s ago: executing program 1 (id=1430): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000000000009, 0x500, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5aa, 0x1, @perf_bp={0x0}, 0x100410, 0x7fffffff, 0x9, 0x1, 0x9, 0xab, 0xfffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000000000009, 0x500, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5aa, 0x1, @perf_bp={0x0}, 0x100410, 0x7fffffff, 0x9, 0x1, 0x9, 0xab, 0xfffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002ac0)=ANY=[@ANYBLOB="34070000000001002bbd7000fbdbdf2504004f8008003300", @ANYRES32=0x0, @ANYBLOB="180025800c002e8008009200d40800000800138004000a80"], 0x34}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1c0000005e007f089e", 0x9}, {&(0x7f0000000140)="373e17aefc0201070200100100000018000000", 0x13}], 0x2}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1c0000005e007f089e", 0x9}, {&(0x7f0000000140)="373e17aefc0201070200100100000018000000", 0x13}], 0x2}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000094fff661"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x10, 0x2, 0x10) (async) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000100feff000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000100feff000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x4, 0x9, 0xfffff010}, {0x6, 0x0, 0x8, 0xfffffffc}]}) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x4, 0x9, 0xfffff010}, {0x6, 0x0, 0x8, 0xfffffffc}]}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8941, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="6ec1cf6ba4b897a54e4e062b311400000000", 0x0, 0x2, 0x3}, 0x50) socket$kcm(0x1e, 0x1, 0x0) (async) r7 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x0, {0x0, 0x2}}, 0x80, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) (async) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) 7.117579083s ago: executing program 5 (id=1431): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0xc, r0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x28}, 0xfc40) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x7400}, 0x4050) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xffffffff, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0xf905}, 0x8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001880)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a0038001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012100) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f9, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x2, r6, 0x4000}, 0x38) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0xfffffffffffff8fe, 0xfffffffe, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b00088500000071000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x0, 0x3e, 0x0, &(0x7f0000000100)="c9188e9bb95d02ff4284860186dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) 6.936143445s ago: executing program 0 (id=1432): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x1b, 0x5, 0x89, 0x6, 0x0, 0x0, 0x2000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0xffffffffffffffff, 0xcc}, 0x100, 0x8001, 0x2, 0x3, 0x3, 0xa, 0x32, 0x0, 0x3, 0x0, 0x8}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x11, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xf, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r0, r0, r0, r0], &(0x7f00000003c0)=[{0x0, 0x1, 0x1, 0xa}, {0x2, 0x1, 0x1, 0x1}], 0x10, 0x5}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080006"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r1, 0x0, 0x86, 0x96, &(0x7f0000000500)="6bca9a7ebf5a412bf4e8eed1270e2f958aa84cad9bdc58f390b3076dae1060bcd1aced691170211d85a2a694bd8bb29f394db44ced81002db42b0b0630d84fbb0f55201a79b003932fd40ab51382b3d85c8025f4076c811768830f4b2a2bfe8852c48a98578a0b34caed7951353847b53cd79de1e2863440e78f9a10fadd3be716e08707ed88", &(0x7f00000005c0)=""/150, 0x6, 0x0, 0xa4, 0x4a, &(0x7f0000000680)="79272f9d099048b178ec6748a46308277db6c1fee3a8a002b1c20edaa8b47f38b3d9a451007b62a9ffab3e3e0298ebd1e7b4469db25aa6c45852ea41c5cba1c21d6f68e9877281dad95e8ddb03678b4a5b2b00c2b877821fc015343bb1d41c53cc8a372e333998264de74e84f085511e647dacfd248658be805a3a6236f526b87744c3dcb22bf687d209a9a53c8ee5bc7572a52ef048b56806b26cd89a85641ea66617cb", &(0x7f0000000780)="237b403d47e0867fb41ac12db0c052b7929716c35a51b9a10f807cb92ce971660f832bd4238b80c3d37606454e6542a004c0cea2021e6b6d0053ecf3a271f223a501e5a4a2ea3d5894fc", 0x0, 0x0, 0x7fffffff}, 0x50) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xe) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) 6.775290216s ago: executing program 4 (id=1433): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x1, 0x8, 0x3fe, 0x7fffffff, 0x3, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540)={0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x12240, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="130300005500911fdabcf8b30771a54a07"], 0xfe33) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x3, @local, 0x8, 0x20000000}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x20008849) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, 0x0, 0x40c0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002b40), 0x0, 0x0, 0x0, 0xc3ff}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) sendmsg$inet(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f00000002c0)=r5}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000240)='>', 0x1}], 0x1}, 0x0) recvmsg$unix(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 6.032884724s ago: executing program 2 (id=1434): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a410, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xc, 0x2}, 0x104141, 0x4, 0x0, 0x7, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xb, 0x20000000}]}}, 0x0, 0x26}, 0x28) r3 = socket$kcm(0xa, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r4], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce810203290800000000000000000000ffffac14140a000000000000000000000000ac1414aa"], 0xfdef) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000080)='\x00') r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f00000004c0)={'a', ' *:* ', 'rwm\x00'}, 0xa) 5.99169006s ago: executing program 5 (id=1435): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="ab985a5482c6abd36f4a447610debf76dbe277", @ANYRESOCT], 0x0, 0x7, 0x0, 0x0, 0x41100}, 0x94) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x5, 0x8}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="090000000a0000000080000001"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, &(0x7f0000000b80), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000005c0)=r1}, 0xfffffffffffffea0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000800000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="01000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000100000001000000be00"/28], 0x50) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="189308000000000000000000070000009500000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94) (async) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r9, 0x0, 0x0}, 0x10) (async) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xffdc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x7, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$kcm(0xa, 0x1, 0x106) (async) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df0700000cd30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r7, r9}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={0xffffffffffffffff, r12}, 0xfffffffffffffe1f) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x1, &(0x7f00000000c0)=@raw=[@ldst={0x3, 0x2, 0x1, 0x9, 0x7, 0xfffffffffffffff0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x0, 0xac, &(0x7f0000000140)=""/172, 0x41100, 0x65, '\x00', r0, 0x1a, r1, 0x8, &(0x7f0000000340)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xd, 0xef, 0x6}, 0x10, 0x15bc8, 0xffffffffffffffff, 0x7, &(0x7f00000006c0)=[r2, r3, r4, 0x1, r5, r6, r12], &(0x7f0000000700)=[{0x3, 0x5, 0x4, 0x9}, {0x4, 0x5, 0x6, 0x8}, {0x2, 0x5, 0x0, 0xc}, {0x5, 0x2, 0xc, 0x8}, {0x3, 0x1, 0x4}, {0x2, 0x3, 0xf, 0x7}, {0x3, 0x2, 0x3, 0x3}], 0x10, 0x7}, 0x94) 5.507310548s ago: executing program 1 (id=1436): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01000000000000000000000000000114000280bf"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) 5.298604919s ago: executing program 5 (id=1437): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001400)={0x14, 0x39, 0x1, 0x70bd28, 0x25dfdbfe, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x10000}, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) (async) close(0x3) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180000000600142603600e120a000d0000000401a80016000a003a40f800000000004dcf5c31932c984a3116a9c50461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29b09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1}, 0x840) 935.239314ms ago: executing program 2 (id=1438): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) gettid() (async) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x9, 0x1, 0x71, 0xfa, 0x0, 0xc41c, 0x44740, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x400000000001, 0x9}, 0x400, 0x7fff, 0x1, 0x1, 0x7, 0x2, 0x18c, 0x0, 0x7, 0x0, 0x101}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x9) (async) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00c0921c99010029bd70000400000004000000040048808bd88356885a9788cd08000200", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x400c841}, 0x4000090) 883.968352ms ago: executing program 1 (id=1439): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0xa, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x14, 0x18, 0x107, 0x70bd25, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.time\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)=""/41, 0x29}], 0x1}, 0x10100) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c", @ANYRES32], 0xfe33) setsockopt$sock_attach_bpf(r3, 0x6, 0x19, &(0x7f0000000100)=r2, 0xfebf) 881.156464ms ago: executing program 5 (id=1440): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x34, 0x41, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x1c, 0x2d, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@nested={0x11, 0x99, 0x0, 0x1, [@generic="32881935c6d6e2c0dea5ea75b6"]}]}]}, @typed={0x4, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0x40040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 860.013915ms ago: executing program 4 (id=1441): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="24000000260001c106bd7000fddbdf2505000000100099"], 0x24}}, 0x810) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)}, 0x4001) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x10000000000001fe, 0x54078, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x16c5, r3}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8b", 0x0, 0x0, 0x0}, 0x38) socket$kcm(0x28, 0x1, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={0x0, 0x0, 0x26}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000002007e4bbc18501c000000ffff000000000d0000000000005f000000"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000200000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94) sendmsg$unix(r1, &(0x7f0000001bc0)={&(0x7f0000000180)=@file={0x1, './cgroup\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) 859.220106ms ago: executing program 0 (id=1442): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newqdisc={0x88, 0x24, 0x103, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {0x4, 0xf}, {0x1, 0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x1, 0x3, 0x3, 0x4, 0xd, 0x8, 0x2, 0xe, 0x8, 0x2, 0x0, 0x1, 0x8, 0xe, 0x4, 0x2], 0x0, [0x8, 0x3, 0xe855, 0x7, 0x1000, 0x101, 0x9, 0x8000, 0x2, 0x6, 0x4, 0x7, 0xa, 0x4, 0x6, 0x6a35], [0x3, 0x3, 0x9, 0x0, 0x100, 0x5df, 0x1, 0x5, 0xee1, 0xfff, 0xe030, 0xf, 0x8001, 0xfff, 0x3, 0x5]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4008020) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001c0021fffffffffffffff0000700000005000000000007000a00020077"], 0x28}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x5e3, 0x82240, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0xa56b, 0x5, 0x5, 0x3, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x9802, 0x10000, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef435000000e3bd6efb440009000e202e0010000000ba80013ffa85f59a0000005a8c3774fa0af3dc59a933c1e6a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f", 0x67}], 0x1}, 0x0) 790.850774ms ago: executing program 2 (id=1443): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x5084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x3eea}, 0x5002, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r4, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, r4, 0x10}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000063e85010000000000000000070000030900030073797a3100000000050001000700000005000100070000000900020073797a32000000000900020073797a3100000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) 666.748272ms ago: executing program 5 (id=1444): r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x0, 0x400000, 0xba, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open$cgroup(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x3, 0x3, 0xa, 0x0, 0x1, 0x81, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x2, 0x4}, 0x82, 0x1, 0x9, 0x6, 0x4, 0x7, 0x3, 0x0, 0x9, 0x0, 0x7f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x8000, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0x2, 0x2, 0x73) r3 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r3, 0x110, 0x4, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xec, 0x10, 0x0, 0x0, 0x0, 0xdde, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x10001, 0x429bb03c}, 0x114905, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xfec5, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa31076b876c1d000000000400000300000304001ac0080012000400020000000064bc24eab556a705251e618294ff00516ced84c9f4d4938037e786a6d027ca2e69e50048d00000000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040040) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0xdd3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r1, 0x3) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0xaa00, 0x0, 0x0, 0x8, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40000) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000004000008020000000000000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02400000fdffffff00"/28], 0x48) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES64=r6, @ANYRES64=r6, @ANYRESDEC, @ANYRES16], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 607.889387ms ago: executing program 1 (id=1445): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0x13, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'pimreg\x00', 0x200}) 494.255354ms ago: executing program 2 (id=1446): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5110, 0x0, 0x3, 0x5, 0x1, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xec8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8148, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x40002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000}, {0x1000000a, 0x4, 0x200}], 0x10, 0x4}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r5, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 462.787041ms ago: executing program 4 (id=1447): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0xe, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="79106800000000006113740000000000bfa00000000000000700000008ffffffd50301000ee60060950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @sk_skb}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 220.737229ms ago: executing program 4 (id=1448): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x5, &(0x7f0000000240)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="1807000000007fe2648792fdeffa000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0xb}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[@ANYBLOB="3c00000040000701feffffff00000000017c0000040042800c00018006000600800a0000180002801200148004000d00040007"], 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x26004055) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) close(r5) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0b", 0x11}], 0x1}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) 46.154572ms ago: executing program 2 (id=1449): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000002600090122bd7008f6ffffff0200000009000b0100000000000000000800030047"], 0x28}, 0x1, 0x0, 0x0, 0xc957}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[], 0x218}, 0x1, 0x0, 0x0, 0x8801}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x1, 0x7, 0x0, 0x0, 0x0, 0x3, 0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_bp={0x0, 0xd}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x4000000008}, 0xffffffffffffffff, 0x0, r7, 0x0) recvmsg$unix(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1e0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYRES8=r6], 0x9a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r4, 0x0, 0x79, 0xd3, &(0x7f0000000640)="eb2c88d28d0db0c543b1df5a19b4ec8213b8d10f01e47756e943616e5287f7ca43387e35ffbd9e8136e3a8fa7399fecbb47623a1f4d139a7775068ccba9719901055dc7539eb56d930c31f424fac2b39a65b08a8b579a03b59c1837714f55a3c66dc45b952718245f91e2e5b9de6b7735d74ebe24cc2b6065b", &(0x7f00000006c0)=""/211, 0x3, 0x0, 0x31, 0x7, &(0x7f00000007c0)="0bb96dae6fb9f0e55df937156f49aad37197422b0448bf9b5f1744917a2173e4473e7d6a8a5e9fbc3431756158ac937400", &(0x7f0000000800)="f0f29bacc07ee8", 0x1, 0x0, 0x767d}, 0x50) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000010900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000063c000000180a0101000b000000000000010000000900010073797a3000000000100003800400038008000240000000060900020073797a3000000000140000001000010000000000000000000000000adeb9d2592288fa544ff4f065a5c500a9c80fde2779fdfde95c86d264b63ff28e103def52b1d06fdbb4912583dcbcaa7b2d48b236566acd81d82708044cf5bef4ccd78f0c848e3481575cc3a0f38c54a6d2c7b050428bd24385cd9829ef417bf6f1306ee7e311ee424c0cdfff2d6b7ad613695b20e59ae59a13718aa7c18d78f400322dc3d1edb0f94efada69ab6aa53c2b13b832f79e7ad06359b34997cce0c651a2bc9bb55f90e0bde316b953efbf6361cd1aba6dcecc22cae0d3390815d4d3b6d4d30117"], 0xc4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 45.18557ms ago: executing program 0 (id=1450): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x80002, r0}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0xa}, 0x300, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0xa}, 0x300, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f00000007c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000800), &(0x7f0000000880), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f00000007c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000800), &(0x7f0000000880), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.stat\x00', 0x26e1, 0x0) close(r6) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4008086}, 0x24008012) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r7, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r7, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r8, 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r8, 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x19, 0x1e, &(0x7f0000000d00)=ANY=[@ANYBLOB="1869000001000000000000000800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffefffb7030000088a994e460460ddfbbfe6d5b99d0000820000001811000026f8bacb5eb38071b79b37a4bd4a460a5e5d56719ae82bca1b689d799c416c2411f31415fb5dd843ea3637f890191addd2725718a7b6183efbcf901bc41e78c42529d34f245c4985a24a321b7516ac027cf8318aaeb847a3fdd246cb4acc48a3521f83aa9c6348f1be9733c0536b2d7c3247e4f269a24d7b4a8a7385c67968517e1df15a6cca42b3ccf0038227b8c162b412b531fa547ec58826234cafa8fa4e000318", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000185a000004000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009d701800fcffffff851000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000680)='GPL\x00', 0xfffffffd, 0x33, &(0x7f00000006c0)=""/51, 0x41000, 0x4a, '\x00', r5, @fallback=0xf, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x3, 0x1, 0x43, 0x8}, 0x10, r8, r2, 0x9, &(0x7f0000000b40)=[r0, r9], &(0x7f0000000b80)=[{0x0, 0x1, 0xc, 0x3}, {0x4, 0x2, 0x4, 0x9}, {0x5, 0x2, 0x10, 0x8}, {0x0, 0x3, 0x5, 0x4}, {0x5, 0x4, 0x7, 0x2}, {0x1, 0x2, 0x8001, 0x2}, {0x2, 0x3, 0xa, 0x1}, {0x2, 0x5, 0x6, 0xc}, {0x1, 0x2, 0x7, 0xa}], 0x10, 0x2}, 0x94) close(r3) (async) close(r3) socket$kcm(0x1e, 0x4, 0x0) (async) r10 = socket$kcm(0x1e, 0x4, 0x0) socketpair(0x28, 0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r12 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r12, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r12, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) 0s ago: executing program 1 (id=1451): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\twrm'], 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000004, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x96}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0) kernel console output (not intermixed with test programs): v0: Adding interface: batadv_slave_0 [ 91.732635][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.760115][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.772599][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.779769][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.806288][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.850383][ T5630] hsr_slave_0: entered promiscuous mode [ 91.857226][ T5630] hsr_slave_1: entered promiscuous mode [ 91.864421][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 91.870334][ T5630] Cannot create hsr debugfs directory [ 91.966240][ T5627] hsr_slave_0: entered promiscuous mode [ 91.973363][ T5627] hsr_slave_1: entered promiscuous mode [ 91.979919][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 91.985711][ T5627] Cannot create hsr debugfs directory [ 92.032976][ T5626] hsr_slave_0: entered promiscuous mode [ 92.039737][ T5626] hsr_slave_1: entered promiscuous mode [ 92.046609][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 92.052761][ T5626] Cannot create hsr debugfs directory [ 92.570580][ T5625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.582001][ T5643] Bluetooth: hci4: command tx timeout [ 92.583346][ T4941] Bluetooth: hci3: command tx timeout [ 92.588229][ T5631] Bluetooth: hci1: command tx timeout [ 92.594787][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.599261][ T5645] Bluetooth: hci0: command tx timeout [ 92.599456][ T50] Bluetooth: hci2: command tx timeout [ 92.620939][ T5625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.631018][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.639221][ T5625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.649021][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.658590][ T5625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.668976][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.758133][ T5624] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.778899][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.797400][ T5624] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.815407][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.823663][ T5624] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.837340][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.854013][ T5624] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.865102][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.967128][ T5630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.980860][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.005472][ T5630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.016115][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.040045][ T5630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.050671][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.064141][ T5630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.075204][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.159820][ T5627] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.186094][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.194512][ T5627] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.207017][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.217264][ T5627] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.229548][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.255461][ T5627] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.267841][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.290296][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.429212][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.506374][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.514236][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.544448][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.552834][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.567577][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.577002][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.590341][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.599821][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.617005][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.627473][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.647020][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.657953][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.675381][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.767440][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.779393][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.814981][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.822612][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.855261][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.862417][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.875066][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.914262][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.939652][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.946850][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.995544][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.002800][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.041375][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.080664][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.088005][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.113523][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.121107][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.261548][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.397317][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.448686][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.456182][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.535903][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.543662][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.639506][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.662359][ T50] Bluetooth: hci4: command tx timeout [ 94.668341][ T4941] Bluetooth: hci1: command tx timeout [ 94.675521][ T50] Bluetooth: hci2: command tx timeout [ 94.681044][ T5645] Bluetooth: hci3: command tx timeout [ 94.687649][ T4941] Bluetooth: hci0: command tx timeout [ 94.973749][ T5625] veth0_vlan: entered promiscuous mode [ 94.999487][ T5625] veth1_vlan: entered promiscuous mode [ 95.177886][ T5625] veth0_macvtap: entered promiscuous mode [ 95.211142][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.231636][ T5625] veth1_macvtap: entered promiscuous mode [ 95.329423][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.373552][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.440769][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.451543][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.488346][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.523821][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.535840][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.601353][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.611419][ T5624] veth0_vlan: entered promiscuous mode [ 95.678537][ T5624] veth1_vlan: entered promiscuous mode [ 95.766617][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.825567][ T5630] veth0_vlan: entered promiscuous mode [ 95.850491][ T201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.865360][ T201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.876803][ T5624] veth0_macvtap: entered promiscuous mode [ 95.930471][ T5624] veth1_macvtap: entered promiscuous mode [ 95.944354][ T5630] veth1_vlan: entered promiscuous mode [ 95.985115][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.996662][ T201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.007963][ T201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.033210][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.082085][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.092228][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.099515][ T5625] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.119619][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.147083][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.173148][ T5626] veth0_vlan: entered promiscuous mode [ 96.188255][ T5627] veth0_vlan: entered promiscuous mode [ 96.207008][ T5630] veth0_macvtap: entered promiscuous mode [ 96.259648][ T5626] veth1_vlan: entered promiscuous mode [ 96.278265][ T5630] veth1_macvtap: entered promiscuous mode [ 96.303059][ T5627] veth1_vlan: entered promiscuous mode [ 96.326964][ T5826] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 96.348822][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.358815][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.386625][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.395326][ T5826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.405205][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.413370][ T5826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.441666][ T5826] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 96.530515][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.571107][ T5626] veth0_macvtap: entered promiscuous mode [ 96.581149][ T201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.601107][ T201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.610885][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.624399][ T5626] veth1_macvtap: entered promiscuous mode [ 96.669675][ T5627] veth0_macvtap: entered promiscuous mode [ 96.718400][ T201] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.727399][ T201] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.742669][ T5645] Bluetooth: hci4: command tx timeout [ 96.748352][ T50] Bluetooth: hci0: command tx timeout [ 96.748374][ T5631] Bluetooth: hci3: command tx timeout [ 96.753975][ T4941] Bluetooth: hci1: command tx timeout [ 96.754007][ T4941] Bluetooth: hci2: command tx timeout [ 96.776313][ T5627] veth1_macvtap: entered promiscuous mode [ 96.787325][ T201] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.797011][ T201] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.808980][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.822742][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.839567][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.911125][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.939210][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.975786][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.001667][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.029594][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.039751][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.049827][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.137908][ T5836] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4'. [ 97.164519][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.173599][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.192845][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.213227][ T3286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.222848][ T3286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.225249][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.344856][ T5839] warning: `syz.0.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.501300][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.533424][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.600357][ T201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.618846][ T201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.705806][ T5845] netlink: 'syz.3.10': attribute type 21 has an invalid length. [ 97.742030][ T3313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.768733][ T3313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.786725][ T5845] netlink: 'syz.3.10': attribute type 1 has an invalid length. [ 97.802667][ T5845] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10'. [ 97.928267][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.937404][ T5852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 97.972007][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.098961][ T201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.127693][ T201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.167180][ T5858] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 98.186092][ T5858] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3'. [ 98.214649][ T5858] netlink: 672 bytes leftover after parsing attributes in process `syz.2.3'. [ 98.338399][ T10] cfg80211: failed to load regulatory.db [ 98.985818][ T5879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 99.016699][ T5881] netlink: 'syz.3.18': attribute type 20 has an invalid length. [ 99.448160][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 99.525369][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 100.217392][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 102.371205][ T5909] erspan0 speed is unknown, defaulting to 1000 [ 102.390212][ T5909] erspan0 speed is unknown, defaulting to 1000 [ 102.400940][ T5909] erspan0 speed is unknown, defaulting to 1000 [ 102.415915][ T5907] syz.3.24 (5907) used greatest stack depth: 15792 bytes left [ 102.529177][ T5914] netlink: 40 bytes leftover after parsing attributes in process `syz.0.26'. [ 102.572558][ T5914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.26'. [ 102.660971][ T5920] Zero length message leads to an empty skb [ 103.523298][ T5776] erspan0 speed is unknown, defaulting to 1000 [ 103.536086][ T5909] infiniband syz2: set active [ 103.570873][ T5950] ======================================================= [ 103.570873][ T5950] WARNING: The mand mount option has been deprecated and [ 103.570873][ T5950] and is ignored by this kernel. Remove the mand [ 103.570873][ T5950] option from the mount to silence this warning. [ 103.570873][ T5950] ======================================================= [ 103.613003][ T5909] infiniband syz2: added erspan0 [ 103.622700][ T5909] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 103.655302][ T5909] infiniband syz2: Couldn't open port 1 [ 103.712817][ T5909] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 103.803905][ T5909] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 103.870452][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'. [ 103.878485][ T5909] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 103.896883][ T5956] netlink: 'syz.2.38': attribute type 21 has an invalid length. [ 103.912386][ T5956] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 103.935135][ T5956] netlink: 16090 bytes leftover after parsing attributes in process `syz.2.38'. [ 104.107882][ T5909] RDS/IB: syz2: added [ 104.120910][ T5967] netlink: 'syz.3.40': attribute type 9 has an invalid length. [ 104.142974][ T5909] smc: adding ib device syz2 with port count 1 [ 104.164313][ T5909] smc: ib device syz2 port 1 has no pnetid [ 104.192751][ T5358] erspan0 speed is unknown, defaulting to 1000 [ 104.245930][ T5909] erspan0 speed is unknown, defaulting to 1000 [ 105.544254][ T6002] netlink: 45 bytes leftover after parsing attributes in process `syz.3.49'. [ 105.627613][ T5909] erspan0 speed is unknown, defaulting to 1000 [ 105.753679][ T6006] netlink: 'syz.3.49': attribute type 7 has an invalid length. [ 106.189828][ T5909] erspan0 speed is unknown, defaulting to 1000 [ 106.501001][ T5909] erspan0 speed is unknown, defaulting to 1000 [ 106.814661][ T5909] erspan0 speed is unknown, defaulting to 1000 [ 108.998107][ T6025] netlink: 64 bytes leftover after parsing attributes in process `syz.4.57'. [ 109.126331][ T6025] netlink: 'syz.4.57': attribute type 10 has an invalid length. [ 109.242976][ T6025] netlink: 40 bytes leftover after parsing attributes in process `syz.4.57'. [ 109.914510][ T6025] team0: Port device geneve1 added [ 110.029578][ T6050] netlink: 172 bytes leftover after parsing attributes in process `syz.0.64'. [ 110.103605][ T6040] sit0: entered allmulticast mode [ 111.175963][ T6068] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 113.401287][ T6153] netlink: 'syz.0.78': attribute type 1 has an invalid length. [ 113.444978][ T6155] netlink: 'syz.1.79': attribute type 10 has an invalid length. [ 113.463845][ T6155] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.79'. [ 113.473535][ T6153] netlink: 'syz.0.78': attribute type 1 has an invalid length. [ 113.682254][ T6140] netlink: 'syz.3.75': attribute type 3 has an invalid length. [ 113.722252][ T6140] netlink: 132 bytes leftover after parsing attributes in process `syz.3.75'. [ 113.894103][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 114.157617][ T6166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.81'. [ 114.298123][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'. [ 114.729523][ T6196] netlink: 44 bytes leftover after parsing attributes in process `syz.3.91'. [ 115.005599][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 115.035199][ T6208] openvswitch: netlink: Actions may not be safe on all matching packets [ 115.067979][ T6210] netlink: 'syz.1.95': attribute type 4 has an invalid length. [ 115.079655][ T6198] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 115.115608][ T6210] netlink: 17 bytes leftover after parsing attributes in process `syz.1.95'. [ 115.343743][ T6215] netlink: 64 bytes leftover after parsing attributes in process `syz.0.99'. [ 115.629359][ T6101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.226866][ T6101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.499693][ T6101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.555845][ T6232] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.106'. [ 116.727385][ T5643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.737185][ T5643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.746765][ T5643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.748975][ T6101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.773925][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.787188][ T5643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.922904][ T6250] netlink: 48 bytes leftover after parsing attributes in process `syz.0.109'. [ 117.146394][ T201] wlan1: Trigger new scan to find an IBSS to join [ 117.203699][ T6256] netlink: 'syz.1.112': attribute type 1 has an invalid length. [ 117.299464][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 117.384168][ T6256] netlink: 'syz.1.112': attribute type 2 has an invalid length. [ 118.558622][ T6101] bridge_slave_1: left allmulticast mode [ 118.599537][ T6101] bridge_slave_1: left promiscuous mode [ 118.631103][ T6101] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.759401][ T6101] bridge_slave_0: left allmulticast mode [ 118.776223][ T6101] bridge_slave_0: left promiscuous mode [ 118.793154][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.821841][ T5631] Bluetooth: hci1: command tx timeout [ 119.348014][ T6305] netlink: 11396 bytes leftover after parsing attributes in process `syz.1.126'. [ 119.436760][ T6311] netlink: 1996 bytes leftover after parsing attributes in process `syz.1.126'. [ 119.500423][ T6101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.520416][ T6101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.532471][ T6101] bond0 (unregistering): Released all slaves [ 119.763609][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 120.529233][ T6320] Q6`Ҙ: renamed from lo (while UP) [ 120.888120][ T6345] openvswitch: netlink: IPv4 tun info is not correct [ 120.903481][ T5631] Bluetooth: hci1: command tx timeout [ 121.147082][ T6112] wlan1: Trigger new scan to find an IBSS to join [ 121.272085][ T6236] erspan0 speed is unknown, defaulting to 1000 [ 121.285708][ T6363] netlink: 'syz.0.135': attribute type 2 has an invalid length. [ 121.657383][ T6372] netlink: 44 bytes leftover after parsing attributes in process `syz.2.137'. [ 121.763030][ T6372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.137'. [ 122.149453][ T6389] netlink: 'syz.1.140': attribute type 8 has an invalid length. [ 122.193960][ T6094] wlan1: Creating new IBSS network, BSSID 2a:6f:37:bf:08:ed [ 122.991948][ T5631] Bluetooth: hci1: command tx timeout [ 123.253993][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'. [ 123.460921][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 123.705551][ T6424] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.148'. [ 124.789006][ T6101] hsr_slave_0: left promiscuous mode [ 124.817893][ T6101] hsr_slave_1: left promiscuous mode [ 124.840589][ T6101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.858958][ T6101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.887816][ T6101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.897814][ T6101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.928977][ T6101] veth1_macvtap: left promiscuous mode [ 124.936281][ T6101] veth0_macvtap: left promiscuous mode [ 124.944540][ T6101] veth1_vlan: left promiscuous mode [ 124.950289][ T6101] veth0_vlan: left promiscuous mode [ 125.064869][ T5631] Bluetooth: hci1: command tx timeout [ 125.253749][ T6101] team0 (unregistering): Port device team_slave_1 removed [ 125.271295][ T6101] team0 (unregistering): Port device team_slave_0 removed [ 125.451293][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.152'. [ 125.507200][ T6440] wg1 speed is unknown, defaulting to 1000 [ 125.543027][ T6440] wg1 speed is unknown, defaulting to 1000 [ 125.577808][ T6440] wg1 speed is unknown, defaulting to 1000 [ 126.049816][ T6465] syz.0.160 uses obsolete (PF_INET,SOCK_PACKET) [ 126.239484][ T6236] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.285407][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.314053][ T6236] bridge_slave_0: entered allmulticast mode [ 126.353249][ T6236] bridge_slave_0: entered promiscuous mode [ 126.389548][ T6236] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.429615][ T6236] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.457661][ T6236] bridge_slave_1: entered allmulticast mode [ 126.475869][ T6440] infiniband syz0: set active [ 126.500727][ T6236] bridge_slave_1: entered promiscuous mode [ 126.504184][ T6440] infiniband syz0: added wg1 [ 126.515194][ T6483] netlink: 64 bytes leftover after parsing attributes in process `syz.4.162'. [ 126.567287][ T6440] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 126.578420][ T6440] infiniband syz0: Couldn't open port 1 [ 126.590182][ T6484] netlink: 'syz.4.162': attribute type 10 has an invalid length. [ 126.640259][ T5745] wg1 speed is unknown, defaulting to 1000 [ 126.662204][ T6440] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 126.728553][ T6440] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 126.753509][ T6440] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 126.761938][ T6484] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 126.830228][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 126.849073][ T6484] bridge0: port 3(netdevsim1) entered blocking state [ 126.860298][ T6440] RDS/IB: syz0: added [ 126.864052][ T6484] bridge0: port 3(netdevsim1) entered disabled state [ 126.864513][ T6440] smc: adding ib device syz0 with port count 1 [ 126.884506][ T6440] smc: ib device syz0 port 1 has no pnetid [ 126.936998][ T6484] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 126.961216][ T6236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.007167][ T6488] netlink: 140 bytes leftover after parsing attributes in process `syz.0.163'. [ 127.069372][ T5358] wg1 speed is unknown, defaulting to 1000 [ 127.079469][ T6236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.106822][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 127.135362][ T6440] wg1 speed is unknown, defaulting to 1000 [ 127.267714][ T6236] team0: Port device team_slave_0 added [ 127.288107][ T6236] team0: Port device team_slave_1 added [ 127.401332][ T6236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.442483][ T6236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.532845][ T6236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.568321][ T6236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.570877][ T6512] netlink: 260 bytes leftover after parsing attributes in process `syz.0.167'. [ 127.591073][ T6236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.676776][ T6236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.720730][ T6509] syz.1.164 (6509) used obsolete PPPIOCDETACH ioctl [ 127.842412][ T6440] wg1 speed is unknown, defaulting to 1000 [ 127.917633][ T6236] hsr_slave_0: entered promiscuous mode [ 127.931192][ T6236] hsr_slave_1: entered promiscuous mode [ 128.291467][ T6538] netlink: 172 bytes leftover after parsing attributes in process `syz.0.170'. [ 128.632476][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 129.041886][ T6440] wg1 speed is unknown, defaulting to 1000 [ 129.064299][ T6563] netlink: 36 bytes leftover after parsing attributes in process `syz.0.176'. [ 129.220823][ T6563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.176'. [ 129.640427][ T6574] netlink: 220 bytes leftover after parsing attributes in process `syz.4.177'. [ 129.683727][ T6574] tc_dump_action: action bad kind [ 129.966620][ T6440] wg1 speed is unknown, defaulting to 1000 [ 130.328319][ T6599] netlink: 'syz.0.182': attribute type 13 has an invalid length. [ 130.391121][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 130.460990][ T6608] netlink: 'syz.4.184': attribute type 1 has an invalid length. [ 131.067982][ T6440] wg1 speed is unknown, defaulting to 1000 [ 131.347008][ T6236] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 131.503396][ T6622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.188'. [ 131.534679][ T6622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.188'. [ 131.614158][ T6622] netlink: 52 bytes leftover after parsing attributes in process `syz.0.188'. [ 131.658346][ T6625] netlink: 'syz.0.188': attribute type 1 has an invalid length. [ 133.886757][ T6236] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.915766][ T6236] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 133.966975][ T6236] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.991247][ T6236] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 134.052027][ T6236] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 134.071278][ T6236] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 134.103451][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.122610][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.147114][ T6236] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 134.429203][ T6648] : port 1(batadv0) entered blocking state [ 134.446540][ T6648] : port 1(batadv0) entered disabled state [ 134.471422][ T6648] batadv0: entered allmulticast mode [ 134.485074][ T6648] batadv0: entered promiscuous mode [ 134.497860][ T6101] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 134.509431][ T6101] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 135.244648][ T6680] netlink: 'syz.0.196': attribute type 5 has an invalid length. [ 135.255532][ T6680] netlink: 'syz.0.196': attribute type 6 has an invalid length. [ 135.309321][ T6680] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.196'. [ 135.312627][ T6236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.376261][ T6680] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.196'. [ 135.446350][ T6236] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.496685][ T6101] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.504304][ T6101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.588235][ T6101] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.595568][ T6101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.077116][ T6690] erspan0 speed is unknown, defaulting to 1000 [ 136.727536][ T6718] netlink: zone id is out of range [ 136.753961][ T6718] netlink: zone id is out of range [ 136.776215][ T6718] netlink: del zone limit has 8 unknown bytes [ 136.837959][ T6236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.099754][ T6236] veth0_vlan: entered promiscuous mode [ 137.137708][ T6236] veth1_vlan: entered promiscuous mode [ 137.220511][ T6236] veth0_macvtap: entered promiscuous mode [ 137.259623][ T6236] veth1_macvtap: entered promiscuous mode [ 137.370880][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.423595][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.476710][ T6690] wg1 speed is unknown, defaulting to 1000 [ 137.476813][ T6729] netlink: 10 bytes leftover after parsing attributes in process `syz.2.202'. [ 137.596814][ T6094] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.641843][ T6094] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.664098][ T6094] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.763733][ T6094] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.117180][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.149727][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.317383][ T201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.358732][ T201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.813909][ T6778] netlink: 220 bytes leftover after parsing attributes in process `syz.0.210'. [ 139.468319][ T6795] netlink: 'syz.2.212': attribute type 21 has an invalid length. [ 139.520720][ T6801] netlink: 'syz.3.214': attribute type 39 has an invalid length. [ 139.636530][ T6801] veth1_macvtap: left promiscuous mode [ 139.647279][ T6805] netlink: 'syz.2.212': attribute type 10 has an invalid length. [ 139.709493][ T6805] netlink: 40 bytes leftover after parsing attributes in process `syz.2.212'. [ 140.176059][ T6795] netlink: 156 bytes leftover after parsing attributes in process `syz.2.212'. [ 140.291379][ T6805] team0: entered promiscuous mode [ 140.303971][ T6805] team_slave_0: entered promiscuous mode [ 140.320318][ T6805] team_slave_1: entered promiscuous mode [ 140.331935][ T6805] team0: entered allmulticast mode [ 140.350703][ T6805] team_slave_0: entered allmulticast mode [ 140.388810][ T6805] team_slave_1: entered allmulticast mode [ 140.424227][ T6805] bridge0: port 3(team0) entered blocking state [ 140.487110][ T6805] bridge0: port 3(team0) entered disabled state [ 140.686940][ T6805] bridge0: port 3(team0) entered blocking state [ 140.693840][ T6805] bridge0: port 3(team0) entered forwarding state [ 141.344127][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.217'. [ 142.472655][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.224'. [ 142.569206][ T6834] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 142.779560][ T6834] bridge0: port 3(netdevsim1) entered disabled state [ 143.546196][ T6834] bridge_slave_1: left allmulticast mode [ 143.561932][ T6834] bridge_slave_1: left promiscuous mode [ 143.569421][ T6834] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.153950][ T6834] bridge_slave_0: left allmulticast mode [ 144.171803][ T6834] bridge_slave_0: left promiscuous mode [ 144.179375][ T6834] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.280266][ T6862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.228'. [ 145.694281][ T6858] : renamed from veth0_to_batadv (while UP) [ 146.139079][ T6873] netlink: 60 bytes leftover after parsing attributes in process `syz.0.232'. [ 146.200742][ T6873] netlink: 60 bytes leftover after parsing attributes in process `syz.0.232'. [ 146.263192][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 146.518410][ T6877] nbd: must specify a device to reconfigure [ 147.107684][ T6893] netlink: 'syz.2.237': attribute type 2 has an invalid length. [ 147.236842][ T6894] netlink: 'syz.2.237': attribute type 2 has an invalid length. [ 147.553888][ T6920] netlink: 'syz.4.243': attribute type 1 has an invalid length. [ 147.572601][ T6920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.620564][ T6920] veth1_macvtap: left promiscuous mode [ 147.636203][ T6920] macsec0: entered allmulticast mode [ 147.962623][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.249'. [ 148.441211][ T6944] netlink: 'syz.0.251': attribute type 5 has an invalid length. [ 148.499216][ T6944] netlink: 'syz.0.251': attribute type 6 has an invalid length. [ 148.561976][ T6944] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.251'. [ 149.007131][ T6946] netlink: 56 bytes leftover after parsing attributes in process `syz.3.250'. [ 150.350507][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 150.471689][ T7004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.260'. [ 150.509071][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'. [ 150.555535][ T7007] netlink: 'syz.2.260': attribute type 15 has an invalid length. [ 150.574514][ T7007] netlink: 'syz.2.260': attribute type 7 has an invalid length. [ 150.595393][ T7007] netlink: 52 bytes leftover after parsing attributes in process `syz.2.260'. [ 150.639450][ T7009] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.261'. [ 150.730189][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.261'. [ 151.124381][ T7023] netlink: 'syz.3.263': attribute type 10 has an invalid length. [ 151.152796][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 151.172519][ T7023] netlink: 40 bytes leftover after parsing attributes in process `syz.3.263'. [ 151.230262][ T7027] xfrm0 speed is unknown, defaulting to 1000 [ 151.250585][ T7027] xfrm0 speed is unknown, defaulting to 1000 [ 151.300068][ T7023] team0: Port device geneve1 added [ 151.379688][ T7027] xfrm0 speed is unknown, defaulting to 1000 [ 151.450943][ T7027] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 151.535796][ T7027] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 151.568637][ T7031] netlink: 'syz.2.266': attribute type 10 has an invalid length. [ 151.593979][ T7032] netlink: 'syz.0.267': attribute type 5 has an invalid length. [ 151.635861][ T7031] bridge0: port 3(team0) entered disabled state [ 151.643919][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.656399][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.663477][ T7027] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 151.890442][ T7027] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 151.905711][ T7031] team0: Device bridge0 is already an upper device of the team interface [ 152.017823][ T7027] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 152.216784][ T6097] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 152.328380][ T7054] syzkaller0: entered promiscuous mode [ 152.343634][ T7054] syzkaller0: entered allmulticast mode [ 152.397118][ T7027] xfrm0 speed is unknown, defaulting to 1000 [ 152.566004][ T7057] validate_nla: 1 callbacks suppressed [ 152.566026][ T7057] netlink: 'syz.3.272': attribute type 1 has an invalid length. [ 152.604040][ T7057] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.272'. [ 152.661458][ T7027] xfrm0 speed is unknown, defaulting to 1000 [ 152.761159][ T7027] xfrm0 speed is unknown, defaulting to 1000 [ 152.878613][ T7027] xfrm0 speed is unknown, defaulting to 1000 [ 152.945461][ T7027] xfrm0 speed is unknown, defaulting to 1000 [ 153.481258][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 154.027375][ T7079] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 154.314291][ T7084] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 155.756577][ T7134] __nla_validate_parse: 2 callbacks suppressed [ 155.756597][ T7134] netlink: 80 bytes leftover after parsing attributes in process `syz.0.292'. [ 155.828663][ T7134] netlink: 80 bytes leftover after parsing attributes in process `syz.0.292'. [ 155.961003][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.294'. [ 155.963395][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.292'. [ 156.089875][ T7134] netlink: 6 bytes leftover after parsing attributes in process `syz.0.292'. [ 156.359174][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.296'. [ 156.471202][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.298'. [ 156.676898][ T7163] netlink: 4079 bytes leftover after parsing attributes in process `syz.0.299'. [ 156.974351][ T7178] netlink: 32 bytes leftover after parsing attributes in process `syz.1.302'. [ 157.009258][ T7173] netlink: 32 bytes leftover after parsing attributes in process `syz.1.302'. [ 158.779037][ T7253] netlink: 'syz.0.315': attribute type 5 has an invalid length. [ 163.475294][ T7307] __nla_validate_parse: 7 callbacks suppressed [ 163.475311][ T7307] netlink: 352 bytes leftover after parsing attributes in process `syz.0.321'. [ 164.004106][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 164.925110][ T7336] mac80211_hwsim hwsim14 : renamed from wlan0 [ 165.132526][ T7346] netlink: 'syz.2.328': attribute type 9 has an invalid length. [ 165.154974][ T7345] netlink: 300 bytes leftover after parsing attributes in process `syz.3.327'. [ 166.244417][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.340'. [ 166.398845][ T7409] IPv6: NLM_F_CREATE should be specified when creating new route [ 166.468512][ T7409] IPv6: NLM_F_REPLACE set, but no existing node found! [ 167.333989][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.348'. [ 167.425753][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.348'. [ 170.223543][ T7479] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 170.327847][ T7481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.361'. [ 170.364198][ T7481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.361'. [ 170.440363][ T7482] netlink: 144 bytes leftover after parsing attributes in process `syz.1.361'. [ 170.470503][ T7482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.361'. [ 171.319389][ T7503] netlink: 32 bytes leftover after parsing attributes in process `syz.2.368'. [ 171.334176][ T7503] netlink: 32 bytes leftover after parsing attributes in process `syz.2.368'. [ 171.460473][ T7505] netlink: 112 bytes leftover after parsing attributes in process `syz.4.369'. [ 171.705760][ T7516] Cannot find del_set index 14804 as target [ 172.365093][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'. [ 172.457277][ T7532] netlink: 'syz.1.373': attribute type 1 has an invalid length. [ 172.548628][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.377'. [ 172.770591][ T7532] netlink: 'syz.1.373': attribute type 1 has an invalid length. [ 173.157246][ T7199] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.420777][ T7199] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.631118][ T7570] netlink: 'syz.1.381': attribute type 5 has an invalid length. [ 173.639764][ T7199] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.680699][ T7570] netlink: 'syz.1.381': attribute type 5 has an invalid length. [ 173.823580][ T7199] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.863981][ T5643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.874244][ T5643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.884835][ T5643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.895331][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.904712][ T5643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.100682][ T7589] netlink: 'syz.4.385': attribute type 1 has an invalid length. [ 174.329036][ T7593] openvswitch: netlink: IP tunnel dst address not specified [ 174.376809][ T7593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.448091][ T7598] netlink: 'syz.1.387': attribute type 9 has an invalid length. [ 174.583574][ T7199] bridge_slave_1: left allmulticast mode [ 174.609754][ T7199] bridge_slave_1: left promiscuous mode [ 174.639890][ T7199] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.675329][ T7199] bridge_slave_0: left allmulticast mode [ 174.690371][ T7199] bridge_slave_0: left promiscuous mode [ 174.712833][ T7199] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.717712][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.389'. [ 175.656787][ T7199] team0: Port device geneve1 removed [ 175.696455][ T7199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.718768][ T7199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.732156][ T7199] bond0 (unregistering): Released all slaves [ 175.942309][ T5631] Bluetooth: hci1: command tx timeout [ 176.219024][ T7637] bridge0: port 3(gretap0) entered blocking state [ 176.249364][ T7637] bridge0: port 3(gretap0) entered disabled state [ 176.266660][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.396'. [ 176.294864][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 176.314184][ T7637] gretap0: entered allmulticast mode [ 176.401658][ T7637] gretap0: entered promiscuous mode [ 176.448775][ T7637] bridge0: port 3(gretap0) entered blocking state [ 176.457197][ T7637] bridge0: port 3(gretap0) entered forwarding state [ 176.755840][ T7646] netlink: 68 bytes leftover after parsing attributes in process `syz.2.395'. [ 176.834935][ T7646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.395'. [ 176.936656][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'. [ 178.036251][ T5631] Bluetooth: hci1: command tx timeout [ 178.368676][ T7579] erspan0 speed is unknown, defaulting to 1000 [ 178.721145][ T7681] netlink: 'syz.1.400': attribute type 10 has an invalid length. [ 178.916636][ T7685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.402'. [ 179.122352][ T7681] team0: Device veth0_vlan failed to register rx_handler [ 180.102050][ T5631] Bluetooth: hci1: command tx timeout [ 180.112252][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 180.642659][ T7199] hsr_slave_0: left promiscuous mode [ 180.664056][ T7199] hsr_slave_1: left promiscuous mode [ 180.684932][ T7199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.703373][ T7199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.749926][ T7199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.802596][ T7199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.895696][ T7199] veth0_macvtap: left promiscuous mode [ 180.908668][ T7199] veth1_vlan: left promiscuous mode [ 180.920515][ T7199] veth0_vlan: left promiscuous mode [ 181.013275][ T7742] netlink: 'syz.0.412': attribute type 6 has an invalid length. [ 181.055104][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'. [ 181.308993][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'. [ 181.548516][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 181.658622][ T7767] netlink: 'syz.2.417': attribute type 5 has an invalid length. [ 181.677821][ T7199] team0 (unregistering): Port device team_slave_1 removed [ 181.740653][ T7199] team0 (unregistering): Port device team_slave_0 removed [ 182.044293][ T7737] tc_dump_action: action bad kind [ 182.050873][ T7579] wg1 speed is unknown, defaulting to 1000 [ 182.090513][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 182.188378][ T5631] Bluetooth: hci1: command tx timeout [ 182.789693][ T7782] netlink: 'syz.1.420': attribute type 21 has an invalid length. [ 182.834685][ T7782] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.420'. [ 183.066977][ T7579] xfrm0 speed is unknown, defaulting to 1000 [ 183.284760][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.422'. [ 183.474665][ T7199] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 184.100399][ T7808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.425'. [ 184.218459][ T7808] netlink: 5 bytes leftover after parsing attributes in process `syz.1.425'. [ 184.242309][ T7808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.425'. [ 184.747584][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'. [ 185.234365][ T7833] netlink: 'syz.1.429': attribute type 6 has an invalid length. [ 185.529151][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 185.931539][ T7844] bridge0: entered allmulticast mode [ 186.047838][ T7844] netlink: 184 bytes leftover after parsing attributes in process `syz.2.431'. [ 186.089481][ T7579] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.102581][ T7579] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.123688][ T7579] bridge_slave_0: entered allmulticast mode [ 186.162910][ T7579] bridge_slave_0: entered promiscuous mode [ 186.277259][ T7579] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.302744][ T7579] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.312806][ T7579] bridge_slave_1: entered allmulticast mode [ 186.406042][ T7579] bridge_slave_1: entered promiscuous mode [ 186.439445][ T7832] erspan0 speed is unknown, defaulting to 1000 [ 186.909627][ T7579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.951230][ T7579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.180291][ T7867] netlink: 172 bytes leftover after parsing attributes in process `syz.2.435'. [ 187.291399][ T7579] team0: Port device team_slave_0 added [ 187.369543][ T7579] team0: Port device team_slave_1 added [ 187.669875][ T7832] wg1 speed is unknown, defaulting to 1000 [ 187.709489][ T7579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.732513][ T7579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.792139][ T7579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.834515][ T7579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.865780][ T7579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.971672][ T7579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.513814][ T7579] hsr_slave_0: entered promiscuous mode [ 188.535472][ T7579] hsr_slave_1: entered promiscuous mode [ 188.721552][ T7886] netlink: 'syz.4.440': attribute type 7 has an invalid length. [ 188.832241][ T7886] netlink: 'syz.4.440': attribute type 6 has an invalid length. [ 188.992297][ T7886] netlink: 'syz.4.440': attribute type 7 has an invalid length. [ 189.049904][ T7886] netlink: 'syz.4.440': attribute type 6 has an invalid length. [ 190.663753][ T7832] xfrm0 speed is unknown, defaulting to 1000 [ 190.678958][ T7914] netlink: 'syz.4.446': attribute type 21 has an invalid length. [ 190.686670][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 190.739980][ T7914] netlink: 132 bytes leftover after parsing attributes in process `syz.4.446'. [ 191.020769][ T7928] netlink: 64 bytes leftover after parsing attributes in process `syz.4.449'. [ 191.148467][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'. [ 192.763886][ T7967] netlink: 20 bytes leftover after parsing attributes in process `syz.0.456'. [ 193.126435][ T7988] netlink: 'syz.4.461': attribute type 1 has an invalid length. [ 193.150180][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.461'. [ 193.437230][ T7992] netlink: 'syz.1.460': attribute type 39 has an invalid length. [ 194.389632][ T7990] veth0_macvtap: left promiscuous mode [ 194.425698][ T5643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.457070][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.469455][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.482212][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.490985][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.663758][ T7992] hsr_slave_0 (unregistering): left promiscuous mode [ 194.950538][ T8023] netlink: 36 bytes leftover after parsing attributes in process `syz.2.464'. [ 194.989112][ T8023] netlink: 36 bytes leftover after parsing attributes in process `syz.2.464'. [ 195.005485][ T7579] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 195.012288][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.464'. [ 195.050595][ T7579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 195.064105][ T8034] netlink: 'syz.2.464': attribute type 1 has an invalid length. [ 195.083388][ T7579] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 195.100574][ T8034] netlink: 'syz.2.464': attribute type 4 has an invalid length. [ 195.119830][ T7579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 195.135961][ T8034] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.464'. [ 195.149241][ T7579] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 195.172392][ T7579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 195.498853][ T7579] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 195.554695][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.567307][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.845338][ T7579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 195.926612][ T8042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.467'. [ 195.981427][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'. [ 196.144798][ T8005] erspan0 speed is unknown, defaulting to 1000 [ 196.593864][ T5643] Bluetooth: hci0: command tx timeout [ 196.842331][ T7579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.906714][ T8005] wg1 speed is unknown, defaulting to 1000 [ 196.978929][ T7579] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.031066][ T7199] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.039536][ T7199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.160472][ T6101] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.167897][ T6101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.314563][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.474'. [ 197.628509][ T8099] netlink: 144 bytes leftover after parsing attributes in process `syz.2.476'. [ 197.780784][ T8101] openvswitch: netlink: Actions may not be safe on all matching packets [ 197.798985][ T8005] xfrm0 speed is unknown, defaulting to 1000 [ 198.662079][ T5643] Bluetooth: hci0: command tx timeout [ 198.933552][ T7579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.224635][ T8005] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.232294][ T8005] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.239572][ T8005] bridge_slave_0: entered allmulticast mode [ 199.248044][ T8005] bridge_slave_0: entered promiscuous mode [ 199.257705][ T8005] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.265535][ T8005] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.274236][ T8005] bridge_slave_1: entered allmulticast mode [ 199.282107][ T8005] bridge_slave_1: entered promiscuous mode [ 199.327395][ T8175] netlink: 184 bytes leftover after parsing attributes in process `syz.4.486'. [ 199.423035][ T8005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.479848][ T8005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.630293][ T8005] team0: Port device team_slave_0 added [ 199.726411][ T8005] team0: Port device team_slave_1 added [ 199.736220][ T8180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.487'. [ 199.911012][ T8185] netlink: 'syz.1.488': attribute type 16 has an invalid length. [ 199.928628][ T8185] netlink: 'syz.1.488': attribute type 17 has an invalid length. [ 199.955302][ T8005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.973331][ T8005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.000995][ T8005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.056151][ T8005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.068735][ T8005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.161685][ T8005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.742038][ T5643] Bluetooth: hci0: command tx timeout [ 202.821990][ T5643] Bluetooth: hci0: command tx timeout [ 203.077529][ T5287] veth0_macvtap: entered promiscuous mode [ 203.153206][ T7579] veth0_vlan: entered promiscuous mode [ 203.306122][ T7579] veth1_vlan: entered promiscuous mode [ 203.336360][ T8219] netlink: 'syz.2.492': attribute type 29 has an invalid length. [ 203.338953][ T8005] hsr_slave_0: entered promiscuous mode [ 203.353891][ T8005] hsr_slave_1: entered promiscuous mode [ 203.360392][ T8005] debugfs: 'hsr0' already exists in 'hsr' [ 203.367732][ T8005] Cannot create hsr debugfs directory [ 203.379478][ T8219] netlink: 'syz.2.492': attribute type 29 has an invalid length. [ 203.437740][ T8222] netlink: 'syz.2.492': attribute type 29 has an invalid length. [ 203.496894][ T7579] veth0_macvtap: entered promiscuous mode [ 203.708094][ T7579] veth1_macvtap: entered promiscuous mode [ 203.923046][ T8249] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.498'. [ 204.081680][ T8251] netlink: 'syz.1.499': attribute type 2 has an invalid length. [ 204.612916][ T7579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.758526][ T8005] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.779739][ T8263] netlink: 60 bytes leftover after parsing attributes in process `syz.2.501'. [ 204.861283][ T7579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.908313][ T8267] netlink: 122 bytes leftover after parsing attributes in process `syz.2.501'. [ 204.998930][ T6099] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.019575][ T6099] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.314584][ T8005] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.378253][ T6099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.431615][ T6099] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.502418][ T8282] netlink: 416 bytes leftover after parsing attributes in process `syz.1.504'. [ 205.630364][ T8005] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.893471][ T8005] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.024243][ T6099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.040981][ T6099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.059816][ T8293] tun0: tun_chr_ioctl cmd 1074025672 [ 206.071926][ T8293] tun0: ignored: set checksum enabled [ 206.258739][ T6107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.278227][ T6107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.571023][ T8311] hsr0: entered promiscuous mode [ 206.600780][ T8311] hsr0: entered allmulticast mode [ 206.673999][ T8311] hsr_slave_0: entered allmulticast mode [ 206.680352][ T8311] hsr_slave_1: entered allmulticast mode [ 206.849546][ T8319] netlink: 32 bytes leftover after parsing attributes in process `syz.2.515'. [ 207.036822][ T8329] netlink: 148 bytes leftover after parsing attributes in process `syz.1.517'. [ 207.058552][ T8328] netlink: 148 bytes leftover after parsing attributes in process `syz.1.517'. [ 207.259800][ T8005] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 207.301138][ T8005] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 207.349038][ T8005] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 207.385117][ T8005] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 207.399005][ T8005] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 207.425510][ T8005] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 207.443374][ T8005] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 207.456416][ T8005] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 207.456828][ T8350] netlink: 14 bytes leftover after parsing attributes in process `syz.4.523'. [ 207.479707][ T8347] netlink: 'syz.3.521': attribute type 17 has an invalid length. [ 207.908191][ T8005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.998096][ T8005] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.025290][ T7195] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.032659][ T7195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.105545][ T6101] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.112886][ T6101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.630823][ T8387] netlink: 'syz.1.531': attribute type 10 has an invalid length. [ 208.695044][ T8387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.531'. [ 209.410715][ T8412] netlink: 'syz.3.537': attribute type 39 has an invalid length. [ 209.804316][ T8424] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 209.853776][ T8005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.967710][ T8430] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.540'. [ 210.015552][ T8430] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.540'. [ 210.054049][ T8430] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.540'. [ 210.115443][ T8433] netlink: 324 bytes leftover after parsing attributes in process `syz.2.542'. [ 210.132947][ T8005] veth0_vlan: entered promiscuous mode [ 210.156273][ T8433] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 210.178996][ T8005] veth1_vlan: entered promiscuous mode [ 210.314574][ T8005] veth0_macvtap: entered promiscuous mode [ 210.327610][ T8435] netlink: 'syz.3.543': attribute type 1 has an invalid length. [ 210.365116][ T8005] veth1_macvtap: entered promiscuous mode [ 210.405720][ T8005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.429156][ T8005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.446724][ T8436] netlink: 'syz.3.543': attribute type 2 has an invalid length. [ 210.479123][ T8435] netlink: 'syz.3.543': attribute type 10 has an invalid length. [ 210.527481][ T8435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.547488][ T8435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.603049][ T8435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.614067][ T8435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.744759][ T10] page_pool_release_retry() stalled pool shutdown: id 43, 1 inflight 60 sec [ 210.785054][ T7195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.822749][ T7195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.874388][ T7195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.918244][ T7195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.090732][ T7195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.137019][ T7195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.187010][ T6107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.203739][ T6107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.595177][ T8468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.462'. [ 211.650768][ T8468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.462'. [ 211.675187][ T8465] netlink: 'syz.0.462': attribute type 21 has an invalid length. [ 212.142816][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 212.168912][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 212.578131][ T8499] netlink: 100 bytes leftover after parsing attributes in process `syz.1.558'. [ 212.985561][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 212.998652][ T5645] Bluetooth: hci4: command 0x0406 tx timeout [ 213.001891][ T5633] Bluetooth: hci3: command 0x0406 tx timeout [ 213.255726][ T8519] netlink: 32 bytes leftover after parsing attributes in process `syz.0.565'. [ 214.563526][ T8591] netlink: 'syz.0.585': attribute type 9 has an invalid length. [ 214.685653][ T7195] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 215.477186][ T8609] __nla_validate_parse: 2 callbacks suppressed [ 215.477210][ T8609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.593'. [ 215.671211][ T8611] netlink: 14 bytes leftover after parsing attributes in process `syz.2.589'. [ 215.954127][ T1107] smc: removing ib device syz0 [ 216.283675][ T1107] smbdirect: ib_dev[syz0] removed [ 216.302444][ T24] wg1 speed is unknown, defaulting to 1000 [ 216.327923][ T24] syz0: Port: 1 Link DOWN [ 216.438617][ T8629] netlink: 'syz.4.596': attribute type 1 has an invalid length. [ 218.101029][ T8687] netlink: 'syz.4.608': attribute type 21 has an invalid length. [ 218.122563][ T8687] netlink: 'syz.4.608': attribute type 6 has an invalid length. [ 218.150513][ T8687] netlink: 132 bytes leftover after parsing attributes in process `syz.4.608'. [ 218.181400][ T8690] netlink: 'syz.4.608': attribute type 21 has an invalid length. [ 218.237662][ T8690] netlink: 'syz.4.608': attribute type 6 has an invalid length. [ 218.271844][ T8690] netlink: 132 bytes leftover after parsing attributes in process `syz.4.608'. [ 218.441405][ T8701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.611'. [ 218.485384][ T8701] netlink: 152 bytes leftover after parsing attributes in process `syz.4.611'. [ 218.838825][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 219.040858][ T8713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.613'. [ 219.626242][ T8732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.617'. [ 219.718097][ T8732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.617'. [ 219.833086][ T8737] netlink: 'syz.3.621': attribute type 39 has an invalid length. [ 219.905835][ T8737] hsr_slave_0: left promiscuous mode [ 219.952768][ T8737] hsr_slave_1: left promiscuous mode [ 220.610237][ T8762] netlink: 'syz.3.627': attribute type 2 has an invalid length. [ 220.631043][ T8762] netlink: 'syz.3.627': attribute type 2 has an invalid length. [ 220.653582][ T8760] netlink: 'syz.3.627': attribute type 2 has an invalid length. [ 220.664687][ T8760] netlink: 'syz.3.627': attribute type 2 has an invalid length. [ 220.733030][ T8768] __nla_validate_parse: 2 callbacks suppressed [ 220.733049][ T8768] netlink: 40 bytes leftover after parsing attributes in process `syz.2.629'. [ 221.213361][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 221.741199][ T8804] netlink: 24 bytes leftover after parsing attributes in process `syz.3.640'. [ 221.824578][ T8814] bridge_slave_1: left allmulticast mode [ 221.844256][ T8814] bridge_slave_1: left promiscuous mode [ 221.874170][ T8814] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.945146][ T8814] bridge_slave_0: left allmulticast mode [ 221.972773][ T8814] bridge_slave_0: left promiscuous mode [ 221.999141][ T8814] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.326457][ T8833] netlink: 'syz.1.648': attribute type 49 has an invalid length. [ 222.380978][ T8841] netlink: 'syz.0.649': attribute type 1 has an invalid length. [ 222.391567][ T29] audit: type=1107 audit(1784088620.825:2): pid=8840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='%-hTA\\R"ϧ4uh%*`{92A6X1MDv{S4bݘgi]XE1v' [ 222.431194][ T8841] netlink: 'syz.0.649': attribute type 2 has an invalid length. [ 222.613500][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.651'. [ 222.701024][ T8858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.652'. [ 222.887974][ T8846] netlink: 'syz.1.651': attribute type 46 has an invalid length. [ 222.913315][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.655'. [ 223.041642][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.651'. [ 223.680569][ T8874] netlink: 'syz.4.658': attribute type 16 has an invalid length. [ 223.720113][ T8874] Q6`Ҙ: entered promiscuous mode [ 223.767770][ T8874] tunl0: entered promiscuous mode [ 223.785799][ T8884] netlink: 80 bytes leftover after parsing attributes in process `syz.3.661'. [ 223.818269][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 223.830574][ T8874] gre0: entered promiscuous mode [ 223.834772][ T8884] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 223.852974][ T8874] gretap0: entered promiscuous mode [ 223.871275][ T8874] erspan0: entered promiscuous mode [ 223.879737][ T8874] ip_vti0: entered promiscuous mode [ 223.904640][ T8874] ip6_vti0: entered promiscuous mode [ 223.929592][ T8874] sit0: entered promiscuous mode [ 223.957102][ T8874] ip6tnl0: entered promiscuous mode [ 223.978558][ T8874] ip6gre0: entered promiscuous mode [ 224.004827][ T8874] syz_tun: entered promiscuous mode [ 224.024216][ T8886] netlink: 220 bytes leftover after parsing attributes in process `syz.2.664'. [ 224.044341][ T8874] ip6gretap0: entered promiscuous mode [ 224.050824][ T8874] vcan0: entered promiscuous mode [ 224.079590][ T8874] bond0: entered promiscuous mode [ 224.085245][ T8874] bond_slave_0: entered promiscuous mode [ 224.097815][ T8874] bond_slave_1: entered promiscuous mode [ 224.119838][ T8874] team0: entered promiscuous mode [ 224.127583][ T8874] team_slave_0: entered promiscuous mode [ 224.134202][ T8874] team_slave_1: entered promiscuous mode [ 224.140687][ T8874] geneve1: entered promiscuous mode [ 224.164445][ T8874] dummy0: entered promiscuous mode [ 224.186192][ T8874] nlmon0: entered promiscuous mode [ 224.199197][ T8874] vxcan0: entered promiscuous mode [ 224.210153][ T8874] vxcan1: entered promiscuous mode [ 224.217764][ T8874] veth0: entered promiscuous mode [ 224.226479][ T8874] veth1: entered promiscuous mode [ 224.242966][ T8874] wg0: entered promiscuous mode [ 224.256553][ T8874] wg1: entered promiscuous mode [ 224.265067][ T8874] wg2: entered promiscuous mode [ 224.271176][ T8874] veth0_to_bridge: entered promiscuous mode [ 224.279422][ T8874] bridge_slave_0: entered promiscuous mode [ 224.288675][ T8874] veth1_to_bridge: entered promiscuous mode [ 224.303279][ T8874] bridge_slave_1: entered promiscuous mode [ 224.317105][ T8874] veth0_to_bond: entered promiscuous mode [ 224.327054][ T8874] veth1_to_bond: entered promiscuous mode [ 224.340681][ T8874] veth0_to_team: entered promiscuous mode [ 224.377045][ T8874] veth1_to_team: entered promiscuous mode [ 224.384860][ T8874] veth0_to_batadv: entered promiscuous mode [ 224.393270][ T8874] batadv_slave_0: entered promiscuous mode [ 224.399765][ T8874] veth1_to_batadv: entered promiscuous mode [ 224.406557][ T8874] batadv_slave_1: entered promiscuous mode [ 224.414155][ T8874] xfrm0: entered promiscuous mode [ 224.420062][ T8874] veth0_to_hsr: entered promiscuous mode [ 224.429138][ T8874] veth1_to_hsr: entered promiscuous mode [ 224.439940][ T8874] hsr0: left allmulticast mode [ 224.446219][ T8874] hsr_slave_0: left allmulticast mode [ 224.452901][ T8874] hsr_slave_1: left allmulticast mode [ 224.467376][ T8874] veth1_virt_wifi: entered promiscuous mode [ 224.475152][ T8874] veth0_virt_wifi: entered promiscuous mode [ 224.490756][ T8874] virt_wifi0: entered promiscuous mode [ 224.503478][ T8874] vlan0: entered promiscuous mode [ 224.524984][ T8874] vlan1: entered promiscuous mode [ 224.543456][ T8874] macvlan0: entered promiscuous mode [ 224.556699][ T8874] macvlan1: entered promiscuous mode [ 224.577211][ T8874] ipvlan0: entered promiscuous mode [ 224.590426][ T8874] ipvlan1: entered promiscuous mode [ 224.605166][ T8874] veth1_macvtap: entered promiscuous mode [ 224.633785][ T8874] macvtap0: entered promiscuous mode [ 224.655975][ T8874] veth1_macvtap: entered allmulticast mode [ 224.686986][ T8874] macsec0: entered promiscuous mode [ 224.707146][ T8874] macsec0: left allmulticast mode [ 224.723223][ T8874] veth1_macvtap: left allmulticast mode [ 224.753315][ T8874] geneve0: entered promiscuous mode [ 224.778018][ T8874] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 224.809167][ T8874] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 224.837105][ T8874] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 224.871226][ T8874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 224.885007][ T8874] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 224.902321][ T8874] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 224.912671][ T8874] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 224.927721][ T8874] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 224.943461][ T8874] : port 1(batadv0) entered blocking state [ 224.949918][ T8874] : port 1(batadv0) entered forwarding state [ 224.961697][ T8874] : entered promiscuous mode [ 224.970666][ T8874] mac80211_hwsim hwsim24 wlan2: entered promiscuous mode [ 225.253008][ T8913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.487798][ T8911] validate_nla: 1 callbacks suppressed [ 225.487828][ T8911] netlink: 'syz.1.670': attribute type 1 has an invalid length. [ 225.520552][ T8931] openvswitch: netlink: Actions may not be safe on all matching packets [ 225.627988][ T8933] netlink: 'syz.2.676': attribute type 29 has an invalid length. [ 225.792274][ T8933] netlink: 'syz.2.676': attribute type 3 has an invalid length. [ 225.916180][ T8933] __nla_validate_parse: 6 callbacks suppressed [ 225.916200][ T8933] netlink: 132 bytes leftover after parsing attributes in process `syz.2.676'. [ 225.965483][ T8937] netlink: 68 bytes leftover after parsing attributes in process `syz.4.675'. [ 226.429872][ T7199] tipc: Subscription rejected, illegal request [ 226.630974][ T8950] sit0: entered allmulticast mode [ 226.657499][ T8955] netlink: 92 bytes leftover after parsing attributes in process `syz.0.682'. [ 227.013781][ T8977] netlink: 60 bytes leftover after parsing attributes in process `syz.1.689'. [ 227.067512][ T8977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.689'. [ 227.085701][ T8977] netlink: 60 bytes leftover after parsing attributes in process `syz.1.689'. [ 227.105971][ T8977] netlink: 60 bytes leftover after parsing attributes in process `syz.1.689'. [ 227.159140][ T8982] netlink: 'syz.2.691': attribute type 13 has an invalid length. [ 227.193551][ T8982] netlink: 14532 bytes leftover after parsing attributes in process `syz.2.691'. [ 227.228650][ T4941] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 227.284256][ T8988] netlink: 'syz.3.693': attribute type 1 has an invalid length. [ 227.290179][ T8990] netlink: 'syz.1.694': attribute type 10 has an invalid length. [ 227.440316][ T8990] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 227.539361][ T8990] team0: Port device wlan0 added [ 227.555941][ T8989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.610118][ T9000] netlink: 'syz.3.697': attribute type 2 has an invalid length. [ 227.829383][ T9006] netlink: 'syz.1.700': attribute type 12 has an invalid length. [ 227.879827][ T9006] netlink: 132 bytes leftover after parsing attributes in process `syz.1.700'. [ 228.030097][ T9020] netlink: 'syz.0.704': attribute type 7 has an invalid length. [ 228.054094][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.704'. [ 228.546644][ T9039] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 230.452732][ T9124] netlink: 'syz.3.733': attribute type 10 has an invalid length. [ 230.727227][ T9124] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 230.981059][ T9139] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 231.126870][ T9146] netlink: 'syz.0.740': attribute type 2 has an invalid length. [ 231.196452][ T9150] netlink: 'syz.2.741': attribute type 9 has an invalid length. [ 231.243397][ T9152] __nla_validate_parse: 7 callbacks suppressed [ 231.243414][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 231.471633][ T9167] netlink: 'syz.3.744': attribute type 4 has an invalid length. [ 231.501027][ T9167] netlink: 132 bytes leftover after parsing attributes in process `syz.3.744'. [ 231.673776][ T9169] netlink: 'syz.1.746': attribute type 10 has an invalid length. [ 231.715840][ T9169] netlink: 156 bytes leftover after parsing attributes in process `syz.1.746'. [ 231.780681][ T9180] netlink: 'syz.0.748': attribute type 5 has an invalid length. [ 231.796371][ T9173] netlink: 1852 bytes leftover after parsing attributes in process `syz.1.746'. [ 232.551676][ T9195] nft_compat: unsupported protocol 0 [ 232.558672][ T9190] netlink: 'syz.0.751': attribute type 27 has an invalid length. [ 232.565453][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'. [ 232.593700][ T9190] netlink: 'syz.0.751': attribute type 4 has an invalid length. [ 232.626042][ T9201] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.751'. [ 232.643804][ T9190] netlink: 144 bytes leftover after parsing attributes in process `syz.0.751'. [ 233.842400][ T9244] netlink: 'syz.1.762': attribute type 1 has an invalid length. [ 233.889543][ T9244] netlink: 'syz.1.762': attribute type 1 has an invalid length. [ 234.093758][ T9248] netlink: 'syz.0.766': attribute type 2 has an invalid length. [ 234.958692][ T9268] netlink: 16174 bytes leftover after parsing attributes in process `syz.2.771'. [ 239.494268][ T9293] 0: renamed from bond_slave_0 (while UP) [ 239.675425][ T9316] validate_nla: 2 callbacks suppressed [ 239.675459][ T9316] netlink: 'syz.1.781': attribute type 10 has an invalid length. [ 240.028245][ T9316] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 240.072732][ T9316] team0: Port device netdevsim1 added [ 240.331672][ T9348] netlink: 14 bytes leftover after parsing attributes in process `syz.2.787'. [ 240.515156][ T9347] netlink: 96 bytes leftover after parsing attributes in process `syz.1.789'. [ 240.596698][ T9357] netlink: 44 bytes leftover after parsing attributes in process `syz.0.791'. [ 240.612760][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'. [ 240.740396][ T6097] smbdirect: ib_dev[syz1] removed [ 240.780745][ T9349] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.788'. [ 240.822635][ T5358] xfrm0 speed is unknown, defaulting to 1000 [ 240.843738][ T5358] syz1: Port: 1 Link DOWN [ 241.017300][ T9364] netlink: 40 bytes leftover after parsing attributes in process `syz.0.794'. [ 241.323653][ T9367] erspan0 speed is unknown, defaulting to 1000 [ 242.239063][ T9396] netlink: 152 bytes leftover after parsing attributes in process `syz.4.801'. [ 242.458373][ T9415] netlink: 184 bytes leftover after parsing attributes in process `syz.4.801'. [ 242.490583][ T9397] netlink: 10 bytes leftover after parsing attributes in process `syz.1.802'. [ 242.698629][ T9419] openvswitch: netlink: Actions may not be safe on all matching packets [ 243.100466][ T9425] netlink: 'syz.1.807': attribute type 2 has an invalid length. [ 243.137290][ T9425] netlink: 'syz.1.807': attribute type 8 has an invalid length. [ 243.167200][ T9425] netlink: 132 bytes leftover after parsing attributes in process `syz.1.807'. [ 243.400839][ T9435] netlink: 'syz.0.808': attribute type 10 has an invalid length. [ 243.543970][ T9444] netlink: 'syz.4.810': attribute type 29 has an invalid length. [ 243.654000][ T9435] team0: Port device veth1_to_hsr added [ 245.128452][ T9498] openvswitch: netlink: IP tunnel dst address not specified [ 245.156245][ T9498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.711435][ T6101] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 245.818979][ T9509] syzkaller0: entered promiscuous mode [ 245.827792][ T9509] syzkaller0: entered allmulticast mode [ 246.070875][ T9528] __nla_validate_parse: 18 callbacks suppressed [ 246.070893][ T9528] netlink: 40 bytes leftover after parsing attributes in process `syz.3.832'. [ 247.275556][ T9545] netlink: 40 bytes leftover after parsing attributes in process `syz.4.835'. [ 247.737624][ T9556] netlink: 'syz.4.835': attribute type 16 has an invalid length. [ 247.747501][ T9556] netlink: 'syz.4.835': attribute type 17 has an invalid length. [ 249.059818][ T9548] syzkaller0: entered promiscuous mode [ 249.072476][ T9548] syzkaller0: entered allmulticast mode [ 249.170508][ T9559] netlink: 16174 bytes leftover after parsing attributes in process `syz.3.836'. [ 249.195525][ T9556] : port 1(batadv0) entered disabled state [ 250.116753][ T9576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.840'. [ 250.145153][ T9579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.840'. [ 250.867866][ T9608] netlink: 'syz.4.852': attribute type 21 has an invalid length. [ 250.887576][ T9608] netlink: 132 bytes leftover after parsing attributes in process `syz.4.852'. [ 250.932060][ T9613] netlink: 'syz.2.853': attribute type 2 has an invalid length. [ 251.142034][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'. [ 251.178236][ T9613] : entered promiscuous mode [ 251.211605][ T9626] netlink: 'syz.4.857': attribute type 2 has an invalid length. [ 251.241309][ T9622] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 251.263625][ T9626] netlink: 'syz.4.857': attribute type 1 has an invalid length. [ 251.273918][ T9626] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.857'. [ 251.276303][ T9622] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 251.311860][ T9622] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 251.664912][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'. [ 251.731662][ T9640] openvswitch: netlink: Actions may not be safe on all matching packets [ 251.799744][ T9635] netlink: 'syz.4.860': attribute type 39 has an invalid length. [ 252.072069][ T9657] netlink: 128 bytes leftover after parsing attributes in process `syz.1.865'. [ 252.095690][ T9657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.127879][ T9658] netlink: 'syz.1.865': attribute type 17 has an invalid length. [ 252.266870][ T9658] veth0_vlan: left promiscuous mode [ 252.297990][ T9658] veth0_vlan: entered promiscuous mode [ 252.528741][ T9682] netlink: 40 bytes leftover after parsing attributes in process `syz.3.872'. [ 252.629800][ T5358] erspan0 speed is unknown, defaulting to 1000 [ 253.091907][ T9693] veth1_macvtap: left promiscuous mode [ 253.106031][ T9693] macsec0: entered promiscuous mode [ 253.575743][ T9698] erspan0 speed is unknown, defaulting to 1000 [ 254.840710][ T9732] netlink: 'syz.3.883': attribute type 4 has an invalid length. [ 256.218339][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.888'. [ 256.985218][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.993087][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.911045][ T9807] netlink: 'syz.0.900': attribute type 1 has an invalid length. [ 257.927780][ T9805] netlink: 68 bytes leftover after parsing attributes in process `syz.2.902'. [ 258.033092][ T9805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.902'. [ 259.011885][ T9846] netlink: 4792 bytes leftover after parsing attributes in process `syz.4.912'. [ 259.093607][ T9848] smc: removing ib device syz2 [ 259.178669][ T9848] smbdirect: ib_dev[syz2] removed [ 259.639030][ T9862] netlink: 276 bytes leftover after parsing attributes in process `syz.3.918'. [ 260.840347][ T9899] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.928'. [ 260.859180][ T9899] netlink: 56 bytes leftover after parsing attributes in process `syz.3.928'. [ 260.881507][ T9899] netlink: 496 bytes leftover after parsing attributes in process `syz.3.928'. [ 262.170652][ T9920] netlink: 'syz.1.934': attribute type 61 has an invalid length. [ 262.195942][ T9920] netlink: 'syz.1.934': attribute type 3 has an invalid length. [ 262.515548][ T9922] netlink: 132 bytes leftover after parsing attributes in process `syz.1.934'. [ 262.789840][ T9922] netlink: 'syz.1.934': attribute type 6 has an invalid length. [ 265.381480][ T9967] netlink: 'syz.0.944': attribute type 2 has an invalid length. [ 265.935269][ T9978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.947'. [ 266.142942][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 266.181381][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 266.289147][ T9981] netlink: 'syz.4.948': attribute type 39 has an invalid length. [ 266.366500][ T9990] netlink: 'syz.0.951': attribute type 16 has an invalid length. [ 266.412432][ T9990] netlink: 'syz.0.951': attribute type 3 has an invalid length. [ 266.438399][ T9990] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 266.477577][ T9990] netlink: 112 bytes leftover after parsing attributes in process `syz.0.951'. [ 266.982332][ T9999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.473757][ T3286] gretap0: left allmulticast mode [ 267.498698][ T3286] gretap0: left promiscuous mode [ 267.512945][ T3286] bridge0: port 3(gretap0) entered disabled state [ 267.555674][ T3286] bridge_slave_1: left allmulticast mode [ 267.578554][ T3286] bridge_slave_1: left promiscuous mode [ 267.592188][ T3286] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.632638][ T3286] bridge_slave_0: left allmulticast mode [ 267.648204][ T3286] bridge_slave_0: left promiscuous mode [ 267.672009][ T3286] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.947416][T10015] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 268.059683][T10017] netlink: 'syz.3.953': attribute type 16 has an invalid length. [ 268.085088][T10017] netlink: 'syz.3.953': attribute type 17 has an invalid length. [ 268.524449][ T3286] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 268.587456][ T3286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.618623][ T3286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.640884][ T3286] bond0 (unregistering): Released all slaves [ 268.784617][T10017] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.805532][T10017] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.914462][T10030] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.958'. [ 269.528384][T10046] netlink: 24 bytes leftover after parsing attributes in process `syz.4.964'. [ 269.655805][T10052] netlink: 88 bytes leftover after parsing attributes in process `syz.2.962'. [ 269.792486][T10047] netlink: 'syz.2.962': attribute type 46 has an invalid length. [ 269.820912][T10052] netlink: 88 bytes leftover after parsing attributes in process `syz.2.962'. [ 269.870693][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 269.911949][T10052] netlink: 88 bytes leftover after parsing attributes in process `syz.2.962'. [ 270.067522][ T3286] hsr_slave_0: left promiscuous mode [ 270.121904][ T3286] hsr_slave_1: left promiscuous mode [ 270.123434][T10059] netlink: 36 bytes leftover after parsing attributes in process `syz.0.968'. [ 270.145595][ T3286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.173349][ T3286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.311044][ T3286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.322698][ T3286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.454119][ T3286] veth1_macvtap: left promiscuous mode [ 270.463102][ T3286] veth0_macvtap: left promiscuous mode [ 270.473736][ T3286] veth1_vlan: left promiscuous mode [ 270.486159][T10078] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.971'. [ 270.507703][ T3286] veth0_vlan: left promiscuous mode [ 271.797525][ T3286] team0 (unregistering): Port device team_slave_1 removed [ 271.868938][ T3286] team0 (unregistering): Port device team_slave_0 removed [ 272.640048][T10127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.984'. [ 272.645094][T10129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.985'. [ 272.666861][T10123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.691471][T10160] openvswitch: netlink: Message has 2 unknown bytes. [ 273.725190][T10160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.952650][T10192] __nla_validate_parse: 4 callbacks suppressed [ 274.952671][T10192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.999'. [ 275.467691][T10197] netlink: 'syz.1.1000': attribute type 27 has an invalid length. [ 275.940386][T10197] bond0: (slave bond_slave_1): Releasing backup interface [ 276.298727][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1007'. [ 276.760406][T10234] netlink: 'syz.1.1011': attribute type 3 has an invalid length. [ 276.768977][T10234] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1011'. [ 278.608647][T10245] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1013'. [ 278.635033][T10244] netlink: 'syz.1.1014': attribute type 10 has an invalid length. [ 278.648745][T10244] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1014'. [ 278.660285][T10244] dummy0: entered promiscuous mode [ 278.667843][T10244] dummy0: entered allmulticast mode [ 278.674923][T10244] bridge0: port 3(dummy0) entered blocking state [ 278.700817][T10244] bridge0: port 3(dummy0) entered disabled state [ 278.729929][T10244] bridge0: port 3(dummy0) entered blocking state [ 278.736621][T10244] bridge0: port 3(dummy0) entered forwarding state [ 278.864645][T10259] netlink: 'syz.4.1017': attribute type 2 has an invalid length. [ 278.930256][T10259] : entered promiscuous mode [ 279.232432][T10271] netlink: 11396 bytes leftover after parsing attributes in process `syz.2.1023'. [ 279.780249][T10284] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 279.818297][T10285] netlink: 'syz.2.1026': attribute type 1 has an invalid length. [ 280.059777][T10272] can: request_module (can-proto-0) failed. [ 280.640543][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1034'. [ 280.694614][T10311] block nbd0: not configured, cannot reconfigure [ 280.857157][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'. [ 280.971193][T10326] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 281.153039][T10333] IPv6: 017777777777777: Disabled Multicast RS [ 281.464822][T10345] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1044'. [ 281.485445][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'. [ 282.283868][T10368] netlink: 460 bytes leftover after parsing attributes in process `syz.2.1051'. [ 282.940671][T10380] netlink: 'syz.2.1055': attribute type 4 has an invalid length. [ 282.942795][T10377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1056'. [ 282.949817][T10380] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1055'. [ 282.998687][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1054'. [ 283.058358][T10380] .`: renamed from bond0 (while UP) [ 283.111300][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1057'. [ 283.589984][T10395] netlink: 'syz.3.1059': attribute type 16 has an invalid length. [ 283.619854][T10395] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1059'. [ 283.790128][T10398] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 284.068122][T10402] veth1_macvtap: left promiscuous mode [ 284.088230][T10402] macsec0: entered promiscuous mode [ 284.154881][T10409] netlink: 'syz.3.1065': attribute type 1 has an invalid length. [ 284.548179][T10416] netlink: 'syz.3.1067': attribute type 10 has an invalid length. [ 284.671522][T10416] team0: Port device veth0 added [ 285.025134][T10428] netlink: 'syz.3.1070': attribute type 16 has an invalid length. [ 285.056252][T10428] netlink: 'syz.3.1070': attribute type 17 has an invalid length. [ 285.273702][T10439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.708392][T10451] __nla_validate_parse: 11 callbacks suppressed [ 285.708411][T10451] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.1077'. [ 286.453686][T10469] netlink: 'syz.0.1081': attribute type 13 has an invalid length. [ 286.472191][T10469] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1081'. [ 286.490965][T10469] erspan0: refused to change device tx_queue_len [ 286.513944][T10468] netlink: 'syz.2.1080': attribute type 16 has an invalid length. [ 286.551462][T10468] netlink: 'syz.2.1080': attribute type 17 has an invalid length. [ 286.608811][T10468] lo: entered promiscuous mode [ 286.646692][T10468] tunl0: entered promiscuous mode [ 286.666215][T10468] gre0: entered promiscuous mode [ 286.696757][T10468] gretap0: entered promiscuous mode [ 286.712096][T10468] erspan0: entered promiscuous mode [ 286.727791][T10462] netlink: 'syz.3.1079': attribute type 1 has an invalid length. [ 286.745213][T10468] ip_vti0: entered promiscuous mode [ 286.791402][T10468] ip6_vti0: entered promiscuous mode [ 286.814498][T10468] sit0: entered promiscuous mode [ 286.831317][T10468] ip6tnl0: entered promiscuous mode [ 286.847196][T10468] ip6gre0: entered promiscuous mode [ 286.865065][T10468] syz_tun: entered promiscuous mode [ 286.876703][T10468] ip6gretap0: entered promiscuous mode [ 286.890097][T10468] bridge0: port 3(team0) entered blocking state [ 286.896751][T10468] bridge0: port 3(team0) entered forwarding state [ 286.904222][T10468] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.911759][T10468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.919827][T10468] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.927460][T10468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.950933][ T29] audit: type=1107 audit(1784088685.385:3): pid=10480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Swt0dqU8+ձ|%ͳ]c!ϧHL?$x: [ 286.950933][ T29] $yc9' [ 286.978720][T10468] bridge0: entered promiscuous mode [ 286.988467][T10468] bridge0: left allmulticast mode [ 287.039678][T10468] vcan0: entered promiscuous mode [ 287.069678][T10468] .`: entered promiscuous mode [ 287.081550][T10468] 0: entered promiscuous mode [ 287.097565][T10468] bond_slave_1: entered promiscuous mode [ 287.134578][T10468] 8021q: adding VLAN 0 to HW filter on device .` [ 287.177153][T10468] dummy0: entered promiscuous mode [ 287.184428][T10468] nlmon0: entered promiscuous mode [ 287.190534][T10468] batadv0: entered promiscuous mode [ 287.197380][T10468] vxcan0: entered promiscuous mode [ 287.205404][T10468] vxcan1: entered promiscuous mode [ 287.214533][T10468] veth0: entered promiscuous mode [ 287.227011][T10468] veth1: entered promiscuous mode [ 287.243635][T10468] wg0: entered promiscuous mode [ 287.249707][T10485] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1085'. [ 287.260695][T10468] wg2: entered promiscuous mode [ 287.268439][T10468] veth0_to_bridge: entered promiscuous mode [ 287.281230][T10468] veth1_to_bridge: entered promiscuous mode [ 287.296734][T10468] veth0_to_bond: entered promiscuous mode [ 287.314423][T10468] veth1_to_bond: entered promiscuous mode [ 287.326999][T10468] veth0_to_team: entered promiscuous mode [ 287.336627][T10468] veth1_to_team: entered promiscuous mode [ 287.346320][T10468] : entered promiscuous mode [ 287.364725][T10468] batadv_slave_0: entered promiscuous mode [ 287.376302][T10468] veth1_to_batadv: entered promiscuous mode [ 287.397777][T10468] batadv_slave_1: entered promiscuous mode [ 287.423751][T10468] veth0_to_hsr: entered promiscuous mode [ 287.435260][T10468] veth1_to_hsr: entered promiscuous mode [ 287.450958][T10468] hsr0: entered promiscuous mode [ 287.464196][T10468] veth1_virt_wifi: entered promiscuous mode [ 287.476993][T10468] veth0_virt_wifi: entered promiscuous mode [ 287.489666][T10468] virt_wifi0: entered promiscuous mode [ 287.506317][T10468] vlan0: entered promiscuous mode [ 287.514198][T10468] vlan1: entered promiscuous mode [ 287.529188][T10468] macvlan0: entered promiscuous mode [ 287.545832][T10468] macvlan1: entered promiscuous mode [ 287.554790][T10468] ipvlan0: entered promiscuous mode [ 287.564344][T10468] ipvlan1: entered promiscuous mode [ 287.578207][T10468] macvtap0: entered promiscuous mode [ 287.585280][T10468] macsec0: entered promiscuous mode [ 287.594341][T10468] geneve0: entered promiscuous mode [ 287.605629][T10468] geneve1: entered promiscuous mode [ 287.617654][T10468] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 287.630887][T10468] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 287.643350][T10468] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 287.653130][T10468] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 287.664928][T10468] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 287.674191][T10468] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 287.684934][T10468] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 287.694769][T10468] : entered promiscuous mode [ 287.849278][T10497] team0: Port device netdevsim1 removed [ 287.959889][T10497] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 288.032179][T10497] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 288.729234][T10516] validate_nla: 2 callbacks suppressed [ 288.729253][T10516] netlink: 'syz.1.1094': attribute type 7 has an invalid length. [ 288.783798][T10516] netlink: 'syz.1.1094': attribute type 8 has an invalid length. [ 288.806871][T10520] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 289.057785][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'. [ 289.106646][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1097'. [ 289.208202][T10532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1097'. [ 289.287487][T10535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1099'. [ 289.677434][T10540] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 289.737584][T10542] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1101'. [ 290.013000][T10544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1102'. [ 290.160066][T10546] : renamed from ipvlan0 (while UP) [ 291.200852][T10595] netlink: 'syz.0.1113': attribute type 39 has an invalid length. [ 291.399905][T10595] hsr_slave_0 (unregistering): left promiscuous mode [ 291.800028][T10602] syzkaller0: entered promiscuous mode [ 291.810357][T10602] syzkaller0: entered allmulticast mode [ 291.892140][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 291.936854][T10602] netlink: 'syz.1.1117': attribute type 2 has an invalid length. [ 291.961279][T10602] netlink: 151 bytes leftover after parsing attributes in process `syz.1.1117'. [ 293.015557][ T6103] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.701395][T10630] netlink: 'syz.4.1126': attribute type 1 has an invalid length. [ 293.716668][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 293.730638][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 293.742432][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 293.755500][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 293.763892][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 293.985209][T10630] netlink: 'syz.4.1126': attribute type 10 has an invalid length. [ 294.426504][T10640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1129'. [ 294.778850][T10647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1131'. [ 295.863083][ T5631] Bluetooth: hci1: command tx timeout [ 297.138085][T10630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.146280][T10630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.156301][T10630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.163968][T10630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.187478][T10630] : port 1(batadv0) entered disabled state [ 297.206218][T10630] batadv0 (unregistering): left allmulticast mode [ 297.221274][T10630] : port 1(batadv0) entered disabled state [ 297.270981][T10647] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 297.311905][T10647] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 297.353059][T10647] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 297.421709][ T6103] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.627048][T10668] netlink: 'syz.4.1135': attribute type 13 has an invalid length. [ 297.724717][ T6103] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.941841][ T5631] Bluetooth: hci1: command tx timeout [ 298.879966][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.919091][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.950953][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.171620][ T6103] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.303014][ T3286] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.021944][ T5631] Bluetooth: hci1: command tx timeout [ 300.150650][T10732] bridge0: port 3(team0) entered disabled state [ 300.157841][T10732] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.165684][T10732] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.179988][T10732] bridge0: left promiscuous mode [ 300.188595][T10732] bridge0: entered allmulticast mode [ 300.587460][T10750] netlink: 'syz.4.1157': attribute type 10 has an invalid length. [ 300.648457][T10750] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1157'. [ 300.700649][ T6103] bridge_slave_1: left allmulticast mode [ 300.710967][ T6103] bridge_slave_1: left promiscuous mode [ 300.722893][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.742215][ T6103] bridge_slave_0: left allmulticast mode [ 300.757188][ T6103] bridge_slave_0: left promiscuous mode [ 300.776126][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.875949][T10760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.975029][T10762] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1161'. [ 301.201629][ T6103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.231515][ T6103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.264013][ T6103] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 301.288384][ T6103] bond0 (unregistering): Released all slaves [ 301.724990][T10786] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1165'. [ 302.033022][T10779] netlink: 'syz.4.1165': attribute type 10 has an invalid length. [ 302.080644][T10779] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1165'. [ 302.103568][ T5631] Bluetooth: hci1: command tx timeout [ 302.179532][T10791] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1168'. [ 302.195948][T10791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.229748][T10781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1167'. [ 306.627433][T10833] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1170'. [ 307.516542][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 308.092808][T10840] netlink: 'syz.4.1171': attribute type 4 has an invalid length. [ 310.179381][ T6103] veth0_macvtap: left promiscuous mode [ 310.240099][ T6103] veth1_vlan: left promiscuous mode [ 310.290399][ T6103] veth0_vlan: left promiscuous mode [ 310.846928][T10865] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1177'. [ 310.936085][T10872] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 311.336766][T10883] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 311.395221][T10885] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1181'. [ 311.456939][T10888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1182'. [ 311.486889][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1182'. [ 311.759190][T10894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1183'. [ 311.925018][ T6103] team0 (unregistering): Port device team_slave_1 removed [ 311.971211][ T6103] team0 (unregistering): Port device team_slave_0 removed [ 312.187812][ T6103] team0 (unregistering): Port device veth0 removed [ 312.331976][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1187'. [ 312.955382][T10922] netlink: 'syz.2.1190': attribute type 10 has an invalid length. [ 313.202995][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 313.219230][T10922] dummy0: left promiscuous mode [ 313.231702][T10922] batman_adv: batadv0: Adding interface: dummy0 [ 313.246765][T10922] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.286188][T10922] batman_adv: batadv0: Interface activated: dummy0 [ 313.355065][T10929] netlink: 'syz.4.1191': attribute type 11 has an invalid length. [ 313.364042][T10929] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1191'. [ 313.371921][T10631] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.380528][T10631] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.390420][T10631] bridge_slave_0: entered allmulticast mode [ 313.403690][T10631] bridge_slave_0: entered promiscuous mode [ 313.571388][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'. [ 313.591384][T10631] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.644448][T10631] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.675303][T10631] bridge_slave_1: entered allmulticast mode [ 313.710273][T10631] bridge_slave_1: entered promiscuous mode [ 313.937595][T10631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.015769][T10631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.126141][T10960] netlink: 'syz.2.1198': attribute type 10 has an invalid length. [ 314.308898][T10972] tmpfs: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 314.334207][T10631] team0: Port device team_slave_0 added [ 314.437428][T10631] team0: Port device team_slave_1 added [ 314.556513][T10980] netlink: 740 bytes leftover after parsing attributes in process `syz.4.1201'. [ 314.702097][T10631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.731394][T10631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.847925][T10631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.874724][T10631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.884386][T10631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.928140][T10631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.999349][T10993] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1204'. [ 315.170764][T10631] hsr_slave_0: entered promiscuous mode [ 315.187876][T10631] hsr_slave_1: entered promiscuous mode [ 315.204599][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 316.619371][T11057] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1216'. [ 317.032271][T11073] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1218'. [ 317.334498][T10631] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 317.370253][T10631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 317.394767][T10631] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 317.416363][T11082] netlink: 'syz.1.1221': attribute type 3 has an invalid length. [ 317.457273][T10631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 317.457641][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1222'. [ 317.469376][T11082] netlink: 'syz.1.1221': attribute type 1 has an invalid length. [ 317.490545][T10631] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 317.526059][T10631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 317.556517][T10631] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 317.569384][T11082] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1221'. [ 317.600724][T10631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 317.617652][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 317.956242][T11102] netlink: 'syz.4.1224': attribute type 21 has an invalid length. [ 317.990658][T10631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.000911][T11101] netlink: 'syz.4.1224': attribute type 21 has an invalid length. [ 318.035522][T11102] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1224'. [ 318.042391][T11101] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1224'. [ 318.058313][T11107] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.1226'. [ 318.071663][T10631] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.080688][T11102] netlink: 'syz.4.1224': attribute type 5 has an invalid length. [ 318.091477][T11102] netlink: 'syz.4.1224': attribute type 6 has an invalid length. [ 318.100968][T11102] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1224'. [ 318.115715][T11108] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.1226'. [ 318.142431][T11101] netlink: 'syz.4.1224': attribute type 5 has an invalid length. [ 318.161444][T11104] netlink: 'syz.2.1225': attribute type 1 has an invalid length. [ 318.181866][T11101] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1224'. [ 318.219110][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.226445][ T3313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.294207][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.301439][ T3313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.316731][T11117] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 318.430725][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.452349][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.920465][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1231'. [ 319.391368][T11158] validate_nla: 1 callbacks suppressed [ 319.391396][T11158] netlink: 'syz.4.1236': attribute type 10 has an invalid length. [ 320.512599][ T5631] Bluetooth: hci0: command 0x0406 tx timeout [ 320.800291][T10631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.409664][T11210] openvswitch: netlink: IPv4 tun info is not correct [ 321.940999][T10631] veth0_vlan: entered promiscuous mode [ 322.035222][T10631] veth1_vlan: entered promiscuous mode [ 322.173426][T10631] veth0_macvtap: entered promiscuous mode [ 322.205984][T10631] veth1_macvtap: entered promiscuous mode [ 322.275409][T10631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.309659][T10631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.402774][ T6114] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.417826][ T6114] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.441513][ T6114] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.495026][ T6094] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.716029][T11029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.757068][T11029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.776688][T11237] __nla_validate_parse: 20 callbacks suppressed [ 322.776708][T11237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1256'. [ 322.842212][ T6094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.859915][ T6094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.961569][T11232] netlink: 'syz.4.1253': attribute type 1 has an invalid length. [ 323.039646][T11246] netlink: 'syz.4.1253': attribute type 2 has an invalid length. [ 323.097209][T11246] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1253'. [ 323.538424][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1262'. [ 324.591731][T11289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1270'. [ 324.592683][T11286] netlink: 'syz.5.1269': attribute type 3 has an invalid length. [ 324.957791][T11292] netlink: 'syz.0.1271': attribute type 10 has an invalid length. [ 325.634863][T11301] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1268'. [ 329.185943][T11289] bond0: (slave bond_slave_0): Releasing backup interface [ 329.277136][T11289] bond_slave_0: entered promiscuous mode [ 329.300177][T11289] bond_slave_0: entered allmulticast mode [ 329.354715][T11291] team_slave_0: entered allmulticast mode [ 329.529304][T11292] team0: Device wg2 is of different type [ 329.594088][T11301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.658998][T11301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.678958][T11315] netlink: 'syz.5.1274': attribute type 21 has an invalid length. [ 329.689366][T11301] bond0 (unregistering): Released all slaves [ 330.233226][T11342] netlink: 'syz.5.1280': attribute type 10 has an invalid length. [ 330.305950][T11342] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 330.370879][T11345] netlink: 'syz.5.1280': attribute type 10 has an invalid length. [ 330.390724][T11342] team0: Port device netdevsim1 added [ 330.539188][T11345] team0: Port device netdevsim1 removed [ 330.571242][T11345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 330.604249][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1286'. [ 330.609472][T11345] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 331.920863][T11392] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1292'. [ 332.397814][T11417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.717426][T11434] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1300'. [ 333.267923][T11453] netlink: 'syz.5.1304': attribute type 10 has an invalid length. [ 333.316924][T11453] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1304'. [ 333.766974][T11471] nft_compat: unsupported protocol 0 [ 333.924444][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 334.082028][T11495] openvswitch: netlink: Actions may not be safe on all matching packets [ 334.620956][T11521] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1320'. [ 335.235518][T11534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1322'. [ 335.619810][T11554] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1329'. [ 336.491689][T11585] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 336.540267][T11588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1337'. [ 340.919597][T11635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1346'. [ 341.017269][T11635] netlink: 'syz.0.1346': attribute type 10 has an invalid length. [ 341.059706][T11635] batman_adv: batadv0: Adding interface: dummy0 [ 341.080504][T11635] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.190136][T11643] netlink: 'syz.0.1346': attribute type 7 has an invalid length. [ 341.250091][T11635] batman_adv: batadv0: Interface activated: dummy0 [ 341.259183][T11643] netlink: 'syz.0.1346': attribute type 8 has an invalid length. [ 343.293809][T11671] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1352'. [ 343.648307][T11671] option changes via remount are deprecated (pid=11661 comm=syz.2.1352) [ 345.079926][T11693] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1359'. [ 345.122884][T11693] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1359'. [ 346.392072][T11711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1363'. [ 347.495792][T11726] tipc: Enabling of bearer rejected, media not registered [ 347.809967][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1366'. [ 348.969849][T11738] netlink: 'syz.2.1367': attribute type 46 has an invalid length. [ 349.177786][T11740] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.1368'. [ 350.149414][T11749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1369'. [ 350.975107][T11766] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1374'. [ 351.703310][T11774] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1375'. [ 353.299876][T11799] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 355.478612][T11818] ref_ctr_offset mismatch. inode: 0x409 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 355.544660][T11817] ref_ctr_offset mismatch. inode: 0x409 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 356.004541][T11824] raw_sendmsg: syz.5.1385 forgot to set AF_INET. Fix it! [ 357.789679][T11850] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1392'. [ 357.834433][T11850] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1392'. [ 358.042560][T11847] tipc: Started in network mode [ 358.065152][T11847] tipc: Node identity 815e0004, cluster identity 4711 [ 358.091037][T11847] tipc: Node number set to 2170421252 [ 358.820562][T11859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1395'. [ 358.874854][T11859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1395'. [ 358.890522][T11862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.972970][T11859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1395'. [ 359.002879][T11865] netlink: 524 bytes leftover after parsing attributes in process `syz.2.1397'. [ 359.016195][T11859] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 359.081601][T11865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1397'. [ 359.099722][T11862] C: renamed from veth1_to_team (while UP) [ 359.185281][T11862] netlink: 'syz.0.1396': attribute type 8 has an invalid length. [ 359.221016][T11862] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 359.913763][T11883] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 359.929626][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 361.530092][T11909] : port 1(veth1_to_hsr) entered blocking state [ 361.647887][T11909] : port 1(veth1_to_hsr) entered disabled state [ 361.695640][T11913] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 361.717999][T11909] veth1_to_hsr: entered allmulticast mode [ 362.072887][T11916] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 362.971414][T11927] netlink: 'syz.1.1410': attribute type 12 has an invalid length. [ 363.021790][T11927] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1410'. [ 364.237659][T11949] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1416'. [ 364.295140][T11950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1416'. [ 365.140714][T11972] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1415'. [ 365.782202][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'. [ 365.903138][T11976] sch_fq: defrate 181 ignored. [ 366.417208][T11985] netlink: 'syz.0.1420': attribute type 6 has an invalid length. [ 366.440823][T11985] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1420'. [ 368.373257][T12005] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1427'. [ 368.461058][T12016] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1427'. [ 369.577673][T12036] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1430'. [ 369.712155][T12033] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1430'. [ 369.758516][T12040] openvswitch: netlink: Actions may not be safe on all matching packets [ 370.896705][T12063] netlink: 'syz.5.1437': attribute type 13 has an invalid length. [ 370.923303][T12063] netlink: 'syz.5.1437': attribute type 58 has an invalid length. [ 370.961235][T12063] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1437'. [ 374.901079][T12057] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1433'. [ 375.122775][T12083] netlink: 'syz.4.1441': attribute type 153 has an invalid length. [ 375.212042][T12089] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1442'. [ 375.555234][T12091] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 375.848510][T12106] netlink: 'syz.2.1449': attribute type 267 has an invalid length. [ 375.877828][T12103] netlink: 'syz.4.1448': attribute type 1 has an invalid length. [ 375.898098][T12103] netlink: 'syz.4.1448': attribute type 2 has an invalid length. [ 375.981332][T12108] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.1450/12108 [ 375.990753][T12108] caller is bpf_mem_cache_free_rcu+0x48/0xc0 [ 375.996996][T12108] CPU: 0 UID: 0 PID: 12108 Comm: syz.0.1450 Not tainted syzkaller #0 PREEMPT(full) [ 375.997033][T12108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 375.997059][T12108] Call Trace: [ 375.997067][T12108] [ 375.997075][T12108] dump_stack_lvl+0xe8/0x150 [ 375.997139][T12108] check_preemption_disabled+0xd3/0xe0 [ 375.997298][T12108] bpf_mem_cache_free_rcu+0x48/0xc0 [ 375.997332][T12108] rhtab_delete_elem+0x185a/0x1b30 [ 375.997372][T12108] ? rhtab_delete_elem+0x15c/0x1b30 [ 375.997402][T12108] ? check_and_init_map_value+0x57/0x410 [ 375.997429][T12108] __rhtab_map_lookup_and_delete_batch+0x935/0xcb0 [ 375.997487][T12108] ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10 [ 375.997518][T12108] bpf_map_do_batch+0x445/0x630 [ 375.997564][T12108] __sys_bpf+0x906/0xd90 [ 375.997601][T12108] ? __pfx___sys_bpf+0x10/0x10 [ 375.997622][T12108] ? lock_acquire+0x106/0x350 [ 375.997668][T12108] ? do_futex+0x3e7/0x4e0 [ 375.997742][T12108] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 375.997773][T12108] ? __pfx___se_sys_futex+0x10/0x10 [ 375.997811][T12108] __x64_sys_bpf+0xba/0xd0 [ 375.997830][T12108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.997870][T12108] do_syscall_64+0x174/0x580 [ 375.997898][T12108] ? clear_bhb_loop+0x40/0x90 [ 375.997923][T12108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.997941][T12108] RIP: 0033:0x7f6e75b9de59 [ 375.997966][T12108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.997983][T12108] RSP: 002b:00007f6e76afd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 375.998008][T12108] RAX: ffffffffffffffda RBX: 00007f6e75e25fa0 RCX: 00007f6e75b9de59 [ 375.998022][T12108] RDX: 0000000000000038 RSI: 00002000000018c0 RDI: 0000000000000019 [ 375.998034][T12108] RBP: 00007f6e75c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 375.998045][T12108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.998056][T12108] R13: 00007f6e75e26038 R14: 00007f6e75e25fa0 R15: 00007ffca5d69a58 [ 375.998094][T12108] [ 379.863032][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.869486][ T1316] ieee802154 phy1 wpan1: encryption failed: -22