last executing test programs: 9m0.403736355s ago: executing program 2 (id=3): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$TUNGETDEVNETNS(r0, 0xff04, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a0b0400000000000000000200000248000480440001800b00010074617267657400003400028008000240000000010d000100434f4e4e4d41524b000000ea14000300e4624777db9d97adbf2cd16d6fb1131fe40000000900020073797a32000000000900010073797a30"], 0x9c}}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) setsockopt$sock_attach_bpf(r2, 0x1, 0x24, 0x0, 0x0) 8m59.450254978s ago: executing program 2 (id=8): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={0x0, 0x0}) close(r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001cc0)={{r3}, &(0x7f0000001c40), &(0x7f0000001c80)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 8m58.166203632s ago: executing program 2 (id=11): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 8m57.506024881s ago: executing program 2 (id=17): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x20004000) socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xc1, 0x1, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x8366}, 0x0, 0x0, 0x0, 0x8, 0x7ffc, 0xfbff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$cgroup_int(r3, &(0x7f0000000000), 0xfffffd26) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 8m56.59162218s ago: executing program 2 (id=23): socket$kcm(0x2, 0x3, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x97a4c4e, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="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", 0x14f}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0xa}, 0x5101, 0x40000002, 0x0, 0x1, 0x0, 0xcc3, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) 8m56.055795243s ago: executing program 32 (id=23): socket$kcm(0x2, 0x3, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x97a4c4e, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="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", 0x14f}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0xa}, 0x5101, 0x40000002, 0x0, 0x1, 0x0, 0xcc3, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) 7m18.297440337s ago: executing program 5 (id=438): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40002000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 7m16.937100677s ago: executing program 5 (id=443): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6421, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xee, 0x9}, 0x4000, 0x2, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xa, 0x0, 0x0) socketpair(0x1, 0x6, 0x0, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f67003000028006000c400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 7m13.563581193s ago: executing program 5 (id=451): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) getpid() r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x89e0, &(0x7f00000007c0)={'netdevsim0\x00', @local}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000740), 0xc, &(0x7f0000000e40)=[{&(0x7f0000000840)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x20040000}, 0x4000) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="62cd42b7b1e7a6e63687750dc1aaed2c20706434a1bd77098612cf7cfeb8ac6939efebc065c9b6c2dab875f741d8d8530a85c0dc183b4b035a2ce234dd6f8a7881bc1a4e40c2e5295d3119288be63b890646448ed535519d01000000ff20756f0b52a86508dc0fb98ca0869e8deac49123954f4bdc47388bc18b501c9764e2d24310ad0dfed18b935cc76bec7f6b922e545436e6096e08779cf11a4584e9322f8e44776aa5e160ac0ad65fd05989e8", 0xaf}], 0x1, &(0x7f0000000140)}, 0x4000081) recvmsg(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f0000000780)=""/172, 0xac}], 0x2, &(0x7f0000000840)=""/94, 0x5e}, 0x2000) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f0000000180)="2573b69cba0e7e8365335a9b779e5deb18eee3a40669e4b343a70b75560a4a724fc1c7ec013c1a7e4748b516a13d1a37e31c5726b9e253c1ae09143164a8368218de1acb7275bb4ad4f3af9bcc01a7cb115bc1446eaccd19c1db0462d9e67162176c0cd1823f928fb87417046072a0ae2740251fa1cdd9a40ad0456420822c269a10c10da3f243a240957d945ea9663859dd7f23f245bf40ee406d", &(0x7f0000000240)=@tcp=r4, 0x1}, 0x20) 7m13.073511963s ago: executing program 5 (id=455): r0 = socket$kcm(0xa, 0x7, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x1e, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100000, 0x2, 0xfffffffe, 0x4, 0x4, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x2042, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 7m12.416963442s ago: executing program 5 (id=456): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xdfffffff}, 0x810, 0x70000, 0x100000, 0x0, 0x2, 0xa0000, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x97}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@ifindex, 0x5, 0x1, 0x7, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r3, 0x0, 0x80) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, r4, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbff, {0x1e, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 7m5.85429597s ago: executing program 5 (id=473): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffffe}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xdffe, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8050) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0xe02a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x48010) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x2, 0x401, 0x1, 0x80000, r0, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x25dfdbfc, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xac}}, 0x0) 7m5.324415504s ago: executing program 33 (id=473): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffffe}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xdffe, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8050) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0xe02a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x48010) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x2, 0x401, 0x1, 0x80000, r0, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x25dfdbfc, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xac}}, 0x0) 7m5.317061712s ago: executing program 0 (id=475): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x1a, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r4}) recvmsg$kcm(r4, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001ac0)=[{0x0}], 0x1}, 0x10000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000005a40)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1, 0x0, 0x3238}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b63d2", 0x9}, {&(0x7f00000000c0)="06081833d0062d04944103", 0xb}], 0x2}, 0x0) 7m2.135078948s ago: executing program 0 (id=481): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 7m1.334588288s ago: executing program 0 (id=486): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x94) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4004743b, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030001000000080002400000000108000140000000010900010073797a300000000014000000110001"], 0xe0}}, 0x4000000) 7m0.031304322s ago: executing program 0 (id=491): perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x10000, 0x8, 0x0, 0x3, 0xc2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000200000c120ca1c95da09241980422a251b3a4aca5493399c64577fef09c1af4d3034daa2efcfa1ab1d110459b390b7bf766c05d059ae80772954bf9226c6135f3b97b7161cd21ea396d9c036da2000b18267e05ea9264d68a060d8c3f54627c9ca7de5ffbff89b2c81037540c4679a1dc4754b8b0f962c18a3dfe59953f12500087c977b5046f2d674ab12984498ea4d5d82ca38be94a6f2787d98663245c2be1486c310e1c8b5ab6cc5ba0310631a66b4aaf87d7e5eab0684459efb2fbf2dd25e5c9c231d1cfe1546626aeb9a2745fc58db5346ceedda3e7180b0af065427e3b70bdb984c98e20a577301b53d9fbc82939543b658c4873c5c16abde0df7013a616943a5c046bdb664dad47d31cd6339b18b19cc03ca17bcd4e96aa6624ce064cab2"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000300)={0x7, 0x80, 0xff, 0xfc, 0x8a, 0xff, 0x0, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000280), 0xf}, 0x1000, 0xf90, 0x1, 0x5, 0x7, 0x57, 0x7f, 0x0, 0x1000, 0x0, 0x3}, 0xffffffffffffffff, 0x3, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x2000000000000405) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000740)={&(0x7f0000000100)=@nfc={0x2d, 0x0, 0x1, 0x1}, 0x80, 0x0}, 0x20008095) 6m58.475492264s ago: executing program 0 (id=496): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0x3, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2050061, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140), 0x4) 6m52.31605546s ago: executing program 0 (id=505): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x100000, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1000000001, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r5, r3, 0x4, r3}, 0x10) 6m37.144065374s ago: executing program 34 (id=505): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x100000, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1000000001, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r5, r3, 0x4, r3}, 0x10) 2m6.367859119s ago: executing program 6 (id=1718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x8004000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4840) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$nl_generic(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4050}, 0x804c050) 2m5.806228853s ago: executing program 6 (id=1722): socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x21, 0x2, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42}, 0x28) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x854, 0xffffffff, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7ff}, 0x50) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2001) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r0, 0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, 0x0, 0xe02e) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) 2m5.474563875s ago: executing program 6 (id=1723): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) r3 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x28, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000280)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @initr0, @exit, @alu={0x4, 0x0, 0x4, 0x3, 0xf}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2m5.138169627s ago: executing program 6 (id=1728): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000d1507d9a4535bc116339e71dc18f5eafc234fe3370713c87d152547814cc320815dedaa445272b96329c1139912e8c71717195221d6f3a4187bec93f27e197710b6a25c8c9b11a98f09ffed51defface1cd9", @ANYRES32=0x0, @ANYRES32=0x0], 0xe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000700)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r0, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000780)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x873}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6c}, @alu={0x5, 0x0, 0x1, 0x1, 0x2, 0xfffffffffffffffe, 0xfffffffffffffff0}], &(0x7f0000000800)='GPL\x00', 0xffffff50, 0x0, 0x0, 0x40f00, 0x55, '\x00', r2, 0x18, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x5, 0xa, 0x5, 0x8000}, 0x10, 0x9ffe, r0, 0x0, &(0x7f0000000a00)=[r0, r0], 0x0, 0x10, 0x40}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4c004}, 0x10) r5 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$sock(r5, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x20000000) setsockopt$sock_attach_bpf(r5, 0x1, 0x1d, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xffff0000, 0x0, 0x0, &(0x7f0000001a40), 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0xf, 0x0, 0x8, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m4.691993009s ago: executing program 6 (id=1732): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x830d}, 0x100600, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x33, 0x0, &(0x7f0000000380)="3d6ee2e04b91ab10143d9abe86dde5b21365c1ed1785bf79e0f3eb2dba93774cc6b23d0016dd6bd64414ce22c0f77c2158222f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r0}, 0x4) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4020045}, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x3c, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @nested={0x14, 0x154, 0x0, 0x1, [@typed={0xc, 0x11b, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0xd4}]}, @nested={0x10, 0x1a, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}]}]}, 0x3c}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x38, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc881}, 0x40000) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe}, 0x17) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a00)={0x14, 0x35, 0x1, 0x7fffc, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0) sendmsg$AUDIT_SET(r2, 0x0, 0x40011) 2m2.983616813s ago: executing program 6 (id=1736): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) sendmsg(0xffffffffffffffff, 0x0, 0x4) getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fstat(0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xff0f, &(0x7f0000000780)=[{&(0x7f0000000900)="89000000120081ae08060cdc030ec0007f03e3f7feff000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf00d7815e381ad6e706033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01951fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) fstat(0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x10800, 0x0) 2m0.623303831s ago: executing program 3 (id=1749): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x0]}}, 0x0, 0x1c, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, 0xffffffffffffffff, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m59.971061779s ago: executing program 3 (id=1752): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}]}, 0x34}, 0x1, 0x0, 0x0, 0x28c1}, 0x20004006) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r1, 0x58, &(0x7f0000000580)}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1}, 0x0, &(0x7f0000000740)}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m59.657727541s ago: executing program 3 (id=1754): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x10c202, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffd8b}, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1m57.51608999s ago: executing program 3 (id=1755): r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) r1 = getpid() socket$kcm(0x15, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x3, 0x0, 0xf5, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x830e}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x8, 0x3, 0x3ff, 0x2, 0x200, r2, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/time_for_children\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2, 0x7, 0x0, 0x0, 0xe, 0x0, 0x2, 0x25dfdbfe, [@sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd29, 0x3506}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x4, @remote, 0x4000000}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e22, @loopback}}]}, 0x70}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) socketpair(0x1, 0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x27, 0x3, 0x20000ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xc0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x8, 0x2, 0x7fffffff, 0x5, 0x0, 0x0, 0x0, 0x7ffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000014000000000000000000000114000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)) 1m56.16232001s ago: executing program 3 (id=1761): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xffffffa1, 0xfffc, 0x0, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xec, 0x0, 0x0, 0x2, 0x0, 0x480000000000000b, 0x1000c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000140), 0xc}, 0x11efa, 0x24, 0x9c, 0x4, 0x49e, 0xfffff275, 0xfffc, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0x2) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x25, &(0x7f00000002c0), 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1", 0x2d}], 0x1}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) 1m55.523671342s ago: executing program 3 (id=1764): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, r1, 0x0, 0x4, &(0x7f0000000100)=')%])'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0xe, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000880)=""/4125, 0x101d}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000002a80)=""/139, 0x8b}, {0x0}, {&(0x7f0000004200)=""/4113, 0x1011}, {0x0}, {&(0x7f00000007c0)=""/172, 0xac}, {0x0}, {&(0x7f0000000080)=""/56, 0x38}], 0x9}, 0x10100) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000006c0)={0x14, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETLINK(r5, 0x400454cd, 0x336) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)}, 0x0) close(r5) 1m47.959888632s ago: executing program 35 (id=1736): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) sendmsg(0xffffffffffffffff, 0x0, 0x4) getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fstat(0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xff0f, &(0x7f0000000780)=[{&(0x7f0000000900)="89000000120081ae08060cdc030ec0007f03e3f7feff000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf00d7815e381ad6e706033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01951fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) fstat(0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x10800, 0x0) 1m40.367856048s ago: executing program 36 (id=1764): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, r1, 0x0, 0x4, &(0x7f0000000100)=')%])'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0xe, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000880)=""/4125, 0x101d}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000002a80)=""/139, 0x8b}, {0x0}, {&(0x7f0000004200)=""/4113, 0x1011}, {0x0}, {&(0x7f00000007c0)=""/172, 0xac}, {0x0}, {&(0x7f0000000080)=""/56, 0x38}], 0x9}, 0x10100) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000006c0)={0x14, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETLINK(r5, 0x400454cd, 0x336) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)}, 0x0) close(r5) 13.791610579s ago: executing program 4 (id=2168): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0xfffffffffffffc33) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x40, 0x5, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000440)=ANY=[], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x44041}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006"], 0x34}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000016c0)={0x0, 0xffffffffffffffff, 0x500, 0x0, 0x0}, 0x30) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x1d, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xa5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x2}, 0x80, &(0x7f0000000100)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00040004ee0b80558ddbc36505000000000000000000", 0x2e}, {&(0x7f0000002e00)="c329d966573626", 0x7}], 0x2}, 0x0) 12.604171805s ago: executing program 4 (id=2173): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x81, 0x100000000}, 0x100000, 0x0, 0xffff, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$tipc(r0, 0x0, 0x800) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40002000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="e000000013000107"], 0xe0}, 0x1, 0x0, 0x0, 0x44000}, 0x800) recvmsg(r5, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x2c, 0x1, 0x20000a, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) sendmsg(r4, 0x0, 0x20000000) close(0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) 12.075069094s ago: executing program 9 (id=2175): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x1, 0x84) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x48, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x1, 0x1, 0x0, 0x12, 0x0, 0x0, 0xfffd, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0xfffffff9, @empty}, 0x80, 0x0}, 0x20000001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b00)=@newtaction={0x6c, 0x30, 0x9, 0x400004, 0x1000000, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x200, 0x3, 0x200}, 0x3}}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8080) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100), 0x1001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r6, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x40010100) 11.484265939s ago: executing program 8 (id=2178): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x10000, 0x8, 0x0, 0x3, 0xc2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x8040, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0) r3 = getpid() perf_event_open(0x0, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r4, &(0x7f0000000000)) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) close(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000841) syz_clone(0x100000, &(0x7f0000000540)="dc6e8dfd0744b46c74351de841785c4254b9e56123610ab1436e00a1c2ef538384e950b261734593eef4c5c1cfa1ffca8706529ab14aedb06fff42d9a68270b342dc39ffcd123c690901444da85127b1592f71fae5ce8134bde6faa21afb557df5cda7a526ba7bfcae58267eee19251613663e4c796465f84a3380e7d1401cf22bcceec91c283239b932e23b8c5eeb", 0x8f, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) gettid() r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000140)=ANY=[@ANYBLOB="e0000000130001072dbd7000ffdbdf2567636d2861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000000040000000000000000000076fb"], 0xe0}, 0x1, 0x0, 0x0, 0x44000}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, 0x0, 0x0, 0x5}, 0x94) 10.343274448s ago: executing program 9 (id=2182): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={0x0, 0x0, 0x4000}, 0x18) socket$kcm(0x1e, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x6, 0x1}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x39b5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r2}, 0x38) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006e01100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) sendmsg$AUDIT_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3e8, 0x8, 0x70bd28, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r5, 0x0, 0x24040083) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) close(r6) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000028c0)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r8, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xe8, 0x4, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2121d7b8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5c70cfd9}, @NFTA_HOOK_DEV={0x14, 0x3, 'vcan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_USERDATA={0x71, 0xc, "ba56cc758bdd5f35d83b896fde8c34e8e5d267ac245ff90b40bae3f0eae8fc1497d064fc84989b5271f13ecffa913f751bd7fb8dc8e1962bcfa76b2e70b32d2224385fd03dfc784f4a6dbfe9fe57efed6d739843c45850349e717cfe8e17443a188bd7784c82ac2b1fce90c103"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x20) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 10.271077103s ago: executing program 8 (id=2183): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd7d6, 0x2}, 0x114905, 0x4, 0x8, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40002000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() sendmsg$unix(r1, &(0x7f0000000940)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x20000040) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000180009032abd7076fb"], 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x8854) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a0b040000000000000000020000004c000480480001800a0001006d61746368000000380002800e0001007374617469737469630000001c000300000002000000000258c2052fade1bc2c62cdeb7521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000003c0)=0xfffffffffffff2a6, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.556351226s ago: executing program 7 (id=2184): socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x4, @perf_config_ext={0x40, 0x8000000000000001}, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x3c, 0x2, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a0091"], 0x82d7) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004880}, 0x24040804) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x8, 0x1, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x40090) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x26, 0x1, 0x70bd28, 0x25dfdbfc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x60048840}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 9.335103893s ago: executing program 1 (id=2185): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@alu={0x7, 0x0, 0x6, 0x4, 0x3, 0x18, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0xa}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x46cdceab628a1d43, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x4, 0x0, 0x0, 0x80102, 0x7772af6c8733200d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0xbb2e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket(0xa, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2d}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) 7.968117283s ago: executing program 4 (id=2186): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x5, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x18b) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c0000002500010125bd7000fbfffffe090000000800030047"], 0x9c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x5091) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000003800)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003780)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x10) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1004a0, &(0x7f00000001c0)=ANY=[]) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000010080)={0xffffffffffffffff, 0x58, &(0x7f0000010000)}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6d23}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5}, 0x1224, 0x100, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x18b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001000)=ANY=[], 0x12) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x5) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRESOCT]) 7.678794511s ago: executing program 1 (id=2187): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114604, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180200000000000000000000ffffff7fb70533a269f6643fea3c4785000000110000009554000000000000630720facabbe8dbf8ea5b4a559c31677a97746c59ddcbae3114743d303508b13b1a0052aca0368bb7aa973c8e65d3"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0xb, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r4}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={0x1, 0x0, 0x0}, 0x10) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) sendmsg$inet(r9, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000500)="faa740d75e2559308571b1147d9ce706863fc6c069198290809bf58bd93179c9275b793aeadba9a67ea0c555db9e3c3b40248c14adfec33c7674cd2a99b9b762ec89414103654451d73edfe06b56f1236aaadf", 0x53}, {&(0x7f0000001040)="f6677810d12b9b561c621358d7190a5527f6617e376931e632777f06404f393c2515d428ef82c540224fa074abda3654df24865a1a6ee08246aa2f2bc19d190f066285b4c7ded5dfc9733d4b7c29268b0fb45859d8434204a19a4881330f179ca4787ffe8d3f5cf5f04033933f83123cabcd647e65f34235d87a847dd84067ef4010dcc59e8760e68af7ad2370292dedb47cd0818ab0abfc9436a59d24478c5de308aa9c37d8f25f571865497b874f0b4050ce5d40ba8b663cab019d11ec3ef44065b534965c6c582301d0000d0b289eab6f71a3ad0ff3d4a179c0101bfbfed3909576112452c24c060e13de09c4450a58646683d7ad43f9bf6be4669d9ff239828885c627e2ad7f15c6040a81dd0e100e898c5f9e3bcc2bc3b687ed17e3cf8ad931d7230bdeec5494d2062d3314108dfd140a16b2bf67eb3f11e20fe6e1cbead39d5e84cb9673432cd0e6b995e751bee11afde68b2109a895127f083a6e651cbc04f90910e18ef4090ae6932840c27bdc66becf726ce53ded0e89b0b4ac62009e667867378688571cb80fff7846bcf8ad9ea22926b1a16a3cceb6ef131e9a77ea3dacb5e821b00479b80c6ddeca38aa8ce46de085352ab6a44b5b76cc53bff3d40ad412ef900341e4375af3748176a55210fe70a9629e20f04286288094d880c1cadcc0979b5c448aa004eb234a9b77348b401354521609065a34886ea83c9e487775070d0649714db912243efcc54c6a08f937dba47e94869b05cbcaeaf791a18f2581ea786c46f5eb12012702be793158d29c79e67d298fd4f69242e013d3ca7488d7414c791e4d2b9a2351ea47103babdc3e6537ec6567967bc6febf7747255a2ace122778250aa96b572245c38c121d82307341c8c16c881127e3627de791b18ead5237ad088d8d83348aea01412525c093d61808ce024ce3d09c9155c25b32526908fb906bdd7a1932183aa9aa2b429685f82a25529ec13a3f7df666dc230be2fa1fe22b1af7d7de9af9de8f6bc03988390632c5dcbb68b43233db70b6b52fd59df8094928179d66f651ad828dfd914c67704298f07a2f3d2933afa87f7fdf2877ec46b26d216ca4af0fbdb37cef17d5b6c2986d861d4f5724107cf005b11f3d8f9447fca296579c12d6f388a3001332d390dd4c0dc0b5fc2dfd26d54e0fa76af7ef3c328438a3b3ff5788eb6b3831f75f858546388a319237c34424ca98c172032113b7012c6ba1fca40dd085d1b2b9c909de523cdc9296823af1d09dbeea418e0f60955c9373b6443cf3f07afb9cc8416cb922ec196f9d6a1656d4d4df84a98c294a5c359fe90579b7ed5037dd5819de8b11a3267d5d8354a17d5666ae254ca666871f2f5c8555637f3f724342e1db5567051f1929808892475cdf2ed138a1c0c08e89e194ca672d79efd41d555759fb4e9a7385f7ce8c7a15ec256ccaa9463588214712a9869d1cf36b5a3463ecbfaead16fd56b97de27003cfb08886c32ac446c6d952be7742cba686224315b090e6f23367ede51d801da7af74496dddd3c96fed22d7adc4a01f78999d09da4fbbbe49054539df6c2b22a8932733e2ad380466cff693f29d56d03388908ed391f94da8a0a83e9d31366ce79b9e7214f634a44176254828ee94bd84f96b01f69187bb748d8925318a05f9254fc7baee8473098de6d87018b393ee555e661080bbc30fc416b0c4cb1baf04392e35769107272b050437aecfe9b4a59a640a69843156bfe72e488bb86dad38c5fd2603f4d18e2d8d140dada6adb5137d489e045392cc77d9c85d8b2e789b04bfcfb22f50a8c161f7df0551001101a4b5bf9651af612e3f5fae74e5d3e4c61a125a477d4046e7df90d931f42d9718dc4f933a71c20ffd30f60ca295ba73aa76a7173dd772eb4e89f03b5c7f8a4c13d2cb2a3c71dbba45440c07dd9c07ebedd3ce21181de803c7a705fb7367a5831c3be05c10164bb763fa9dd45513e249c1664d248e42ae10218d95a5423f9539440d5f703e9e8647cac5818e84e5fd241c91e45a487aa9608976f7a711c1c8e48a5c8111baffebe6e4f98ed31e63a2abea56337928fed1f2bfe4227c17dc2f6c1853110ab406284bd1310a58411341656cee976b02c953c5bf65207d8bdcff6eb2e92cb578229fbc13fbe7b001261c4318cb69511c7e89fd1ff6c236fdfc7433f152f10f068f8769864d729b0583ae8366a2220b264576fb0794c67fded06b2947465a859d8a5e1c9c4ee4b0f25b75b62a5f392ec10caa63d0bdbe80ee366022a023657b34932fcce69c2364c1534d17c629bef096071b21efce6653198723a407e13f28567c0aa8b175bd02512ce488f41f0a91e597da757baac17626138a251567ed6f68a4f23ff713c0fc92275c1556ecbcd4b9ac7c591039b2a46531aa9d43952b816423ca641ed27c3de1f12df40732f0a8459cad24ea4ac885671000f87b1edfc307fc90cb3f6784cbbab40d66d9ffefaf7cc8fc5cef12a72fa06901d523f0e8036df85bdb8134f3a9a3bc670467d839f47067a713c6a1e1c0201ad9af326d29cf619c3a4c0de30c72fac91823382a8127869897af948c51aa4ad56c622900072d75aa76cdbbefc30f0b963e18610c438088925ced4a2963f25d99082ac9a7a7d733159e76dbaa861b0b1caffb275ff218aa853bf02dde7b28b5c2654ebc7be95441456849614f7cda39ed6beabf1a3b87a596c3f188424feff77fc4fd6543b24502a7a7d7a572b6630ce187359bbc7e2b46da8f40c8e74f1c7b1c736fe72216f9469566c19d1d4190416c1d987111b6439f4d26920b23ceefa487754a30e78f01bf9054111f871e1e984a59c15fc9436d06b60cb158d40cc70a4fee5274386f2d4e0210c72270a02b159d8d1e67074b307d1658e45178dc046b6ca1f161e9e9f4f45c4d8b0d55740023c2c5c40665e652ce338ef9312f60234f2a3630774934352dafe368e09ee492bd8b3ad851c06c09f7c86f3632db6d4eec0a05f0028ec2bba3284f70e932d965187add21f532f9c455bc13bd6d9de084187f50a04e186ff9a732eec23da07981ab6445cbf0df870f99b8416fde27ce5baaa416b230199fd91204b35f406df2414a6c35ef5c9e727451ac0a779564f2a49a6c0427580138b3be75a676ddeb4c1170c9343a99a612ac0061b6568f04715b1764112479b13a0cc0a9f6d708c9261f1c890f69693b7874989905d0bbe0fe453123706f294c38ab11f9f504c519d19fef6665453e310d29dacb5c2100d414055dbf3bd1b39289af53487a77b7ceb5bdf59960a82452922e91a18038d6d5dadc1023bb41e2e529ee4e5effce61b6fb1ad85d900f2f66f9b1fe2a0cd27a87ce84fcbf615ec939c3d90253a4f06a2585100a530f6cc93b8332224b3c1511cbf2fa7ff12a0f8e1f025a61900920a17910db4e30a388cbd040f5913fe1834e8f4ac35618c76fccf80cfcb91085fc5fa137d9f1e9bc78bf749a286b6ef1fd88a45f50da5396ff970375a58aef23e6221c7ffec049682b864b19e339fa66d454591402d3d517f0b682fa54f269ab17a50cdeaa48834fd13eb438dfa3839b7e1a57b81d9fe18674ad1c807b1b3f71ab4271430b26b9580b2ba8787f86a03abdec14364dbc63d64d67542a53be418cfa3e416455727a57ade36ad529fd79db869b85bd5a446be39190b35351bee5b39fc0f5f373276ae51a0a265330a45b1058a36e7d056ac7af05489f9448b40ff12e421bb3e32289dec866146941ef5a37f569472af07cac447156b330778e70d6496b86cb16bd45b530757571d18eef893b50029d600585611bd2ff066da474a7c2223221084e91f0182f380104c52946b8d7cdf023e4f6dabf0781303e50badeda2f620977cbb7748b3190c8cb629dad908302a0987e10eab744f544c11527bca475cddac06619a008d03e91940c33d9893f7367894e5f367feade8e4ae357e2dcec0c99038ad5d0e3131f90d22726b7070f3516de782ae0b10d635b36f52d1617a93826a616f09d6ff379012bb575971cfeaf9c7cba839fd05e1d7796d2f351e44fc1a5dae354d44dcc0828ecebc4b56e7fbe3a259797da0e6642d164299a5fd571740d6d6bd00ced3656c86e131130f102572111a35d5b915af0c4bd8a69d2eec41e04208add5469c3e8e1c1190fa8ac1f4663dc3a788698169f63bf308dbeebf14b1c75bd95949082ccb10598b1462249f1b71dc8afefb952f31103576919b1de5cddfb76f363a3fb8ab453898dcff0a5225c8969f5c703ab34eb295b6cbd4f0994ddeec92199b58784ebd600f7ab0a33bf9031d82e896c00dc3b4aa4922f382b774d59720bd8f6f48506f9b9d5546b804c5d745620d467e788c51ac24b0cd9238f33d727e05667fd264794305b016a71bd3bfa7b2ee154f2eecef494608d3c28dd59e5ff0954de8596fd1a196e726b3c08df44bb6ac882694d84432c5d6ff8e0c3c961def0a205b6dfc2570563574beaa7c2cad0411e744260aa87b0a00b6e3366ad938bfa0a3efc3019c13665ef6d748178498b6e6ee41c173aa0a6ccae68a113b98a471f9291be69cf081a40e5625a6f50873d6c9bdd2f1614651489df893dfdd5d9a7a67856cebc34005e8f5f83f8094d59a7bb64b9562b0242c360d63b76713819cf1f253d781c057a19e5a70e51a7f4e3742a3d6bb48df1904aa7b9cd3d55c8dfc2c847b8a402e10073eb4b06051c9a31504ccae07724c457b398b084cd8ac4282ccbac06f8af5428b86fdb90dcc327b2e812989a5c42e75dbcedff76384b7da1141c37b1938383da276deaccaf9066a84536893fbc13e1e171fc4a5e78d50b691a8c4ddba1fa1fac6ae3647f2ef6a2418cbfa2b0691216b7851c7b0084104ed9ba6eb112ee448c5ffc47bc0a1dcfe368172bcb695b73c6ecb4884a3f2f195c5c9d60bb3aed440426655c3a2e27dc395121212ef9d490cdf9a27a1557d768ddbb57495ad133f8852876447be2e15f0e78370238d2469379bf6a317e23a1fd29d737fc2428a238ec1b516b0cf581d94e729156b83bdddcdc3607d7d199596e1db17909babf376693894191ca03bef472908eb28299acb506386a8d9c2963e3171125b3f0c66b2c774de4838856a62a142d1df4ce573be3d8af9476bfe524bab2f1d481c71f1e4818e75568f73236c87c55d09d88388ecece276d57a61644fde9d9b41e2c7ec5c30c9ab6c667caabd54a628aeff334646715e1f776bd870e62cec922e2269fd6b0a746128687ecbebf0bca079bc3a300bc3820c08983e5e777b5e3726c0950ff598de05a27f386470f5e17c766e2258771883083d5551bf2f03d1841c427e4d896e8d35cfac5ffff9932adfd75be9d32dd7f35c882b2ae498ff39a72424134036054b0255a9ff2a51a46b545a5e14140dcd993e700d4ae093a63959224e777a5ade4f776ed392b09a9f55a1e14e6ead64ccba713211b080193ce1a3606085156e0b665c7ca109532b03dbfcc896d47f16d6e3aadbbbeffc7df44e34d43314774415df1953c84118c199d261b11ed7cad10d8638f0e353488ffa73f1e17562d3b6fcf4213b85eac32de2f39257efea4a2891ac032664a35556ffe772d36f6ebe4b88fcd51d3079a4b3614b6dcba7c83e2be0d643412fdbf383b6120e63f4d56278397608eaa5633754e20fa19fcacc664e13affdca4866c5c537978a31441841fa61ef313e75483129432c9d7e37490f7ee4d6defd8fb4a104d72ed1baf87ace2be3d7b7c858cd07e2cf70bc53dab9da7ca4c09386f99ce0b0177e31501e0ce8644023f", 0xffe}, {&(0x7f0000002040)="428c85b7c01dbb0772a687718b451093e6654da479e51ae35b7442eb8f03fc670f0c051d6fd94fe4d0a0209645eeb2925c8774bbf1b20f80de88c0a6bab13fd91552d639057f0f24507765c966d5dd7fa9cb162fd6d025e2409a1af55a12f429fb8f36f1a0b102e341a83ad0b0e2c18f4aef54ed164469d01ad7ff43bbbcf160699d1c6bfc8d31cfbc68", 0x8a}, {&(0x7f0000002100)="b82c54fe27e837a3da9acbfaa562cc2b", 0x10}, {&(0x7f0000002140)="b59031bd6f77db24f6ab04b734c19a305f27d418467a728a717bf0c5436f3142a6b503689749a6eb34881569d16f62e5e05e55acfe834a419f3560f476c4b9091b187a88df5288681adffd05006a7448340f6977cf8eaaf634aaa6302cf5e1de69193e49f82668400f748514453e21ecc75acd49dea4f652f0460381378b44aac69363c2621717f8", 0x88}], 0x5, &(0x7f0000000cc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x9, 0x1, 0x5}, @timestamp_prespec={0x44, 0x1c, 0x26, 0x3, 0xe, [{@multicast2}, {@local, 0x56a9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @noop, @ssrr={0x89, 0x3, 0x96}, @cipso={0x86, 0x6, 0xfffffffffffffffd}, @noop]}}}, @ip_retopts={{0x50, 0x0, 0x7, {[@cipso={0x86, 0x23, 0x2, [{0x1, 0x4, "f136"}, {0x7, 0x12, "337abb37d2a4746913000100005d89e0"}, {0x1, 0x2}, {0x2, 0x5, "7c450f"}]}, @timestamp_addr={0x44, 0x1c, 0xf0, 0x1, 0x6, [{@multicast2, 0x9}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x97}}], 0xe8}, 0x8040) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x1, 0x400}, 0x100, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x20048811) recvmsg$kcm(r10, 0x0, 0x40) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x1, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0x1d, 0x2c, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x7b}, @exit, @map_val={0x18, 0xb, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x9222}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, &(0x7f00000009c0), 0x41000, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x10, 0x6, 0x8000}, 0x10, r11, 0x0, 0x1, 0x0, &(0x7f0000000bc0)=[{0x4, 0x5, 0xc, 0x9}], 0x10, 0x285c}, 0x94) 7.371456808s ago: executing program 9 (id=2188): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x7, 0x0, 0x4, 0x3, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x4a, 0x1, 0x3, 0x0, 0x0, 0x400000000000000a, 0xe1022, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x73) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 6.795931931s ago: executing program 7 (id=2189): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(r0, 0x0, 0x28, 0x0, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2d40, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x10e6c, 0xc78, 0xfffffffd, 0x9, 0x8, 0x7}, 0x0, 0xffffffffffffffff, r4, 0x0) socket$kcm(0xf, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x40800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000380001002dbd7000fedbdf2518"], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x8000) close(r3) socket$kcm(0x2b, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, 0x0, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8922, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000), 0x10) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 6.713898672s ago: executing program 8 (id=2190): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x854, 0xffffffff, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xc}, 0x50) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x110, 0xd}], 0x10}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2001) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000160007c3999dbf00fedbdf251f7c00000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x8010) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r0, 0x0, 0x0}, 0x10) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000109c0)={0x5, 0x5, &(0x7f0000010940)=ANY=[@ANYBLOB="6471a0d44a8439e925a52dd63dd865991808000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000010580)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000200)=""/219, 0xdb}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/130, 0x82}], 0x3, &(0x7f0000001bc0)=""/35, 0x23}, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1e}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000107c0)=@bpf_ext={0x1c, 0x10, 0x0, &(0x7f0000010600)='GPL\x00', 0x8, 0x84, &(0x7f0000010640)=""/132, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000010700)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000010740)={0x1, 0x3, 0x2, 0x10000e6b}, 0x10, 0x1bc65, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x40000) write$cgroup_subtree(r4, 0x0, 0xfe33) 6.617887968s ago: executing program 4 (id=2191): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118ba000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) recvmsg$kcm(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) close(r0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000018140100"/23], 0x18}, 0x1, 0x0, 0x0, 0x4000804}, 0x44810) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x40, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x42, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0xffffffff, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff, 0x10000000}, {}, {0x0, 0x0, 0xc, 0x7, 0x0, 0x6}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x28e, 0x1, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x6}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x1a65, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0xfffffffe}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x4, 0x0, 0xffffffff}, {}, {0xfffffffd, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {0x0, 0x0, 0xfffffffd, 0x80000, 0x3}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x80}, {0x0, 0x5}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x8}, {0x7f, 0x0, 0xfffffffe, 0xfffffffe}, {}, {}, {0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x101}, {0x5, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7, 0x7f53}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x3}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x3, 0x0, 0x0, 0x0, 0xffffffff}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x1}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {0x1}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x8, 0x1}, {}, {0x1}, {0x4}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x3}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {0x6}, {0x2, 0x1}, {}, {}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000200)=[{0x0}, {&(0x7f00000001c0)="f32be31131bb22", 0x7}], 0x2, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1e}}, @ip_retopts={{0x10}}, @ip_retopts={{0x50, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xe2, 0x0, 0x9}, @generic={0x88, 0x2}, @lsrr={0x83, 0x1b, 0x54, [@rand_addr=0x64010101, @private=0xa010102, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x7, 0xa5, [@loopback]}, @generic={0x82, 0x2}, @noop, @cipso={0x86, 0x14, 0x3, [{0x0, 0xe, "d9e07417c5d5a849c2821f45"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0xd8}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRESOCT=r3, @ANYRES64, @ANYRES16, @ANYRESHEX=r5], &(0x7f0000000640)='syzkaller\x00', 0xfffffff2, 0xb2, &(0x7f0000000680)=""/178, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x2000c010) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 6.502672507s ago: executing program 1 (id=2192): r0 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x113, 0x3, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x209, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x12, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x0) syz_clone(0x100, &(0x7f00000023c0), 0x0, 0x0, &(0x7f0000002440), &(0x7f0000002480)="86e56329cdedc6b9d445f4c4db403c7e90aca7f1faab5335e4d8cd7913a6721b51d1d7d44750aa6c1e3322fd") r3 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=@bloom_filter={0x1e, 0x5, 0x7, 0x0, 0x11, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0xf}, 0x50) fstat(r5, &(0x7f0000000400)) fstat(r3, &(0x7f0000000500)) fstat(r4, &(0x7f0000000580)) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x10000, 0x0) fstat(r2, &(0x7f00000024c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}]}}}, {0x4c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x18, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "15000000004e000083a33622050851d4"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xec}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002840)={0x3, 0x17, &(0x7f0000002540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @printk={@x}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @ldst={0x1, 0x2, 0x3, 0x5, 0x9, 0xffffffffffffffe0, 0x4}, @call={0x85, 0x0, 0x0, 0x90}]}, &(0x7f0000002600)='GPL\x00', 0x8, 0xb4, &(0x7f0000002640)=""/180, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000002700)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000002740)={0x3, 0x5, 0x7, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000002780)=[0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f00000027c0)=[{0x1, 0x2, 0xe, 0x4}, {0x1, 0x4, 0x9, 0xc234da97c1b18ded}, {0x0, 0x3, 0x10, 0x8}, {0x2, 0x4, 0x8, 0x3}], 0x10, 0x9}, 0x94) r7 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r7, 0x29, 0x19, 0x0, 0xfcd8) syz_clone(0x100400, &(0x7f0000002900), 0x0, &(0x7f0000002a00), 0x0, &(0x7f0000002a80)="c4eef0f657aa850a24e88cf40f2d9e9bdf3089196b1619d580405a9a54beed1ff9798207dd9e49a3e26e2253b6d96f012d1be64faefc739e96d5a1a0a50fe642e424d061096a97c16c7473450f99c47d19b0562210a1e2319a80bc058a26d9ef229fdfa74fbb8e23d5868adaac21ee955326b76f9a7566d4b9154f4feee3c3251848be3dfd81b243") r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup(r8, &(0x7f00000000c0)='syz0\x00', 0x1ff) gettid() fstat(r8, &(0x7f0000000140)) fstat(r1, &(0x7f0000002b40)) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000010) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x17, &(0x7f0000000a00)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x3081bf0b056d2e46) 6.247117185s ago: executing program 9 (id=2193): socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x24}, 0x94) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) recvmsg$kcm(r1, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e23000500000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000020600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff000000b32d00000000001f00000000000000feffffffffffffff02000000fc070000000000002abd700005350000020001002000000000000000480003006465666c61746500"/242], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8051}, 0x8055) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0x1, 0x5}]}, @func_proto, @union={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x61]}}, 0x0, 0x69}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfff8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4000}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='!~u&00\t&&') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c80)=ANY=[@ANYBLOB="2800000021000100e8870000000000000a00000000000001016200000900158002"], 0x28}], 0x1}, 0x0) 6.06413167s ago: executing program 7 (id=2194): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x3, 0x73) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000a80), 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000b00)=""/191, 0xbf}, {0x0}, {&(0x7f0000000cc0)=""/212, 0xd4}, {&(0x7f0000000ec0)=""/22, 0x16}], 0x4, &(0x7f0000000f80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x40000140) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff000000"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@restrict={0x7, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x2e, 0x61, 0x61, 0x61, 0x5f, 0x5f, 0x0, 0x0, 0x2e]}}, 0x0, 0x2f, 0x0, 0x1, 0x2, 0x10000, @value=r3}, 0x28) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x1000, 0x2, 0xffffff81, 0x5, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000001680)={&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, 0x0}, 0x8804) sendmsg$sock(r5, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x4000010) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3406c096) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x18, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x8854) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) fstat(r2, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000780)=@expire={0xf8, 0x18, 0x2, 0x70bd26, 0x25dfdbfe, {{{@in6=@local, @in=@remote, 0x4e23, 0x0, 0x4e20, 0x1, 0x2, 0x20, 0xa0, 0x0, r7}, {@in=@loopback, 0x4d6, 0xff}, @in6=@loopback, {0x3, 0x3, 0x2, 0xc33, 0x9, 0xfffffffffffffff9, 0x2, 0xa}, {0x8, 0x7fffffffffffffff, 0x8, 0x6b}, {0x3, 0x10001, 0xaf92}, 0x70bd25, 0x3505, 0xa, 0x2, 0x25, 0x40}, 0xff}}, 0xf8}, 0x1, 0x0, 0x0, 0x4040800}, 0x11) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800048004000380080008400000000008"], 0xdc}}, 0x0) 5.194063454s ago: executing program 1 (id=2195): socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000", @ANYRES16=r2, @ANYRESHEX=r2], &(0x7f0000000200)='GPL\x00', 0x8000000, 0x0, 0x0, 0x81e00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0x7}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008000) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20040844) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x0, 0x100000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000002500dfff79bd700002dcdf651f"], 0x14}, 0x1, 0x0, 0x0, 0x4040003}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000000000000000}}, 0x40) 5.079680889s ago: executing program 9 (id=2196): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000880)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000b40)=[@cred={{0x1c}}], 0x20}, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008aa574711ffffff08000840000000ed05000500020000000500010006000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x0, 0x29, 0x0, 0x5, 0xfffffbfa}, 0x28) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x5}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, 0x0, &(0x7f0000000580)='GPL\x00', 0x5e04, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xf, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x58586df}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20028840) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20028840) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x200c8000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0xff) sendmsg$kcm(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000003a00010324"], 0x14}}, 0x0) recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xd8e, 0x6, 0x5, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r8 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b02", 0x4}], 0x1, 0x0, 0x0, 0x900}, 0x0) 4.949654693s ago: executing program 4 (id=2197): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES64=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) perf_event_open(0x0, 0x0, 0x10, r2, 0xa) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 4.875625191s ago: executing program 7 (id=2198): perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x480, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x10}, 0x1000, 0xca, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0xfffffffe, 0x0, 0x80}, 0x0, 0x7, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0x10, 0x100000000002, 0x4) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket(0x10, 0x3, 0x4) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 4.849416399s ago: executing program 8 (id=2199): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffdffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x3, 0x6, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0)=r1, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000240)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x33}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="d23bbce58889eb8aa9c018f4b1f0165387533e9c2e4fbe0cff79aa9dd870782d782c33f6a0005ae750e527b638287e4687c4863b28914dda0af78c4279538f08a615b5aa1f3df8c1d83641e6e3c38fdb504588e2b02c56413d"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000003000000000000000000000000000000002000002000000000000000000000000fc01000000000000000000000000000005"], 0xa0}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x7c, 0x24, 0xf0b, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x12, r7, {0x0, 0xd}, {0xffff, 0xffff}, {0x3, 0x5}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xfffffecb, 0x2, @TCA_SFB_PARMS={0x12, 0x1, {0x3, 0x0, 0xff, 0x401, 0x1, 0x6, 0x8, 0x29d7, 0x7}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x14, 0x7, 0xffffffff, 0x1, 0x7ff, 0x2}}, {0x4}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14000}, 0x4000010) r8 = socket(0x10, 0x3, 0xe579) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x24010043) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYRESHEX, @ANYBLOB=',gid=', @ANYRESHEX=0xee01, @ANYBLOB=',mode=00000000000000000000004,mode=00000000000000000000007,subj_role=ip6gre0\x00,subj_role=ip6gre0\x00,smackfshat=*$,permit_directio,uid<', @ANYRESDEC, @ANYBLOB=',smackfs']) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b2b, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000200)='./file0\x00', r2, 0x4000, r0}, 0x18) setsockopt$sock_attach_bpf(r3, 0x84, 0x10, &(0x7f0000000000)=r9, 0x8) 4.427377298s ago: executing program 1 (id=2200): r0 = socket$kcm(0x2a, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xfffffffc, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r2, 0x20, &(0x7f0000000300)={&(0x7f0000000200)=""/54, 0x36, 0x0, &(0x7f0000000240)=""/96, 0x60}}, 0x10) socketpair(0x10, 0x2, 0x9, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = getpid() r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x103, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xbf}, 0x2000, 0x1, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x1}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x29, 0x7, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x28, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000f00000280000c0012", 0x2e}], 0x1}, 0x0) r8 = socket$kcm(0x2a, 0x2, 0x0) recvmsg(r8, 0x0, 0x40002182) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) recvmsg$kcm(r8, &(0x7f0000003dc0)={0x0, 0x0, 0x0}, 0x222cc7250b0d494b) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x8010) 3.139736407s ago: executing program 7 (id=2201): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x5, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x18b) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c0000002500010125bd7000fbfffffe090000000800030047"], 0x9c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x5091) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000003800)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003780)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x10) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1004a0, &(0x7f00000001c0)=ANY=[]) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000010080)={0xffffffffffffffff, 0x58, &(0x7f0000010000)}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6d23}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5}, 0x1224, 0x100, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x18b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001000)=ANY=[], 0x12) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x5) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRESOCT]) 3.039902338s ago: executing program 9 (id=2202): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, @perf_bp={0x0, 0xc}, 0x2010, 0x0, 0x0, 0x0, 0x1, 0x20000000, 0x98e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fc"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10000000000000b9, 0x0, &(0x7f00000003c0)=[{0xfffffffe, 0x0, 0x9}, {0x90010022, 0x0, 0x0, 0xa}]}, 0x94) recvmsg$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3f, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8c182, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x8}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000040000000000000a20000000000a0300"], 0x122}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.995764801s ago: executing program 8 (id=2203): r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080007"], 0x104}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x32, 0x5}, 0x2019, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0xc0}, 0x100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) 893.12272ms ago: executing program 4 (id=2204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x4008000) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x1e, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138aafa000000000000005ae583de0dd7d8319f98af84fda55b175c0a9b2ce90000000000000000", 0x55}], 0x1}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r9) setsockopt$sock_attach_bpf(r8, 0x29, 0x3a, 0x0, 0x5) 891.760448ms ago: executing program 7 (id=2205): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300), 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="ff00000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000080)="04000000df000000428b4c6588f5", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r4}, 0x8) sendmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNATTACHFILTER(r8, 0x401054d5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r5}) recvmsg$kcm(r3, 0x0, 0x40010103) 185.156491ms ago: executing program 1 (id=2206): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @random="c24f7b36aec9"}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x4a, 0x1, 0x6f, 0x0, 0x0, 0x0, 0x1103, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x6, 0xfffa, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, 0x0, &(0x7f00000008c0)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000d3e726c01f1029d58d815c7dbd1658b344e24bf4f164eb3d5d6e413d22fa79669817f4fd6ddeb05410085e6dad7cdfcb15b89322e677dc8bb0e22ce5085506a5b47abf80ad23", @ANYRES32=0x1, @ANYBLOB='w\x00'/19, @ANYRES8=r2, @ANYRESHEX=r2, @ANYBLOB="05000000020000000300"/28, @ANYRESHEX=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xe, 0xf, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000090000000000000009000000181100002b485161996ee8a55f82ab51317d9f6a508bd15747c9a12506c038b7b2c033e5b87030e35f0469541cd8d20333b90a36b2ad83f6900fd2c6c7bfb02665276abaffcf", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000008520000001000000184b0000fcffffff00000000000000009500000000000000"], &(0x7f0000000840)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0xa, 0x2}, 0x8}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000018c0)={0x1c, 0x33, 0x107, 0x70bd28, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2400c010) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, &(0x7f00000004c0)}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x3}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x8081}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 8 (id=2207): bpf$TOKEN_CREATE(0x24, &(0x7f0000000480), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x24000000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x6}, 0x82b4, 0x25, 0x0, 0x2, 0x2}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xe8, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x1e, 0x8, &(0x7f0000000d40)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], 0x0, 0x8001, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)="63b17fe8c486f3b3a13c7bd7d3018cd8666b1235e2d94f709e843b529dc8804be2310171fd5c003e", 0x28}, {&(0x7f0000000480)}, {&(0x7f00000006c0)="9112e3b12671901d9175b1924e09e2c405059d508e24d2ef0780875535c7dc9e364126a458a5463ba02f220c25da0583912f426a9bf38dc32109e7066966d15ce5715430f51a84a7", 0x48}, {&(0x7f0000000740)="5320e15e3957a843c9409c7b37e78f45dbaa375228d89949c589a10d3ca7b3b7ca4f5096506764a9978c3ff04ce4a806964973144268043e37b8f58d820ba384e7b2458d286f7812040d054f15e2ab989ed318e76eff8b0239b369cf6ab24211b325c2abf17cd71e7af6050c32b9d5a6eec1b599668e4b7092830b609b0711ca", 0x80}], 0x4, &(0x7f0000000840)=[@ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0xa0}, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={r0, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000d00), &(0x7f0000001040)=[0x0, 0x0, 0x0], 0x0, 0xfa, &(0x7f0000001080)=[{}, {}], 0x10, 0x10, &(0x7f00000010c0), &(0x7f00000011c0), 0x8, 0xe2, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000eeff00000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="180100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002002c0013"], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x10, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x351}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0xff0c, 0x85, &(0x7f0000000c00)=""/133, 0x41100, 0x40, '\x00', r7, 0x25, r2, 0x8, &(0x7f0000001380)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x3, 0x0, 0xf3e9, 0x54ac800}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r4, r4, r4], 0x0, 0x10, 0x8000}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r12, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xfffffffffffffca0}, 0x42) ioctl$TUNSETNOCSUM(r13, 0xc040ff0b, 0x110c230102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003040)={&(0x7f0000000180)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000003000)}, 0x2044) kernel console output (not intermixed with test programs): 4] netlink: 'syz.4.256': attribute type 2 has an invalid length. [ 151.960927][ T6874] netlink: 'syz.4.256': attribute type 2 has an invalid length. [ 153.224132][ T6904] netlink: 'syz.4.264': attribute type 6 has an invalid length. [ 153.245843][ T6904] netlink: 3936 bytes leftover after parsing attributes in process `syz.4.264'. [ 153.276726][ T6904] netlink: 'syz.4.264': attribute type 1 has an invalid length. [ 153.415959][ T6914] netlink: 'syz.5.268': attribute type 4 has an invalid length. [ 153.440768][ T6914] netlink: 'syz.5.268': attribute type 17 has an invalid length. [ 153.488676][ T6914] lo: left promiscuous mode [ 154.773932][ T6933] netlink: 'syz.5.274': attribute type 1 has an invalid length. [ 155.905992][ T5625] Bluetooth: hci1: unexpected event 0x30 length: 151 > 3 [ 156.866924][ T6963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.283'. [ 158.854873][ T6979] netlink: 124 bytes leftover after parsing attributes in process `syz.1.287'. [ 158.923824][ T6979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.287'. [ 160.403898][ T6999] netlink: 'syz.1.294': attribute type 2 has an invalid length. [ 160.472374][ T6999] netlink: 'syz.1.294': attribute type 2 has an invalid length. [ 160.824125][ T7004] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.296'. [ 161.514682][ T7021] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 162.759037][ T7033] netlink: 'syz.3.303': attribute type 21 has an invalid length. [ 162.795651][ T7033] netlink: 156 bytes leftover after parsing attributes in process `syz.3.303'. [ 163.257174][ T7055] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 163.351947][ T7055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.809776][ T7065] syzkaller0: entered promiscuous mode [ 163.816846][ T7065] syzkaller0: entered allmulticast mode [ 163.827876][ T1154] wlan1: Trigger new scan to find an IBSS to join [ 163.999830][ T5625] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 164.728385][ T7079] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 164.772613][ T7079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.883480][ T1165] wlan1: Trigger new scan to find an IBSS to join [ 167.917104][ T7112] Can't find ip_set type hash:m [ 168.247791][ T7128] netlink: 'syz.5.331': attribute type 10 has an invalid length. [ 169.109617][ T7128] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 169.520052][ T7134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.962238][ T1154] wlan1: Creating new IBSS network, BSSID a6:35:65:7b:b9:ad [ 170.328573][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.339'. [ 170.949080][ T7166] netlink: 'syz.1.344': attribute type 2 has an invalid length. [ 170.959301][ T7166] netlink: 'syz.1.344': attribute type 2 has an invalid length. [ 171.120291][ T7168] tun0: tun_chr_ioctl cmd 1074025672 [ 171.137098][ T7168] tun0: ignored: set checksum enabled [ 171.196825][ T7169] tun0: tun_chr_ioctl cmd 1074025675 [ 171.221115][ T7169] tun0: persist disabled [ 171.580243][ T7178] Unknown options in mask 6faf [ 171.703331][ T7189] macvlan1: left promiscuous mode [ 172.147151][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.355'. [ 172.252560][ T7196] netlink: 48 bytes leftover after parsing attributes in process `syz.4.355'. [ 172.613796][ T7211] netlink: 'syz.0.358': attribute type 27 has an invalid length. [ 172.630714][ T7211] netlink: 164 bytes leftover after parsing attributes in process `syz.0.358'. [ 173.306591][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.363'. [ 176.801138][ T5625] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4 [ 177.420909][ T5625] Bluetooth: hci0: unexpected event 0x35 length: 15 > 6 [ 177.982333][ T7273] netlink: 5252 bytes leftover after parsing attributes in process `syz.1.380'. [ 179.452856][ T7291] sit0: entered allmulticast mode [ 180.536646][ T7287] sit0: entered promiscuous mode [ 181.004585][ T7305] netlink: 128 bytes leftover after parsing attributes in process `syz.4.388'. [ 181.058942][ T7305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.220952][ T7310] netlink: 16 bytes leftover after parsing attributes in process `syz.5.392'. [ 181.277160][ T7317] netlink: 'syz.0.393': attribute type 10 has an invalid length. [ 181.279768][ T7310] batadv0: left promiscuous mode [ 181.324954][ T7316] netlink: 'syz.5.392': attribute type 9 has an invalid length. [ 182.676552][ T7317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.684446][ T7317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.699323][ T7317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.725659][ T7317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.921596][ T30] audit: type=1107 audit(1779159796.283:2): pid=7333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 186.307825][ T7382] netlink: 'syz.5.411': attribute type 1 has an invalid length. [ 186.383673][ T7391] netlink: 4008 bytes leftover after parsing attributes in process `syz.1.412'. [ 186.485659][ T7389] netlink: 'syz.0.414': attribute type 1 has an invalid length. [ 186.800213][ T7405] netlink: 'syz.1.418': attribute type 39 has an invalid length. [ 188.401062][ T7405] hsr_slave_0: left promiscuous mode [ 188.409940][ T7405] hsr_slave_1: left promiscuous mode [ 189.335965][ T7433] netlink: 'syz.1.426': attribute type 10 has an invalid length. [ 190.819281][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.829460][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.895091][ T7433] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.902466][ T7433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.910821][ T7433] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.918011][ T7433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.951769][ T7433] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 191.286580][ T7445] netlink: set zone limit has 4 unknown bytes [ 191.491557][ T7452] netlink: 5192 bytes leftover after parsing attributes in process `syz.3.433'. [ 192.099321][ T7461] netlink: 14 bytes leftover after parsing attributes in process `syz.1.435'. [ 193.340729][ T7468] netlink: 'syz.3.439': attribute type 16 has an invalid length. [ 193.351900][ T7468] netlink: 164 bytes leftover after parsing attributes in process `syz.3.439'. [ 193.382822][ T7481] netlink: 'syz.1.441': attribute type 1 has an invalid length. [ 193.799858][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.443'. [ 194.240120][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.246540][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.832334][ T7507] syzkaller0: entered promiscuous mode [ 195.848163][ T7507] syzkaller0: entered allmulticast mode [ 198.649508][ T7540] netlink: 9 bytes leftover after parsing attributes in process `syz.4.459'. [ 198.673328][ T7540] netlink: 9 bytes leftover after parsing attributes in process `syz.4.459'. [ 198.714521][ T7542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.460'. [ 199.623549][ T7560] netlink: 124 bytes leftover after parsing attributes in process `syz.3.463'. [ 199.632560][ T7560] netlink: 40 bytes leftover after parsing attributes in process `syz.3.463'. [ 201.420741][ T4942] Bluetooth: hci4: command 0x0406 tx timeout [ 201.420848][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 201.426836][ T5642] Bluetooth: hci0: command 0x0406 tx timeout [ 201.438927][ T5637] Bluetooth: hci3: command 0x0406 tx timeout [ 202.983739][ T7571] netlink: 'syz.3.468': attribute type 27 has an invalid length. [ 202.992656][ T7571] netlink: 164 bytes leftover after parsing attributes in process `syz.3.468'. [ 204.295594][ T5944] bond0: (slave syz_tun): Releasing backup interface [ 204.714590][ T7580] netlink: 'syz.3.470': attribute type 2 has an invalid length. [ 204.734163][ T7580] netlink: 'syz.3.470': attribute type 8 has an invalid length. [ 204.756939][ T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.768548][ T7582] netlink: 'syz.3.470': attribute type 2 has an invalid length. [ 204.780200][ T7580] netlink: 132 bytes leftover after parsing attributes in process `syz.3.470'. [ 204.803624][ T7582] netlink: 'syz.3.470': attribute type 8 has an invalid length. [ 204.840969][ T7582] netlink: 132 bytes leftover after parsing attributes in process `syz.3.470'. [ 204.889409][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 204.995735][ T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.340393][ T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.353680][ T30] audit: type=1107 audit(1779159818.723:3): pid=7588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 205.401357][ T7594] netlink: 'syz.1.478': attribute type 23 has an invalid length. [ 205.443876][ T5641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.458262][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.470442][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.493325][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.505352][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.730955][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.738394][ T7597] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.746913][ T7597] bridge_slave_0: entered allmulticast mode [ 206.755329][ T7597] bridge_slave_0: entered promiscuous mode [ 206.764572][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.771939][ T7597] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.780418][ T7597] bridge_slave_1: entered allmulticast mode [ 206.794766][ T7597] bridge_slave_1: entered promiscuous mode [ 206.841413][ T7597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.855353][ T7597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.903611][ T7597] team0: Port device team_slave_0 added [ 206.914683][ T7597] team0: Port device team_slave_1 added [ 206.956928][ T7597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.964203][ T7597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.991035][ T7597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.004291][ T7597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.011633][ T7597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.039838][ T7597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.108057][ T7597] hsr_slave_0: entered promiscuous mode [ 207.115220][ T7597] hsr_slave_1: entered promiscuous mode [ 207.127293][ T7597] debugfs: 'hsr0' already exists in 'hsr' [ 207.133396][ T7597] Cannot create hsr debugfs directory [ 207.452295][ T7597] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 207.591091][ T5641] Bluetooth: hci2: command tx timeout [ 208.096908][ T7597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 208.386485][ T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.441903][ T7597] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 208.578691][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.484'. [ 208.708946][ T7597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 208.780529][ T7597] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 208.878856][ T7597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 209.044011][ T7597] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 209.117752][ T7597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 209.670344][ T5641] Bluetooth: hci2: command tx timeout [ 210.295026][ T57] bridge_slave_1: left allmulticast mode [ 210.325863][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.373617][ T57] bridge_slave_0: left allmulticast mode [ 210.444912][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.741415][ T5641] Bluetooth: hci2: command tx timeout [ 212.092413][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.129004][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.699497][ T57] bond0 (unregistering): Released all slaves [ 213.822704][ T5641] Bluetooth: hci2: command tx timeout [ 215.401678][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 216.324841][ T7597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.366054][ T7696] netlink: 64 bytes leftover after parsing attributes in process `syz.1.498'. [ 216.399326][ T7702] netlink: 'syz.3.499': attribute type 3 has an invalid length. [ 216.902845][ T7713] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 217.045426][ T7597] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.124084][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.131332][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.173530][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.180879][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.718080][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.735031][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.777604][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.829573][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.096702][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.504'. [ 218.187339][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.504'. [ 219.037893][ T57] team0 (unregistering): Port device team_slave_1 removed [ 219.077357][ T57] team0 (unregistering): Port device team_slave_0 removed [ 219.429313][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 219.773964][ T7756] netlink: 'syz.1.510': attribute type 3 has an invalid length. [ 220.269226][ T7752] netlink: 60 bytes leftover after parsing attributes in process `syz.1.510'. [ 220.320171][ T7756] netlink: 60 bytes leftover after parsing attributes in process `syz.1.510'. [ 220.730616][ T7764] netlink: 'syz.3.512': attribute type 10 has an invalid length. [ 220.769615][ T7764] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.788609][ T7764] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.817418][ T7764] bridge0: left promiscuous mode [ 221.163603][ T7771] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 221.727510][ T7597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.343180][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 222.400498][ T7788] netlink: 'syz.3.517': attribute type 10 has an invalid length. [ 222.436294][ T7788] netlink: 55 bytes leftover after parsing attributes in process `syz.3.517'. [ 222.982038][ T7597] veth0_vlan: entered promiscuous mode [ 223.038399][ T7597] veth1_vlan: entered promiscuous mode [ 223.238415][ T7820] netlink: 'syz.4.522': attribute type 4 has an invalid length. [ 223.246264][ T7820] netlink: 152 bytes leftover after parsing attributes in process `syz.4.522'. [ 223.351631][ T7820] .`: renamed from bond0 (while UP) [ 223.645092][ T7597] veth0_macvtap: entered promiscuous mode [ 223.682522][ T7597] veth1_macvtap: entered promiscuous mode [ 223.765794][ T7597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.825840][ T7597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.903539][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.925888][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.944705][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.975427][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.289179][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.318958][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.464967][ T7349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.527774][ T7349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.669156][ T7846] netlink: 'syz.3.529': attribute type 1 has an invalid length. [ 224.691139][ T7846] netlink: 'syz.3.529': attribute type 1 has an invalid length. [ 225.070269][ T5287] 8021q: adding VLAN 0 to HW filter on device eth8 [ 225.165131][ T7853] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.174580][ T7853] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.230092][ T7853] bridge0: entered allmulticast mode [ 225.395992][ T5641] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 225.618652][ T7853] bridge_slave_1: left allmulticast mode [ 225.675426][ T7853] bridge_slave_1: left promiscuous mode [ 225.716830][ T7853] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.945991][ T7853] bridge_slave_0: left allmulticast mode [ 225.980643][ T7853] bridge_slave_0: left promiscuous mode [ 225.996921][ T7853] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.912354][ T34] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.422299][ T5641] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 229.432090][ T5641] Bluetooth: hci1: Injecting HCI hardware error event [ 229.441820][ T5641] Bluetooth: hci1: hardware error 0x00 [ 229.469869][ T7910] netlink: 'syz.3.546': attribute type 22 has an invalid length. [ 229.550698][ T7917] syz.6.548: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 229.629875][ T7917] CPU: 1 UID: 0 PID: 7917 Comm: syz.6.548 Not tainted syzkaller #0 PREEMPT(full) [ 229.629909][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 229.629924][ T7917] Call Trace: [ 229.629933][ T7917] [ 229.629942][ T7917] dump_stack_lvl+0xe8/0x150 [ 229.629975][ T7917] warn_alloc+0x249/0x340 [ 229.630001][ T7917] ? stack_trace_save+0xa9/0x100 [ 229.630037][ T7917] ? __pfx_warn_alloc+0x10/0x10 [ 229.630069][ T7917] ? kasan_save_track+0x4f/0x80 [ 229.630088][ T7917] ? kasan_save_track+0x3e/0x80 [ 229.630106][ T7917] ? __kasan_kmalloc+0x93/0xb0 [ 229.630126][ T7917] ? __kmalloc_cache_noprof+0x31c/0x660 [ 229.630147][ T7917] ? xskq_create+0x56/0x170 [ 229.630180][ T7917] ? xsk_setsockopt+0x603/0x990 [ 229.630207][ T7917] ? do_sock_setsockopt+0x17c/0x1b0 [ 229.630228][ T7917] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 229.630247][ T7917] ? do_syscall_64+0x15f/0xf80 [ 229.630273][ T7917] __vmalloc_node_range_noprof+0x132/0x1750 [ 229.630332][ T7917] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 229.630363][ T7917] ? __kasan_kmalloc+0x93/0xb0 [ 229.630393][ T7917] vmalloc_user_noprof+0xad/0xe0 [ 229.630414][ T7917] ? xskq_create+0xbf/0x170 [ 229.630447][ T7917] xskq_create+0xbf/0x170 [ 229.630482][ T7917] xsk_init_queue+0x8a/0xe0 [ 229.630517][ T7917] xsk_setsockopt+0x603/0x990 [ 229.630553][ T7917] ? __pfx_xsk_setsockopt+0x10/0x10 [ 229.630579][ T7917] ? __pfx_aa_sk_perm+0x10/0x10 [ 229.630611][ T7917] ? __fget_files+0x2a/0x420 [ 229.630637][ T7917] ? aa_sock_opt_perm+0xff/0x1a0 [ 229.630672][ T7917] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 229.630692][ T7917] ? __pfx_xsk_setsockopt+0x10/0x10 [ 229.630722][ T7917] do_sock_setsockopt+0x17c/0x1b0 [ 229.630749][ T7917] __x64_sys_setsockopt+0x13d/0x1b0 [ 229.630782][ T7917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.630804][ T7917] do_syscall_64+0x15f/0xf80 [ 229.630825][ T7917] ? trace_irq_disable+0x3b/0x140 [ 229.630854][ T7917] ? clear_bhb_loop+0x40/0x90 [ 229.630879][ T7917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.630898][ T7917] RIP: 0033:0x7f267b39ce59 [ 229.630919][ T7917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.630936][ T7917] RSP: 002b:00007f26795f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 229.630958][ T7917] RAX: ffffffffffffffda RBX: 00007f267b615fa0 RCX: 00007f267b39ce59 [ 229.630971][ T7917] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 229.630983][ T7917] RBP: 00007f267b432d6f R08: 0000000000000004 R09: 0000000000000000 [ 229.630994][ T7917] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 229.631005][ T7917] R13: 00007f267b616038 R14: 00007f267b615fa0 R15: 00007ffdbb875ed8 [ 229.631040][ T7917] [ 229.961206][ T7917] Mem-Info: [ 229.966156][ T7917] active_anon:14604 inactive_anon:0 isolated_anon:0 [ 229.966156][ T7917] active_file:17349 inactive_file:40011 isolated_file:0 [ 229.966156][ T7917] unevictable:768 dirty:240 writeback:0 [ 229.966156][ T7917] slab_reclaimable:8188 slab_unreclaimable:95754 [ 229.966156][ T7917] mapped:37058 shmem:9480 pagetables:1394 [ 229.966156][ T7917] sec_pagetables:0 bounce:0 [ 229.966156][ T7917] kernel_misc_reclaimable:0 [ 229.966156][ T7917] free:1304652 free_pcp:14199 free_cma:0 [ 230.115002][ T7917] Node 0 active_anon:58364kB inactive_anon:0kB active_file:69396kB inactive_file:159840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148216kB dirty:1056kB writeback:0kB shmem:36388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12352kB pagetables:5416kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 230.151473][ T7917] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 230.186392][ T7917] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.216910][ T7917] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 230.223587][ T7917] Node 0 DMA32 free:1267824kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:58764kB inactive_anon:0kB active_file:69796kB inactive_file:159840kB unevictable:1536kB writepending:1056kB zspages:0kB present:3129332kB managed:2552552kB mlocked:0kB bounce:0kB free_pcp:57352kB local_pcp:24644kB free_cma:0kB [ 230.257490][ T7917] lowmem_reserve[]: 0 0 0 0 0 [ 230.264525][ T7917] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 230.294235][ T7917] lowmem_reserve[]: 0 0 0 0 0 [ 230.299039][ T7917] Node 1 Normal free:3934528kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.333926][ T7917] lowmem_reserve[]: 0 0 0 0 0 [ 230.338735][ T7917] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 230.373812][ T7922] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 230.389694][ T7917] Node 0 DMA32: 1763*4kB (UME) 1558*8kB (UME) 706*16kB (U) 16*32kB (UME) 320*64kB (UME) 141*128kB (ME) 108*256kB (ME) 25*512kB (UME) 13*1024kB (UM) 8*2048kB (UME) 275*4096kB (M) = 1266396kB [ 230.408956][ T7922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.441565][ T7917] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 230.494332][ T7917] Node 1 Normal: 0*4kB 4*8kB (UM) 16*16kB (UM) 9*32kB (UM) 10*64kB (UM) 5*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 959*4096kB (M) = 3934528kB [ 230.554146][ T7917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.602138][ T7917] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 230.621610][ T7917] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.641175][ T7917] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 230.665145][ T7917] 68662 total pagecache pages [ 230.685022][ T7917] 0 pages in swap cache [ 230.699314][ T7917] Free swap = 124996kB [ 230.717111][ T7917] Total swap = 124996kB [ 230.727210][ T7917] 2097051 pages RAM [ 230.736620][ T7917] 0 pages HighMem/MovableOnly [ 230.749354][ T7917] 427131 pages reserved [ 230.776723][ T7917] 0 pages cma reserved [ 231.581984][ T5641] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 233.285158][ T7957] syzkaller0: entered promiscuous mode [ 233.305637][ T7957] syzkaller0: entered allmulticast mode [ 233.708202][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.722252][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.732499][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.748058][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 233.758545][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.822781][ T5641] Bluetooth: hci5: command tx timeout [ 236.830260][ T7984] netlink: 14 bytes leftover after parsing attributes in process `syz.3.568'. [ 237.901816][ T5641] Bluetooth: hci5: command tx timeout [ 239.992876][ T5641] Bluetooth: hci5: command tx timeout [ 240.604985][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.6.576'. [ 240.641063][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.6.576'. [ 241.240899][ T8041] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.580'. [ 242.092321][ T5641] Bluetooth: hci5: command tx timeout [ 242.354461][ T8070] netlink: 'syz.3.587': attribute type 29 has an invalid length. [ 242.499520][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.588'. [ 242.713768][ T7975] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.727296][ T7975] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.749539][ T7975] bridge_slave_0: entered allmulticast mode [ 242.804931][ T7975] bridge_slave_0: entered promiscuous mode [ 242.858509][ T7975] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.900223][ T7975] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.935155][ T7975] bridge_slave_1: entered allmulticast mode [ 242.973617][ T7975] bridge_slave_1: entered promiscuous mode [ 243.407197][ T7975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.456280][ T7975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.578914][ T7975] team0: Port device team_slave_0 added [ 243.789048][ T7975] team0: Port device team_slave_1 added [ 244.021350][ T7975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.029121][ T7975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.092801][ T7975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.113718][ T7975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.123553][ T7975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.215275][ T7975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.439478][ T8125] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 244.453209][ T8125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.509428][ T7975] hsr_slave_0: entered promiscuous mode [ 244.529410][ T7975] hsr_slave_1: entered promiscuous mode [ 244.552618][ T7975] debugfs: 'hsr0' already exists in 'hsr' [ 244.568084][ T7975] Cannot create hsr debugfs directory [ 245.501680][ T8143] netlink: 'syz.3.603': attribute type 3 has an invalid length. [ 245.571669][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.605'. [ 245.922011][ T8164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.005841][ T8164] netlink: 'syz.3.607': attribute type 21 has an invalid length. [ 246.014499][ T8164] netlink: 128 bytes leftover after parsing attributes in process `syz.3.607'. [ 246.075901][ T8164] netlink: 'syz.3.607': attribute type 4 has an invalid length. [ 246.085159][ T8164] netlink: 3 bytes leftover after parsing attributes in process `syz.3.607'. [ 246.334767][ T8168] netlink: 763 bytes leftover after parsing attributes in process `syz.1.608'. [ 246.444015][ T7975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.553561][ T7975] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.621495][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.628742][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.674436][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.681670][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.837359][ T8181] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 247.142400][ T8198] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 247.187422][ T8198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.040920][ T8246] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 249.061897][ T8246] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 249.178498][ T7975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.569386][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'. [ 249.970971][ T8280] netlink: 'syz.1.628': attribute type 1 has an invalid length. [ 250.009781][ T8280] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.628'. [ 250.474375][ T7975] veth0_vlan: entered promiscuous mode [ 250.575999][ T7975] veth1_vlan: entered promiscuous mode [ 250.642182][ T5287] veth0_vlan: left promiscuous mode [ 250.686357][ T5287] veth0_vlan: entered promiscuous mode [ 251.269934][ T7975] veth0_macvtap: entered promiscuous mode [ 251.346648][ T7975] veth1_macvtap: entered promiscuous mode [ 251.513277][ T7975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.626439][ T7975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.160376][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.202228][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.372299][ T7349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.404182][ T7349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.521007][ T8322] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 254.171799][ T8346] netlink: 'syz.1.641': attribute type 10 has an invalid length. [ 254.237521][ T8346] netlink: 55 bytes leftover after parsing attributes in process `syz.1.641'. [ 254.264718][ T8348] netlink: 'syz.6.640': attribute type 39 has an invalid length. [ 255.667226][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.673804][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.454571][ T8373] netlink: 'syz.7.647': attribute type 11 has an invalid length. [ 257.577134][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.7.651'. [ 259.483425][ T8418] netlink: 'syz.7.659': attribute type 25 has an invalid length. [ 259.581767][ T8418] netlink: 'syz.7.659': attribute type 3 has an invalid length. [ 259.657239][ T8418] netlink: 132 bytes leftover after parsing attributes in process `syz.7.659'. [ 261.727590][ T8452] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.674'. [ 262.514137][ T8471] netlink: 'syz.1.681': attribute type 60 has an invalid length. [ 263.365270][ T8478] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 263.449979][ T8478] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 263.494299][ T8478] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 264.527039][ T8512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.706026][ T8518] netlink: 'syz.7.694': attribute type 16 has an invalid length. [ 265.176993][ T8531] netlink: 'syz.4.698': attribute type 4 has an invalid length. [ 265.788758][ T8530] netlink: 5192 bytes leftover after parsing attributes in process `syz.4.698'. [ 265.817613][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 265.847838][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'. [ 265.930359][ T8541] netlink: 64 bytes leftover after parsing attributes in process `syz.3.701'. [ 266.008955][ T8542] lo: entered promiscuous mode [ 266.051102][ T8544] netlink: 20 bytes leftover after parsing attributes in process `syz.6.702'. [ 266.061843][ T8544] netlink: 36 bytes leftover after parsing attributes in process `syz.6.702'. [ 266.277346][ T8547] netlink: 'syz.1.703': attribute type 33 has an invalid length. [ 266.995456][ T8569] netlink: 'syz.4.711': attribute type 16 has an invalid length. [ 267.003261][ T8569] netlink: 'syz.4.711': attribute type 17 has an invalid length. [ 267.036284][ T8569] lo: left promiscuous mode [ 268.881073][ T8569] tunl0: left promiscuous mode [ 268.887345][ T8569] gre0: left promiscuous mode [ 268.894118][ T8569] gretap0: left promiscuous mode [ 268.899988][ T8569] erspan0: left promiscuous mode [ 268.907243][ T8569] ip_vti0: left promiscuous mode [ 268.913786][ T8569] ip6_vti0: left promiscuous mode [ 268.920292][ T8569] sit0: left promiscuous mode [ 268.926214][ T8569] ip6tnl0: left promiscuous mode [ 268.936127][ T8569] ip6gre0: left promiscuous mode [ 268.943052][ T8569] syz_tun: left promiscuous mode [ 268.949247][ T8569] ip6gretap0: left promiscuous mode [ 268.970202][ T8569] bridge0: left promiscuous mode [ 268.981097][ T8569] vcan0: left promiscuous mode [ 268.987291][ T8569] .`: left promiscuous mode [ 268.994122][ T8569] 8021q: adding VLAN 0 to HW filter on device .` [ 269.003073][ T8569] team0: left promiscuous mode [ 269.023263][ T8569] dummy0: left promiscuous mode [ 269.045897][ T8569] nlmon0: left promiscuous mode [ 269.074050][ T8569] batadv0: left promiscuous mode [ 269.097598][ T8569] vxcan0: left promiscuous mode [ 269.111352][ T8569] vxcan1: left promiscuous mode [ 269.132735][ T8569] veth0: left promiscuous mode [ 269.146538][ T8569] veth1: left promiscuous mode [ 269.155394][ T8569] wg0: left promiscuous mode [ 269.163980][ T8569] wg1: left promiscuous mode [ 269.171429][ T8569] wg2: left promiscuous mode [ 269.179965][ T8569] veth0_to_bridge: left promiscuous mode [ 269.204525][ T8569] veth1_to_bridge: left promiscuous mode [ 269.214443][ T8580] netlink: 'syz.6.713': attribute type 10 has an invalid length. [ 269.223937][ T8569] veth0_to_bond: left promiscuous mode [ 269.248930][ T8569] bond_slave_0: left promiscuous mode [ 269.278191][ T8569] veth1_to_bond: left promiscuous mode [ 269.302854][ T8569] bond_slave_1: left promiscuous mode [ 269.308995][ T8569] veth0_to_team: left promiscuous mode [ 269.326926][ T8569] team_slave_0: left promiscuous mode [ 269.352237][ T8569] veth1_to_team: left promiscuous mode [ 269.378580][ T8569] team_slave_1: left promiscuous mode [ 269.398810][ T8569] veth0_to_batadv: left promiscuous mode [ 269.413134][ T8569] batadv_slave_0: left promiscuous mode [ 269.419626][ T8569] veth1_to_batadv: left promiscuous mode [ 269.427921][ T8569] batadv_slave_1: left promiscuous mode [ 269.435384][ T8569] xfrm0: left promiscuous mode [ 269.442968][ T8569] veth0_to_hsr: left promiscuous mode [ 269.455073][ T8569] veth1_to_hsr: left promiscuous mode [ 269.466809][ T8569] hsr0: left promiscuous mode [ 269.499788][ T8569] veth1_virt_wifi: left promiscuous mode [ 269.513552][ T8569] veth0_virt_wifi: left promiscuous mode [ 269.549391][ T8569] virt_wifi0: left promiscuous mode [ 269.558939][ T8569] vlan0: left promiscuous mode [ 269.565531][ T8569] vlan1: left promiscuous mode [ 269.585256][ T8569] macvlan0: left promiscuous mode [ 269.603519][ T8569] macvlan1: left promiscuous mode [ 269.624355][ T8569] ipvlan0: left promiscuous mode [ 269.647568][ T8569] ipvlan1: left promiscuous mode [ 269.675612][ T8569] macvtap0: left promiscuous mode [ 269.697172][ T8569] macsec0: left promiscuous mode [ 269.728056][ T8569] geneve0: left promiscuous mode [ 269.738282][ T8569] geneve1: left promiscuous mode [ 269.745481][ T8569] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 269.755816][ T8569] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 269.765700][ T8569] netdevsim netdevsim4 netdevsim2: left promiscuous mode [ 269.773746][ T8595] netlink: 'syz.3.720': attribute type 6 has an invalid length. [ 269.780125][ T8569] netdevsim netdevsim4 netdevsim3: left promiscuous mode [ 269.782288][ T8595] netlink: 3936 bytes leftover after parsing attributes in process `syz.3.720'. [ 269.800829][ T8595] netlink: 'syz.3.720': attribute type 1 has an invalid length. [ 269.803540][ T8569] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 269.818489][ T8569] mac80211_hwsim hwsim10 O3ãc¤±: left promiscuous mode [ 269.846595][ T8580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.872187][ T8580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.912906][ T8595] nbd0: detected capacity change from 0 to 339754496 [ 269.924915][ T8580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.945626][ T8580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.147117][ T5641] block nbd0: Receive control failed (result -104) [ 270.583031][ T8610] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 270.829392][ T8622] netlink: 132 bytes leftover after parsing attributes in process `syz.4.727'. [ 271.307134][ T8621] hsr0: entered promiscuous mode [ 271.324359][ T8621] hsr0: entered allmulticast mode [ 271.360154][ T8621] hsr_slave_0: entered allmulticast mode [ 271.365865][ T8621] hsr_slave_1: entered allmulticast mode [ 271.656093][ T8639] netlink: 'syz.1.730': attribute type 29 has an invalid length. [ 272.380440][ T8659] bridge_slave_1: left allmulticast mode [ 272.399737][ T8659] bridge_slave_1: left promiscuous mode [ 272.422381][ T8659] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.157913][ T8659] bridge_slave_0: left allmulticast mode [ 273.189624][ T8659] bridge_slave_0: left promiscuous mode [ 273.196687][ T8659] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.238937][ T8659] bond0: (slave bridge0): Releasing backup interface [ 275.938408][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.755'. [ 276.235565][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.757'. [ 276.323474][ T1154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.081425][ T1154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.282412][ T1154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.452255][ T1154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.204476][ T8757] bridge_slave_1: left allmulticast mode [ 280.213515][ T8757] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.558311][ T8757] bridge_slave_0: left allmulticast mode [ 280.568421][ T8757] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.168490][ T8788] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 282.236365][ T1154] bridge_slave_1: left allmulticast mode [ 282.271292][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.326687][ T1154] bridge_slave_0: left allmulticast mode [ 282.353288][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.863306][ T115] wlan1: Trigger new scan to find an IBSS to join [ 285.625443][ T8820] netlink: 'syz.4.786': attribute type 1 has an invalid length. [ 285.634202][ T8820] netlink: 'syz.4.786': attribute type 3 has an invalid length. [ 285.678940][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.692087][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.702777][ T1154] bond0 (unregistering): Released all slaves [ 286.198022][ T8829] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 286.208591][ T8829] IPv6: NLM_F_CREATE should be set when creating new route [ 286.219992][ T8829] IPv6: NLM_F_CREATE should be set when creating new route [ 286.227698][ T8829] IPv6: NLM_F_CREATE should be set when creating new route [ 286.326756][ T8835] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.788'. [ 286.607039][ T8838] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 286.742625][ T8841] netlink: 'syz.7.792': attribute type 10 has an invalid length. [ 287.083899][ T8853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.796'. [ 287.634461][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.797'. [ 287.661171][ T8865] netlink: 12 bytes leftover after parsing attributes in process `syz.6.798'. [ 287.823408][ T7349] wlan1: Trigger new scan to find an IBSS to join [ 288.668709][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 288.768606][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 288.863705][ T57] wlan1: Trigger new scan to find an IBSS to join [ 289.138663][ T8841] team0: Port device wlan0 added [ 289.172132][ T5287] 8021q: adding VLAN 0 to HW filter on device eth9 [ 290.780805][ T7349] wlan1: Trigger new scan to find an IBSS to join [ 292.285835][ T57] wlan1: Creating new IBSS network, BSSID 7e:63:08:2d:49:23 [ 292.377314][ T5287] 8021q: adding VLAN 0 to HW filter on device eth10 [ 292.795749][ T34] wlan1: Trigger new scan to find an IBSS to join [ 292.877810][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.6.806'. [ 292.996948][ T8920] netlink: 'syz.7.808': attribute type 10 has an invalid length. [ 293.025725][ T8920] netlink: 40 bytes leftover after parsing attributes in process `syz.7.808'. [ 293.058367][ T8920] team0: entered promiscuous mode [ 293.076915][ T8920] team_slave_0: entered promiscuous mode [ 293.115743][ T8920] team_slave_1: entered promiscuous mode [ 293.141442][ T8920] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 293.168172][ T8920] team0: entered allmulticast mode [ 293.181276][ T8920] team_slave_0: entered allmulticast mode [ 293.187413][ T8920] team_slave_1: entered allmulticast mode [ 293.194204][ T8920] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode [ 293.204681][ T8920] bridge0: port 3(team0) entered blocking state [ 293.214456][ T8920] bridge0: port 3(team0) entered disabled state [ 293.237325][ T8920] bridge0: port 3(team0) entered blocking state [ 293.243864][ T8920] bridge0: port 3(team0) entered forwarding state [ 293.829254][ T8944] netlink: 'syz.7.814': attribute type 39 has an invalid length. [ 294.421038][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.819'. [ 294.537312][ T8962] netlink: 'syz.3.819': attribute type 4 has an invalid length. [ 294.720901][ T8964] syzkaller0: entered promiscuous mode [ 294.732689][ T8964] syzkaller0: entered allmulticast mode [ 294.918928][ T5287] 8021q: adding VLAN 0 to HW filter on device eth11 [ 295.826221][ T1165] wlan1: Trigger new scan to find an IBSS to join [ 296.131479][ T1165] wlan1: Creating new IBSS network, BSSID 12:4f:3b:09:83:2f [ 296.479312][ T5287] 8021q: adding VLAN 0 to HW filter on device eth12 [ 296.988242][ T9002] netlink: 'syz.4.828': attribute type 3 has an invalid length. [ 298.319066][ T9028] netlink: 'syz.4.832': attribute type 66 has an invalid length. [ 299.373450][ T9045] netlink: 132 bytes leftover after parsing attributes in process `syz.3.839'. [ 299.809671][ T9053] netlink: 'syz.7.842': attribute type 10 has an invalid length. [ 300.193078][ T9066] netlink: 'syz.3.847': attribute type 3 has an invalid length. [ 300.201494][ T9066] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.847'. [ 300.463512][ T25] block nbd0: Possible stuck request ffff888027770000: control (read@0,4096B). Runtime 30 seconds [ 302.842654][ T9099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.858'. [ 302.895975][ T9104] netlink: 'syz.1.858': attribute type 4 has an invalid length. [ 303.357196][ T9110] netlink: 'syz.4.863': attribute type 2 has an invalid length. [ 303.970040][ T9122] veth1_macvtap: left promiscuous mode [ 303.999907][ T9122] macsec0: entered allmulticast mode [ 304.109448][ T9132] netlink: 20 bytes leftover after parsing attributes in process `syz.4.865'. [ 304.248373][ T9134] netlink: 14 bytes leftover after parsing attributes in process `syz.6.868'. [ 304.374093][ T7349] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 304.404862][ T7349] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 304.701462][ T9139] netlink: 'syz.1.869': attribute type 10 has an invalid length. [ 304.764640][ T9140] netlink: 'syz.1.869': attribute type 10 has an invalid length. [ 306.003826][ T9139] syz_tun: entered promiscuous mode [ 306.043954][ T9139] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 306.152721][ T9140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.213343][ T9140] team0: Port device bond0 added [ 306.619976][ T9159] netlink: 'syz.6.873': attribute type 10 has an invalid length. [ 306.893724][ T9159] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.929888][ T9159] team0: Port device netdevsim0 added [ 308.291054][ T9167] netlink: 'syz.4.878': attribute type 29 has an invalid length. [ 308.329402][ T9168] netlink: 'syz.4.878': attribute type 29 has an invalid length. [ 308.717584][ T5641] Bluetooth: hci5: unexpected event 0x12 length: 15 > 8 [ 308.931767][ T9182] netlink: 124 bytes leftover after parsing attributes in process `syz.6.882'. [ 308.993436][ T9182] netlink: 40 bytes leftover after parsing attributes in process `syz.6.882'. [ 309.846390][ T9211] netlink: 'syz.3.889': attribute type 6 has an invalid length. [ 309.852349][ T9217] netlink: 132 bytes leftover after parsing attributes in process `syz.7.891'. [ 309.861312][ T9211] netlink: 3936 bytes leftover after parsing attributes in process `syz.3.889'. [ 310.001994][ T9211] netlink: 'syz.3.889': attribute type 1 has an invalid length. [ 310.120345][ T9223] sctp: [Deprecated]: syz.1.892 (pid 9223) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.120345][ T9223] Use struct sctp_sack_info instead [ 310.286528][ T9211] nbd1: detected capacity change from 0 to 339754496 [ 310.374985][ T5641] block nbd1: Receive control failed (result -104) [ 310.658929][ T9245] netlink: 'syz.7.894': attribute type 21 has an invalid length. [ 310.933466][ T9245] netlink: 'syz.7.894': attribute type 6 has an invalid length. [ 310.941177][ T9245] netlink: 132 bytes leftover after parsing attributes in process `syz.7.894'. [ 313.212895][ T9291] netlink: 'syz.7.908': attribute type 16 has an invalid length. [ 313.544496][ T7349] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 314.575933][ T5641] Bluetooth: hci4: unexpected subevent 0x10 length: 150 > 2 [ 315.231762][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.921'. [ 315.461779][ T9336] tmpfs: Bad value for 'uid' [ 315.482365][ T9336] tmpfs: Bad value for 'uid' [ 315.832333][ T9346] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 315.953021][ T9346] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 316.030443][ T9346] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 316.065974][ T9346] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 316.184002][ T9346] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 316.287471][ T9358] netlink: 'syz.6.925': attribute type 10 has an invalid length. [ 316.340230][ T9358] netlink: 55 bytes leftover after parsing attributes in process `syz.6.925'. [ 317.103980][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.110699][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.642651][ T9393] tmpfs: Bad value for 'uid' [ 317.650006][ T9393] tmpfs: Bad value for 'uid' [ 317.991496][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 318.538129][ T9412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.195364][ T9420] netlink: 56 bytes leftover after parsing attributes in process `syz.4.940'. [ 322.037298][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.6.944'. [ 322.784614][ T9445] netlink: 80 bytes leftover after parsing attributes in process `syz.6.949'. [ 322.794172][ T9445] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 323.074638][ T9450] netlink: 'syz.3.951': attribute type 10 has an invalid length. [ 323.115150][ T9450] netlink: 152 bytes leftover after parsing attributes in process `syz.3.951'. [ 327.581945][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 328.190078][ T5630] Bluetooth: hci4: unexpected event 0x10 length: 15 > 1 [ 328.191576][ T5630] Bluetooth: hci4: hardware error 0x00 [ 328.597921][ T9506] netlink: 128 bytes leftover after parsing attributes in process `syz.6.969'. [ 329.743271][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 330.306216][ T5630] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 330.560841][ T25] block nbd0: Possible stuck request ffff888027770000: control (read@0,4096B). Runtime 60 seconds [ 330.948395][ T9561] netlink: 160 bytes leftover after parsing attributes in process `syz.7.994'. [ 331.391817][ T9561] smbdirect: ib_dev[syz1] removed [ 331.598545][ T9556] lo: entered promiscuous mode [ 331.828024][ T9568] netlink: 'syz.3.988': attribute type 39 has an invalid length. [ 332.109977][ T9571] netlink: 'syz.3.988': attribute type 39 has an invalid length. [ 332.126509][ T9578] netlink: 16 bytes leftover after parsing attributes in process `syz.7.991'. [ 333.599965][ T9596] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.999'. [ 333.611344][ T9595] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 333.730460][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1001'. [ 334.311295][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1003'. [ 334.641677][ T9607] lo speed is unknown, defaulting to 1000 [ 335.353652][ T9607] lo speed is unknown, defaulting to 1000 [ 335.375552][ T9607] lo speed is unknown, defaulting to 1000 [ 335.579554][ T9607] infiniband sz1: set active [ 335.586196][ T5819] lo speed is unknown, defaulting to 1000 [ 335.591230][ T9607] infiniband sz1: added lo [ 335.600308][ T9607] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 335.604792][ T9607] infiniband sz1: Couldn't open port 1 [ 335.622080][ T9607] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 335.640322][ T9607] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 335.662235][ T9607] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 335.707629][ T9607] RDS/IB: sz1: added [ 335.713351][ T9607] smc: adding ib device sz1 with port count 1 [ 335.719945][ T9607] smc: ib device sz1 port 1 has no pnetid [ 335.731254][ T5819] lo speed is unknown, defaulting to 1000 [ 335.744063][ T9607] lo speed is unknown, defaulting to 1000 [ 335.896368][ T9607] lo speed is unknown, defaulting to 1000 [ 336.045243][ T9607] lo speed is unknown, defaulting to 1000 [ 336.191361][ T9607] lo speed is unknown, defaulting to 1000 [ 336.333782][ T9607] lo speed is unknown, defaulting to 1000 [ 337.252180][ T9634] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1009'. [ 337.822176][ T9648] netlink: 'syz.3.1012': attribute type 4 has an invalid length. [ 337.869900][ T9639] syzkaller0: entered promiscuous mode [ 337.897880][ T9648] netlink: 'syz.3.1012': attribute type 2 has an invalid length. [ 337.919718][ T9639] syzkaller0: entered allmulticast mode [ 337.950264][ T9648] netlink: 5156 bytes leftover after parsing attributes in process `syz.3.1012'. [ 338.738437][ T9650] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1014'. [ 340.791062][ T5003] block nbd1: Possible stuck request ffff888027810000: control (read@0,4096B). Runtime 30 seconds [ 342.302940][ T9661] tap0: tun_chr_ioctl cmd 2147767507 [ 342.374080][ T9675] syzkaller0: entered promiscuous mode [ 342.379624][ T9675] syzkaller0: entered allmulticast mode [ 342.919166][ T9698] openvswitch: netlink: Message has 8 unknown bytes. [ 342.942343][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1031'. [ 345.719280][ T9712] netlink: 'syz.1.1035': attribute type 3 has an invalid length. [ 345.743974][ T9712] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1035'. [ 345.900702][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.953749][ T9718] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1038'. [ 346.395941][ T9729] netlink: 'syz.4.1043': attribute type 6 has an invalid length. [ 346.434277][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1043'. [ 346.760839][ T9735] netlink: 'syz.3.1045': attribute type 21 has an invalid length. [ 346.861416][ T9735] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1045'. [ 347.023820][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1047'. [ 347.172393][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1047'. [ 348.608469][ T9758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.782428][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1054'. [ 348.818858][ T9771] bpf: Bad value for 'uid' [ 349.439752][ T9778] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1057'. [ 349.518256][ T9779] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1057'. [ 350.826575][ T9812] netlink: 'syz.7.1067': attribute type 10 has an invalid length. [ 350.981255][ T9812] bridge0: port 3(team0) entered disabled state [ 351.049104][ T9812] bridge0: port 3(team0) entered disabled state [ 351.207249][ T9812] team_slave_0: left promiscuous mode [ 351.220179][ T9812] team_slave_0: left allmulticast mode [ 351.390273][ T9812] team0 (unregistering): Port device team_slave_0 removed [ 351.430648][ T9812] team_slave_1: left promiscuous mode [ 351.443029][ T9812] team_slave_1: left allmulticast mode [ 351.670790][ T9827] netlink: 'syz.6.1072': attribute type 17 has an invalid length. [ 351.727513][ T9812] team0 (unregistering): Port device team_slave_1 removed [ 351.758563][ T9812] mac80211_hwsim hwsim21 wlan0: left promiscuous mode [ 351.799429][ T9812] mac80211_hwsim hwsim21 wlan0: left allmulticast mode [ 351.866067][ T9812] team0 (unregistering): Port device wlan0 removed [ 352.360802][ T5819] lo speed is unknown, defaulting to 1000 [ 352.949149][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.155456][ T9853] openvswitch: netlink: IPv4 tunnel dst address is zero [ 353.205660][ T9852] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1078'. [ 353.292363][ T9855] netlink: 192 bytes leftover after parsing attributes in process `syz.7.1079'. [ 353.931971][ T9869] netlink: 'syz.3.1082': attribute type 21 has an invalid length. [ 353.954031][ T9869] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1082'. [ 354.175552][ T9875] netlink: 'syz.7.1084': attribute type 2 has an invalid length. [ 354.192825][ T9875] netlink: 'syz.7.1084': attribute type 3 has an invalid length. [ 354.216922][ T9875] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1084'. [ 354.364180][ T9869] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1082'. [ 354.491566][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1082'. [ 354.951236][ T9877] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1083'. [ 355.019570][ T9888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1088'. [ 355.067006][ T9888] openvswitch: netlink: Flow key attr not present in new flow. [ 355.321648][ T9894] netlink: 'syz.6.1089': attribute type 21 has an invalid length. [ 355.535209][ T9894] netlink: 'syz.6.1089': attribute type 6 has an invalid length. [ 355.551644][ T9894] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1089'. [ 357.932315][ T5630] Bluetooth: hci5: unexpected event 0x1c length: 15 > 5 [ 358.203821][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1103'. [ 358.576133][ T9927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1102'. [ 360.146145][ T5641] Bluetooth: hci5: command 0x0406 tx timeout [ 360.622126][ T25] block nbd0: Possible stuck request ffff888027770000: control (read@0,4096B). Runtime 90 seconds [ 360.906282][ T9962] netlink: 'syz.4.1115': attribute type 16 has an invalid length. [ 361.055239][ T9967] netlink: 'syz.7.1117': attribute type 10 has an invalid length. [ 361.063130][ T9967] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1117'. [ 361.222803][ T9969] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1118'. [ 361.232046][ T9969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1118'. [ 361.269858][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 361.385595][ T9962] veth1_macvtap: entered promiscuous mode [ 361.395123][ T9962] veth1_macvtap: entered allmulticast mode [ 363.658844][T10006] IPv6: NLM_F_CREATE should be specified when creating new route [ 363.727014][T10006] IPv6: NLM_F_REPLACE set, but no existing node found! [ 364.147701][ T5630] Bluetooth: hci3: unexpected event 0x10 length: 15 > 1 [ 364.149144][ T5641] Bluetooth: hci3: hardware error 0x00 [ 365.006248][T10039] netlink: 5192 bytes leftover after parsing attributes in process `syz.1.1137'. [ 366.163933][T10040] netlink: 'syz.3.1139': attribute type 2 has an invalid length. [ 366.224109][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'. [ 366.399699][ T5641] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 366.662792][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1143'. [ 367.052286][T10056] netlink: 'syz.1.1144': attribute type 6 has an invalid length. [ 367.102216][T10056] netlink: 'syz.1.1144': attribute type 6 has an invalid length. [ 367.713620][T10070] netlink: 'syz.7.1150': attribute type 10 has an invalid length. [ 367.731073][T10070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.792408][T10070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.844720][T10070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.863095][T10070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.208419][T10099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1158'. [ 369.461111][T10103] option changes via remount are deprecated (pid=10102 comm=syz.7.1160) [ 369.641849][T10103] option changes via remount are deprecated (pid=10102 comm=syz.7.1160) [ 369.768255][T10111] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1161'. [ 369.987804][T10117] netlink: 'syz.3.1162': attribute type 2 has an invalid length. [ 370.902801][ T5003] block nbd1: Possible stuck request ffff888027810000: control (read@0,4096B). Runtime 60 seconds [ 371.349420][T10137] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1170'. [ 375.857764][T10185] netlink: 'syz.1.1179': attribute type 16 has an invalid length. [ 375.980924][T10185] netlink: 'syz.1.1179': attribute type 17 has an invalid length. [ 376.774881][T10205] netlink: 'syz.1.1189': attribute type 39 has an invalid length. [ 376.825133][T10205] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 376.876341][T10205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1189'. [ 377.421893][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1191'. [ 378.375042][T10232] netlink: 'syz.3.1198': attribute type 23 has an invalid length. [ 378.564444][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.570900][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.987492][ T5641] Bluetooth: hci5: unexpected event 0x23 length: 15 > 13 [ 379.248795][T10258] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1208'. [ 380.531335][T10274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1213'. [ 380.958696][T10291] netlink: 'syz.1.1217': attribute type 16 has an invalid length. [ 381.100848][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 381.219361][T10299] netlink: 120 bytes leftover after parsing attributes in process `syz.6.1218'. [ 381.233489][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1218'. [ 381.243059][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1218'. [ 384.663963][T10321] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1223'. [ 385.223911][T10291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.289234][T10291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.637803][ T57] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.688875][ T57] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.727082][ T57] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.860187][T10333] netlink: zone id is out of range [ 385.865366][T10333] netlink: zone id is out of range [ 385.872021][T10333] netlink: zone id is out of range [ 385.877731][T10333] netlink: zone id is out of range [ 386.236616][T10347] netlink: 'syz.1.1230': attribute type 2 has an invalid length. [ 387.393925][T10369] tmpfs: Bad value for 'uid' [ 387.416792][T10369] tmpfs: Bad value for 'uid' [ 387.915238][T10375] netlink: 'syz.6.1237': attribute type 4 has an invalid length. [ 387.960815][T10375] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1237'. [ 390.273232][T10399] openvswitch: netlink: IP tunnel TTL not specified. [ 390.476957][T10403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1243'. [ 390.543902][T10396] Cannot find add_set index 46338 as target [ 390.560632][T10406] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1244'. [ 390.626082][T10402] veth0_macvtap: left promiscuous mode [ 390.743544][ T25] block nbd0: Possible stuck request ffff888027770000: control (read@0,4096B). Runtime 120 seconds [ 392.858022][T10429] netlink: 'syz.1.1253': attribute type 10 has an invalid length. [ 392.927608][T10424] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 392.928542][T10429] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1253'. [ 393.738278][T10448] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1254'. [ 393.883593][T10452] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 394.362429][T10428] syzkaller0: entered promiscuous mode [ 394.420611][T10428] syzkaller0: entered allmulticast mode [ 394.896231][ T5287] veth0_macvtap: entered promiscuous mode [ 395.139682][T10472] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1258'. [ 395.423209][T10472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.545342][T10472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.715370][T10472] bond0 (unregistering): Released all slaves [ 396.775299][T10497] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 397.207425][T10497] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 397.445841][T10497] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 397.510666][T10515] netlink: 'syz.3.1268': attribute type 29 has an invalid length. [ 397.676959][T10497] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 399.366748][T10546] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1274'. [ 399.451441][T10543] netlink: 'syz.4.1273': attribute type 25 has an invalid length. [ 399.459355][T10543] netlink: 'syz.4.1273': attribute type 3 has an invalid length. [ 399.677967][T10543] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1273'. [ 400.941394][ T5003] block nbd1: Possible stuck request ffff888027810000: control (read@0,4096B). Runtime 90 seconds [ 402.424294][T10575] option changes via remount are deprecated (pid=10568 comm=syz.1.1283) [ 404.627230][T10604] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1292'. [ 404.998221][T10614] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1295'. [ 407.226736][T10641] netlink: 'syz.7.1304': attribute type 16 has an invalid length. [ 407.248659][T10641] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1304'. [ 411.422779][ T4991] udevd[4991]: worker [7695] /devices/virtual/block/nbd0 is taking a long time [ 411.440970][ T4991] udevd[4991]: worker [8792] /devices/virtual/block/nbd1 is taking a long time [ 411.757178][T10634] sit0: left promiscuous mode [ 411.761984][T10634] sit0: entered allmulticast mode [ 411.774871][T10641] veth0_macvtap: entered allmulticast mode [ 412.055343][T10667] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1309'. [ 413.346529][T10691] netlink: 'syz.3.1316': attribute type 1 has an invalid length. [ 413.641506][T10706] netlink: 4008 bytes leftover after parsing attributes in process `syz.4.1317'. [ 414.034344][T10717] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1323'. [ 414.305661][T10719] syzkaller0: entered promiscuous mode [ 414.322023][T10719] syzkaller0: entered allmulticast mode [ 414.452856][T10725] netlink: 'syz.6.1325': attribute type 13 has an invalid length. [ 414.575923][T10731] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1325'. [ 416.089038][T10725] veth0_vlan: left promiscuous mode [ 416.323516][ T5641] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 419.077567][T10317] lo speed is unknown, defaulting to 1000 [ 419.112775][ T7349] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.136098][T10317] sz1: Port: 1 Link DOWN [ 419.146953][ T7349] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.175376][T10775] »»»»»»: renamed from wg2 [ 419.239354][ T7349] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.251256][ T9] lo speed is unknown, defaulting to 1000 [ 419.283034][ T7349] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.335667][T10782] netlink: 'syz.4.1338': attribute type 2 has an invalid length. [ 419.357937][ T7349] tipc: Subscription rejected, illegal request [ 419.367734][T10782] tipc: Started in network mode [ 419.384130][T10782] tipc: Node identity 8, cluster identity 4711 [ 419.446687][T10782] tipc: Node number set to 8 [ 419.482024][T10783] netlink: 'syz.1.1339': attribute type 6 has an invalid length. [ 419.512134][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1339'. [ 419.583666][T10791] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.1342'. [ 420.782009][ T25] block nbd0: Possible stuck request ffff888027770000: control (read@0,4096B). Runtime 150 seconds [ 422.913573][T10830] netlink: 'syz.7.1347': attribute type 1 has an invalid length. [ 422.998442][T10833] ip6tnl0: entered allmulticast mode [ 423.399620][T10850] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1351'. [ 426.207165][T10909] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1363'. [ 426.410987][T10900] syzkaller0: entered promiscuous mode [ 426.447206][T10900] syzkaller0: entered allmulticast mode [ 427.126988][T10927] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 427.272664][T10927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.282856][T10933] netlink: 'syz.4.1366': attribute type 1 has an invalid length. [ 428.422410][T10945] netlink: 'syz.4.1370': attribute type 2 has an invalid length. [ 428.438342][T10945] netlink: 'syz.4.1370': attribute type 2 has an invalid length. [ 431.017991][T10929] lo speed is unknown, defaulting to 1000 [ 431.020869][ T5003] block nbd1: Possible stuck request ffff888027810000: control (read@0,4096B). Runtime 120 seconds [ 431.147503][T10960] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1376'. [ 431.194834][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1374'. [ 431.877133][T10967] netlink: 11774 bytes leftover after parsing attributes in process `syz.6.1377'. [ 431.927387][T10967] netlink: 11774 bytes leftover after parsing attributes in process `syz.6.1377'. [ 432.890643][T10972] netlink: 'syz.7.1378': attribute type 10 has an invalid length. [ 433.523158][T10989] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1383'. [ 433.865361][T10993] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1385'. [ 435.970909][T11018] netlink: 'syz.6.1395': attribute type 21 has an invalid length. [ 435.979082][T11018] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1395'. [ 436.020479][T11018] netlink: 'syz.6.1395': attribute type 11 has an invalid length. [ 436.055462][T11018] netlink: 448 bytes leftover after parsing attributes in process `syz.6.1395'. [ 436.068544][T11026] netlink: 'syz.4.1396': attribute type 2 has an invalid length. [ 436.713276][T11033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1398'. [ 437.728878][T11059] netlink: 'syz.6.1404': attribute type 4 has an invalid length. [ 437.754102][T11059] netlink: 'syz.6.1404': attribute type 17 has an invalid length. [ 437.793997][ T5824] lo speed is unknown, defaulting to 1000 [ 437.811385][ T5824] sz1: Port: 1 Link ACTIVE [ 437.871115][ T5737] lo speed is unknown, defaulting to 1000 [ 439.983067][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.989474][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.056736][T11089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1411'. [ 442.109299][T11089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1411'. [ 442.238188][T11090] netlink: 'syz.4.1411': attribute type 2 has an invalid length. [ 442.276720][T11090] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1411'. [ 442.647239][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'. [ 443.106126][T11109] : port 1(ip6gretap0) entered blocking state [ 443.120871][T11109] : port 1(ip6gretap0) entered disabled state [ 443.137665][T11109] ip6gretap0: entered allmulticast mode [ 443.159065][T11109] ip6gretap0: entered promiscuous mode [ 445.295955][T11117] netlink: 'syz.1.1418': attribute type 21 has an invalid length. [ 445.348806][T11117] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1418'. [ 445.372402][T11117] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 445.388430][T11128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1422'. [ 445.399606][T11128] bond_slave_0: entered allmulticast mode [ 445.666667][T11132] netlink: 'syz.4.1424': attribute type 1 has an invalid length. [ 445.897554][T11142] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 445.945300][T11142] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 445.945511][T11142] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 446.331157][T11132] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.1424'. [ 449.035683][ T5641] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 449.043322][ T5641] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 449.507791][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1437'. [ 449.547753][T11172] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1438'. [ 450.147470][T11179] netlink: 'syz.6.1440': attribute type 10 has an invalid length. [ 450.238232][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 450.500611][T11181] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1442'. [ 450.606398][T11185] netlink: 'syz.7.1443': attribute type 10 has an invalid length. [ 450.880554][ T25] block nbd0: Possible stuck request ffff888027770000: control (read@0,4096B). Runtime 180 seconds [ 451.333381][T11211] netlink: 'syz.3.1447': attribute type 2 has an invalid length. [ 452.327239][T11226] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1456'. [ 452.682438][T11237] ªªªªª(: renamed from bridge_slave_0 (while UP) [ 452.713262][T11239] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1459'. [ 452.964381][T11239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.990675][T11239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.135062][T11239] bond0 (unregistering): Released all slaves [ 453.259276][T11234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.339556][T11279] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1469'. [ 454.870476][T11286] sch_tbf: burst 2 is lower than device veth0_to_bond mtu (1514) ! [ 456.535549][T11305] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1477'. [ 456.699685][T11309] netlink: 5252 bytes leftover after parsing attributes in process `syz.6.1477'. [ 456.742334][T11309] nbd: must specify at least one socket [ 457.947224][T11306] .¿: renamed from vlan0 (while UP) [ 458.157177][T11322] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.246901][T11328] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1483'. [ 458.604882][T11322] bridge_slave_0 (unregistering): left allmulticast mode [ 458.676005][T11322] bridge_slave_0 (unregistering): left promiscuous mode [ 458.746427][T11322] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.176051][T11337] tap0: tun_chr_ioctl cmd 2147767507 [ 459.203617][T11337] netlink: 'syz.4.1484': attribute type 9 has an invalid length. [ 459.611637][T11356] gretap0 speed is unknown, defaulting to 1000 [ 459.631947][T11356] gretap0 speed is unknown, defaulting to 1000 [ 459.657498][T11356] gretap0 speed is unknown, defaulting to 1000 [ 459.683082][T11356] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 459.719242][T11342] syzkaller0: entered promiscuous mode [ 459.728701][T11359] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1490'. [ 459.763701][T11356] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 459.785997][T11342] syzkaller0: entered allmulticast mode [ 459.802917][T11356] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 460.060715][T11356] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 460.155137][T11362] netlink: 'syz.1.1492': attribute type 10 has an invalid length. [ 460.808420][T11356] gretap0 speed is unknown, defaulting to 1000 [ 461.120141][ T5003] block nbd1: Possible stuck request ffff888027810000: control (read@0,4096B). Runtime 150 seconds [ 461.197333][T11356] gretap0 speed is unknown, defaulting to 1000 [ 461.210534][T11377] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1495'. [ 461.258110][T11356] gretap0 speed is unknown, defaulting to 1000 [ 461.282403][T11356] gretap0 speed is unknown, defaulting to 1000 [ 461.309423][T11356] gretap0 speed is unknown, defaulting to 1000 [ 463.549518][T11424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1509'. [ 463.657796][T11427] netlink: 'syz.6.1508': attribute type 29 has an invalid length. [ 464.708031][T11451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.177758][T11458] netlink: 'syz.1.1516': attribute type 2 has an invalid length. [ 465.251757][T11458] tipc: Started in network mode [ 465.271381][T11458] tipc: Node identity 8, cluster identity 4711 [ 465.308157][T11458] tipc: Node number set to 8 [ 465.483510][T11463] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 465.749035][T11450] netlink: 'syz.6.1514': attribute type 1 has an invalid length. [ 465.769904][T11469] netlink: 'syz.7.1519': attribute type 10 has an invalid length. [ 465.823857][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1520'. [ 465.885294][T11469] geneve1: entered promiscuous mode [ 467.232206][T11502] tc_dump_action: action bad kind [ 467.631340][T11512] netlink: 'syz.7.1533': attribute type 33 has an invalid length. [ 469.153234][T11546] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1542'. [ 469.842662][T11564] cgroup: Unknown subsys name 'C' [ 470.087678][T11569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1548'. [ 471.018368][T11584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1554'. [ 471.035246][T11584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1554'. [ 471.647115][T11594] netlink: 'syz.6.1558': attribute type 2 has an invalid length. [ 471.665773][T11604] netlink: 'syz.3.1560': attribute type 2 has an invalid length. [ 471.665847][T11604] tipc: Started in network mode [ 471.666017][T11604] tipc: Node identity 8, cluster identity 4711 [ 471.666060][T11604] tipc: Node number set to 8 [ 471.716197][T11602] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1561'. [ 472.080120][T11610] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1562'. [ 472.852432][T11623] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1567'. [ 472.943190][T11627] netlink: 'syz.4.1568': attribute type 10 has an invalid length. [ 473.024607][T11627] team0: Device wg2 is of different type [ 473.351222][T11638] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 473.375411][T11638] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 473.595846][T11645] netlink: 'syz.4.1574': attribute type 2 has an invalid length. [ 474.060367][T11658] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1578'. [ 474.114051][T11658] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1578'. [ 474.161081][T11658] netlink: 'syz.4.1578': attribute type 10 has an invalid length. [ 474.277025][T11666] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1579'. [ 474.726531][T11676] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1583'. [ 475.039436][T11683] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1585'. [ 475.187140][T11683] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 475.420276][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1587'. [ 475.608732][T11694] netlink: 'syz.1.1588': attribute type 10 has an invalid length. [ 475.757835][T11699] IPv6: NLM_F_CREATE should be specified when creating new route [ 475.908164][T11694] team0 (unregistering): Port device team_slave_0 removed [ 476.075577][T11694] team0 (unregistering): Port device team_slave_1 removed [ 476.090724][T11708] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1593'. [ 476.191396][T11694] team0 (unregistering): Port device bond0 removed [ 476.257802][T11706] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1590'. [ 477.172092][T11722] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1597'. [ 477.286475][T11726] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1598'. [ 477.894441][T11739] netlink: 5252 bytes leftover after parsing attributes in process `syz.6.1601'. [ 478.017573][T11739] nbd: must specify at least one socket [ 478.167459][T11734] netlink: 'syz.1.1600': attribute type 29 has an invalid length. [ 478.589747][T11749] netlink: 'syz.7.1603': attribute type 10 has an invalid length. [ 479.589732][T11766] netlink: 'syz.4.1609': attribute type 4 has an invalid length. [ 479.618611][T11766] netlink: 'syz.4.1609': attribute type 17 has an invalid length. [ 479.815256][T11771] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1612'. [ 479.931534][T11772] netlink: 822 bytes leftover after parsing attributes in process `syz.1.1610'. [ 480.073744][T11768] netlink: 'syz.1.1610': attribute type 1 has an invalid length. [ 480.084176][T11779] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1613'. [ 480.112722][T11768] netlink: 'syz.1.1610': attribute type 1 has an invalid length. [ 480.629821][T11786] netlink: 5204 bytes leftover after parsing attributes in process `syz.3.1614'. [ 481.014042][ T25] block nbd0: Possible stuck request ffff888027770000: control (read@0,4096B). Runtime 210 seconds [ 481.128611][T11797] netlink: 'syz.1.1619': attribute type 10 has an invalid length. [ 481.151361][T11797] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 481.561041][T11810] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1624'. [ 481.587757][T11807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1623'. [ 481.811466][T11812] netlink: 'syz.4.1625': attribute type 29 has an invalid length. [ 482.033500][T11819] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 482.077167][ T48] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 482.085727][ T48] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 482.106536][T11822] netlink: 'syz.3.1628': attribute type 4 has an invalid length. [ 482.114594][T11822] netlink: 'syz.3.1628': attribute type 17 has an invalid length. [ 482.139958][T11822] lo: left promiscuous mode [ 482.589106][T11828] netlink: 10420 bytes leftover after parsing attributes in process `syz.6.1630'. [ 482.865278][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1627'. [ 482.921889][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1633'. [ 483.431153][T11850] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 483.548369][T11857] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1638'. [ 483.573445][T11853] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz1' [ 483.604265][T11847] lo speed is unknown, defaulting to 1000 [ 484.341023][T11877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.556696][T11847] gretap0 speed is unknown, defaulting to 1000 [ 484.878605][T11887] __nla_validate_parse: 1 callbacks suppressed [ 484.878739][T11887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1647'. [ 484.884072][T11890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1648'. [ 485.609879][T11893] lo speed is unknown, defaulting to 1000 [ 486.643917][T11910] sch_fq: defrate 1 ignored. [ 486.853235][T11912] validate_nla: 1 callbacks suppressed [ 486.853325][T11912] netlink: 'syz.3.1656': attribute type 2 has an invalid length. [ 488.217072][T11925] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1659'. [ 488.396070][ T5641] Bluetooth: hci5: unexpected subevent 0x19 length: 150 > 28 [ 488.403834][ T5641] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 488.490283][T11893] gretap0 speed is unknown, defaulting to 1000 [ 488.784630][T11935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1663'. [ 488.899415][T11940] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 489.119864][T11949] openvswitch: netlink: IPv4 tunnel dst address is zero [ 490.507254][T11965] netlink: 'syz.6.1668': attribute type 2 has an invalid length. [ 490.985404][T11974] option changes via remount are deprecated (pid=11970 comm=syz.4.1670) [ 491.049497][T11979] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1671'. [ 491.136915][T11976] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1672'. [ 491.159474][T11982] netlink: 'syz.3.1673': attribute type 10 has an invalid length. [ 491.172966][T11982] wg2: left promiscuous mode [ 491.195382][ T5003] block nbd1: Possible stuck request ffff888027810000: control (read@0,4096B). Runtime 180 seconds [ 491.432325][T11982] wg2: entered promiscuous mode [ 491.437522][T11982] team0: Device wg2 is of different type [ 492.445653][T12009] netlink: 'syz.6.1680': attribute type 39 has an invalid length. [ 492.497969][T12001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1679'. [ 492.519583][T12010] netlink: 'syz.1.1681': attribute type 1 has an invalid length. [ 492.556547][T12010] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.1681'. [ 492.615593][T12010] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1681'. [ 492.646654][T12001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1679'. [ 495.326202][T12023] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1685'. [ 495.466221][T12025] netlink: 'syz.7.1687': attribute type 2 has an invalid length. [ 495.547763][T12033] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1688'. [ 495.789595][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1684'. [ 495.806715][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1689'. [ 496.560123][T12053] netlink: 'syz.4.1693': attribute type 29 has an invalid length. [ 496.581272][T12053] netlink: 'syz.4.1693': attribute type 29 has an invalid length. [ 497.550066][T12076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1699'. [ 498.956555][T12094] syzkaller0: entered promiscuous mode [ 499.024834][T12094] syzkaller0: entered allmulticast mode [ 499.082972][T12097] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 501.425491][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.432109][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.632947][T12116] netlink: 5252 bytes leftover after parsing attributes in process `syz.4.1708'. [ 502.249320][T12129] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1712'. [ 502.719028][T12141] netlink: 'syz.1.1724': attribute type 17 has an invalid length. [ 502.832228][T12140] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1714'. [ 502.889502][T12141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.973019][T12141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.992681][T12145] netlink: 'syz.7.1715': attribute type 4 has an invalid length. [ 503.000792][T12145] netlink: 'syz.7.1715': attribute type 17 has an invalid length. [ 503.093303][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1713'. [ 503.142003][T12141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.164846][T12141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.192036][T12141] veth1_vlan: left promiscuous mode [ 503.209761][T12141] veth0_vlan: left promiscuous mode [ 503.224016][T12141] veth0_vlan: entered promiscuous mode [ 503.252054][T12141] veth1_vlan: entered promiscuous mode [ 503.275035][T12141] veth0_macvtap: left promiscuous mode [ 503.292556][T12141] veth0_macvtap: entered promiscuous mode [ 503.323471][T12141] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 503.351686][T12141] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 503.383574][T12141] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 503.405336][T12141] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 504.161261][T12145] lo: left promiscuous mode [ 504.201050][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.256069][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.285403][T12159] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1718'. [ 504.302195][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.690607][T12169] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1721'. [ 505.202556][T12182] openvswitch: netlink: Unexpected mask (mask=400240, allowed=410048) [ 505.394521][T12187] netlink: 'syz.6.1728': attribute type 10 has an invalid length. [ 505.443314][T12189] netlink: 'syz.4.1729': attribute type 16 has an invalid length. [ 505.467247][T12189] netlink: 'syz.4.1729': attribute type 17 has an invalid length. [ 505.485507][T12189] lo: entered promiscuous mode [ 505.499565][T12189] tunl0: entered promiscuous mode [ 505.547385][T12189] gre0: entered promiscuous mode [ 505.578636][T12189] gretap0: entered promiscuous mode [ 505.640311][T12189] erspan0: entered promiscuous mode [ 505.684851][T12189] ip_vti0: entered promiscuous mode [ 505.722261][T12189] ip6_vti0: entered promiscuous mode [ 505.754011][T12189] sit0: entered promiscuous mode [ 505.799932][T12189] ip6tnl0: entered promiscuous mode [ 505.830939][T12189] ip6gre0: entered promiscuous mode [ 505.836998][T12189] syz_tun: entered promiscuous mode [ 505.863534][T12189] ip6gretap0: entered promiscuous mode [ 505.879038][T12200] netlink: 176 bytes leftover after parsing attributes in process `syz.7.1731'. [ 505.911907][T12189] bridge0: entered promiscuous mode [ 505.928491][T12189] vcan0: entered promiscuous mode [ 505.961700][T12189] .`: entered promiscuous mode [ 505.967737][T12189] bond_slave_0: entered promiscuous mode [ 505.974173][T12189] bond_slave_1: entered promiscuous mode [ 505.983502][T12189] team0: entered promiscuous mode [ 506.006599][T12189] team_slave_0: entered promiscuous mode [ 506.010082][T12192] openvswitch: netlink: IPv4 tun info is not correct [ 506.014397][T12189] team_slave_1: entered promiscuous mode [ 506.015966][T12189] dummy0: entered promiscuous mode [ 506.043134][T12189] nlmon0: entered promiscuous mode [ 506.049359][T12189] batadv0: entered promiscuous mode [ 506.056254][T12189] vxcan0: entered promiscuous mode [ 506.067772][T12189] vxcan1: entered promiscuous mode [ 506.076557][T12189] veth0: entered promiscuous mode [ 506.083404][T12189] veth1: entered promiscuous mode [ 506.089480][T12189] wg0: entered promiscuous mode [ 506.095540][T12189] wg1: entered promiscuous mode [ 506.110518][T12192] netlink: 'syz.4.1729': attribute type 21 has an invalid length. [ 506.132439][T12189] wg2: entered promiscuous mode [ 506.178323][T12189] veth0_to_bridge: entered promiscuous mode [ 506.197880][T12189] veth1_to_bridge: entered promiscuous mode [ 506.209156][T12189] veth0_to_bond: entered promiscuous mode [ 506.236699][T12189] veth1_to_bond: entered promiscuous mode [ 506.268242][T12189] veth0_to_team: entered promiscuous mode [ 506.279618][T12198] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1729'. [ 506.298091][T12189] veth1_to_team: entered promiscuous mode [ 506.316155][T12189] veth0_to_batadv: entered promiscuous mode [ 506.324857][T12189] batadv_slave_0: entered promiscuous mode [ 506.339003][T12189] veth1_to_batadv: entered promiscuous mode [ 506.367160][T12189] batadv_slave_1: entered promiscuous mode [ 506.387164][T12189] xfrm0: entered promiscuous mode [ 506.406960][T12189] veth0_to_hsr: entered promiscuous mode [ 506.420037][T12189] veth1_to_hsr: entered promiscuous mode [ 506.463328][T12189] hsr0: entered promiscuous mode [ 506.484013][T12189] veth1_virt_wifi: entered promiscuous mode [ 506.514538][T12189] veth0_virt_wifi: entered promiscuous mode [ 506.548689][T12189] virt_wifi0: entered promiscuous mode [ 506.594710][T12189] macvtap0: entered promiscuous mode [ 506.654472][T12189] macsec0: entered promiscuous mode [ 506.713004][T12189] macsec0: left allmulticast mode [ 506.728604][T12189] veth1_macvtap: left allmulticast mode [ 506.751482][T12189] geneve0: entered promiscuous mode [ 506.774928][T12189] geneve1: entered promiscuous mode [ 506.805481][T12189] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 506.829125][T12189] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 506.844890][T12189] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 506.913030][T12189] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 506.940172][T12189] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 507.006246][T12189] mac80211_hwsim hwsim10 O3ãc¤±: entered promiscuous mode [ 507.056473][T12189] sit1: entered promiscuous mode [ 507.097476][T12189] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 507.144972][T12189] mac80211_hwsim hwsim25 wlan2: entered promiscuous mode [ 507.155370][T12189] ip6tnl1: entered promiscuous mode [ 507.161969][T12207] netlink: 'syz.3.1733': attribute type 4 has an invalid length. [ 507.169829][T12189] mac80211_hwsim hwsim29 wlan3: entered promiscuous mode [ 507.169989][T12207] netlink: 'syz.3.1733': attribute type 17 has an invalid length. [ 507.189695][T10310] gretap0 speed is unknown, defaulting to 1000 [ 507.217578][T12192] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1729'. [ 507.250136][T12198] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 507.279778][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1735'. [ 507.282985][T12198] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 507.367576][T12198] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 509.553257][T12257] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1747'. [ 510.042317][T12266] netlink: 'syz.4.1750': attribute type 4 has an invalid length. [ 510.079578][T12266] netlink: 'syz.4.1750': attribute type 17 has an invalid length. [ 510.086021][T12262] netlink: 'syz.7.1748': attribute type 21 has an invalid length. [ 510.096263][T12262] IPv6: NLM_F_CREATE should be specified when creating new route [ 510.107808][T12262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 510.115275][T12262] IPv6: NLM_F_CREATE should be set when creating new route [ 510.123082][T12262] IPv6: NLM_F_CREATE should be set when creating new route [ 510.130686][T12262] IPv6: NLM_F_CREATE should be set when creating new route [ 510.137974][T12266] lo: left promiscuous mode [ 510.517870][T12275] netlink: 'syz.1.1751': attribute type 21 has an invalid length. [ 510.545514][T12276] sit0: entered allmulticast mode [ 510.581203][T12275] netlink: 'syz.1.1751': attribute type 1 has an invalid length. [ 510.660396][T12276] sit0: entered promiscuous mode [ 512.738527][ T25] block nbd0: Possible stuck request ffff888027770000: control (read@0,4096B). Runtime 240 seconds [ 513.547368][T12302] netlink: 'syz.7.1759': attribute type 13 has an invalid length. [ 513.571186][T12302] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1759'. [ 513.683604][T12305] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1759'. [ 513.815474][T12298] : port 1(ip6gretap0) entered blocking state [ 513.849130][T12298] : port 1(ip6gretap0) entered disabled state [ 513.891874][T12298] ip6gretap0: entered allmulticast mode [ 513.940692][T12300] ip6gretap0: left allmulticast mode [ 514.013070][T12300] : port 1(ip6gretap0) entered disabled state [ 514.382030][T12325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1763'. [ 516.616516][T12350] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1770'. [ 517.032790][T12355] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1771'. [ 518.075425][T12365] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1773'. [ 518.091392][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1773'. [ 518.334093][T12365] bridge_slave_1: left allmulticast mode [ 518.339827][T12365] bridge_slave_1: left promiscuous mode [ 518.351458][T12365] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.910169][T12371] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1775'. [ 520.864879][T12392] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1781'. [ 521.260831][ T5003] block nbd1: Possible stuck request ffff888027810000: control (read@0,4096B). Runtime 210 seconds [ 521.601238][T12410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1787'. [ 521.631790][T12410] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1787'. [ 522.321076][T12419] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1790'. [ 522.342795][T12419] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 522.913993][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 522.929761][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 522.946394][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 522.957715][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 522.969365][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 524.362267][T12430] lo speed is unknown, defaulting to 1000 [ 525.030546][ T5641] Bluetooth: hci0: command tx timeout [ 525.111341][ T48] team0: Port device netdevsim0 removed [ 525.227171][T12462] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1802'. [ 525.543480][T12430] gretap0 speed is unknown, defaulting to 1000 [ 525.637152][T12470] netlink: 'syz.4.1803': attribute type 2 has an invalid length. [ 526.145100][T12476] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1804'. [ 526.717305][T12478] netlink: 5252 bytes leftover after parsing attributes in process `syz.1.1806'. [ 526.742213][T12478] nbd: must specify at least one socket [ 527.100939][ T5641] Bluetooth: hci0: command tx timeout [ 528.711381][T12492] option changes via remount are deprecated (pid=12491 comm=syz.1.1809) [ 529.180940][ T5641] Bluetooth: hci0: command tx timeout [ 529.629291][T12519] netlink: 'syz.4.1813': attribute type 10 has an invalid length. [ 529.765623][T12518] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 529.913367][T12525] netlink: 'syz.1.1814': attribute type 2 has an invalid length. [ 530.181382][ T5287] 8021q: adding VLAN 0 to HW filter on device eth13 [ 530.523227][T12430] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.557000][T12430] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.597895][T12430] bridge_slave_0: entered allmulticast mode [ 530.629199][T12430] bridge_slave_0: entered promiscuous mode [ 530.658935][T12535] netlink: 'syz.7.1812': attribute type 2 has an invalid length. [ 530.750921][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 530.763248][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 530.772963][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 530.788488][ T48] hsr_slave_0: left promiscuous mode [ 530.805476][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 530.824830][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 530.834016][ T48] hsr_slave_1: left promiscuous mode [ 531.279592][ T5641] Bluetooth: hci0: command tx timeout [ 532.269762][ T48] team0 (unregistering): Port device team_slave_1 removed [ 532.306297][ T48] team0 (unregistering): Port device team_slave_0 removed [ 532.346822][ T1165] smbdirect: ib_dev[syz1] removed [ 532.535859][ T115] smc: removing ib device sz1 [ 532.570865][T12568] netlink: 'syz.7.1825': attribute type 2 has an invalid length. [ 532.606466][T12430] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.626441][T12430] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.635557][T12430] bridge_slave_1: entered allmulticast mode [ 532.638256][ T115] smbdirect: ib_dev[sz1] removed [ 532.665382][T12430] bridge_slave_1: entered promiscuous mode [ 532.803452][ T5737] lo speed is unknown, defaulting to 1000 [ 532.850489][ T5737] sz1: Port: 1 Link DOWN [ 532.860584][ T5641] Bluetooth: hci2: command tx timeout [ 532.957806][T12574] netlink: 'syz.7.1827': attribute type 2 has an invalid length. [ 533.030201][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 533.087946][ T29] infiniband syz1: ib_query_port failed (-19) [ 533.330100][T12430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.476455][T12430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.545279][ T5641] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4 [ 533.863831][T12430] team0: Port device team_slave_0 added [ 533.929213][T12593] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1831'. [ 533.963762][T12430] team0: Port device team_slave_1 added [ 534.217099][T12430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.281057][T12430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.380505][T12430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.427433][T12430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.460517][T12430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.533993][T12607] netlink: 'syz.1.1834': attribute type 21 has an invalid length. [ 534.566020][T12607] IPv6: NLM_F_CREATE should be specified when creating new route [ 534.587629][T12430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.618766][T12607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 534.626302][T12607] IPv6: NLM_F_CREATE should be set when creating new route [ 534.635513][T12607] IPv6: NLM_F_CREATE should be set when creating new route [ 534.643052][T12607] IPv6: NLM_F_CREATE should be set when creating new route [ 534.860685][T12538] gretap0 speed is unknown, defaulting to 1000 [ 534.942565][ T5641] Bluetooth: hci2: command tx timeout [ 535.789040][T12430] hsr_slave_0: entered promiscuous mode [ 535.852316][T12430] hsr_slave_1: entered promiscuous mode [ 535.920830][T12430] debugfs: 'hsr0' already exists in 'hsr' [ 535.956775][T12430] Cannot create hsr debugfs directory [ 537.022560][ T5641] Bluetooth: hci2: command tx timeout [ 537.476615][ T5287] 8021q: adding VLAN 0 to HW filter on device eth14 [ 537.973345][T12649] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1844'. [ 538.274553][T12538] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.283845][T12538] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.291844][T12538] bridge_slave_0: entered allmulticast mode [ 538.302212][T12538] bridge_slave_0: entered promiscuous mode [ 538.402143][T12538] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.438477][T12538] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.457052][T12538] bridge_slave_1: entered allmulticast mode [ 538.484187][T12538] bridge_slave_1: entered promiscuous mode [ 538.744982][T12538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.749574][T12686] netlink: 'syz.7.1848': attribute type 10 has an invalid length. [ 538.824152][T12687] netlink: 'syz.7.1848': attribute type 10 has an invalid length. [ 538.921230][T12538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.025010][T12538] team0: Port device team_slave_0 added [ 539.051096][T12538] team0: Port device team_slave_1 added [ 539.100616][ T5641] Bluetooth: hci2: command tx timeout [ 539.178075][T12538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.203834][T12538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.277258][T12538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.315492][ T5287] 8021q: adding VLAN 0 to HW filter on device eth15 [ 539.325217][T12538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.346048][T12538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.380255][T12538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.615978][T12538] hsr_slave_0: entered promiscuous mode [ 539.639245][T12538] hsr_slave_1: entered promiscuous mode [ 539.645848][T12538] debugfs: 'hsr0' already exists in 'hsr' [ 539.764207][T12538] Cannot create hsr debugfs directory [ 539.907598][T12706] netlink: 'syz.4.1852': attribute type 4 has an invalid length. [ 539.928499][T12706] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1852'. [ 540.528197][T12694] gretap0 speed is unknown, defaulting to 1000 [ 540.715013][T12430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.982548][ T5287] 8021q: adding VLAN 0 to HW filter on device eth16 [ 541.058198][T12430] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.121788][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.129048][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.219035][ T115] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.226243][ T115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.848765][T12538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.932980][T12538] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.962250][ T115] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.969563][ T115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.116576][ T115] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.123914][ T115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.346361][T12538] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 542.380659][T12538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.121374][ T25] block nbd0: Possible stuck request ffff888027770000: control (read@0,4096B). Runtime 270 seconds [ 544.579999][T12430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.934454][T12538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.567008][T12837] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1868'. [ 546.201793][T12430] veth0_vlan: entered promiscuous mode [ 546.260211][T12430] veth1_vlan: entered promiscuous mode [ 546.267549][T12855] netlink: 'syz.1.1871': attribute type 21 has an invalid length. [ 546.314989][T12855] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1871'. [ 546.480937][T12861] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1873'. [ 546.507659][T12430] veth0_macvtap: entered promiscuous mode [ 546.534952][T12430] veth1_macvtap: entered promiscuous mode [ 546.673044][T12855] netlink: 'syz.1.1871': attribute type 3 has an invalid length. [ 546.743820][T12538] veth0_vlan: entered promiscuous mode [ 546.765810][T12430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.806152][T12430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.881149][T12538] veth1_vlan: entered promiscuous mode [ 546.888077][T12874] netlink: 'syz.1.1875': attribute type 39 has an invalid length. [ 547.010385][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1875'. [ 547.111792][T12874] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 547.162328][T12538] veth0_macvtap: entered promiscuous mode [ 547.236130][T12874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1875'. [ 547.287307][T12538] veth1_macvtap: entered promiscuous mode [ 547.336532][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.347842][T12886] netlink: 'syz.7.1876': attribute type 2 has an invalid length. [ 547.370581][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.378369][T12886] netlink: 'syz.7.1876': attribute type 8 has an invalid length. [ 547.386407][T12886] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1876'. [ 547.448102][T12890] netlink: 'syz.7.1876': attribute type 2 has an invalid length. [ 547.479663][T12890] netlink: 'syz.7.1876': attribute type 8 has an invalid length. [ 547.536769][T12890] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1876'. [ 547.588110][T12891] netlink: 5252 bytes leftover after parsing attributes in process `syz.1.1877'. [ 547.616560][ T115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.629826][ T115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.721855][T12538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.863646][T12538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.821526][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.865692][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.590067][ T7349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.614551][ T7349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.726925][T12922] can: request_module (can-proto-0) failed. [ 550.259149][T12944] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1884'. [ 550.347574][T12942] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1885'. [ 550.470645][T12942] netlink: 'syz.4.1885': attribute type 10 has an invalid length. [ 550.512252][T12942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.558704][T12942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.624179][T12942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.678496][T12942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.688370][T12945] __nla_validate_parse: 1 callbacks suppressed [ 550.688407][T12945] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1887'. [ 550.795905][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1888'. [ 551.038496][T12961] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 551.261478][ T5630] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 551.270898][ T5630] Bluetooth: hci0: command 0x206a tx timeout [ 551.349154][ T5003] block nbd1: Possible stuck request ffff888027810000: control (read@0,4096B). Runtime 240 seconds [ 553.558849][T13001] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1900'. [ 553.633318][T13001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1900'. [ 553.690461][T13013] netlink: 'syz.7.1903': attribute type 10 has an invalid length. [ 554.508098][T13007] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1903'. [ 554.953927][T13037] netlink: 596 bytes leftover after parsing attributes in process `syz.8.1909'. [ 554.980087][T13037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.103695][T13048] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1915'. [ 557.491625][T13088] netlink: 'syz.7.1927': attribute type 10 has an invalid length. [ 557.555258][T13085] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1926'. [ 557.567592][T13090] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1928'. [ 557.911183][T13097] siw: device registration error -23 [ 557.931913][T13095] netlink: 'syz.8.1929': attribute type 1 has an invalid length. [ 559.829799][T13116] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1937'. [ 559.943084][T13126] netlink: 'syz.1.1939': attribute type 1 has an invalid length. [ 560.225614][T13131] netlink: 'syz.8.1940': attribute type 10 has an invalid length. [ 560.907098][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1942'. [ 561.546337][T13131] team0: Port device wlan0 added [ 561.664572][T13139] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1940'. [ 562.004436][T13160] netlink: 'syz.1.1945': attribute type 10 has an invalid length. [ 562.521778][T13171] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1948'. [ 562.839138][T13180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1951'. [ 562.868866][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.875397][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.666107][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1959'. [ 564.397346][T13212] netlink: 'syz.4.1962': attribute type 4 has an invalid length. [ 564.418356][T13212] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1962'. [ 564.884575][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1958'. [ 564.985794][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1958'. [ 566.858704][T13251] can: request_module (can-proto-0) failed. [ 566.939464][T13261] netlink: 'syz.1.1971': attribute type 4 has an invalid length. [ 566.949504][T13249] netlink: 'syz.7.1969': attribute type 2 has an invalid length. [ 567.080831][T13261] netlink: 'syz.1.1971': attribute type 17 has an invalid length. [ 568.496641][T13261] lo: left promiscuous mode [ 569.746228][T13295] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1975'. [ 570.111858][T13310] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1979'. [ 570.527614][T13322] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 570.725162][T13312] : port 1(ip6gretap0) entered blocking state [ 570.958000][T13312] : port 1(ip6gretap0) entered disabled state [ 570.991804][T13312] ip6gretap0: entered allmulticast mode [ 571.080087][T13324] ip6gretap0: left allmulticast mode [ 571.133565][T13324] : port 1(ip6gretap0) entered disabled state [ 571.165578][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1984'. [ 571.532685][T13350] netlink: 'syz.7.1987': attribute type 41 has an invalid length. [ 571.875680][T13364] netlink: 'syz.8.1991': attribute type 21 has an invalid length. [ 571.977310][T13360] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 573.802539][ T25] block nbd0: Possible stuck request ffff888027770000: control (read@0,4096B). Runtime 300 seconds [ 575.319911][T13380] netlink: 'syz.8.1994': attribute type 9 has an invalid length. [ 575.932217][T13421] netlink: 'syz.9.1997': attribute type 10 has an invalid length. [ 576.038561][T13421] netlink: 168 bytes leftover after parsing attributes in process `syz.9.1997'. [ 578.929310][T13473] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2010'. [ 579.902469][T13496] netlink: 'syz.9.2014': attribute type 1 has an invalid length. [ 580.013503][T13498] netlink: 624 bytes leftover after parsing attributes in process `syz.4.2015'. [ 581.098668][T13526] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2023'. [ 581.365909][T13534] netlink: 'syz.9.2024': attribute type 2 has an invalid length. [ 581.380647][T13534] netlink: 'syz.9.2024': attribute type 8 has an invalid length. [ 581.397492][T13534] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2024'. [ 581.421752][ T5003] block nbd1: Possible stuck request ffff888027810000: control (read@0,4096B). Runtime 270 seconds [ 582.389056][T13556] syzkaller0: entered promiscuous mode [ 582.402250][T13556] syzkaller0: entered allmulticast mode [ 583.008618][T13576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2037'. [ 583.147437][T13581] netlink: 'syz.7.2036': attribute type 1 has an invalid length. [ 583.557060][T13588] netlink: 128 bytes leftover after parsing attributes in process `syz.9.2039'. [ 587.232228][T13620] netlink: 'syz.9.2047': attribute type 39 has an invalid length. [ 587.938593][T13625] netlink: 'syz.8.2051': attribute type 11 has an invalid length. [ 587.970548][T13625] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2051'. [ 588.126523][T13632] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2054'. [ 588.462803][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 589.218353][T13659] bridge_slave_1: left allmulticast mode [ 589.226200][T13659] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.371928][T13659] ªªªªª(: left allmulticast mode [ 589.377717][T13659] bridge0: port 1(ªªªªª() entered disabled state [ 589.499441][ T5630] Bluetooth: hci5: Unable to find connection for big 0x00 [ 591.598111][T13692] netlink: 277 bytes leftover after parsing attributes in process `syz.8.2071'. [ 591.653030][T13692] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2071'. [ 592.701017][T13699] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2074'. [ 593.155731][T13707] openvswitch: netlink: IPv4 tun info is not correct [ 593.289143][T13707] netlink: 'syz.8.2076': attribute type 39 has an invalid length. [ 594.863854][T13722] netlink: 'syz.4.2080': attribute type 5 has an invalid length. [ 597.677232][ T4991] udevd[4991]: worker [7695] /devices/virtual/block/nbd0 timeout; kill it [ 597.704749][ T4991] udevd[4991]: seq 12682 '/devices/virtual/block/nbd0' killed [ 597.714324][ T4991] udevd[4991]: worker [8792] /devices/virtual/block/nbd1 timeout; kill it [ 597.742713][ T4991] udevd[4991]: seq 12805 '/devices/virtual/block/nbd1' killed [ 599.017710][T13720] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2079'. [ 599.196169][T13727] netlink: 'syz.7.2081': attribute type 2 has an invalid length. [ 600.200916][T13750] netlink: 'syz.7.2086': attribute type 13 has an invalid length. [ 600.323058][T13750] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2086'. [ 600.462010][T13756] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2087'. [ 601.302883][T13784] tmpfs: Bad value for 'gid' [ 601.363596][T13784] tmpfs: Bad value for 'gid' [ 602.425092][T13806] netlink: 'syz.4.2096': attribute type 2 has an invalid length. [ 603.215043][T13824] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2102'. [ 604.011302][ T25] block nbd0: Possible stuck request ffff888027770000: control (read@0,4096B). Runtime 330 seconds [ 604.410308][T13850] mac80211_hwsim hwsim19 ..ãc¤±: renamed from wlan1 (while UP) [ 604.765315][T13855] netlink: 'syz.9.2108': attribute type 10 has an invalid length. [ 605.214607][T13868] netlink: 'syz.7.2112': attribute type 3 has an invalid length. [ 605.235723][T13868] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2112'. [ 605.414843][T13855] team0 (unregistering): Port device team_slave_0 removed [ 605.488503][T13855] team0 (unregistering): Port device team_slave_1 removed [ 606.532086][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2117'. [ 608.697448][T13916] netlink: 5204 bytes leftover after parsing attributes in process `syz.9.2121'. [ 609.434457][T13946] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2126'. [ 609.555214][T13956] raw_sendmsg: syz.9.2130 forgot to set AF_INET. Fix it! [ 609.706948][T13954] netlink: 818 bytes leftover after parsing attributes in process `syz.9.2130'. [ 610.213485][T13970] netlink: 'syz.9.2133': attribute type 13 has an invalid length. [ 610.649576][T13970] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.657605][T13970] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.211494][T13970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.266557][T13970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.502196][ T5003] block nbd1: Possible stuck request ffff888027810000: control (read@0,4096B). Runtime 300 seconds [ 612.063344][T14004] netlink: 'syz.7.2141': attribute type 5 has an invalid length. [ 614.167616][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2153'. [ 614.190508][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2153'. [ 614.337777][T14038] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2153'. [ 614.483393][T14040] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 614.569231][T14040] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 614.569729][T14043] netlink: 'syz.1.2155': attribute type 28 has an invalid length. [ 614.680467][T14040] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 614.804398][T14043] netlink: 'syz.1.2155': attribute type 10 has an invalid length. [ 614.843685][T14040] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 615.309825][T14050] ref_ctr_offset mismatch. inode: 0x258 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xc [ 616.055413][T14061] mac80211_hwsim hwsim54 wlan1: entered allmulticast mode [ 616.775727][T14085] openvswitch: netlink: IPv4 tunnel dst address is zero [ 616.778896][T14082] netlink: 'syz.1.2167': attribute type 1 has an invalid length. [ 616.805136][T14082] netlink: 'syz.1.2167': attribute type 2 has an invalid length. [ 616.814021][T14080] gretap0 speed is unknown, defaulting to 1000 [ 617.512141][T14099] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2171'. [ 617.549917][T14099] openvswitch: netlink: Flow actions attr not present in new flow. [ 617.626729][T14101] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2170'. [ 620.179963][T14140] sch_tbf: burst 2 is lower than device veth0_to_bond mtu (1514) ! [ 620.463632][T14146] netlink: 'syz.9.2182': attribute type 5 has an invalid length. [ 622.075185][T14149] netlink: 16410 bytes leftover after parsing attributes in process `syz.7.2184'. [ 622.897861][T14164] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2186'. [ 623.544440][T14168] bridge_slave_0 (unregistering): left allmulticast mode [ 623.581257][T14168] bridge_slave_0 (unregistering): left promiscuous mode [ 623.603332][T14168] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.104038][T14184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2191'. [ 624.307140][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.314379][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.575873][T14188] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2193'. [ 624.686532][T14188] netlink: 'syz.9.2193': attribute type 21 has an invalid length. [ 624.846315][T14182] netlink: 'syz.1.2192': attribute type 7 has an invalid length. [ 625.167585][T14190] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2194'. [ 625.395836][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2196'. [ 625.998236][T14208] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2199'. [ 626.166284][T14211] netlink: 'syz.4.2197': attribute type 10 has an invalid length. [ 626.707919][T14211] team0 (unregistering): Port device team_slave_0 removed [ 626.769043][T14218] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2200'. [ 626.858661][T14214] sctp: [Deprecated]: syz.8.2199 (pid 14214) Use of struct sctp_assoc_value in delayed_ack socket option. [ 626.858661][T14214] Use struct sctp_sack_info instead [ 626.880263][T14211] team0 (unregistering): Port device team_slave_1 removed [ 627.141851][ T5825] syz1: Port: 1 Link DOWN [ 627.282059][T14218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.365522][T14221] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2201'. [ 627.393351][T14218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.637932][T14218] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 627.822703][T14218] bond0 (unregistering): Released all slaves [ 628.612104][T14234] netlink: 'syz.4.2204': attribute type 4 has an invalid length. [ 628.679423][T14234] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2204'. [ 630.278453][T14245] ------------[ cut here ]------------ [ 630.284245][T14245] !cfg80211_chandef_valid(chandef) [ 630.284267][T14245] WARNING: net/wireless/chan.c:796 at cfg80211_chandef_dfs_required+0xe06/0xec0, CPU#1: syz.1.2206/14245 [ 630.302465][T14245] Modules linked in: [ 630.306647][T14245] CPU: 1 UID: 0 PID: 14245 Comm: syz.1.2206 Not tainted syzkaller #0 PREEMPT(full) [ 630.316176][T14245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 630.326492][T14245] RIP: 0010:cfg80211_chandef_dfs_required+0xe06/0xec0 [ 630.333404][T14245] Code: de e8 5e 0d c1 f6 48 83 fb 3f 0f 87 aa 00 00 00 e8 0f 09 c1 f6 b8 01 00 00 00 89 d9 48 d3 e0 e9 41 f4 ff ff e8 fb 08 c1 f6 90 <0f> 0b 90 b8 ea ff ff ff e9 2e f4 ff ff e8 d8 8f a4 00 89 d1 80 e1 [ 630.353752][T14245] RSP: 0018:ffffc9000e277700 EFLAGS: 00010283 [ 630.360415][T14245] RAX: ffffffff8b04c405 RBX: ffff8880354c9858 RCX: 0000000000080000 [ 630.368449][T14245] RDX: ffffc90004252000 RSI: 00000000000008d5 RDI: 00000000000008d6 [ 630.376948][T14245] RBP: ffffc9000e277890 R08: ffffffff822634df R09: ffff8880b873f5e8 [ 630.385719][T14245] R10: dffffc0000000000 R11: ffffed100d5dc552 R12: 0000000000000006 [ 630.394205][T14245] R13: dffffc0000000000 R14: ffffc9000e277a00 R15: dffffc0000000000 [ 630.402685][T14245] FS: 00007f8eb7cd36c0(0000) GS:ffff888125388000(0000) knlGS:0000000000000000 [ 630.412162][T14245] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 630.418799][T14245] CR2: 0000200000000b40 CR3: 0000000065b50000 CR4: 00000000003526f0 [ 630.426981][T14245] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 630.435066][T14245] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 630.443116][T14245] Call Trace: [ 630.446488][T14245] [ 630.449495][T14245] ? kvfree_call_rcu+0x9f/0x430 [ 630.454554][T14245] ? ieee80211_free_chanctx+0x2dc/0x390 [ 630.460253][T14245] ? __pfx_ieee80211_free_chanctx+0x10/0x10 [ 630.466323][T14245] ? __pfx_cfg80211_chandef_dfs_required+0x10/0x10 [ 630.472951][T14245] _ieee80211_link_use_channel+0x27a/0x7f0 [ 630.478800][T14245] ? __pfx___ieee80211_link_release_channel+0x10/0x10 [ 630.485679][T14245] ? __pfx__ieee80211_link_use_channel+0x10/0x10 [ 630.492093][T14245] ? rcu_is_watching+0x15/0xb0 [ 630.496972][T14245] ieee80211_set_monitor_channel+0x692/0x8e0 [ 630.503128][T14245] ? __pfx_ieee80211_set_monitor_channel+0x10/0x10 [ 630.509682][T14245] ? __mutex_trylock_common+0x158/0x260 [ 630.515477][T14245] cfg80211_set_monitor_channel+0x22d/0x5f0 [ 630.517823][T14246] netlink: 'syz.1.2206': attribute type 1 has an invalid length. [ 630.521478][T14245] cfg80211_wext_siwfreq+0x713/0x850 [ 630.534594][T14245] ? __pfx_perf_trace_lock+0x10/0x10 [ 630.539941][T14245] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 630.545912][T14245] ? dev_load+0x21/0x1f0 [ 630.550354][T14245] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 630.556281][T14245] ioctl_standard_call+0xcb/0x1b0 [ 630.561417][T14245] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 630.567284][T14245] wext_ioctl_dispatch+0xee/0x410 [ 630.572413][T14245] ? __pfx_ioctl_standard_call+0x10/0x10 [ 630.578105][T14245] wext_handle_ioctl+0x10f/0x1d0 [ 630.583164][T14245] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 630.588693][T14245] sock_ioctl+0x159/0x7f0 [ 630.593216][T14245] ? __pfx_sock_ioctl+0x10/0x10 [ 630.598117][T14245] ? __fget_files+0x2a/0x420 [ 630.602945][T14245] ? __fget_files+0x3a0/0x420 [ 630.607684][T14245] ? __fget_files+0x2a/0x420 [ 630.612407][T14245] ? bpf_lsm_file_ioctl+0x9/0x20 [ 630.617445][T14245] ? __pfx_sock_ioctl+0x10/0x10 [ 630.622431][T14245] __se_sys_ioctl+0xfc/0x170 [ 630.627091][T14245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.633337][T14245] do_syscall_64+0x15f/0xf80 [ 630.638063][T14245] ? trace_irq_disable+0x3b/0x140 [ 630.643242][T14245] ? clear_bhb_loop+0x40/0x90 [ 630.647995][T14245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.653998][T14245] RIP: 0033:0x7f8eb6d9ce59 [ 630.658465][T14245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.678277][T14245] RSP: 002b:00007f8eb7cd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 630.686804][T14245] RAX: ffffffffffffffda RBX: 00007f8eb7015fa0 RCX: 00007f8eb6d9ce59 [ 630.694860][T14245] RDX: 00002000000000c0 RSI: 0000000000008b04 RDI: 0000000000000004 [ 630.703594][T14245] RBP: 00007f8eb6e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 630.711765][T14245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.719826][T14245] R13: 00007f8eb7016038 R14: 00007f8eb7015fa0 R15: 00007ffe93b24fc8 [ 630.727943][T14245] [ 630.731071][T14245] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 630.738393][T14245] CPU: 1 UID: 0 PID: 14245 Comm: syz.1.2206 Not tainted syzkaller #0 PREEMPT(full) [ 630.747804][T14245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 630.757898][T14245] Call Trace: [ 630.761212][T14245] [ 630.764173][T14245] vpanic+0x56c/0xa60 [ 630.768242][T14245] ? __pfx__printk+0x10/0x10 [ 630.772874][T14245] ? __pfx_vpanic+0x10/0x10 [ 630.777415][T14245] ? is_bpf_text_address+0x292/0x2b0 [ 630.782744][T14245] ? is_bpf_text_address+0x26/0x2b0 [ 630.787968][T14245] panic+0xc5/0xd0 [ 630.791702][T14245] ? __pfx_panic+0x10/0x10 [ 630.796151][T14245] __warn+0x315/0x4c0 [ 630.800140][T14245] ? cfg80211_chandef_dfs_required+0xe06/0xec0 [ 630.806317][T14245] ? cfg80211_chandef_dfs_required+0xe06/0xec0 [ 630.812488][T14245] __report_bug+0x29a/0x540 [ 630.817056][T14245] ? cfg80211_chandef_dfs_required+0xe06/0xec0 [ 630.823223][T14245] ? __pfx___report_bug+0x10/0x10 [ 630.828294][T14245] ? perf_trace_lock+0xff/0x410 [ 630.833159][T14245] ? __pfx___mutex_lock+0x10/0x10 [ 630.838253][T14245] ? cfg80211_chandef_dfs_required+0xe06/0xec0 [ 630.844418][T14245] report_bug+0x16a/0x220 [ 630.848770][T14245] ? cfg80211_chandef_dfs_required+0xe06/0xec0 [ 630.854949][T14245] ? cfg80211_chandef_dfs_required+0xe08/0xec0 [ 630.861124][T14245] handle_bug+0x9c/0x200 [ 630.865407][T14245] exc_invalid_op+0x1a/0x50 [ 630.869927][T14245] asm_exc_invalid_op+0x1a/0x20 [ 630.874786][T14245] RIP: 0010:cfg80211_chandef_dfs_required+0xe06/0xec0 [ 630.881572][T14245] Code: de e8 5e 0d c1 f6 48 83 fb 3f 0f 87 aa 00 00 00 e8 0f 09 c1 f6 b8 01 00 00 00 89 d9 48 d3 e0 e9 41 f4 ff ff e8 fb 08 c1 f6 90 <0f> 0b 90 b8 ea ff ff ff e9 2e f4 ff ff e8 d8 8f a4 00 89 d1 80 e1 [ 630.901189][T14245] RSP: 0018:ffffc9000e277700 EFLAGS: 00010283 [ 630.907265][T14245] RAX: ffffffff8b04c405 RBX: ffff8880354c9858 RCX: 0000000000080000 [ 630.915334][T14245] RDX: ffffc90004252000 RSI: 00000000000008d5 RDI: 00000000000008d6 [ 630.923417][T14245] RBP: ffffc9000e277890 R08: ffffffff822634df R09: ffff8880b873f5e8 [ 630.931422][T14245] R10: dffffc0000000000 R11: ffffed100d5dc552 R12: 0000000000000006 [ 630.939411][T14245] R13: dffffc0000000000 R14: ffffc9000e277a00 R15: dffffc0000000000 [ 630.947412][T14245] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 630.952474][T14245] ? cfg80211_chandef_dfs_required+0xe05/0xec0 [ 630.958657][T14245] ? kvfree_call_rcu+0x9f/0x430 [ 630.963527][T14245] ? ieee80211_free_chanctx+0x2dc/0x390 [ 630.969093][T14245] ? __pfx_ieee80211_free_chanctx+0x10/0x10 [ 630.975006][T14245] ? __pfx_cfg80211_chandef_dfs_required+0x10/0x10 [ 630.981547][T14245] _ieee80211_link_use_channel+0x27a/0x7f0 [ 630.987362][T14245] ? __pfx___ieee80211_link_release_channel+0x10/0x10 [ 630.994143][T14245] ? __pfx__ieee80211_link_use_channel+0x10/0x10 [ 631.000483][T14245] ? rcu_is_watching+0x15/0xb0 [ 631.005276][T14245] ieee80211_set_monitor_channel+0x692/0x8e0 [ 631.011274][T14245] ? __pfx_ieee80211_set_monitor_channel+0x10/0x10 [ 631.017790][T14245] ? __mutex_trylock_common+0x158/0x260 [ 631.023373][T14245] cfg80211_set_monitor_channel+0x22d/0x5f0 [ 631.029294][T14245] cfg80211_wext_siwfreq+0x713/0x850 [ 631.034591][T14245] ? __pfx_perf_trace_lock+0x10/0x10 [ 631.039893][T14245] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 631.045719][T14245] ? dev_load+0x21/0x1f0 [ 631.049984][T14245] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 631.055804][T14245] ioctl_standard_call+0xcb/0x1b0 [ 631.060839][T14245] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 631.066655][T14245] wext_ioctl_dispatch+0xee/0x410 [ 631.071685][T14245] ? __pfx_ioctl_standard_call+0x10/0x10 [ 631.077334][T14245] wext_handle_ioctl+0x10f/0x1d0 [ 631.082283][T14245] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 631.087773][T14245] sock_ioctl+0x159/0x7f0 [ 631.092118][T14245] ? __pfx_sock_ioctl+0x10/0x10 [ 631.096979][T14245] ? __fget_files+0x2a/0x420 [ 631.101583][T14245] ? __fget_files+0x3a0/0x420 [ 631.106272][T14245] ? __fget_files+0x2a/0x420 [ 631.110879][T14245] ? bpf_lsm_file_ioctl+0x9/0x20 [ 631.115832][T14245] ? __pfx_sock_ioctl+0x10/0x10 [ 631.120695][T14245] __se_sys_ioctl+0xfc/0x170 [ 631.125292][T14245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.131365][T14245] do_syscall_64+0x15f/0xf80 [ 631.135968][T14245] ? trace_irq_disable+0x3b/0x140 [ 631.141008][T14245] ? clear_bhb_loop+0x40/0x90 [ 631.145696][T14245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.151601][T14245] RIP: 0033:0x7f8eb6d9ce59 [ 631.156031][T14245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.175648][T14245] RSP: 002b:00007f8eb7cd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 631.184072][T14245] RAX: ffffffffffffffda RBX: 00007f8eb7015fa0 RCX: 00007f8eb6d9ce59 [ 631.192052][T14245] RDX: 00002000000000c0 RSI: 0000000000008b04 RDI: 0000000000000004 [ 631.200029][T14245] RBP: 00007f8eb6e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 631.208001][T14245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.215979][T14245] R13: 00007f8eb7016038 R14: 00007f8eb7015fa0 R15: 00007ffe93b24fc8 [ 631.223978][T14245] [ 631.227742][T14245] Kernel Offset: disabled [ 631.232065][T14245] Rebooting in 86400 seconds..