last executing test programs: 5.093864995s ago: executing program 0 (id=919): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2) setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000)=r3, 0x20000010) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x7, 0xa169, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x2, 0x80, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000002060102000000000000000000000000050001000600000005000500070000000d0003006c6973743a736574000008000900020073797a31000000000500040003000000"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r8 = socket$kcm(0x10, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000200)={'lo\x00', @random="59bf0c71964d"}) r9 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000030301070000000000000000020000090800034000000f6a080003050000000000000000fffffffd000000010c000200fffffffd00000006"], 0x3c}}, 0x4000010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040), 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) socket$inet(0x2, 0x800, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x30, 0xffffffff, 0x0, {0xa, 0x0, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x80, 0x0}, 0x0) socket$kcm(0x2, 0x1, 0x84) 4.902925541s ago: executing program 3 (id=920): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair(0x18, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c000180090001"], 0x150}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000015"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000600)={0xa, 0x4e20, 0x7, @local, 0x25e7}, 0x1c, &(0x7f0000000680), 0x0, &(0x7f0000000dc0)=[@dstopts={{0x20, 0x29, 0x37, {0xc, 0x0, '\x00', [@pad1]}}}, @rthdr={{0x88, 0x29, 0x39, {0x2f, 0xe, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x1d}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0xaa, 0x1, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x67, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit_2292={{0x14}}, @dstopts_2292={{0xe0, 0x29, 0x4, {0x87, 0x18, '\x00', [@generic={0x7, 0xb1, "7b43c1cd3891a842e2761718ff5ef9bdc5cffe256d88ce0447b9466ff4487d624646a5aa58264a3fffaee3f143b05fe98179e6bccc2639832bf18e873adbb82b18d9fff654e751db207fae16f2e023527aedc8f39e57019d73d3d192f69c12b33a44cfa6d5089fb3e6b998894aeae9f8a6a33cba58b08f08e36086bf8e3138c04d36ffeec42fb136603ca97dd89efb9c72d998f730028a7c0381c0b66d9cb4375b6221fc7aa950287d9ded0d674a7fa51d"}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x3ff}]}}}, @dstopts={{0x60, 0x29, 0x37, {0x88, 0x8, '\x00', [@pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0x4, 0x9, [0x9]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0xf0}, @jumbo={0xc2, 0x4, 0xfe9b}, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x40}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], 0x280}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="9feb01001800000000000000af00000013030000000800000000800000010000000e0000000500000002000000100000000900000f03000000020000000400000000100000020000009c88b4b2a0aaff1f00000f000000010000000700000003000000030000008a2d0000b200000001000000ffff008b8000000005000000080000004000000002000000060000008a1000000200000005000000010000000200000004373c994e839b5300000080000000ade9370a13359abe86055fc78e5f03000000000000000000000e038000000000000000"], &(0x7f0000000340)=""/46, 0xce, 0x2e, 0x1, 0x100, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x0, 0x35, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xe8, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x22}, 0x50) r8 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r8}, 0x20) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r7, &(0x7f0000000280), &(0x7f0000000100)=@udp6=r9, 0x1}, 0x20) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000840)='./file0\x00', 0x0, 0x0, r3}, 0x18) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe9043, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r12, &(0x7f0000000c40)=ANY=[@ANYRESDEC=r10, @ANYBLOB="136df4a427c8983f96a7a168d9c2e708bd68e013a1d10479cd01e9336b723368105d0445b3c02c630efde2ad91", @ANYRES8], 0x9a) write$cgroup_devices(r12, &(0x7f0000000440)=ANY=[@ANYRES8=r11], 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x8, 0xa, &(0x7f0000000240)=@raw=[@generic={0x7f, 0x2, 0x3, 0x1, 0x1ff}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0xe7706f2874b374be}, @ldst={0x1, 0x0, 0x4, 0x0, 0x9, 0x80, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000002c0)='GPL\x00', 0x7, 0x40, &(0x7f0000000300)=""/64, 0x40f00, 0x9, '\x00', 0x0, @cgroup_skb=0x1, r5, 0x8, &(0x7f0000000500)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x8}, 0x10, r6, r2, 0x7, &(0x7f0000000ac0)=[r2, r7, 0xffffffffffffffff, r10, r12], &(0x7f0000000b00)=[{0x5, 0x2, 0xe, 0xc}, {0x3, 0x2, 0x5, 0xc}, {0x5, 0x2, 0x6, 0x9}, {0x4, 0x5, 0xb, 0xa}, {0x2, 0x3, 0x9, 0xc}, {0x4, 0x4, 0x5, 0x6}, {0x4, 0x5, 0xd, 0x5}], 0x10, 0x7fffffff}, 0x94) 4.883206177s ago: executing program 2 (id=922): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2080}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x3, 0x7, 0x80000000, 0x400c1, 0xffffffffffffffff, 0x1ab, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1, 0x2}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000080)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x6a}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000400)={r4, 0x0, &(0x7f0000002780)=""/4120}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x1a, &(0x7f0000000680)=ANY=[@ANYBLOB="85100000fcffffff18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000181a0000", @ANYRES32, @ANYBLOB="0000000000000004b7080000000000007b8af8ff00000000b7080000ffff00007b8af0ff00000000bfa1000000010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000185b00000300"/40], &(0x7f0000000780)='GPL\x00', 0x80000001, 0xbe, &(0x7f00000007c0)=""/190, 0x41000, 0x1d, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x8, 0x40, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r2], &(0x7f0000000980)=[{0x5, 0x5, 0x7, 0x2}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x60}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.350742739s ago: executing program 3 (id=924): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x5dc}, 0x50) r1 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000940)={&(0x7f0000000000)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f0000000580)=""/251, 0xfb}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/200, 0xc8}], 0x6, &(0x7f0000000780)=""/52, 0x34}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5411, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xff, 0x1, 0x0, 0x0, 0x4d31, 0x64047, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x4, 0xfffffffe}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x140f, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0xc0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x9c7c, 0x4, 0x98, 0x9, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000040)={r6}) 4.043544904s ago: executing program 1 (id=925): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000006a000085000000860000008500000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.033702914s ago: executing program 2 (id=926): socket$kcm(0x28, 0x1, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900022073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000140000001000010000000000000000000084000a"], 0xc0}}, 0x0) socket$kcm(0x10, 0x2, 0x10) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x11008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x104000, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5452, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0x0, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10fd00, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) 3.86697993s ago: executing program 0 (id=927): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x6, 0x8c}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x3, 0x5, 0x1000, 0xffffffffffffffff, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000) sendmsg$inet(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x47}], 0x1}, 0x48800) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYRES64=r4], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, @perf_bp={0x0, 0x8}, 0x100000, 0x0, 0xfffffffc, 0x0, 0x7c, 0x0, 0x80, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x14) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) close(0xffffffffffffffff) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r11 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10) close(r9) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r12) 3.866005728s ago: executing program 4 (id=928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x2000000}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0x88}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x4b, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0ae497d97f4a0000000400000a0000000000613538329cedae954e4381fcab226b75e8dfaa68367058e28561120829c741812e52651f5934ff48d35884910abef55b2ea2dfd9bafd097252078cc97c06919f54fb9d016eba098d8910dd9490fb47b5b4b3532788e09a107dd570e74a4ad1822222ad2ea70eddd8521595a6352073d7c5f6f601813dccb6b2ceb9fddb56f22858bca0deeeb2da79ca89d877b9e602e502efb80e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000fd008000000000faffffff8500000007000000950000000000000004ce0773721e1983ae1e8b"], 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfff8, 0x0, 0x0, 0x0, 0x1d}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x30, 0x18, 0x0, 0x0, @binary="0dac0f0004ac0f005608936caaf06bec869c1eba340c8e5349c00de3bf542907da861ef4bbab00d0043522c1"}]}, 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f952a3c92b", 0x14}], 0x1}, 0x4000080) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r10 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x6, 0x5, 0x5, 0xfc, 0x0, 0x2, 0x8008, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x2, 0x4}, 0x0, 0xff18, 0x9, 0x1, 0x81, 0x1, 0x9bd, 0x0, 0xffff, 0x0, 0x10000000000}, 0xffffffffffffffff, 0xd, r9, 0xf) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000080)='percpu_alloc_percpu\x00') 3.722016571s ago: executing program 1 (id=929): r0 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x14, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080100d1000000000000000000020002000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="0000000000000000b70300000000000085000000b5000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @mcast1, 0x7, 0x83}, 0x80, 0x0}, 0x800) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfdef) close(r6) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4020000000000006111480000000000850000003b640000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\v'], 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r7, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64=r8], 0x0, 0x5e, 0x0, 0x1}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) 3.717736768s ago: executing program 2 (id=930): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40090) socket$kcm(0x2, 0x5, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x39}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x6202}}, [], {{0x4, 0x1, 0xb, 0x1, 0x9, 0x10}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={0x0}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x24, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x10, 0x18, 0x0, 0x0, @binary="05ac0f0002ac0f000dac0f00"}]}, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 3.449343068s ago: executing program 4 (id=931): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4a, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x7}, 0x114849, 0x0, 0x8, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xc, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0xe, &(0x7f0000003100)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001040), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x6c69, 0x4, 0x0, 0x1, 0x0, 0x200, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x11, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000e0adb0694d02fdcf2400010325bd7000"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000003100)="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", 0x8bf}, {&(0x7f0000000940)="d24e576df53aa8e2ce1432444b8e3e7ef83da51b37abd74742b4062620b33f37eb632bbb64741c197e08f186dfc8a2ec13c7ebacd7af52f37c44628bd1e22e22d5c1cc46eb4f0077e6bc87246c5ff04d18bf8b3919a006602bf70eca1961ef", 0x5f}], 0x2}, 0x10) mkdir(&(0x7f00000009c0)='./file0\x00', 0x18b) mount$bpf(0x200000002000, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000000), 0x40, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d00)=ANY=[@ANYBLOB="020109051e00000027bd7000fedbdf2502000100000004d640f998010000008002000a0009000000080000000000000002001000000004d5000004d3000000000200000001000000f0ffffffffffffff05001a0000000000000000000000000000000000ff020000000000000000000000000001090010100400020023ddee1b07ab3f4abc0496e120b412d3000000002c00000000000000040000000000000002000000000000000800120000000000b86b6e00410a000006006c000b0300000060000000000000ac1414180000000000000000000000007f0000010000000000000000000000000100140009000000"], 0xf0}}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0xa7, 0x0, 0x0, 0x0, 0x2024, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000000001, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xb4}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0x9}, 0x40012100) recvmsg$kcm(r6, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) 3.244963198s ago: executing program 3 (id=932): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x1104, 0x0, 0x10000, 0x8, 0x1, 0x4}, 0xffffffffffffffff, 0x7, r0, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000240)='./cgroup.net/syz0\x00') recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f10000000000000000000218010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b70300000000000085000000ca000000950000"], &(0x7f0000000400)='GPL\x00', 0x1, 0xe0, &(0x7f0000000440)=""/224}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r7}, 0x18) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0xe, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f00000000c0), 0x4) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @mcast1, 0x7, 0x83}, 0x80, &(0x7f0000001600)=[{&(0x7f00000007c0)="f4000900062b3325fe80000000000000dc8b850f23848f7e5c74a57f32cd8caf80bc8e7a2f3ce32a", 0x28}, {0x0}], 0x2}, 0x800) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000580)=ANY=[], 0xfe33) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000580)=ANY=[], 0xfe33) 2.892375284s ago: executing program 0 (id=933): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000640)={0x5, 0x80, 0x5, 0x18, 0xa, 0xb, 0x0, 0x1, 0x808, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x6}, 0x2000, 0xfa, 0x0, 0x6, 0x4, 0xe5, 0x5, 0x0, 0x6, 0x0, 0x628}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000005c0)}, 0x0, 0x3, 0x0, 0x9, 0x40000000000003fe, 0x7fffffff, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x5, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@fallback=r2, 0x1e, 0x0, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0]}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) (async) socket$kcm(0xa, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000001fa6e2d1e1edb9a970a120392c164ccf08000000000000005"], 0x14}}, 0x0) (async) recvmsg(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x40000002) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x4, 0x13, 0x0, 0x1ff, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, @perf_config_ext={0x10, 0x6}, 0x0, 0x2, 0xffffffff, 0x6, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000081) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1010115000600142603600e120800040000001101a80016000a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e43bf66f282ac027812cfbd3f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.709626961s ago: executing program 2 (id=934): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair(0x18, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c000180090001"], 0x150}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000015"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000600)={0xa, 0x4e20, 0x7, @local, 0x25e7}, 0x1c, &(0x7f0000000680), 0x0, &(0x7f0000000dc0)=[@dstopts={{0x20, 0x29, 0x37, {0xc, 0x0, '\x00', [@pad1]}}}, @rthdr={{0x88, 0x29, 0x39, {0x2f, 0xe, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x1d}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0xaa, 0x1, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x67, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit_2292={{0x14}}, @dstopts_2292={{0xe0, 0x29, 0x4, {0x87, 0x18, '\x00', [@generic={0x7, 0xb1, "7b43c1cd3891a842e2761718ff5ef9bdc5cffe256d88ce0447b9466ff4487d624646a5aa58264a3fffaee3f143b05fe98179e6bccc2639832bf18e873adbb82b18d9fff654e751db207fae16f2e023527aedc8f39e57019d73d3d192f69c12b33a44cfa6d5089fb3e6b998894aeae9f8a6a33cba58b08f08e36086bf8e3138c04d36ffeec42fb136603ca97dd89efb9c72d998f730028a7c0381c0b66d9cb4375b6221fc7aa950287d9ded0d674a7fa51d"}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x3ff}]}}}, @dstopts={{0x60, 0x29, 0x37, {0x88, 0x8, '\x00', [@pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0x4, 0x9, [0x9]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0xf0}, @jumbo={0xc2, 0x4, 0xfe9b}, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x40}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], 0x280}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="9feb01001800000000000000af00000013030000000800000000800000010000000e0000000500000002000000100000000900000f03000000020000000400000000100000020000009c88b4b2a0aaff1f00000f000000010000000700000003000000030000008a2d0000b200000001000000ffff008b8000000005000000080000004000000002000000060000008a1000000200000005000000010000000200000004373c994e839b5300000080000000ade9370a13359abe86055fc78e5f03000000000000000000000e038000000000000000"], &(0x7f0000000340)=""/46, 0xce, 0x2e, 0x1, 0x100, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x0, 0x35, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xe8, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x22}, 0x50) r8 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r8}, 0x20) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r7, &(0x7f0000000280), &(0x7f0000000100)=@udp6=r9, 0x1}, 0x20) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000840)='./file0\x00', 0x0, 0x0, r3}, 0x18) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe9043, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r12, &(0x7f0000000c40)=ANY=[@ANYRESDEC=r10, @ANYBLOB="136df4a427c8983f96a7a168d9c2e708bd68e013a1d10479cd01e9336b723368105d0445b3c02c630efde2ad91", @ANYRES8], 0x9a) write$cgroup_devices(r12, &(0x7f0000000440)=ANY=[@ANYRES8=r11], 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x8, 0xa, &(0x7f0000000240)=@raw=[@generic={0x7f, 0x2, 0x3, 0x1, 0x1ff}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0xe7706f2874b374be}, @ldst={0x1, 0x0, 0x4, 0x0, 0x9, 0x80, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000002c0)='GPL\x00', 0x7, 0x40, &(0x7f0000000300)=""/64, 0x40f00, 0x9, '\x00', 0x0, @cgroup_skb=0x1, r5, 0x8, &(0x7f0000000500)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x8}, 0x10, r6, r2, 0x7, &(0x7f0000000ac0)=[r2, r7, 0xffffffffffffffff, r10, r12], &(0x7f0000000b00)=[{0x5, 0x2, 0xe, 0xc}, {0x3, 0x2, 0x5, 0xc}, {0x5, 0x2, 0x6, 0x9}, {0x4, 0x5, 0xb, 0xa}, {0x2, 0x3, 0x9, 0xc}, {0x4, 0x4, 0x5, 0x6}, {0x4, 0x5, 0xd, 0x5}], 0x10, 0x7fffffff}, 0x94) 2.669134486s ago: executing program 0 (id=935): r0 = socket$kcm(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x51935563c77afb9d, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'veth0_vlan\x00', 0x10}) (async, rerun: 32) r4 = socket$kcm(0xa, 0x1, 0x106) (rerun: 32) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffe23) (async) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x2000000, @dev, 0x39}, 0x80, 0x0}, 0xe07e872420dfefca) 2.641877476s ago: executing program 1 (id=936): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000000, 0x10, 0x0, &(0x7f0000000200)="22e5f93ffb8c917ee73166087019dd74", 0x0, 0xc699, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0x201, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d00000000b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000000206011800000000000000000000fffd1c00078005001500020000000800114000000000050015000c0000000500010006000000050005000a00000005000400000000000900020073797a300000000012000300686173683a6e65742c706f7274"], 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000000, 0x10, 0x0, &(0x7f0000000200)="22e5f93ffb8c917ee73166087019dd74", 0x0, 0xc699, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0x201, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d00000000b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000000206011800000000000000000000fffd1c00078005001500020000000800114000000000050015000c0000000500010006000000050005000a00000005000400000000000900020073797a300000000012000300686173683a6e65742c706f7274"], 0x68}}, 0x0) (async) 2.475933829s ago: executing program 4 (id=937): r0 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x0, @loopback, 0xfffffffb}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="7a2d6b9a2ba5fc2fc861e193683b18214826695254a57e8eed48375a87cb4be59d8c0f5f6e14a825449cf00a9aff166d2d8fdb441b49e6b692f039b6c6b8ef06b093e64726295859527b18688382e2f45fdabf103ce290b66bfaa28961b9c292704449d49d53ec679c49985cb84d9c05348e4b273b91945d5a8a17e4228dd32ecbcc94afeecba01a776f2b9801b102ec22ac0cb02946847d1bc7d2112a611648fabfe02ed1e0ce", 0xa7}], 0x1, &(0x7f0000000240)=[{0x98, 0x114, 0x54, "e38bbd89d5f02a10939b11a2067716f339268a57f8b8c767aaf2afbc225bb30626679965b0685853198fe75389f1dae3e0217e199a17e6412a211c77e3b17d14d56bb492ab08859df25330c685092649639ac27b207995ded825c789e302ac19147471925563c18bb8f7f0a8a578b3e7a6524e57a3dda5b3dc732cbf8c643879ac29fd"}, {0x40, 0x11, 0x0, "902bf7bfab84d97e493f0849e31b54a60797be78f3d50757103fa3ba1867e50ecdcdf693a4dd87a02b67340b37"}, {0xb8, 0x10e, 0x3, "065f3ba641f07945f87db703c0689f9701105191414e8b21a8e85a36957bcb6eecba759f0b1563944fe616454dff55d20b033ba68d53386f7c83ce3da44cd5cdd758e068ed8df2cda0507059ed086501192b16e16af0631c66627e217611e806f8e4f5a16051fb9448df70edaba6c97488b478c2879dd31bce2f1c4e168f5d6417f81f7a218639ac15757a3afa8a3a8d529f6f3ee81b1e798deae68496199071a55e60894263747b"}, {0x58, 0x101, 0x7, "b00181f2e32317378845333cf91111da3fcedea73515c39206a1ebec91df634ba421c86bcc4291904e6905625e8e5db500a9b0c41087efd2ad94ed4054b79abf4c57c4"}, {0x100, 0x29, 0x8, "14e228f6b219a8c39d90118a3f393f8e16b2a05f51136f7f548914c79eba5358d94dc8c94097f2e27268cf12b390e7f6e3d6703d58936aef23a58bc8a6fbb8f9f85b6cbdfe39fe9881431ad6bba541966e2990a57d6d221b3df5dbe204b648927ce53bb9ea1035bcf7cb542d1e3ced81139efa95f78e83fd07447226f46ac66e9c86b2168f0b825db44aa00fea06ab015a5be05764379799817c7ff85dc6b7140f7e7db003d9fabd25f1a3de1fab2071882a6dc60a7cf21f97d6bb05f3ca82d2fdf90596ca9168456c14f21b6967b2569428f81b69f0fb1e19c740a6db0d9f7f3ce7e9e89674f831514bb8da"}], 0x2e8}, 0x10) 1.910525877s ago: executing program 4 (id=938): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x6a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x3ada}, 0x40, 0x8, 0x0, 0x3, 0x0, 0xffff0000, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000480)=@allocspi={0x104, 0x16, 0x401, 0x0, 0xfffffffd, {{{@in=@local, @in6=@mcast1, 0x0, 0xfd1, 0x0, 0x2, 0x2, 0x0, 0x0, 0xc}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x3ff, 0x80000001}, {0x101, 0x4, 0x0, 0x800}, {0x4, 0x6, 0x400}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x94}, 0x0, 0x4ad}, [@lastused={0xc, 0xf, 0x4ee}]}, 0x104}, 0x1, 0x0, 0x0, 0x200400c4}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000480)=@allocspi={0x104, 0x16, 0x401, 0x0, 0xfffffffd, {{{@in=@local, @in6=@mcast1, 0x0, 0xfd1, 0x0, 0x2, 0x2, 0x0, 0x0, 0xc}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x3ff, 0x80000001}, {0x101, 0x4, 0x0, 0x800}, {0x4, 0x6, 0x400}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x94}, 0x0, 0x4ad}, [@lastused={0xc, 0xf, 0x4ee}]}, 0x104}, 0x1, 0x0, 0x0, 0x200400c4}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r1, 0x1f, 0x0, 0x7, &(0x7f0000000280)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xf7fff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000200), 0x11) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffff8}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) (async) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup(r5, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) 1.791320633s ago: executing program 1 (id=939): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="140000003a000b63d25a80648c2594f90ba3c92b", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x84, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)=""/261, 0x105}, {&(0x7f0000000b80)=""/143, 0x8f}, {&(0x7f0000000040)=""/205, 0xcd}, {&(0x7f0000004ac0)=""/4134, 0x1026}, {&(0x7f00000009c0)=""/208, 0xd0}, {&(0x7f0000000d80)=""/204, 0xcc}, {&(0x7f0000000300)=""/294, 0x126}, {&(0x7f0000000540)=""/227, 0xe3}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/151, 0x97}], 0xa}, 0x0) write$cgroup_subtree(r2, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="130300005400911fdabcf8b30771a54a07"], 0xfe33) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x40) recvmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.603697791s ago: executing program 3 (id=940): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xf400}, 0x90) syz_open_procfs$namespace(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0, 0x2e, &(0x7f0000000640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f0000000740), 0x8, 0xb6, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f00000009c0)={0x2c, 0xa, r3, 0x2c}, 0x10, &(0x7f0000001ec0)=[{&(0x7f0000000a00)="36320f124a38fd15f215e97c7737ac09318fec3ab77d98084d0e34741549a5cbea4b8964b756657d76785fed6f04b18065d64b07aad3e8779cd22c3f7fbdffc7736e77fc9a56e39ffee3d6216f1c3bf1bd725e92caa4eedd138d029e1a90876c57f3b54f3c9d4eb4bb0efde2290422b0d7e7bd38446080b8f6aedd0d936243cd5a6b79f8913acb732f4670e96616073df053d240e045595f69857333b7f919a2f18a4f35cd256211bba669e5f0fa35dceedf7664e877c14bc51d880bb46d1e41b13237b7b3c01622f11335e68f4839b6f8135e7711163060dc53", 0xda}, {&(0x7f0000000b80)="d9ef813cbfff2562ad68498405812c2757e1fafa68316957b581fd281d71755dac1ee8b41d82b0840a7813dc9fb8c4b340dd0c3644c187f3923906a789a8328651e6ff3bfe3e591734e73eeebcf2e01268cce124a3caad7d2bb8a49b8372057f4c85e3ee671a7cd3cf33733986ac6e4f35ca0b758321fabc1b8056c5644694646e1df4f74637d67cb72b63610010430bf4f61a13d5f766c7bd9c6dee3a", 0x9d}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="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", 0xfd}, {&(0x7f0000001d40)="c7bb2d343fce299b4eb50c510c91d77e190cc8d1d4d82c8d5f0b49474f1752853dae9396e6d533566649f23d95f34653f331d67133ca1b4a931bbe74d7fc5e8b9f40ff03960783873864ca84376fb3f7cca6c8739e0db5237a3a7b4c5466a8ed7cc131b03aee1d6ddf353d9081ff5a58c0210cb271f3e68df8220825eb59715b1b6ff6b367b92cd875f9008afb1f1ce6b74ebe75107a9169c97b67876906d3db8ba5714eb85bbd7df69a1c83dac05cf88d44c47eca8327dccca060ab", 0xbc}, {&(0x7f0000000b00)="8b6a3a8fd3d84c4f8c252a13ccb7225c843e676395bc5556dbef23cef0a17f292c22257249b4209932517f7e5a2961a78524c1b6206c8cb85ee9fefec44e", 0x3e}, {&(0x7f0000001e00)="162e3c2b168887f533285300d8dc3871b2c03e9c838feb79fac3f087ecb96611b2f7e4289bc535df9b806de8f8521d0571161bed4304035ee67e7b7e43c25c03f9021acd01e8477f38b3c31e9c2bccdf7ae7faf9bd0f3a5e17ac7bcd5aba6d41d2afdc9524f04f9f837f1306f8bd5f6d1480255cf33b0eef4453706927208f22934ae2c77083eab98ff07f0db1540da4e7d37a46f6f7fe9e59c62e1975f3e030d6c26daad4f7ad9cb94055602d", 0xad}], 0x7, 0x0, 0x0, 0x4000800}, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @multicast}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r6, 0x22, 0x1, 0x8e8a, &(0x7f00000002c0)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0x1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@ifindex=r8, r5, 0x2, 0x0, 0x0, @void, @value, @void, @void, r7}, 0x20) sendmsg$inet(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="274e83671d3ebddb51e47dca54afe965ee9301284dad0adcce3902c7fe823418380f891d87a85128552f3fd22fca0912015ae905cb5cc1ec40fe294258f07c20c5dcfe71de5bf99e4eedb99c8e842844bac067024decdef94fa92bcce9efd092cf71bd65", 0x64}], 0x1, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x20}, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x50}, 0x4004000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010325bd7000fcffffff050000000800030043"], 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuacct.usage_user\x00', 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002252e000180080001000000000008000200ac1e00010c000280050001000000000008000740000000014400108008000240000000070800034000000009080001"], 0xa8}}, 0x0) 583.197421ms ago: executing program 3 (id=941): r0 = socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xb43}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x0, 0x5, 0xb, 0x2, 0x10, 0xfffffffffffffffc}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000840)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x100190, 0xc8, 0x9, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x4, 0x0, 0x200000000000}, 0x0, 0x8, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8902, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8902, &(0x7f00000000c0)={r2}) sendmsg$nl_crypto(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001680)=@get={0xe0, 0x13, 0x1, 0x70bd28, 0x25dfdbff, {{'drbg_nopr_hmac_sha256\x00'}, '\x00', '\x00', 0x1400, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x5}, 0x4004084) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="b81d81a34f9b68100dbf05d6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d98000"/133, 0x85}, {&(0x7f0000000540)="4373463974ee", 0x6}, {&(0x7f0000000d00)="ae83c911c665b7d7ad7ffb291e32", 0xe}], 0x3, 0x0, 0x0, 0x400c800}, 0x0) close(r4) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYRES32=r6], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x80000001, 0x0, 0x3, 0x3fe, 0x7fffffff}, 0x0, 0x2, 0xffffffffffffffff, 0xa) r7 = socket$kcm(0x11, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x16c5, r8}, 0x38) socket$kcm(0x10, 0x3, 0x10) 580.569705ms ago: executing program 4 (id=942): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e00b90f177020000000000000000", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x200000d0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf8, 0x1, 0x5, 0x7, 0x0, 0xc674, 0x20000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x6}, 0xc010, 0x3ff, 0x3, 0x0, 0x52, 0x401, 0x401, 0x0, 0x542d, 0x0, 0x7}, 0x0, 0x7, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x12}, 0x50) mkdir(&(0x7f0000000040)='./file0\x00', 0x154) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x53, 0x1, 0x9, 0x0, 0x0, 0xb63, 0x30286, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={&(0x7f00000002c0), 0xa}, 0x14105, 0x2b, 0xfffffbff, 0x2, 0x4, 0xa0000000, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0x8, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00000000000000", 0x7f}, {&(0x7f0000001400)="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", 0xa8f}], 0x3}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r3}, 0x10) socket$kcm(0xa, 0x2, 0x11) bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={0x0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x378f, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5c2f, 0xffffffffffffffff, 0x0, &(0x7f0000000240)}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x517, 0x3}, 0x31a0, 0x0, 0x1f, 0x1, 0x4, 0x0, 0x0, 0x0, 0x22ff, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000011c00)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x33180b1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 578.550742ms ago: executing program 1 (id=943): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000001cb, 0x22, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x8000, 0x0, 0x80000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000001700)='cpu.weight.nice\x00', 0x2, 0x0) (async) r5 = openat$cgroup_int(r4, &(0x7f0000001700)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000001cc0)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x27) r6 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r6, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2042) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = gettid() perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x7, 0x9d, 0x7f, 0x3, 0x0, 0x3ff, 0x8000, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x6, 0x4f8}, 0x110200, 0x6, 0x4, 0x9, 0x100000000, 0x8001, 0x10, 0x0, 0xffff8000, 0x0, 0x9}, r8, 0x5, r7, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x7, 0x9d, 0x7f, 0x3, 0x0, 0x3ff, 0x8000, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x6, 0x4f8}, 0x110200, 0x6, 0x4, 0x9, 0x100000000, 0x8001, 0x10, 0x0, 0xffff8000, 0x0, 0x9}, r8, 0x5, r7, 0x0) socket$kcm(0xa, 0x3, 0x73) (async) r9 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{0x0}, {0x0}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x29, 0x32}}, @ip_pktinfo={{0x1c, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}], 0x38}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') 513.936673ms ago: executing program 0 (id=944): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x78, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 502.042141ms ago: executing program 2 (id=945): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c85e70a0a4f68524cad4dc175ca1f88114b046d7be0f7b69f5c5a6d8ccd37ecfb4ae65b95267cce6488d3f605e1903260afc3fb3f39a4f4efe68c2f8bfa9eef2363d23fe713a088d93f104f2"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x45, &(0x7f0000000000), 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x0, 0x2}, 0x1306, 0x2, 0x0, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r2) (async) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x3, 0x1, 0x40000003, {0xa, 0x4e20, 0xffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x80, 0x0}, 0x886f5cad098bbc1) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000640)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=r6, @ANYBLOB="020000d8"], 0x158}}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@deltfilter={0x34, 0x2d, 0x4, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x6, 0xe}, {0x6, 0x3}, {0x7, 0x10}}, [@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x8000048) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYRES16=r6], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x17, &(0x7f0000000100)=r8, 0x4) (async) sendmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0}, 0x300f) (async) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x7, 0x800000, 0x0, 0x0, 0x1, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a0001007175"], 0x118}}, 0x0) (async) r13 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r11, r11, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r13, r10, 0x4, r10}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x431, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x9, 0x0, 0x9}, 0x0, 0x800000001, 0xffffffffffffffff, 0x0) 239.413063ms ago: executing program 3 (id=946): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2121, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61126b000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff0e}, 0x48) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)="03deed6bd48d55aaf3b1639565b5af5ee28b25d5a7c6474fc6108dd930eed25f93912b72e9b8cceeaea4d87847032510e4310d2fd09abc819de44e954ff91431ef49ce805a70c264729ecd7db67b64697d11e1a812faebd1aeadc4d3f75477c34668c977756bd3581c11a4e05bbcf2ca41952bada4649fd797c83c3d7f7a901418f1758cf6b9bcb7220af9", 0x8b}, {&(0x7f0000000140)="3a66aef22c78a93c179b34712112345bc60182aea6ba784aa2c045a305749fb4d0be2c0a297790a5fe2c4bf2bfaf6bd13b7c11df14874adc1ac43c48f5f11932f06e47de12ebe0a228e3", 0x4a}, {&(0x7f0000000000)="b50737cd94c31e5b8fcd5b169050dbe8060dbf7a9663434e5e4b5a93a809471f2fe00ea93df025c627045b04228879636da7477fe1a96a44c97102f1356f9d8d", 0x40}, {&(0x7f00000002c0)="655252bc96b8cc79ea4137d860d708db3dad9124380a4b0a60e2beb67116059eb43a2a042c7cd18ede39d0a1943ec0b9182f7e82b7fca0c455c6f22dd97e1abf2cf5f0bf42690ede7fce140a291af1698b938242accef57838b2e0ebd8190921d4bb7da27a91dbdce8fff6998b73dc402f4b87529dd8836d6ec5f6ae81c84034956c3b729233c0dd9dbd0ffb3ec14e509bf8af7e8d486b", 0x97}, {&(0x7f0000000380)="c3821df6c74d3e7325f9a71f360dc09e1b90ae9babb4fd49f3a53e79c8b37cbb5d4202f4bbc72996595f19b7bc105ab7189bc7e50f62502236f272a0f8f70da201c6b214193421b8af76511ed7936771a27036ccb2e97b772e979e23a8095f22838f039d6f236a1acf5728", 0x6b}, {&(0x7f0000000400)="1e87530172eccd8fa0a3ee10dd009cfdb5186c5f201c2725b1fe3ffcf259eddc096a41742e5989ccbc85ea4239b58163bb7829f79613e5f6441b0e6bee8c8af56f487856c23e33ca1d0e811595e92f562d", 0x51}, {&(0x7f0000000480)="e45a08c4c81e24adb59586c166e657b9631f1d2e32b9ed8ad14a2b985e86e4452eda6df1721f9455d3f84846d2e064c42b3843a59d137d1c1aa42eabae4c6bd3cf3615c614e26179f502b43ffacc7d686379b2ba177f0850a64b83d6e4576657cd2e163cc9163a69313433846b9ec55750e63ef52dd78986d7c2f3d4ac8f293aadfb40d563d2d1ddadeaea9ab85346073a51c8e9f24dc3d9ede1c4d6c0b263611fa2", 0xa2}, {&(0x7f0000000540)="8c57421ee800c2ce9c6a79801dcf5f91b1f9e14209b8bf35b19594b67a239a2364c249a0ab5bb38d05f355652ddca2bb14418e5a3eb4808413b261a40e67330aacabb0693d11868543f18d653e5a65d8ee8652345f8e7c2bdee5058fbed6991d70cb18ce61", 0x65}, {&(0x7f00000005c0)="651d3f79ec3546715a435db700a0e7a3259cc8d068bed1695dbe1906a3d909d22f277883ef938521f0a24b5273bd9e0dc40d3d4246f7709a8ed2bf862882ad79c35795edc09fa15996240e47ea7becf1dab755826d9b8775952182e182286cd5dbf1f2cbaa6e46885068d841b5a1a24a614d471f911ad46269491bba979f9191bb8b67fcfc4cdcce13515e25198c9a057bd664fe019f075c", 0x98}], 0x9}, 0x10) 234.26892ms ago: executing program 0 (id=947): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) (async, rerun: 64) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (rerun: 64) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) (async) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x5000, 0xffffffffffffffff, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000340)={0x4, 0x80, 0x1, 0x8, 0x0, 0x40, 0x0, 0xea, 0x11, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x6010, 0x8, 0xa8, 0x2, 0x7fac, 0x9, 0x7fff, 0x0, 0x4, 0x0, 0x3}) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {0x0, 0x40, 0x0, 0x0, 0x0, 0x1f6}, {}, {}, 0x0, 0x3506, 0xa, 0x1, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)=ANY=[], 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[], 0x1c}}, 0x84) (async, rerun: 32) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) (rerun: 32) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x15}, @multicast1}}}], 0x20}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000240)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r8}, 0x4) (async, rerun: 32) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000005}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1d, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8800) (rerun: 32) close(0xffffffffffffffff) 158.86344ms ago: executing program 2 (id=948): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000023000020"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e00000007000000070000004000000002000000", @ANYRES32, @ANYBLOB="ff00"/20, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="0200000001000000008000000400"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100a100000000000000180011f77775f100001800000007000000050000000100000f050000000900000001000000d100000000ffff00616100"], &(0x7f0000000340)=""/250, 0x37, 0xfa, 0x9}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa100, 0x7, 0x8, 0x0, 0x2b66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000060200000400000002"], 0x48) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000140)=0x1000000, &(0x7f0000000240)=r5}, 0x20) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed6, 0x0}, 0x4000a140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x10000001, 0x6, 0x0, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x8064, 0x408c, 0x0, 0xe42127de59d09a02, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x155}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x2dfe, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='freezer.parent_freezing\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r7, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) 95.158282ms ago: executing program 1 (id=949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000080)) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@delsa={0xf8, 0x11, 0x800, 0x70bd27, 0x25dfdbfe, {@in6=@loopback, 0x4d4, 0x2, 0x32}, [@algo_auth={0xa1, 0x1, {{'tgr192-generic\x00'}, 0x2c8, "010ace810abd215fa18638a788bde0689b4c87d5a3af55e621058cb32c1bfd26bbe91f1a4f3069cdaa4d85e7736a49998eee4923325a1a5b2a549f51e7d3f65fe0dfe3e659f2127a1e3533d08aa96fc849bfdf522374bb4237"}}, @user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0x0, 0x2}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x16c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}]}}, @CTA_TUPLE_REPLY={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc0}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1afe}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffff}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4190) socketpair(0x2, 0x80000, 0x6, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x110, 0x2, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xc2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xb}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8000000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xffffff18}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xb70}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xa0d}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44050}, 0x8040845) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f00000007c0)) sendmsg$inet(r6, &(0x7f0000001b40)={&(0x7f0000000800)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000000840)="0b5c7eef16223266e54366ba2b953db543717acfe9a3cebcc5ff924d1b8f845d748c04b75d054a799ea82accc63e220f4699bb72a13682cdfd17f710f03d8295ee49acbffe050659c685c194afd72adf1a19f410d0daad5ddb7fc059f7680c2f363dc52ff64d21aa454c3917e27d58fc1760bf4283662653ef06dc9a6af546481461d0356ecc", 0x86}, {&(0x7f0000000900)="4434602ed4248df712884116b63e16c6381ff4751f396f74d068af6ed797f9783546bee953f702fa755c3b26dc1719e82954bb90ec1e52ab85ec380707cb201c627b3a7b5783ee2f1c73965f48533a1de89c8f20a1e5e71c60814cfdec5cbc125a6e", 0x62}, {&(0x7f0000000980)="6a5d441b4daf", 0x6}, {&(0x7f00000009c0)="c640490033607aa76288c4f35f10c125f0a73463e6160bbf759fa11e10eaa44a5f14389d2409083c116d9a5a2d97397c04f4cd18dfb0037cefe211d52da8018fa87507d55c1699246fb92769a8efc02a462e43f133a387b21cf2e1d95fdfa01dd9f841a6fc989ce32b6443bdf6a059c191af1d0541c609c28ea6d0c3b345cc85a7734a494f0da886a803b46cbfe158bbaf96410354d9881305cd68eada674fd31b270e5730f35670e70460cee653bcdf259fd65188998ae645e6ded75241b0f8c70080acadda5aeb81f66eae1849fec3e05d9699a1fe96e4e5f3ef855916f909e4ad79d499", 0xe5}, {&(0x7f0000000ac0)="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", 0x1000}], 0x5}, 0x4000002) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001c40)={r7, &(0x7f0000001c00)="12334c07e48dbad6f93fd641e6e3c51734b2aa86b0a693d9c6474ffa81cd06a0fa340cd0e17a0ec1e9da51e444c1335c407f"}, 0x20) r8 = gettid() r9 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x48, 0x1402, 0x100, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r9}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) bpf$LINK_DETACH(0x22, &(0x7f0000001dc0), 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r11, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x10, 0x3fb, 0x10, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) sendmsg$NFT_BATCH(r10, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x50, 0xe, 0xa, 0xb162e72307208c32, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x20000891}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002080)={r8, r5, 0x0, 0x5, &(0x7f0000002040)='syz0\x00'}, 0x30) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000020c0)={'virt_wifi0\x00', @local}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000002100)=r1) 0s ago: executing program 4 (id=950): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000001000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x408, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0xfffffffd, 0x0, 0x20}, r0, 0xfffffffffff00401, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.146' (ED25519) to the list of known hosts. [ 81.013648][ T5850] cgroup: Unknown subsys name 'net' [ 81.145487][ T5850] cgroup: Unknown subsys name 'cpuset' [ 81.155425][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.864407][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.502580][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.511729][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.519547][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.528312][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.533799][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.543454][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.544282][ T5872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.551868][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.559377][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.565606][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.576184][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.591907][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.602032][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.613360][ T5184] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.621202][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.630196][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.641560][ T5184] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.655553][ T5184] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.672030][ T5184] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.679789][ T5184] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.691931][ T5184] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.699060][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.720054][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.735090][ T5872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.744164][ T5872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.389354][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 86.401847][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 86.495397][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 86.620524][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 86.700555][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.708484][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.716095][ T5861] bridge_slave_0: entered allmulticast mode [ 86.724553][ T5861] bridge_slave_0: entered promiscuous mode [ 86.768072][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.775565][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.783043][ T5861] bridge_slave_1: entered allmulticast mode [ 86.790346][ T5861] bridge_slave_1: entered promiscuous mode [ 86.859723][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.867142][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.875511][ T5874] bridge_slave_0: entered allmulticast mode [ 86.883612][ T5874] bridge_slave_0: entered promiscuous mode [ 86.929149][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 86.943073][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.950247][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.957974][ T5874] bridge_slave_1: entered allmulticast mode [ 86.969870][ T5874] bridge_slave_1: entered promiscuous mode [ 86.995435][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.003012][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.010235][ T5860] bridge_slave_0: entered allmulticast mode [ 87.018638][ T5860] bridge_slave_0: entered promiscuous mode [ 87.032121][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.045266][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.096935][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.105534][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.113604][ T5860] bridge_slave_1: entered allmulticast mode [ 87.121558][ T5860] bridge_slave_1: entered promiscuous mode [ 87.223412][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.261827][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.277795][ T5861] team0: Port device team_slave_0 added [ 87.325964][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.370455][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.385676][ T5861] team0: Port device team_slave_1 added [ 87.409662][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.417415][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.424746][ T5867] bridge_slave_0: entered allmulticast mode [ 87.432702][ T5867] bridge_slave_0: entered promiscuous mode [ 87.490211][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.497752][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.505663][ T5867] bridge_slave_1: entered allmulticast mode [ 87.513370][ T5867] bridge_slave_1: entered promiscuous mode [ 87.529852][ T5874] team0: Port device team_slave_0 added [ 87.551708][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.558696][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.588714][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.631777][ T5874] team0: Port device team_slave_1 added [ 87.655090][ T5860] team0: Port device team_slave_0 added [ 87.661854][ T5872] Bluetooth: hci2: command tx timeout [ 87.661933][ T51] Bluetooth: hci1: command tx timeout [ 87.667557][ T5872] Bluetooth: hci0: command tx timeout [ 87.679589][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.687051][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.713357][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.741242][ T5872] Bluetooth: hci3: command tx timeout [ 87.766318][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.773703][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.781447][ T5877] bridge_slave_0: entered allmulticast mode [ 87.788738][ T5877] bridge_slave_0: entered promiscuous mode [ 87.798249][ T5860] team0: Port device team_slave_1 added [ 87.821385][ T5872] Bluetooth: hci4: command tx timeout [ 87.824585][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.849602][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.857116][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.864765][ T5877] bridge_slave_1: entered allmulticast mode [ 87.873181][ T5877] bridge_slave_1: entered promiscuous mode [ 87.895733][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.902942][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.929794][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.945290][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.955181][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.962491][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.988674][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.001523][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.008588][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.035867][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.090367][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.097725][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.123823][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.174983][ T5861] hsr_slave_0: entered promiscuous mode [ 88.181716][ T5861] hsr_slave_1: entered promiscuous mode [ 88.211546][ T5867] team0: Port device team_slave_0 added [ 88.220542][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.233669][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.276814][ T5867] team0: Port device team_slave_1 added [ 88.330235][ T5860] hsr_slave_0: entered promiscuous mode [ 88.336703][ T5860] hsr_slave_1: entered promiscuous mode [ 88.343941][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 88.349774][ T5860] Cannot create hsr debugfs directory [ 88.412008][ T5874] hsr_slave_0: entered promiscuous mode [ 88.418572][ T5874] hsr_slave_1: entered promiscuous mode [ 88.425189][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 88.431394][ T5874] Cannot create hsr debugfs directory [ 88.473781][ T5877] team0: Port device team_slave_0 added [ 88.505108][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.512534][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.538647][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.559243][ T5877] team0: Port device team_slave_1 added [ 88.587428][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.594683][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.627327][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.724603][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.731666][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.757675][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.817173][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.824322][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.851980][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.957712][ T5867] hsr_slave_0: entered promiscuous mode [ 88.964644][ T5867] hsr_slave_1: entered promiscuous mode [ 88.970770][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 88.976697][ T5867] Cannot create hsr debugfs directory [ 89.088630][ T5877] hsr_slave_0: entered promiscuous mode [ 89.095173][ T5877] hsr_slave_1: entered promiscuous mode [ 89.102156][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 89.107926][ T5877] Cannot create hsr debugfs directory [ 89.401812][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.445736][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.489717][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.518809][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.588630][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.626891][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.637741][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.652120][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.734782][ T5874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.741775][ T5869] Bluetooth: hci2: command tx timeout [ 89.741791][ T51] Bluetooth: hci0: command tx timeout [ 89.745073][ T5872] Bluetooth: hci1: command tx timeout [ 89.762515][ T5874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.789224][ T5874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.802966][ T5874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.830999][ T5872] Bluetooth: hci3: command tx timeout [ 89.878268][ T5877] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.889900][ T5877] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.901503][ T5872] Bluetooth: hci4: command tx timeout [ 89.929047][ T5877] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.942595][ T5877] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.077287][ T5867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.088544][ T5867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.119777][ T5867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.137570][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.157956][ T5867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.257362][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.273688][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.284977][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.303881][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.311189][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.337295][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.344548][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.386960][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.439292][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.446457][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.466295][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.473478][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.486535][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.501671][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.533642][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.540833][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.577291][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.584531][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.603831][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.637411][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.644579][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.693303][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.700730][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.884548][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.027418][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.075086][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.082405][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.113859][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.121109][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.248663][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.415616][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.529473][ T5861] veth0_vlan: entered promiscuous mode [ 91.595002][ T5861] veth1_vlan: entered promiscuous mode [ 91.640201][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.697694][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.780833][ T5874] veth0_vlan: entered promiscuous mode [ 91.796790][ T5861] veth0_macvtap: entered promiscuous mode [ 91.816769][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.823799][ T5872] Bluetooth: hci0: command tx timeout [ 91.833766][ T5872] Bluetooth: hci1: command tx timeout [ 91.841162][ T5869] Bluetooth: hci2: command tx timeout [ 91.850685][ T5861] veth1_macvtap: entered promiscuous mode [ 91.860104][ T5874] veth1_vlan: entered promiscuous mode [ 91.911753][ T5869] Bluetooth: hci3: command tx timeout [ 91.984198][ T5869] Bluetooth: hci4: command tx timeout [ 92.008635][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.023827][ T5860] veth0_vlan: entered promiscuous mode [ 92.037016][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.068367][ T5860] veth1_vlan: entered promiscuous mode [ 92.086254][ T43] cfg80211: failed to load regulatory.db [ 92.115146][ T5874] veth0_macvtap: entered promiscuous mode [ 92.127679][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.151788][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.160775][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.184032][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.208193][ T5874] veth1_macvtap: entered promiscuous mode [ 92.285092][ T5867] veth0_vlan: entered promiscuous mode [ 92.314472][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.339770][ T5877] veth0_vlan: entered promiscuous mode [ 92.360411][ T5860] veth0_macvtap: entered promiscuous mode [ 92.393297][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.413920][ T5860] veth1_macvtap: entered promiscuous mode [ 92.437881][ T5867] veth1_vlan: entered promiscuous mode [ 92.451844][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.460767][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.482152][ T5877] veth1_vlan: entered promiscuous mode [ 92.493172][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.505100][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.548298][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.557770][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.578819][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.591766][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.614900][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.647685][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.707032][ T5877] veth0_macvtap: entered promiscuous mode [ 92.725094][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.733228][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.741299][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.779909][ T5877] veth1_macvtap: entered promiscuous mode [ 92.795395][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.804931][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.846005][ T5867] veth0_macvtap: entered promiscuous mode [ 92.897614][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.910841][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.922177][ T5982] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.1'. [ 92.934616][ T5867] veth1_macvtap: entered promiscuous mode [ 92.954265][ T5982] Zero length message leads to an empty skb [ 92.981990][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.002321][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.010204][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.053333][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.127048][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.163051][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.227448][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.237730][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.253392][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.337839][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.374197][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.403238][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.444271][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.464760][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.527924][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.545949][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.594296][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.628146][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.777940][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 93.809165][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 93.840404][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.881696][ C1] hrtimer: interrupt took 50304 ns [ 93.894262][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.906437][ T5869] Bluetooth: hci2: command tx timeout [ 93.906921][ T5872] Bluetooth: hci1: command tx timeout [ 93.912456][ T51] Bluetooth: hci0: command tx timeout [ 93.981430][ T51] Bluetooth: hci3: command tx timeout [ 93.986010][ T6002] netlink: 'syz.0.7': attribute type 171 has an invalid length. [ 94.040426][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.061282][ T51] Bluetooth: hci4: command tx timeout [ 94.068707][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.245381][ T6007] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7'. [ 94.271816][ T6011] netlink: 'syz.0.7': attribute type 41 has an invalid length. [ 94.272428][ T6012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8'. [ 94.279423][ T6011] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7'. [ 94.299340][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.322172][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.456652][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.496015][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.494670][ T6022] netlink: 'syz.4.5': attribute type 2 has an invalid length. [ 95.515080][ T6035] netlink: 'syz.2.13': attribute type 10 has an invalid length. [ 95.538043][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.550984][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.566504][ T6040] syz.2.13 uses obsolete (PF_INET,SOCK_PACKET) [ 95.603892][ T6022] netlink: 137592 bytes leftover after parsing attributes in process `syz.4.5'. [ 95.614394][ T6022] nbd: socks must be embedded in a SOCK_ITEM attr [ 95.913792][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.921494][ T6035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.931234][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.939060][ T6035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.013061][ T6035] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 96.188758][ T6054] netlink: 18187 bytes leftover after parsing attributes in process `syz.0.18'. [ 96.218839][ T6058] netlink: 'syz.4.17': attribute type 1 has an invalid length. [ 96.227141][ T6058] netlink: 'syz.4.17': attribute type 3 has an invalid length. [ 96.239471][ T6058] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17'. [ 97.057922][ T6083] netlink: 'syz.0.24': attribute type 19 has an invalid length. [ 97.227703][ T6070] netlink: 'syz.3.21': attribute type 16 has an invalid length. [ 97.256975][ T6070] netlink: 'syz.3.21': attribute type 17 has an invalid length. [ 97.550324][ T6070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.606371][ T6085] warning: `syz.1.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.619952][ T6091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27'. [ 97.667987][ T6088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.980679][ T6115] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.379908][ T6126] netlink: 144 bytes leftover after parsing attributes in process `syz.2.36'. [ 99.784199][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 100.578122][ T6156] netlink: 60 bytes leftover after parsing attributes in process `syz.0.42'. [ 101.964955][ T6173] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.166915][ T6214] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.55'. [ 103.227430][ T6219] netlink: 60 bytes leftover after parsing attributes in process `syz.4.57'. [ 103.266430][ T6217] netlink: 60 bytes leftover after parsing attributes in process `syz.4.57'. [ 103.330656][ T6219] netlink: 60 bytes leftover after parsing attributes in process `syz.4.57'. [ 103.388924][ T6222] netlink: 184 bytes leftover after parsing attributes in process `syz.2.59'. [ 103.424615][ T6223] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.58'. [ 104.235313][ T6240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.62'. [ 104.411166][ T6233] netlink: 'syz.3.55': attribute type 11 has an invalid length. [ 104.555974][ T6233] netlink: 'syz.3.55': attribute type 8 has an invalid length. [ 104.858125][ T6255] netlink: 60 bytes leftover after parsing attributes in process `syz.4.65'. [ 104.888078][ T6254] netlink: 48 bytes leftover after parsing attributes in process `syz.1.66'. [ 104.952667][ T6252] netlink: 60 bytes leftover after parsing attributes in process `syz.4.65'. [ 104.997023][ T6252] netlink: 60 bytes leftover after parsing attributes in process `syz.4.65'. [ 105.082903][ T6258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.67'. [ 105.472189][ T6258] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 106.063034][ T6281] netlink: 44 bytes leftover after parsing attributes in process `syz.0.72'. [ 106.129752][ T6285] netlink: 'syz.2.73': attribute type 16 has an invalid length. [ 106.140764][ T6285] netlink: 'syz.2.73': attribute type 17 has an invalid length. [ 106.254610][ T6285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.343290][ T51] Bluetooth: hci3: ISO packet for unknown connection handle 3858 [ 107.123416][ T6325] netlink: 68 bytes leftover after parsing attributes in process `syz.2.83'. [ 107.347619][ T6322] debugfs: '!' already exists in 'ieee80211' [ 108.635167][ T6356] tc_dump_action: action bad kind [ 109.003972][ T6364] netlink: 44 bytes leftover after parsing attributes in process `syz.2.91'. [ 110.029738][ T6370] netlink: 'syz.1.94': attribute type 10 has an invalid length. [ 110.060053][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.075220][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.289259][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.297168][ T6370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.306684][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.314657][ T6370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.430316][ T6370] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 110.797638][ T6393] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.100'. [ 111.157750][ T6397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.101'. [ 111.195410][ T6397] netlink: 48 bytes leftover after parsing attributes in process `syz.3.101'. [ 112.201435][ T6434] netlink: 'syz.0.111': attribute type 40 has an invalid length. [ 112.310283][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.915531][ T6453] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.115'. [ 112.933100][ T6459] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.117'. [ 113.025990][ T6458] netlink: 'syz.4.117': attribute type 21 has an invalid length. [ 113.398888][ T6464] netlink: 'syz.3.118': attribute type 21 has an invalid length. [ 113.403405][ T6423] syz.2.109: vmalloc error: size 538968064, failed to allocated page array size 1052672, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 113.407925][ T6464] netlink: 'syz.3.118': attribute type 6 has an invalid length. [ 113.476533][ T6423] CPU: 1 UID: 0 PID: 6423 Comm: syz.2.109 Not tainted syzkaller #0 PREEMPT(full) [ 113.476562][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 113.476589][ T6423] Call Trace: [ 113.476599][ T6423] [ 113.476609][ T6423] dump_stack_lvl+0x189/0x250 [ 113.476645][ T6423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.476673][ T6423] ? __pfx__printk+0x10/0x10 [ 113.476703][ T6423] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 113.476728][ T6423] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 113.476756][ T6423] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 113.476785][ T6423] warn_alloc+0x214/0x310 [ 113.476817][ T6423] ? __pfx_warn_alloc+0x10/0x10 [ 113.476852][ T6423] ? __get_vm_area_node+0x28f/0x300 [ 113.476874][ T6423] ? hash_netnet_create+0x741/0x1440 [ 113.476904][ T6423] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 113.476956][ T6423] ? alloc_pages_mpol+0x3cd/0x4a0 [ 113.476980][ T6423] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 113.477009][ T6423] ? rcu_is_watching+0x15/0xb0 [ 113.477031][ T6423] ? hash_netnet_create+0x741/0x1440 [ 113.477055][ T6423] ? hash_netnet_create+0x741/0x1440 [ 113.477077][ T6423] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 113.477099][ T6423] ? hash_netnet_create+0x741/0x1440 [ 113.477124][ T6423] ? hash_netnet_create+0x6d5/0x1440 [ 113.477154][ T6423] hash_netnet_create+0x741/0x1440 [ 113.477179][ T6423] ? __lock_acquire+0xab9/0xd20 [ 113.477227][ T6423] ? __pfx_hash_netnet_create+0x10/0x10 [ 113.477256][ T6423] ? __nla_parse+0x40/0x60 [ 113.477284][ T6423] ? __pfx_hash_netnet_create+0x10/0x10 [ 113.477312][ T6423] ip_set_create+0xa94/0x1940 [ 113.477335][ T6423] ? ip_set_create+0x4a2/0x1940 [ 113.477371][ T6423] ? __pfx_ip_set_create+0x10/0x10 [ 113.477435][ T6423] nfnetlink_rcv_msg+0xb4d/0x1130 [ 113.477462][ T6423] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 113.477518][ T6423] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 113.477540][ T6423] ? kasan_save_free_info+0x46/0x50 [ 113.477599][ T6423] ? perf_trace_preemptirq_template+0xa3/0x340 [ 113.477629][ T6423] ? kasan_quarantine_put+0x3d/0x220 [ 113.477682][ T6423] netlink_rcv_skb+0x208/0x470 [ 113.477712][ T6423] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 113.477739][ T6423] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 113.477780][ T6423] ? bpf_lsm_capable+0x9/0x20 [ 113.477800][ T6423] ? security_capable+0x7e/0x2e0 [ 113.477834][ T6423] nfnetlink_rcv+0x26a/0x2520 [ 113.477863][ T6423] ? __dev_queue_xmit+0x1d79/0x3b50 [ 113.477897][ T6423] ? __dev_queue_xmit+0x27b/0x3b50 [ 113.477932][ T6423] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 113.477956][ T6423] ? __pfx___dev_queue_xmit+0x10/0x10 [ 113.477993][ T6423] ? ref_tracker_free+0x63a/0x7d0 [ 113.478020][ T6423] ? __asan_memcpy+0x40/0x70 [ 113.478049][ T6423] ? __pfx_ref_tracker_free+0x10/0x10 [ 113.478072][ T6423] ? __skb_clone+0x63/0x7a0 [ 113.478110][ T6423] ? __skb_clone+0x483/0x7a0 [ 113.478150][ T6423] ? skb_clone+0x246/0x3a0 [ 113.478173][ T6423] ? __netlink_deliver_tap+0x807/0x850 [ 113.478201][ T6423] ? netlink_deliver_tap+0x2e/0x1b0 [ 113.478236][ T6423] ? netlink_deliver_tap+0x2e/0x1b0 [ 113.478274][ T6423] netlink_unicast+0x82c/0x9e0 [ 113.478310][ T6423] ? __pfx_netlink_unicast+0x10/0x10 [ 113.478338][ T6423] ? netlink_sendmsg+0x642/0xb30 [ 113.478362][ T6423] ? skb_put+0x11b/0x210 [ 113.478397][ T6423] netlink_sendmsg+0x805/0xb30 [ 113.478437][ T6423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.478476][ T6423] ? aa_sock_msg_perm+0xf1/0x1d0 [ 113.478505][ T6423] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 113.478533][ T6423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.478563][ T6423] __sock_sendmsg+0x219/0x270 [ 113.478592][ T6423] ____sys_sendmsg+0x505/0x830 [ 113.478632][ T6423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.478675][ T6423] ? import_iovec+0x74/0xa0 [ 113.478713][ T6423] ___sys_sendmsg+0x21f/0x2a0 [ 113.478750][ T6423] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.478826][ T6423] ? __fget_files+0x2a/0x420 [ 113.478849][ T6423] ? __fget_files+0x3a0/0x420 [ 113.478885][ T6423] __x64_sys_sendmsg+0x19b/0x260 [ 113.478920][ T6423] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 113.478978][ T6423] ? rcu_is_watching+0x15/0xb0 [ 113.479006][ T6423] ? do_syscall_64+0xbe/0x3b0 [ 113.479041][ T6423] do_syscall_64+0xfa/0x3b0 [ 113.479066][ T6423] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.479091][ T6423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.479111][ T6423] ? clear_bhb_loop+0x60/0xb0 [ 113.479138][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.479158][ T6423] RIP: 0033:0x7f8981f8eec9 [ 113.479185][ T6423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.479202][ T6423] RSP: 002b:00007f8982eda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.479225][ T6423] RAX: ffffffffffffffda RBX: 00007f89821e5fa0 RCX: 00007f8981f8eec9 [ 113.479240][ T6423] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 113.479252][ T6423] RBP: 00007f8982011f91 R08: 0000000000000000 R09: 0000000000000000 [ 113.479264][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.479275][ T6423] R13: 00007f89821e6038 R14: 00007f89821e5fa0 R15: 00007ffe45bd6828 [ 113.479309][ T6423] [ 113.479326][ T6423] Mem-Info: [ 113.632190][ T6464] netlink: 132 bytes leftover after parsing attributes in process `syz.3.118'. [ 114.031145][ T6423] active_anon:5692 inactive_anon:0 isolated_anon:0 [ 114.031145][ T6423] active_file:14340 inactive_file:39877 isolated_file:0 [ 114.031145][ T6423] unevictable:768 dirty:270 writeback:0 [ 114.031145][ T6423] slab_reclaimable:10630 slab_unreclaimable:97329 [ 114.031145][ T6423] mapped:30226 shmem:1356 pagetables:1161 [ 114.031145][ T6423] sec_pagetables:0 bounce:0 [ 114.031145][ T6423] kernel_misc_reclaimable:0 [ 114.031145][ T6423] free:1295617 free_pcp:21698 free_cma:0 [ 114.076013][ T6479] netlink: 'syz.4.121': attribute type 49 has an invalid length. [ 114.117891][ T6423] Node 0 active_anon:22852kB inactive_anon:0kB active_file:57360kB inactive_file:159316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120968kB dirty:1108kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11728kB pagetables:4516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 114.235488][ T6423] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 114.271442][ T6485] tc_dump_action: action bad kind [ 114.272203][ T6423] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 114.310553][ T6423] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 114.316705][ T6423] Node 0 DMA32 free:1277252kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22904kB inactive_anon:0kB active_file:57360kB inactive_file:157740kB unevictable:1536kB writepending:1104kB present:3129332kB managed:2557364kB mlocked:0kB bounce:0kB free_pcp:67196kB local_pcp:21644kB free_cma:0kB [ 114.365131][ T6423] lowmem_reserve[]: 0 0 1 1 1 [ 114.374702][ T6423] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 114.410009][ T6423] lowmem_reserve[]: 0 0 0 0 0 [ 114.415922][ T6423] Node 1 Normal free:3889756kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20352kB local_pcp:10272kB free_cma:0kB [ 114.451923][ T6423] lowmem_reserve[]: 0 0 0 0 0 [ 114.456712][ T6423] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 114.467441][ T6487] netlink: 60 bytes leftover after parsing attributes in process `syz.0.124'. [ 114.479481][ T6485] netlink: 60 bytes leftover after parsing attributes in process `syz.0.124'. [ 114.515315][ T6423] Node 0 DMA32: 371*4kB (ME) 289*8kB (M) 235*16kB (UM) 186*32kB (UME) 130*64kB (ME) 90*128kB (M) 63*256kB (ME) 20*512kB (UM) 11*1024kB (M) 3*2048kB (UM) 293*4096kB (M) = 1277252kB [ 114.537272][ T6423] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 114.585672][ T6423] Node 1 Normal: 187*4kB (UE) 56*8kB (UME) 37*16kB (UME) 49*32kB (UME) 23*64kB (UME) 5*128kB (UME) 7*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3889756kB [ 114.620598][ T6423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.635868][ T6423] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.653725][ T6423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.663967][ T6423] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.785064][ T6423] 55571 total pagecache pages [ 114.790240][ T6423] 0 pages in swap cache [ 114.795108][ T6423] Free swap = 124996kB [ 114.799405][ T6423] Total swap = 124996kB [ 114.804979][ T6423] 2097051 pages RAM [ 114.817791][ T6498] netlink: 'syz.3.127': attribute type 1 has an invalid length. [ 114.828228][ T6423] 0 pages HighMem/MovableOnly [ 114.842505][ T6423] 425684 pages reserved [ 114.848785][ T6498] netlink: 17 bytes leftover after parsing attributes in process `syz.3.127'. [ 114.863810][ T6423] 0 pages cma reserved [ 114.880763][ T6502] netlink: 'syz.0.129': attribute type 1 has an invalid length. [ 114.901965][ T6502] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.129'. [ 115.692445][ T6515] netlink: 'syz.3.133': attribute type 10 has an invalid length. [ 116.259114][ T6515] team0: Device hsr_slave_0 failed to register rx_handler [ 116.348247][ T6525] __nla_validate_parse: 2 callbacks suppressed [ 116.348268][ T6525] netlink: 132 bytes leftover after parsing attributes in process `syz.4.136'. [ 116.575564][ T6531] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 116.583193][ T6531] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 116.912908][ T6484] Can't find ip_set type biteap:ip [ 117.614539][ T6545] netlink: 56 bytes leftover after parsing attributes in process `syz.2.141'. [ 117.897616][ T6554] netlink: 'syz.2.143': attribute type 10 has an invalid length. [ 117.920613][ T6554] netlink: 40 bytes leftover after parsing attributes in process `syz.2.143'. [ 120.428173][ T6583] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 120.556688][ T6583] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 121.256543][ T6586] delete_channel: no stack [ 121.581285][ T6608] netlink: 'syz.4.159': attribute type 58 has an invalid length. [ 121.589244][ T6608] netlink: 152 bytes leftover after parsing attributes in process `syz.4.159'. [ 121.612602][ T6617] netlink: 'syz.2.161': attribute type 13 has an invalid length. [ 121.702322][ T6619] bpf: Bad value for 'mode' [ 121.747966][ T6622] netlink: 148 bytes leftover after parsing attributes in process `syz.1.162'. [ 121.773463][ T6622] netlink: 116 bytes leftover after parsing attributes in process `syz.1.162'. [ 121.866097][ T6622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.162'. [ 122.110178][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.163'. [ 122.126491][ T6629] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 122.139722][ T6629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.169191][ T6632] netlink: 72 bytes leftover after parsing attributes in process `syz.3.164'. [ 122.180482][ T6632] netlink: 72 bytes leftover after parsing attributes in process `syz.3.164'. [ 122.203205][ T6636] netlink: 72 bytes leftover after parsing attributes in process `syz.3.164'. [ 122.224433][ T6636] netlink: 72 bytes leftover after parsing attributes in process `syz.3.164'. [ 122.305973][ T6638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.402445][ T6638] netlink: 156 bytes leftover after parsing attributes in process `syz.4.165'. [ 122.933900][ T6646] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 123.303323][ T6658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.159732][ T6675] ipvlan0: entered promiscuous mode [ 124.165420][ T6675] ipvlan0: entered allmulticast mode [ 124.170770][ T6675] veth0_vlan: entered allmulticast mode [ 125.787534][ T6711] netlink: 'syz.3.186': attribute type 21 has an invalid length. [ 127.142010][ T6739] __nla_validate_parse: 13 callbacks suppressed [ 127.142033][ T6739] netlink: 60 bytes leftover after parsing attributes in process `syz.4.193'. [ 127.963466][ T6537] Set syz1 is full, maxelem 65536 reached [ 128.156006][ T6761] netlink: 'syz.0.199': attribute type 10 has an invalid length. [ 128.233310][ T6761] netlink: 'syz.0.199': attribute type 10 has an invalid length. [ 128.828382][ T6780] netlink: 396 bytes leftover after parsing attributes in process `syz.3.204'. [ 128.830461][ T6782] netlink: 564 bytes leftover after parsing attributes in process `syz.4.206'. [ 129.200076][ T6788] netlink: 'syz.2.207': attribute type 46 has an invalid length. [ 129.463262][ T6791] syzkaller0: entered promiscuous mode [ 129.485704][ T6803] ======================================================= [ 129.485704][ T6803] WARNING: The mand mount option has been deprecated and [ 129.485704][ T6803] and is ignored by this kernel. Remove the mand [ 129.485704][ T6803] option from the mount to silence this warning. [ 129.485704][ T6803] ======================================================= [ 129.530279][ T6791] syzkaller0: entered allmulticast mode [ 129.559308][ T6805] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.213'. [ 130.747861][ T51] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 130.748266][ T51] Bluetooth: hci3: connection err: -111 [ 132.658283][ T6830] netlink: 224 bytes leftover after parsing attributes in process `syz.1.219'. [ 133.028301][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.036467][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.078849][ T6841] netlink: 104 bytes leftover after parsing attributes in process `syz.1.221'. [ 133.806069][ T6867] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.227'. [ 134.083332][ T6873] xt_l2tp: v2 tid > 0xffff: 16462212 [ 139.153796][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 139.309814][ T6916] netlink: 132 bytes leftover after parsing attributes in process `syz.4.239'. [ 139.730794][ T6928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.242'. [ 139.796713][ T6928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.242'. [ 139.859818][ T6928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.242'. [ 139.979888][ T6934] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.243'. [ 140.654582][ T6939] netlink: 'syz.2.244': attribute type 27 has an invalid length. [ 140.691322][ T6939] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.244'. [ 140.753850][ T6950] netlink: 'syz.1.248': attribute type 13 has an invalid length. [ 141.333070][ T6972] netlink: 'syz.2.253': attribute type 2 has an invalid length. [ 141.373117][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 141.907399][ T6985] netlink: 'syz.0.257': attribute type 10 has an invalid length. [ 141.969206][ T6972] : entered promiscuous mode [ 141.976002][ T6985] netlink: 40 bytes leftover after parsing attributes in process `syz.0.257'. [ 142.086367][ T6985] ipvlan1: entered promiscuous mode [ 142.092620][ T6985] ipvlan1: entered allmulticast mode [ 142.098683][ T6985] veth0_vlan: entered allmulticast mode [ 142.126855][ T6985] bridge0: port 3(ipvlan1) entered blocking state [ 142.138518][ T6985] bridge0: port 3(ipvlan1) entered disabled state [ 142.177587][ T6985] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 142.220027][ T6990] netlink: 'syz.4.258': attribute type 5 has an invalid length. [ 142.475067][ T6992] netlink: 10 bytes leftover after parsing attributes in process `syz.2.259'. [ 143.069797][ T7011] netlink: 'syz.1.264': attribute type 6 has an invalid length. [ 143.876254][ T7043] netlink: 'syz.3.275': attribute type 37 has an invalid length. [ 144.863565][ T7068] __nla_validate_parse: 3 callbacks suppressed [ 144.863654][ T7068] netlink: 147608 bytes leftover after parsing attributes in process `syz.0.279'. [ 144.895731][ T7068] netlink: 61831 bytes leftover after parsing attributes in process `syz.0.279'. [ 145.828333][ T7096] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.286'. [ 147.560044][ T7124] netlink: 'syz.2.296': attribute type 7 has an invalid length. [ 148.036790][ T7134] TCP: TCP_TX_DELAY enabled [ 148.319393][ T7134] netlink: 'syz.4.294': attribute type 10 has an invalid length. [ 148.573250][ T7134] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.667435][ T7134] bond0: (slave team0): Enslaving as an active interface with an up link [ 149.081381][ T7150] netlink: 268 bytes leftover after parsing attributes in process `syz.1.300'. [ 149.439042][ T7154] netlink: 176 bytes leftover after parsing attributes in process `syz.4.301'. [ 149.649991][ T7170] netlink: 'syz.2.305': attribute type 10 has an invalid length. [ 149.858516][ T7170] team0: Device ipvlan1 failed to register rx_handler [ 150.087544][ T7178] netlink: 'syz.4.306': attribute type 4 has an invalid length. [ 150.139105][ T7178] netlink: 'syz.4.306': attribute type 1 has an invalid length. [ 150.171316][ T7182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.260169][ T7179] netlink: 'syz.4.306': attribute type 21 has an invalid length. [ 150.272741][ T7182] lo speed is unknown, defaulting to 1000 [ 150.279637][ T7182] lo speed is unknown, defaulting to 1000 [ 150.315781][ T7186] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.309'. [ 150.349467][ T7178] netlink: 'syz.4.306': attribute type 2 has an invalid length. [ 150.371177][ T7185] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.309'. [ 150.420299][ T7178] netlink: 198236 bytes leftover after parsing attributes in process `syz.4.306'. [ 150.433530][ T7182] lo speed is unknown, defaulting to 1000 [ 151.023212][ T7182] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 151.083654][ T7182] lo speed is unknown, defaulting to 1000 [ 151.113488][ T7182] lo speed is unknown, defaulting to 1000 [ 151.127603][ T7182] lo speed is unknown, defaulting to 1000 [ 151.156141][ T7182] lo speed is unknown, defaulting to 1000 [ 151.172798][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'. [ 151.184620][ T7182] lo speed is unknown, defaulting to 1000 [ 151.698193][ T7216] netlink: 'syz.1.317': attribute type 10 has an invalid length. [ 151.731252][ T7216] netlink: 40 bytes leftover after parsing attributes in process `syz.1.317'. [ 151.759471][ T7216] team0: entered promiscuous mode [ 151.775982][ T7216] team_slave_0: entered promiscuous mode [ 151.805081][ T7216] team_slave_1: entered promiscuous mode [ 151.836893][ T7216] team0: entered allmulticast mode [ 151.847457][ T7216] team_slave_0: entered allmulticast mode [ 151.867929][ T7216] team_slave_1: entered allmulticast mode [ 151.890143][ T7216] bridge0: port 3(team0) entered blocking state [ 151.908114][ T7216] bridge0: port 3(team0) entered disabled state [ 151.918511][ T7227] netlink: 'syz.2.320': attribute type 5 has an invalid length. [ 151.964957][ T7227] netlink: 'syz.2.320': attribute type 5 has an invalid length. [ 152.012947][ T7216] bridge0: port 3(team0) entered blocking state [ 152.019584][ T7216] bridge0: port 3(team0) entered forwarding state [ 152.260678][ T7236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.838675][ T7249] netlink: 'syz.1.326': attribute type 21 has an invalid length. [ 152.887852][ T7250] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.325'. [ 153.842412][ T7262] IPv6: Can't replace route, no match found [ 153.884752][ T7263] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 154.826965][ T7267] netlink: 'syz.1.332': attribute type 10 has an invalid length. [ 155.530336][ T7280] netlink: 'syz.2.334': attribute type 4 has an invalid length. [ 155.674211][ T7283] netlink: 'syz.3.335': attribute type 10 has an invalid length. [ 155.782447][ T7286] netlink: 'syz.3.335': attribute type 10 has an invalid length. [ 155.812204][ T7286] netlink: 40 bytes leftover after parsing attributes in process `syz.3.335'. [ 158.754155][ T7267] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 158.787010][ T7283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.817340][ T7283] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 158.867001][ T7286] batadv0: entered promiscuous mode [ 158.892367][ T7286] batadv0: entered allmulticast mode [ 158.927843][ T7286] bond0: (slave batadv0): Releasing backup interface [ 158.970496][ T7286] bridge0: port 3(batadv0) entered blocking state [ 158.977931][ T7286] bridge0: port 3(batadv0) entered disabled state [ 158.988941][ T7291] netlink: 'syz.0.336': attribute type 49 has an invalid length. [ 159.026841][ T7297] netlink: 'syz.1.339': attribute type 10 has an invalid length. [ 159.236215][ T1153] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 159.245780][ T1153] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 159.295080][ T7297] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 159.641360][ T7316] netlink: 228 bytes leftover after parsing attributes in process `syz.3.344'. [ 159.716160][ T7320] netlink: 'syz.2.346': attribute type 21 has an invalid length. [ 159.734543][ T7309] tap0: tun_chr_ioctl cmd 1074025675 [ 159.787407][ T7309] tap0: persist enabled [ 159.826294][ T7320] netlink: 'syz.2.346': attribute type 1 has an invalid length. [ 159.893515][ T7317] tap0: tun_chr_ioctl cmd 1074025675 [ 159.921221][ T7317] tap0: persist enabled [ 159.976796][ T7309] tap0: tun_chr_ioctl cmd 35108 [ 160.196590][ T7327] warn_alloc: 1 callbacks suppressed [ 160.196609][ T7327] syz.3.348: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 160.257899][ T7327] CPU: 1 UID: 0 PID: 7327 Comm: syz.3.348 Not tainted syzkaller #0 PREEMPT(full) [ 160.257932][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 160.257945][ T7327] Call Trace: [ 160.257954][ T7327] [ 160.257963][ T7327] dump_stack_lvl+0x189/0x250 [ 160.257999][ T7327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.258025][ T7327] ? __pfx__printk+0x10/0x10 [ 160.258055][ T7327] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 160.258081][ T7327] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 160.258107][ T7327] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 160.258135][ T7327] warn_alloc+0x214/0x310 [ 160.258159][ T7327] ? stack_depot_save_flags+0x41b/0x860 [ 160.258186][ T7327] ? __pfx_warn_alloc+0x10/0x10 [ 160.258211][ T7327] ? kasan_save_track+0x4f/0x80 [ 160.258242][ T7327] ? xskq_create+0x56/0x170 [ 160.258264][ T7327] ? xsk_init_queue+0xb0/0x110 [ 160.258293][ T7327] ? xsk_setsockopt+0x57b/0x8d0 [ 160.258313][ T7327] ? do_sock_setsockopt+0x179/0x1b0 [ 160.258341][ T7327] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 160.258368][ T7327] ? do_syscall_64+0xfa/0x3b0 [ 160.258394][ T7327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.258423][ T7327] __vmalloc_node_range_noprof+0x125/0x12f0 [ 160.258479][ T7327] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 160.258508][ T7327] ? __kasan_kmalloc+0x93/0xb0 [ 160.258531][ T7327] vmalloc_user_noprof+0xad/0xf0 [ 160.258553][ T7327] ? xskq_create+0xbf/0x170 [ 160.258578][ T7327] xskq_create+0xbf/0x170 [ 160.258606][ T7327] xsk_init_queue+0xb0/0x110 [ 160.258633][ T7327] xsk_setsockopt+0x57b/0x8d0 [ 160.258659][ T7327] ? __pfx_xsk_setsockopt+0x10/0x10 [ 160.258681][ T7327] ? __pfx_aa_sk_perm+0x10/0x10 [ 160.258708][ T7327] ? __fget_files+0x2a/0x420 [ 160.258729][ T7327] ? aa_sock_opt_perm+0xff/0x1b0 [ 160.258758][ T7327] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 160.258785][ T7327] ? __pfx_xsk_setsockopt+0x10/0x10 [ 160.258809][ T7327] do_sock_setsockopt+0x179/0x1b0 [ 160.258844][ T7327] __x64_sys_setsockopt+0x13f/0x1b0 [ 160.258880][ T7327] do_syscall_64+0xfa/0x3b0 [ 160.258905][ T7327] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.258930][ T7327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.258950][ T7327] ? clear_bhb_loop+0x60/0xb0 [ 160.258975][ T7327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.258995][ T7327] RIP: 0033:0x7f24cbf8eec9 [ 160.259014][ T7327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.259030][ T7327] RSP: 002b:00007f24ccde3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 160.259054][ T7327] RAX: ffffffffffffffda RBX: 00007f24cc1e5fa0 RCX: 00007f24cbf8eec9 [ 160.259070][ T7327] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 160.259082][ T7327] RBP: 00007f24cc011f91 R08: 0000000000000004 R09: 0000000000000000 [ 160.259094][ T7327] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 160.259107][ T7327] R13: 00007f24cc1e6038 R14: 00007f24cc1e5fa0 R15: 00007ffe4feb71d8 [ 160.259140][ T7327] [ 160.259149][ T7327] Mem-Info: [ 160.606611][ T7336] debugfs: '!' already exists in 'ieee80211' [ 160.626367][ T7327] active_anon:5697 inactive_anon:0 isolated_anon:0 [ 160.626367][ T7327] active_file:17412 inactive_file:39899 isolated_file:0 [ 160.626367][ T7327] unevictable:768 dirty:126 writeback:0 [ 160.626367][ T7327] slab_reclaimable:11226 slab_unreclaimable:100357 [ 160.626367][ T7327] mapped:29240 shmem:1356 pagetables:1170 [ 160.626367][ T7327] sec_pagetables:0 bounce:0 [ 160.626367][ T7327] kernel_misc_reclaimable:0 [ 160.626367][ T7327] free:1303210 free_pcp:23408 free_cma:0 [ 160.732661][ T7327] Node 0 active_anon:22788kB inactive_anon:0kB active_file:69648kB inactive_file:159396kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116960kB dirty:500kB writeback:100kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11740kB pagetables:4512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 160.777022][ T7327] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 160.896300][ T7327] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 161.047440][ T7327] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 161.054795][ T7327] Node 0 DMA32 free:1307144kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22540kB inactive_anon:0kB active_file:69648kB inactive_file:157820kB unevictable:1536kB writepending:500kB present:3129332kB managed:2557364kB mlocked:0kB bounce:0kB free_pcp:73804kB local_pcp:45532kB free_cma:0kB [ 161.143837][ T7327] lowmem_reserve[]: 0 0 1 1 1 [ 161.148761][ T7327] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 161.185157][ T7327] lowmem_reserve[]: 0 0 0 0 0 [ 161.190205][ T7327] Node 1 Normal free:3890524kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19880kB local_pcp:9504kB free_cma:0kB [ 161.225989][ T7327] lowmem_reserve[]: 0 0 0 0 0 [ 161.230795][ T7327] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 161.278913][ T7327] Node 0 DMA32: 3189*4kB (UM) 1368*8kB (UM) 799*16kB (UME) 1508*32kB (UME) 660*64kB (UME) 320*128kB (UM) 192*256kB (UME) 66*512kB (UME) 29*1024kB (UME) 3*2048kB (UM) 251*4096kB (UM) = 1314820kB [ 161.306419][ T7327] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 161.327739][ T7327] Node 1 Normal: 187*4kB (UE) 56*8kB (UME) 37*16kB (UME) 71*32kB (UME) 24*64kB (UME) 5*128kB (UME) 7*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3890524kB [ 161.349657][ T7327] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.361697][ T7345] netlink: 72 bytes leftover after parsing attributes in process `syz.4.351'. [ 161.375444][ T7327] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.385269][ T7327] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.395345][ T7327] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.419106][ T7327] 58663 total pagecache pages [ 161.424624][ T7327] 0 pages in swap cache [ 161.429050][ T7327] Free swap = 124996kB [ 161.434242][ T7327] Total swap = 124996kB [ 161.438537][ T7327] 2097051 pages RAM [ 161.443156][ T7327] 0 pages HighMem/MovableOnly [ 161.448003][ T7327] 425684 pages reserved [ 161.456539][ T7327] 0 pages cma reserved [ 162.163631][ T7354] netlink: 156 bytes leftover after parsing attributes in process `syz.1.354'. [ 162.514018][ T7356] lo speed is unknown, defaulting to 1000 [ 162.983180][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.359'. [ 163.201871][ T7381] netlink: 'syz.2.360': attribute type 27 has an invalid length. [ 163.221815][ T7381] netlink: 164 bytes leftover after parsing attributes in process `syz.2.360'. [ 163.259326][ T7386] netlink: 'syz.1.361': attribute type 10 has an invalid length. [ 163.288634][ T7374] netlink: 'syz.2.360': attribute type 29 has an invalid length. [ 163.297450][ T7381] netlink: 'syz.2.360': attribute type 29 has an invalid length. [ 163.311897][ T7386] bridge0: port 3(team0) entered disabled state [ 163.318694][ T7386] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.326158][ T7386] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.391865][ T7374] netlink: 'syz.2.360': attribute type 29 has an invalid length. [ 163.429816][ T7387] netlink: 383 bytes leftover after parsing attributes in process `syz.0.363'. [ 163.959874][ T7397] netlink: 260 bytes leftover after parsing attributes in process `syz.2.366'. [ 164.198980][ T7408] netlink: 48 bytes leftover after parsing attributes in process `syz.4.369'. [ 164.642431][ T7427] netlink: 32 bytes leftover after parsing attributes in process `syz.2.374'. [ 164.733729][ T7428] netlink: 208192 bytes leftover after parsing attributes in process `syz.2.374'. [ 164.756258][ T7428] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 164.799460][ T7408] syz.4.369 (7408) used greatest stack depth: 17864 bytes left [ 164.824820][ T7430] netlink: 'syz.3.375': attribute type 21 has an invalid length. [ 164.832784][ T7430] IPv6: NLM_F_CREATE should be specified when creating new route [ 164.845214][ T7420] netlink: 56 bytes leftover after parsing attributes in process `syz.2.374'. [ 164.854772][ T7430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.862097][ T7430] IPv6: NLM_F_CREATE should be set when creating new route [ 164.869472][ T7430] IPv6: NLM_F_CREATE should be set when creating new route [ 165.277779][ T7447] netlink: 'syz.4.379': attribute type 33 has an invalid length. [ 167.875343][ T7486] netlink: 'syz.1.388': attribute type 11 has an invalid length. [ 167.883670][ T7486] __nla_validate_parse: 4 callbacks suppressed [ 167.883690][ T7486] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.388'. [ 167.904274][ T7486] netlink: 'syz.1.388': attribute type 11 has an invalid length. [ 167.957440][ T7486] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.388'. [ 168.028560][ T7491] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 168.093112][ T7502] syzkaller0: create flow: hash 1172823024 index 1 [ 168.342867][ T7490] syzkaller0: delete flow: hash 1172823024 index 1 [ 168.637743][ T7481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.055886][ T7523] IPv6: Can't replace route, no match found [ 169.343236][ T7528] netlink: 124 bytes leftover after parsing attributes in process `syz.0.399'. [ 169.353205][ T7528] netlink: 44 bytes leftover after parsing attributes in process `syz.0.399'. [ 170.811949][ T7505] netlink: 140 bytes leftover after parsing attributes in process `syz.4.393'. [ 171.162309][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.400'. [ 171.188652][ T7520] lo speed is unknown, defaulting to 1000 [ 171.378914][ T7544] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.404'. [ 171.390097][ T7544] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 171.404204][ T7544] netlink: 'syz.0.404': attribute type 2 has an invalid length. [ 171.428696][ T7544] netlink: 'syz.0.404': attribute type 8 has an invalid length. [ 171.447699][ T7544] netlink: 132 bytes leftover after parsing attributes in process `syz.0.404'. [ 171.642584][ T7555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.406'. [ 172.078810][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.408'. [ 173.627025][ T51] Bluetooth: hci0: ISO packet for unknown connection handle 19 [ 174.016366][ T7596] netlink: 'syz.4.416': attribute type 49 has an invalid length. [ 174.700059][ T7629] netlink: 'syz.3.424': attribute type 2 has an invalid length. [ 174.771491][ T7629] __nla_validate_parse: 1 callbacks suppressed [ 174.771513][ T7629] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.424'. [ 174.927717][ T7629] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 175.323819][ T7639] netlink: 164 bytes leftover after parsing attributes in process `syz.2.427'. [ 175.378631][ T7639] netlink: 164 bytes leftover after parsing attributes in process `syz.2.427'. [ 175.585709][ T7647] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.430'. [ 175.962281][ T7661] netlink: 14 bytes leftover after parsing attributes in process `syz.4.434'. [ 176.092435][ T7661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.101564][ T7682] netlink: 'syz.4.440': attribute type 2 has an invalid length. [ 177.453421][ T7704] netlink: 'syz.2.444': attribute type 2 has an invalid length. [ 177.461295][ T7704] netlink: 'syz.2.444': attribute type 8 has an invalid length. [ 177.481124][ T7704] netlink: 132 bytes leftover after parsing attributes in process `syz.2.444'. [ 178.576094][ T7714] netlink: 48 bytes leftover after parsing attributes in process `syz.0.449'. [ 178.642983][ T7714] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 178.686446][ T7719] netlink: 204 bytes leftover after parsing attributes in process `syz.3.451'. [ 178.842152][ T7725] netlink: 5088 bytes leftover after parsing attributes in process `syz.4.450'. [ 181.151419][ T7766] netlink: 'syz.3.462': attribute type 10 has an invalid length. [ 181.286277][ T7768] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.462'. [ 181.964659][ T7794] netlink: 'syz.0.468': attribute type 21 has an invalid length. [ 182.004979][ T7794] netlink: 128 bytes leftover after parsing attributes in process `syz.0.468'. [ 182.313559][ T7766] team0 (unregistering): Port device team_slave_0 removed [ 182.335436][ T7766] team0 (unregistering): Port device team_slave_1 removed [ 182.420364][ T7794] netlink: 'syz.0.468': attribute type 5 has an invalid length. [ 182.428420][ T7794] netlink: 'syz.0.468': attribute type 6 has an invalid length. [ 182.446490][ T7794] netlink: 3 bytes leftover after parsing attributes in process `syz.0.468'. [ 182.608421][ T7799] netlink: 76 bytes leftover after parsing attributes in process `syz.3.469'. [ 182.989622][ T7811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.996940][ T7811] IPv6: NLM_F_CREATE should be set when creating new route [ 183.004283][ T7811] IPv6: NLM_F_CREATE should be set when creating new route [ 183.011840][ T7811] IPv6: NLM_F_CREATE should be set when creating new route [ 183.123566][ T7827] netlink: 'syz.0.476': attribute type 5 has an invalid length. [ 183.154772][ T7827] netlink: 130956 bytes leftover after parsing attributes in process `syz.0.476'. [ 183.326090][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 183.552568][ T7844] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.477'. [ 183.766433][ T7850] netlink: 24 bytes leftover after parsing attributes in process `syz.1.481'. [ 184.022164][ T7853] netlink: 948 bytes leftover after parsing attributes in process `syz.3.482'. [ 185.057373][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 185.553618][ T7890] ªªªªªª: renamed from dummy0 (while UP) [ 186.651550][ T7918] netlink: 'syz.1.502': attribute type 13 has an invalid length. [ 186.722160][ T7918] netlink: 'syz.1.502': attribute type 17 has an invalid length. [ 186.855456][ T7925] __nla_validate_parse: 5 callbacks suppressed [ 186.855479][ T7925] netlink: 2515 bytes leftover after parsing attributes in process `syz.4.503'. [ 187.143455][ T7929] netlink: 'syz.2.504': attribute type 21 has an invalid length. [ 187.366290][ T7918] bridge0: port 3(team0) entered blocking state [ 187.372886][ T7918] bridge0: port 3(team0) entered forwarding state [ 187.379810][ T7918] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.387152][ T7918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.394800][ T7918] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.402070][ T7918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.751982][ T7918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.806600][ T43] lo speed is unknown, defaulting to 1000 [ 188.161691][ T7931] delete_channel: no stack [ 188.787642][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'. [ 189.500280][ T30] audit: type=1107 audit(1759317833.853:2): pid=7984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 189.779423][ T8003] netlink: 'syz.4.524': attribute type 10 has an invalid length. [ 189.787966][ T8003] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.795876][ T8003] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.864257][ T8003] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.871597][ T8003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.879480][ T8003] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.886769][ T8003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.914405][ T8009] netlink: 'syz.1.526': attribute type 1 has an invalid length. [ 189.955242][ T8003] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 190.203247][ T8017] netlink: 'syz.2.527': attribute type 22 has an invalid length. [ 190.219323][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.527'. [ 190.996727][ T8043] netlink: 56 bytes leftover after parsing attributes in process `syz.4.533'. [ 191.049886][ T8040] netlink: 60 bytes leftover after parsing attributes in process `syz.0.532'. [ 191.060278][ T8040] unsupported nlmsg_type 40 [ 191.088142][ T8048] netlink: 'syz.3.534': attribute type 2 has an invalid length. [ 191.314935][ T8055] netlink: 'syz.2.536': attribute type 21 has an invalid length. [ 191.351450][ T8055] netlink: 'syz.2.536': attribute type 1 has an invalid length. [ 191.384568][ T8043] netlink: 'syz.4.533': attribute type 39 has an invalid length. [ 191.392846][ T8055] netlink: 144 bytes leftover after parsing attributes in process `syz.2.536'. [ 191.541287][ T8059] netlink: 184 bytes leftover after parsing attributes in process `syz.3.537'. [ 191.730250][ T8067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.748949][ T8061] netlink: 124 bytes leftover after parsing attributes in process `syz.1.538'. [ 191.791777][ T8061] netlink: 44 bytes leftover after parsing attributes in process `syz.1.538'. [ 192.095868][ T8075] IPv6: NLM_F_CREATE should be specified when creating new route [ 192.262746][ T8089] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.545'. [ 192.409436][ T8094] netlink: 'syz.1.546': attribute type 1 has an invalid length. [ 192.436390][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.546'. [ 193.201757][ T8126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.554'. [ 193.647043][ T8142] netlink: 'syz.1.559': attribute type 6 has an invalid length. [ 193.660071][ T8142] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.559'. [ 193.960086][ T8150] lo speed is unknown, defaulting to 1000 [ 194.007216][ T8151] netlink: 495 bytes leftover after parsing attributes in process `syz.1.562'. [ 194.494370][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.500829][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.824243][ T8161] netlink: 'syz.4.566': attribute type 4 has an invalid length. [ 196.443239][ T8193] netlink: 104 bytes leftover after parsing attributes in process `syz.0.576'. [ 196.865382][ T51] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 196.984834][ T8213] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.582'. [ 197.130551][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.582'. [ 197.326002][ T8216] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 197.368121][ T8216] CPU: 1 UID: 0 PID: 8216 Comm: syz.3.584 Not tainted syzkaller #0 PREEMPT(full) [ 197.368152][ T8216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 197.368166][ T8216] Call Trace: [ 197.368175][ T8216] [ 197.368185][ T8216] dump_stack_lvl+0x189/0x250 [ 197.368221][ T8216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.368248][ T8216] ? __pfx__printk+0x10/0x10 [ 197.368285][ T8216] ? kernfs_path_from_node+0x2f/0x290 [ 197.368313][ T8216] ? kernfs_path_from_node+0x250/0x290 [ 197.368339][ T8216] ? kernfs_path_from_node+0x2f/0x290 [ 197.368372][ T8216] sysfs_warn_dup+0x8e/0xa0 [ 197.368398][ T8216] sysfs_do_create_link_sd+0xc0/0x110 [ 197.368429][ T8216] device_add_class_symlinks+0x1cf/0x240 [ 197.368476][ T8216] device_add+0x475/0xb50 [ 197.368512][ T8216] wiphy_register+0x1ba6/0x28d0 [ 197.368561][ T8216] ? __pfx_wiphy_register+0x10/0x10 [ 197.368607][ T8216] ieee80211_register_hw+0x3484/0x4100 [ 197.368647][ T8216] ? ieee80211_register_hw+0x1451/0x4100 [ 197.368680][ T8216] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 197.368705][ T8216] ? trace_hrtimer_setup+0x31/0x200 [ 197.368738][ T8216] ? __hrtimer_setup+0x187/0x210 [ 197.368756][ T8216] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 197.368786][ T8216] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 197.368845][ T8216] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 197.368866][ T8216] ? trace_kmalloc+0x1f/0xd0 [ 197.368883][ T8216] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 197.368903][ T8216] ? kstrndup+0xbf/0x160 [ 197.368942][ T8216] hwsim_new_radio_nl+0xea4/0x1b10 [ 197.368968][ T8216] ? __pfx___nla_validate_parse+0x10/0x10 [ 197.369013][ T8216] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 197.369038][ T8216] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 197.369065][ T8216] ? __nla_parse+0x24/0x60 [ 197.369096][ T8216] ? __nla_parse+0x40/0x60 [ 197.369127][ T8216] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 197.369160][ T8216] genl_family_rcv_msg_doit+0x215/0x300 [ 197.369190][ T8216] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 197.369228][ T8216] ? bpf_lsm_capable+0x9/0x20 [ 197.369247][ T8216] ? security_capable+0x7e/0x2e0 [ 197.369279][ T8216] genl_rcv_msg+0x60e/0x790 [ 197.369307][ T8216] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.369326][ T8216] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 197.369354][ T8216] ? irqentry_exit+0x74/0x90 [ 197.369390][ T8216] netlink_rcv_skb+0x208/0x470 [ 197.369419][ T8216] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.369441][ T8216] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.369500][ T8216] ? down_read+0x1ad/0x2e0 [ 197.369534][ T8216] genl_rcv+0x28/0x40 [ 197.369552][ T8216] netlink_unicast+0x82c/0x9e0 [ 197.369588][ T8216] ? __pfx_netlink_unicast+0x10/0x10 [ 197.369616][ T8216] ? netlink_sendmsg+0x642/0xb30 [ 197.369641][ T8216] ? skb_put+0x11b/0x210 [ 197.369675][ T8216] netlink_sendmsg+0x805/0xb30 [ 197.369715][ T8216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.369747][ T8216] ? aa_sock_msg_perm+0xf1/0x1d0 [ 197.369775][ T8216] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.369802][ T8216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.369831][ T8216] __sock_sendmsg+0x219/0x270 [ 197.369859][ T8216] ____sys_sendmsg+0x505/0x830 [ 197.369898][ T8216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.369940][ T8216] ? import_iovec+0x74/0xa0 [ 197.369978][ T8216] ___sys_sendmsg+0x21f/0x2a0 [ 197.370012][ T8216] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.370089][ T8216] ? __fget_files+0x2a/0x420 [ 197.370111][ T8216] ? __fget_files+0x3a0/0x420 [ 197.370146][ T8216] __x64_sys_sendmsg+0x19b/0x260 [ 197.370181][ T8216] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.370244][ T8216] do_syscall_64+0xfa/0x3b0 [ 197.370273][ T8216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.370293][ T8216] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 197.370313][ T8216] ? clear_bhb_loop+0x60/0xb0 [ 197.370339][ T8216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.370360][ T8216] RIP: 0033:0x7f24cbf8eec9 [ 197.370389][ T8216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.370407][ T8216] RSP: 002b:00007f24ccde3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.370438][ T8216] RAX: ffffffffffffffda RBX: 00007f24cc1e5fa0 RCX: 00007f24cbf8eec9 [ 197.370454][ T8216] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000004 [ 197.370478][ T8216] RBP: 00007f24cc011f91 R08: 0000000000000000 R09: 0000000000000000 [ 197.370491][ T8216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.370503][ T8216] R13: 00007f24cc1e6038 R14: 00007f24cc1e5fa0 R15: 00007ffe4feb71d8 [ 197.370539][ T8216] [ 198.703795][ T8235] netlink: 'syz.0.588': attribute type 27 has an invalid length. [ 198.735893][ T8235] netlink: 164 bytes leftover after parsing attributes in process `syz.0.588'. [ 199.672222][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.589'. [ 199.890439][ T8246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.590'. [ 200.015224][ T8252] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 200.106433][ T8245] netlink: 'syz.2.591': attribute type 29 has an invalid length. [ 200.166992][ T8245] netlink: 'syz.2.591': attribute type 29 has an invalid length. [ 200.187282][ T8257] netlink: 'syz.4.594': attribute type 2 has an invalid length. [ 200.203220][ T8257] netlink: 'syz.4.594': attribute type 1 has an invalid length. [ 200.211251][ T8257] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.594'. [ 200.220490][ T8257] nbd: illegal input index 14681964 [ 200.266332][ T8245] netlink: 'syz.2.591': attribute type 10 has an invalid length. [ 200.385018][ T8245] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 200.763159][ T8275] netlink: 96 bytes leftover after parsing attributes in process `syz.4.597'. [ 202.388297][ T8322] netlink: 'syz.1.612': attribute type 10 has an invalid length. [ 202.447466][ T5869] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 203.621874][ T8340] netlink: 124 bytes leftover after parsing attributes in process `syz.3.616'. [ 203.711990][ T8340] netlink: 44 bytes leftover after parsing attributes in process `syz.3.616'. [ 207.149987][ T8333] netlink: 132 bytes leftover after parsing attributes in process `syz.0.614'. [ 207.778697][ T8359] netlink: 147608 bytes leftover after parsing attributes in process `syz.2.621'. [ 207.801387][ T8359] netlink: 62239 bytes leftover after parsing attributes in process `syz.2.621'. [ 208.028144][ T8355] lo speed is unknown, defaulting to 1000 [ 208.038615][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 208.105511][ T8371] netlink: 6 bytes leftover after parsing attributes in process `syz.0.623'. [ 208.204062][ T8377] netlink: 72 bytes leftover after parsing attributes in process `syz.2.624'. [ 208.329982][ T8377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.624'. [ 208.376356][ T8381] netlink: 'syz.0.626': attribute type 2 has an invalid length. [ 208.401314][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'. [ 208.435736][ T8381] netlink: 51 bytes leftover after parsing attributes in process `syz.0.626'. [ 208.597743][ T8386] netlink: 'syz.3.627': attribute type 4 has an invalid length. [ 209.585858][ T8411] netlink: 'syz.3.630': attribute type 10 has an invalid length. [ 209.702055][ T8415] netlink: 124 bytes leftover after parsing attributes in process `syz.1.632'. [ 209.890989][ T8411] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.900603][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.108230][ T8411] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.115962][ T8411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.124482][ T8411] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.132173][ T8411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.293559][ T8411] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 211.264201][ T8436] openvswitch: netlink: IPv6 tunnel dst address is zero [ 211.326821][ T8431] netlink: 'syz.3.635': attribute type 2 has an invalid length. [ 211.379314][ T8431] bond_slave_0: entered promiscuous mode [ 211.385892][ T8431] bond_slave_1: entered promiscuous mode [ 211.392124][ T8431] bridge0: entered promiscuous mode [ 211.913892][ T8420] Bluetooth: hci0: command 0x0406 tx timeout [ 211.920256][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 211.933518][ T5871] Bluetooth: hci3: command 0x0406 tx timeout [ 211.940743][ T5871] Bluetooth: hci1: command 0x0406 tx timeout [ 211.950195][ T8420] Bluetooth: hci4: command 0x0406 tx timeout [ 212.573908][ T8453] netlink: 'syz.0.640': attribute type 11 has an invalid length. [ 212.608289][ T8456] netlink: 'syz.2.643': attribute type 23 has an invalid length. [ 212.644104][ T8456] netlink: 'syz.2.643': attribute type 23 has an invalid length. [ 212.673920][ T8456] netlink: 'syz.2.643': attribute type 23 has an invalid length. [ 212.799738][ T8456] netlink: 'syz.2.643': attribute type 23 has an invalid length. [ 212.883911][ T8456] netlink: 'syz.2.643': attribute type 23 has an invalid length. [ 213.023540][ T8453] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 213.061192][ T8453] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 213.515000][ T8479] __nla_validate_parse: 4 callbacks suppressed [ 213.515024][ T8479] netlink: 124 bytes leftover after parsing attributes in process `syz.3.646'. [ 213.636484][ T8479] netlink: 44 bytes leftover after parsing attributes in process `syz.3.646'. [ 213.770819][ T8491] validate_nla: 18 callbacks suppressed [ 213.777224][ T8491] netlink: 'syz.0.650': attribute type 27 has an invalid length. [ 213.791805][ T8491] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.650'. [ 213.938890][ T8498] netlink: 'syz.2.652': attribute type 21 has an invalid length. [ 214.259111][ T8514] netlink: 'syz.0.658': attribute type 2 has an invalid length. [ 214.279783][ T8514] netlink: 126508 bytes leftover after parsing attributes in process `syz.0.658'. [ 214.658938][ T8531] netlink: 2 bytes leftover after parsing attributes in process `syz.4.664'. [ 214.703782][ T8534] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 214.711585][ T8534] CPU: 1 UID: 0 PID: 8534 Comm: syz.2.662 Not tainted syzkaller #0 PREEMPT(full) [ 214.711614][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 214.711628][ T8534] Call Trace: [ 214.711638][ T8534] [ 214.711647][ T8534] dump_stack_lvl+0x189/0x250 [ 214.711681][ T8534] ? kernfs_path_from_node+0x2f/0x290 [ 214.711712][ T8534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.711738][ T8534] ? __pfx__printk+0x10/0x10 [ 214.711776][ T8534] ? kernfs_path_from_node+0x2f/0x290 [ 214.711803][ T8534] ? kernfs_path_from_node+0x250/0x290 [ 214.711828][ T8534] ? kernfs_path_from_node+0x2f/0x290 [ 214.711862][ T8534] sysfs_warn_dup+0x8e/0xa0 [ 214.711889][ T8534] sysfs_do_create_link_sd+0xc0/0x110 [ 214.711920][ T8534] device_add_class_symlinks+0x1cf/0x240 [ 214.711957][ T8534] device_add+0x475/0xb50 [ 214.712001][ T8534] wiphy_register+0x1ba6/0x28d0 [ 214.712052][ T8534] ? __pfx_wiphy_register+0x10/0x10 [ 214.712078][ T8534] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 214.712122][ T8534] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 214.712162][ T8534] ieee80211_register_hw+0x3484/0x4100 [ 214.712204][ T8534] ? ieee80211_register_hw+0x1451/0x4100 [ 214.712238][ T8534] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 214.712265][ T8534] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 214.712301][ T8534] ? __hrtimer_setup+0x187/0x210 [ 214.712321][ T8534] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 214.712352][ T8534] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 214.712417][ T8534] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 214.712438][ T8534] ? trace_kmalloc+0x1f/0xd0 [ 214.712454][ T8534] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 214.712475][ T8534] ? kstrndup+0xbf/0x160 [ 214.712517][ T8534] hwsim_new_radio_nl+0xea4/0x1b10 [ 214.712544][ T8534] ? __pfx___nla_validate_parse+0x10/0x10 [ 214.712592][ T8534] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 214.712634][ T8534] ? __nla_parse+0x40/0x60 [ 214.712667][ T8534] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 214.712701][ T8534] genl_family_rcv_msg_doit+0x215/0x300 [ 214.712733][ T8534] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 214.712775][ T8534] ? bpf_lsm_capable+0x9/0x20 [ 214.712793][ T8534] ? security_capable+0x7e/0x2e0 [ 214.712827][ T8534] genl_rcv_msg+0x60e/0x790 [ 214.712858][ T8534] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.712877][ T8534] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 214.712902][ T8534] ? __asan_memcpy+0x40/0x70 [ 214.712931][ T8534] ? __pfx_ref_tracker_free+0x10/0x10 [ 214.712968][ T8534] netlink_rcv_skb+0x208/0x470 [ 214.713001][ T8534] ? __lock_acquire+0xab9/0xd20 [ 214.713033][ T8534] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.713056][ T8534] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.713111][ T8534] ? down_read+0x1ad/0x2e0 [ 214.713144][ T8534] genl_rcv+0x28/0x40 [ 214.713162][ T8534] netlink_unicast+0x82c/0x9e0 [ 214.713199][ T8534] ? __pfx_netlink_unicast+0x10/0x10 [ 214.713227][ T8534] ? netlink_sendmsg+0x642/0xb30 [ 214.713252][ T8534] ? skb_put+0x11b/0x210 [ 214.713287][ T8534] netlink_sendmsg+0x805/0xb30 [ 214.713329][ T8534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.713362][ T8534] ? aa_sock_msg_perm+0xf1/0x1d0 [ 214.713391][ T8534] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 214.713418][ T8534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.713448][ T8534] __sock_sendmsg+0x219/0x270 [ 214.713477][ T8534] ____sys_sendmsg+0x505/0x830 [ 214.713517][ T8534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.713562][ T8534] ? import_iovec+0x74/0xa0 [ 214.713601][ T8534] ___sys_sendmsg+0x21f/0x2a0 [ 214.713636][ T8534] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.713699][ T8534] ? __fget_files+0x2a/0x420 [ 214.713741][ T8534] ? __fget_files+0x2a/0x420 [ 214.713762][ T8534] ? __fget_files+0x3a0/0x420 [ 214.713802][ T8534] __x64_sys_sendmsg+0x19b/0x260 [ 214.713838][ T8534] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.713885][ T8534] ? rcu_is_watching+0x15/0xb0 [ 214.713915][ T8534] ? do_syscall_64+0xbe/0x3b0 [ 214.713949][ T8534] do_syscall_64+0xfa/0x3b0 [ 214.713975][ T8534] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.714008][ T8534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.714029][ T8534] ? clear_bhb_loop+0x60/0xb0 [ 214.714056][ T8534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.714076][ T8534] RIP: 0033:0x7f8981f8eec9 [ 214.714097][ T8534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.714114][ T8534] RSP: 002b:00007f8982eb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.714137][ T8534] RAX: ffffffffffffffda RBX: 00007f89821e6090 RCX: 00007f8981f8eec9 [ 214.714153][ T8534] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000004 [ 214.714167][ T8534] RBP: 00007f8982011f91 R08: 0000000000000000 R09: 0000000000000000 [ 214.714180][ T8534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.714192][ T8534] R13: 00007f89821e6128 R14: 00007f89821e6090 R15: 00007ffe45bd6828 [ 214.714257][ T8534] [ 215.262265][ T8531] batadv_slave_1: entered promiscuous mode [ 215.470696][ T8541] netlink: 'syz.0.667': attribute type 2 has an invalid length. [ 215.479231][ T8541] netlink: 'syz.0.667': attribute type 8 has an invalid length. [ 215.487157][ T8541] netlink: 132 bytes leftover after parsing attributes in process `syz.0.667'. [ 215.905635][ T8536] À: port 1(vlan0) entered blocking state [ 215.938697][ T8536] À: port 1(vlan0) entered disabled state [ 215.949198][ T8536] vlan0: entered allmulticast mode [ 215.954433][ T8536] veth0_vlan: entered allmulticast mode [ 215.962193][ T8536] vlan0: entered promiscuous mode [ 215.979764][ T8547] netlink: 'syz.4.668': attribute type 10 has an invalid length. [ 215.995404][ T8547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.004077][ T8547] team0: Port device batadv0 added [ 216.844371][ T8578] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.677'. [ 216.900377][ T8573] netlink: 'syz.4.677': attribute type 29 has an invalid length. [ 216.931566][ T8573] netlink: 'syz.4.677': attribute type 29 has an invalid length. [ 216.979854][ T8586] netlink: 14 bytes leftover after parsing attributes in process `syz.0.680'. [ 217.079464][ T8586] hsr_slave_0: left promiscuous mode [ 217.120552][ T8586] hsr_slave_1: left promiscuous mode [ 218.207725][ T8621] netlink: 'syz.2.692': attribute type 2 has an invalid length. [ 218.219446][ T8621] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.692'. [ 218.418478][ T8630] netlink: 'syz.1.691': attribute type 17 has an invalid length. [ 218.794923][ T8634] netlink: 100 bytes leftover after parsing attributes in process `syz.4.694'. [ 219.169314][ T8645] netlink: 703 bytes leftover after parsing attributes in process `syz.0.695'. [ 219.470530][ T8649] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.697'. [ 219.511268][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 219.554415][ T8649] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.697'. [ 219.606461][ T8649] netlink: 'syz.1.697': attribute type 10 has an invalid length. [ 219.633261][ T8649] team0: Device ipvlan1 failed to register rx_handler [ 219.641799][ T8652] netlink: 'syz.4.700': attribute type 4 has an invalid length. [ 219.660612][ T8652] netlink: 'syz.4.700': attribute type 2 has an invalid length. [ 219.673869][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.700'. [ 220.024363][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'. [ 220.211830][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'. [ 220.500417][ T8678] netlink: 'syz.4.707': attribute type 28 has an invalid length. [ 220.517846][ T8678] netlink: 'syz.4.707': attribute type 29 has an invalid length. [ 220.556889][ T8678] netlink: 132 bytes leftover after parsing attributes in process `syz.4.707'. [ 220.672781][ T8687] netlink: 48 bytes leftover after parsing attributes in process `syz.0.710'. [ 220.697513][ T8687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.042652][ T8699] netlink: 'syz.3.712': attribute type 10 has an invalid length. [ 221.360095][ T8699] batman_adv: batadv0: Adding interface: netdevsim0 [ 221.424473][ T8699] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.491073][ T8699] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 221.946632][ T8717] netlink: 'syz.4.718': attribute type 39 has an invalid length. [ 222.052736][ T8717] veth0_macvtap: left promiscuous mode [ 222.405381][ T8729] netlink: 'syz.0.721': attribute type 10 has an invalid length. [ 222.548799][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 222.836573][ T8744] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 222.865282][ T8744] CPU: 1 UID: 0 PID: 8744 Comm: syz.0.725 Not tainted syzkaller #0 PREEMPT(full) [ 222.865310][ T8744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 222.865322][ T8744] Call Trace: [ 222.865331][ T8744] [ 222.865340][ T8744] dump_stack_lvl+0x189/0x250 [ 222.865374][ T8744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.865399][ T8744] ? __pfx__printk+0x10/0x10 [ 222.865434][ T8744] ? kernfs_path_from_node+0x2f/0x290 [ 222.865461][ T8744] ? kernfs_path_from_node+0x250/0x290 [ 222.865485][ T8744] ? kernfs_path_from_node+0x2f/0x290 [ 222.865522][ T8744] sysfs_warn_dup+0x8e/0xa0 [ 222.865548][ T8744] sysfs_do_create_link_sd+0xc0/0x110 [ 222.865578][ T8744] device_add_class_symlinks+0x1cf/0x240 [ 222.865612][ T8744] device_add+0x475/0xb50 [ 222.865646][ T8744] wiphy_register+0x1ba6/0x28d0 [ 222.865692][ T8744] ? __pfx_wiphy_register+0x10/0x10 [ 222.865716][ T8744] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 222.865756][ T8744] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 222.865792][ T8744] ieee80211_register_hw+0x3484/0x4100 [ 222.865830][ T8744] ? ieee80211_register_hw+0x1451/0x4100 [ 222.865861][ T8744] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 222.865885][ T8744] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 222.865919][ T8744] ? __hrtimer_setup+0x187/0x210 [ 222.865938][ T8744] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 222.865967][ T8744] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 222.866025][ T8744] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 222.866045][ T8744] ? trace_kmalloc+0x1f/0xd0 [ 222.866061][ T8744] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 222.866081][ T8744] ? kstrndup+0xbf/0x160 [ 222.866119][ T8744] hwsim_new_radio_nl+0xea4/0x1b10 [ 222.866144][ T8744] ? __pfx___nla_validate_parse+0x10/0x10 [ 222.866188][ T8744] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 222.866231][ T8744] ? __nla_parse+0x40/0x60 [ 222.866262][ T8744] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 222.866294][ T8744] genl_family_rcv_msg_doit+0x215/0x300 [ 222.866323][ T8744] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 222.866359][ T8744] ? bpf_lsm_capable+0x9/0x20 [ 222.866378][ T8744] ? security_capable+0x7e/0x2e0 [ 222.866409][ T8744] genl_rcv_msg+0x60e/0x790 [ 222.866437][ T8744] ? __pfx_genl_rcv_msg+0x10/0x10 [ 222.866455][ T8744] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 222.866495][ T8744] netlink_rcv_skb+0x208/0x470 [ 222.866518][ T8744] ? __lock_acquire+0xab9/0xd20 [ 222.866547][ T8744] ? __pfx_genl_rcv_msg+0x10/0x10 [ 222.866569][ T8744] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 222.866618][ T8744] ? down_read+0x1ad/0x2e0 [ 222.866649][ T8744] genl_rcv+0x28/0x40 [ 222.866666][ T8744] netlink_unicast+0x82c/0x9e0 [ 222.866700][ T8744] ? __pfx_netlink_unicast+0x10/0x10 [ 222.866726][ T8744] ? netlink_sendmsg+0x642/0xb30 [ 222.866750][ T8744] ? skb_put+0x11b/0x210 [ 222.866782][ T8744] netlink_sendmsg+0x805/0xb30 [ 222.866821][ T8744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.866851][ T8744] ? aa_sock_msg_perm+0xf1/0x1d0 [ 222.866879][ T8744] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 222.866904][ T8744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.866932][ T8744] __sock_sendmsg+0x219/0x270 [ 222.866959][ T8744] ____sys_sendmsg+0x505/0x830 [ 222.866997][ T8744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.867038][ T8744] ? import_iovec+0x74/0xa0 [ 222.867073][ T8744] ___sys_sendmsg+0x21f/0x2a0 [ 222.867106][ T8744] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.867181][ T8744] ? __fget_files+0x2a/0x420 [ 222.867203][ T8744] ? __fget_files+0x3a0/0x420 [ 222.867242][ T8744] __x64_sys_sendmsg+0x19b/0x260 [ 222.867269][ T8744] ? perf_trace_run_bpf_submit+0x100/0x170 [ 222.867297][ T8744] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.867348][ T8744] ? do_syscall_64+0xbe/0x3b0 [ 222.867380][ T8744] do_syscall_64+0xfa/0x3b0 [ 222.867405][ T8744] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.867429][ T8744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.867448][ T8744] ? clear_bhb_loop+0x60/0xb0 [ 222.867473][ T8744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.867493][ T8744] RIP: 0033:0x7f91b5b8eec9 [ 222.867511][ T8744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.867528][ T8744] RSP: 002b:00007f91b69ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.867549][ T8744] RAX: ffffffffffffffda RBX: 00007f91b5de5fa0 RCX: 00007f91b5b8eec9 [ 222.867563][ T8744] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000004 [ 222.867575][ T8744] RBP: 00007f91b5c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 222.867588][ T8744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.867599][ T8744] R13: 00007f91b5de6038 R14: 00007f91b5de5fa0 R15: 00007ffd684a0b78 [ 222.867634][ T8744] [ 223.907232][ T8753] caif0: entered promiscuous mode [ 223.970916][ T8753] caif0: entered allmulticast mode [ 224.032268][ T8756] veth1_macvtap: left promiscuous mode [ 224.286578][ T8764] netlink: 'syz.3.728': attribute type 3 has an invalid length. [ 224.812193][ T8776] __nla_validate_parse: 2 callbacks suppressed [ 224.812220][ T8776] netlink: 14 bytes leftover after parsing attributes in process `syz.4.733'. [ 224.991788][ T8776] hsr_slave_0: left promiscuous mode [ 225.086305][ T8776] hsr_slave_1: left promiscuous mode [ 225.097131][ T8784] netlink: 3 bytes leftover after parsing attributes in process `syz.3.734'. [ 225.475111][ T8788] netlink: 192 bytes leftover after parsing attributes in process `syz.2.735'. [ 225.555192][ T8789] netlink: 192 bytes leftover after parsing attributes in process `syz.2.735'. [ 228.184396][ T8873] netlink: 20 bytes leftover after parsing attributes in process `syz.3.760'. [ 228.394460][ T8876] netlink: 830 bytes leftover after parsing attributes in process `syz.2.762'. [ 228.607431][ T8885] netlink: 'syz.2.762': attribute type 29 has an invalid length. [ 228.635228][ T8876] netlink: 'syz.2.762': attribute type 29 has an invalid length. [ 228.919287][ T8898] openvswitch: netlink: Multiple metadata blocks provided [ 229.495500][ T8917] netlink: 104 bytes leftover after parsing attributes in process `syz.3.773'. [ 229.552312][ T8917] syzkaller0: entered promiscuous mode [ 229.583515][ T8917] syzkaller0: entered allmulticast mode [ 229.676350][ T8917] netlink: 14 bytes leftover after parsing attributes in process `syz.3.773'. [ 230.438423][ T8938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.712449][ T8943] raw_sendmsg: syz.3.781 forgot to set AF_INET. Fix it! [ 230.915184][ T8945] netlink: 152 bytes leftover after parsing attributes in process `syz.4.782'. [ 231.052455][ T8949] netlink: 52 bytes leftover after parsing attributes in process `syz.3.783'. [ 231.658458][ T8963] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.789'. [ 231.973530][ T8983] syzkaller0: entered promiscuous mode [ 231.979294][ T8983] syzkaller0: entered allmulticast mode [ 232.367315][ T8996] netlink: 88 bytes leftover after parsing attributes in process `syz.4.793'. [ 232.626435][ T8998] delete_channel: no stack [ 235.361143][ T9040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.043485][ T9040] netlink: 'syz.4.804': attribute type 39 has an invalid length. [ 236.435456][ T9071] : entered promiscuous mode [ 236.635234][ T9078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.654280][ T9078] netlink: 'syz.4.812': attribute type 39 has an invalid length. [ 236.850484][ T9084] netlink: 172 bytes leftover after parsing attributes in process `syz.0.814'. [ 236.891429][ T9086] netlink: 124 bytes leftover after parsing attributes in process `syz.4.815'. [ 236.921207][ T9086] netlink: 44 bytes leftover after parsing attributes in process `syz.4.815'. [ 237.545806][ T9107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.820'. [ 237.715142][ T9114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.821'. [ 237.785874][ T9116] netlink: 'syz.4.823': attribute type 2 has an invalid length. [ 237.917497][ T9120] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.825'. [ 237.971981][ T9120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.825'. [ 237.993728][ T9122] netlink: 'syz.4.826': attribute type 10 has an invalid length. [ 237.994301][ T9120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.825'. [ 238.011171][ T9122] netlink: 55 bytes leftover after parsing attributes in process `syz.4.826'. [ 238.022413][ T9120] netlink: 'syz.2.825': attribute type 4 has an invalid length. [ 238.346002][ T9133] netlink: 124 bytes leftover after parsing attributes in process `syz.2.829'. [ 239.618480][ T9160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.660287][ T9156] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 240.900343][ T9175] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 241.958163][ T9197] netlink: 'syz.0.844': attribute type 39 has an invalid length. [ 242.429708][ T9211] netlink: 'syz.4.849': attribute type 21 has an invalid length. [ 242.747295][ T9207] __nla_validate_parse: 5 callbacks suppressed [ 242.747320][ T9207] netlink: 124 bytes leftover after parsing attributes in process `syz.1.845'. [ 242.922277][ T9207] netlink: 44 bytes leftover after parsing attributes in process `syz.1.845'. [ 243.225453][ T9221] netlink: 13951 bytes leftover after parsing attributes in process `syz.4.850'. [ 243.797574][ T9230] netlink: 'syz.0.852': attribute type 2 has an invalid length. [ 244.203065][ T9240] netlink: 76 bytes leftover after parsing attributes in process `syz.4.855'. [ 244.847785][ T9268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'. [ 244.945740][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.862'. [ 245.148412][ T9269] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.863'. [ 245.647399][ T9284] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.866'. [ 245.691457][ T9286] netlink: 'syz.2.865': attribute type 39 has an invalid length. [ 247.004748][ T9305] netlink: 'syz.3.871': attribute type 1 has an invalid length. [ 249.507954][ T9334] netlink: 'syz.4.879': attribute type 21 has an invalid length. [ 249.516027][ T9334] netlink: 164 bytes leftover after parsing attributes in process `syz.4.879'. [ 249.784168][ T9336] netlink: 64 bytes leftover after parsing attributes in process `syz.4.881'. [ 249.970633][ T9336] netlink: 92 bytes leftover after parsing attributes in process `syz.4.881'. [ 250.294060][ T9346] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.885'. [ 250.630587][ T9358] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 250.639714][ T9359] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 250.651048][ T9358] netlink: 'syz.1.888': attribute type 29 has an invalid length. [ 250.660771][ T9359] netlink: 'syz.1.888': attribute type 29 has an invalid length. [ 250.669418][ T9358] netlink: 'syz.1.888': attribute type 29 has an invalid length. [ 250.899214][ T9366] netlink: 152 bytes leftover after parsing attributes in process `syz.3.889'. [ 250.926265][ T9366] tc_dump_action: action bad kind [ 250.983823][ T9368] netlink: 76 bytes leftover after parsing attributes in process `syz.4.890'. [ 251.200181][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 251.576740][ T9386] netlink: 'syz.2.895': attribute type 21 has an invalid length. [ 251.589634][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 251.777606][ T9394] FAULT_INJECTION: forcing a failure. [ 251.777606][ T9394] name failslab, interval 1, probability 0, space 0, times 1 [ 251.790704][ T9394] CPU: 0 UID: 0 PID: 9394 Comm: syz.3.897 Not tainted syzkaller #0 PREEMPT(full) [ 251.790732][ T9394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 251.790755][ T9394] Call Trace: [ 251.790764][ T9394] [ 251.790774][ T9394] dump_stack_lvl+0x189/0x250 [ 251.790806][ T9394] ? __pfx____ratelimit+0x10/0x10 [ 251.790836][ T9394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.790860][ T9394] ? __pfx__printk+0x10/0x10 [ 251.790887][ T9394] ? skb_network_protocol+0x4fe/0x760 [ 251.790918][ T9394] ? __lock_acquire+0xab9/0xd20 [ 251.790956][ T9394] should_fail_ex+0x414/0x560 [ 251.790985][ T9394] should_failslab+0xa8/0x100 [ 251.791008][ T9394] kmem_cache_alloc_noprof+0x73/0x3c0 [ 251.791039][ T9394] ? skb_clone+0x212/0x3a0 [ 251.791062][ T9394] skb_clone+0x212/0x3a0 [ 251.791078][ T9394] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 251.791109][ T9394] dev_queue_xmit_nit+0x416/0xcc0 [ 251.791137][ T9394] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 251.791178][ T9394] dev_hard_start_xmit+0x1be/0x830 [ 251.791228][ T9394] __dev_queue_xmit+0x1b8d/0x3b50 [ 251.791260][ T9394] ? __dev_queue_xmit+0x27b/0x3b50 [ 251.791297][ T9394] ? __pfx___dev_queue_xmit+0x10/0x10 [ 251.791332][ T9394] ? __copy_skb_header+0xa7/0x550 [ 251.791364][ T9394] ? __asan_memcpy+0x40/0x70 [ 251.791392][ T9394] ? __skb_clone+0x63/0x7a0 [ 251.791427][ T9394] ? __skb_clone+0x483/0x7a0 [ 251.791466][ T9394] ? skb_clone+0x246/0x3a0 [ 251.791496][ T9394] __netlink_deliver_tap+0x5ad/0x850 [ 251.791538][ T9394] ? netlink_deliver_tap+0x2e/0x1b0 [ 251.791566][ T9394] netlink_deliver_tap+0x19c/0x1b0 [ 251.791594][ T9394] netlink_unicast+0x7fa/0x9e0 [ 251.791628][ T9394] ? __pfx_netlink_unicast+0x10/0x10 [ 251.791654][ T9394] ? netlink_sendmsg+0x642/0xb30 [ 251.791678][ T9394] ? skb_put+0x11b/0x210 [ 251.791710][ T9394] netlink_sendmsg+0x805/0xb30 [ 251.791748][ T9394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.791779][ T9394] ? aa_sock_msg_perm+0xf1/0x1d0 [ 251.791807][ T9394] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 251.791833][ T9394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.791861][ T9394] __sock_sendmsg+0x219/0x270 [ 251.791887][ T9394] ____sys_sendmsg+0x505/0x830 [ 251.791925][ T9394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.791966][ T9394] ? import_iovec+0x74/0xa0 [ 251.792001][ T9394] ___sys_sendmsg+0x21f/0x2a0 [ 251.792035][ T9394] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.792108][ T9394] ? __fget_files+0x2a/0x420 [ 251.792130][ T9394] ? __fget_files+0x3a0/0x420 [ 251.792165][ T9394] __x64_sys_sendmsg+0x19b/0x260 [ 251.792193][ T9394] ? perf_trace_run_bpf_submit+0x100/0x170 [ 251.792222][ T9394] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.792264][ T9394] ? __pfx_ksys_write+0x10/0x10 [ 251.792280][ T9394] ? rcu_is_watching+0x15/0xb0 [ 251.792307][ T9394] ? do_syscall_64+0xbe/0x3b0 [ 251.792338][ T9394] do_syscall_64+0xfa/0x3b0 [ 251.792362][ T9394] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.792387][ T9394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.792406][ T9394] ? clear_bhb_loop+0x60/0xb0 [ 251.792429][ T9394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.792447][ T9394] RIP: 0033:0x7f24cbf8eec9 [ 251.792466][ T9394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.792489][ T9394] RSP: 002b:00007f24ccde3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.792510][ T9394] RAX: ffffffffffffffda RBX: 00007f24cc1e5fa0 RCX: 00007f24cbf8eec9 [ 251.792524][ T9394] RDX: 0000000004000880 RSI: 0000200000000340 RDI: 0000000000000004 [ 251.792537][ T9394] RBP: 00007f24ccde3090 R08: 0000000000000000 R09: 0000000000000000 [ 251.792549][ T9394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.792560][ T9394] R13: 00007f24cc1e6038 R14: 00007f24cc1e5fa0 R15: 00007ffe4feb71d8 [ 251.792595][ T9394] [ 252.409726][ T9407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.693346][ T9422] debugfs: '!' already exists in 'ieee80211' [ 253.962290][ T9456] netlink: del zone limit has 4 unknown bytes [ 254.277480][ T9468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.403272][ T9468] netlink: 36 bytes leftover after parsing attributes in process `syz.1.918'. [ 254.499151][ T9470] netlink: 124 bytes leftover after parsing attributes in process `syz.3.920'. [ 254.586825][ T9470] netlink: 44 bytes leftover after parsing attributes in process `syz.3.920'. [ 254.870112][ T9486] netlink: 48 bytes leftover after parsing attributes in process `syz.1.923'. [ 254.905868][ T9478] netlink: 'syz.2.922': attribute type 3 has an invalid length. [ 255.099136][ T9478] netlink: 152 bytes leftover after parsing attributes in process `syz.2.922'. [ 255.157795][ T9490] netlink: 'syz.3.924': attribute type 21 has an invalid length. [ 255.165906][ T9490] netlink: 132 bytes leftover after parsing attributes in process `syz.3.924'. [ 255.186500][ T9490] netlink: 28 bytes leftover after parsing attributes in process `syz.3.924'. [ 255.908059][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.914894][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.964262][ T9511] netlink: 'syz.4.931': attribute type 29 has an invalid length. [ 255.974084][ T9511] netlink: 'syz.4.931': attribute type 29 has an invalid length. [ 256.005758][ T9511] netlink: 'syz.4.931': attribute type 29 has an invalid length. [ 256.323998][ T9519] Dead loop on virtual device ip6_vti0, fix it urgently! [ 256.389579][ T9519] netlink: 'syz.3.932': attribute type 2 has an invalid length. [ 256.397601][ T9519] netlink: 132 bytes leftover after parsing attributes in process `syz.3.932'. [ 256.409818][ T9519] netlink: 'syz.3.932': attribute type 2 has an invalid length. [ 256.421122][ T9519] netlink: 132 bytes leftover after parsing attributes in process `syz.3.932'. [ 256.755740][ T9532] netlink: 'syz.0.935': attribute type 10 has an invalid length. [ 256.777453][ T9526] netlink: 124 bytes leftover after parsing attributes in process `syz.2.934'. [ 256.809815][ T9532] netlink: 55 bytes leftover after parsing attributes in process `syz.0.935'. [ 256.860298][ T9526] netlink: 44 bytes leftover after parsing attributes in process `syz.2.934'. [ 259.416167][ T9591] ================================================================== [ 259.424296][ T9591] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450 [ 259.432503][ T9591] Read of size 1 at addr ffff888057741870 by task syz.0.947/9591 [ 259.440268][ T9591] [ 259.442611][ T9591] CPU: 0 UID: 0 PID: 9591 Comm: syz.0.947 Not tainted syzkaller #0 PREEMPT(full) [ 259.442631][ T9591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.442641][ T9591] Call Trace: [ 259.442649][ T9591] [ 259.442656][ T9591] dump_stack_lvl+0x189/0x250 [ 259.442687][ T9591] ? __virt_addr_valid+0x1c8/0x5c0 [ 259.442707][ T9591] ? rcu_is_watching+0x15/0xb0 [ 259.442724][ T9591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.442742][ T9591] ? rcu_is_watching+0x15/0xb0 [ 259.442756][ T9591] ? __virt_addr_valid+0x1c8/0x5c0 [ 259.442776][ T9591] ? lock_release+0x4b/0x3e0 [ 259.442798][ T9591] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 259.442819][ T9591] ? __virt_addr_valid+0x1c8/0x5c0 [ 259.442839][ T9591] ? __virt_addr_valid+0x4a5/0x5c0 [ 259.442860][ T9591] print_report+0xca/0x240 [ 259.442877][ T9591] ? __xfrm_state_insert+0x8af/0x1450 [ 259.442901][ T9591] kasan_report+0x118/0x150 [ 259.442918][ T9591] ? __xfrm_state_insert+0x8af/0x1450 [ 259.442947][ T9591] __xfrm_state_insert+0x8af/0x1450 [ 259.442975][ T9591] ? xfrm_state_insert+0x44/0x60 [ 259.443000][ T9591] xfrm_state_insert+0x54/0x60 [ 259.443023][ T9591] ipcomp6_init_state+0x655/0x900 [ 259.443051][ T9591] __xfrm_init_state+0xa76/0x13f0 [ 259.443067][ T9591] ? __xfrm_init_state+0x7ef/0x13f0 [ 259.443086][ T9591] xfrm_add_sa+0x2f5b/0x4070 [ 259.443108][ T9591] ? __pfx_xfrm_add_sa+0x10/0x10 [ 259.443121][ T9591] ? apparmor_capable+0x137/0x1b0 [ 259.443148][ T9591] ? __nla_parse+0x40/0x60 [ 259.443171][ T9591] xfrm_user_rcv_msg+0x7a3/0xab0 [ 259.443191][ T9591] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 259.443228][ T9591] ? __pfx___mutex_trylock_common+0x10/0x10 [ 259.443248][ T9591] ? rcu_is_watching+0x15/0xb0 [ 259.443263][ T9591] ? trace_contention_end+0x39/0x120 [ 259.443281][ T9591] ? __mutex_lock+0x335/0x1350 [ 259.443305][ T9591] netlink_rcv_skb+0x208/0x470 [ 259.443327][ T9591] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 259.443343][ T9591] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.443372][ T9591] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.443392][ T9591] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.443414][ T9591] xfrm_netlink_rcv+0x79/0x90 [ 259.443430][ T9591] netlink_unicast+0x82c/0x9e0 [ 259.443454][ T9591] ? __pfx_netlink_unicast+0x10/0x10 [ 259.443472][ T9591] ? netlink_sendmsg+0x642/0xb30 [ 259.443491][ T9591] ? skb_put+0x11b/0x210 [ 259.443515][ T9591] netlink_sendmsg+0x805/0xb30 [ 259.443542][ T9591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.443565][ T9591] ? aa_sock_msg_perm+0xf1/0x1d0 [ 259.443585][ T9591] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.443606][ T9591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.443627][ T9591] __sock_sendmsg+0x219/0x270 [ 259.443646][ T9591] ____sys_sendmsg+0x505/0x830 [ 259.443678][ T9591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.443707][ T9591] ? import_iovec+0x74/0xa0 [ 259.443734][ T9591] ___sys_sendmsg+0x21f/0x2a0 [ 259.443759][ T9591] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.443795][ T9591] ? __fget_files+0x2a/0x420 [ 259.443820][ T9591] ? __fget_files+0x2a/0x420 [ 259.443836][ T9591] ? __fget_files+0x3a0/0x420 [ 259.443859][ T9591] __x64_sys_sendmsg+0x19b/0x260 [ 259.443884][ T9591] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.443914][ T9591] ? rcu_is_watching+0x15/0xb0 [ 259.443932][ T9591] ? do_syscall_64+0xbe/0x3b0 [ 259.443956][ T9591] do_syscall_64+0xfa/0x3b0 [ 259.443976][ T9591] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.443995][ T9591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.444011][ T9591] ? clear_bhb_loop+0x60/0xb0 [ 259.444029][ T9591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.444044][ T9591] RIP: 0033:0x7f91b5b8eec9 [ 259.444058][ T9591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.444072][ T9591] RSP: 002b:00007f91b698b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.444088][ T9591] RAX: ffffffffffffffda RBX: 00007f91b5de6090 RCX: 00007f91b5b8eec9 [ 259.444100][ T9591] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000088 [ 259.444110][ T9591] RBP: 00007f91b5c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 259.444120][ T9591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.444129][ T9591] R13: 00007f91b5de6128 R14: 00007f91b5de6090 R15: 00007ffd684a0b78 [ 259.444150][ T9591] [ 259.444156][ T9591] [ 259.860798][ T9591] Allocated by task 8896: [ 259.865152][ T9591] kasan_save_track+0x3e/0x80 [ 259.869856][ T9591] __kasan_slab_alloc+0x6c/0x80 [ 259.874716][ T9591] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 259.880197][ T9591] xfrm_state_alloc+0x24/0x2f0 [ 259.884979][ T9591] __find_acq_core+0x8a7/0x1c00 [ 259.889840][ T9591] xfrm_find_acq+0x78/0xa0 [ 259.894261][ T9591] xfrm_alloc_userspi+0x6b3/0xc90 [ 259.899293][ T9591] xfrm_user_rcv_msg+0x7a3/0xab0 [ 259.904237][ T9591] netlink_rcv_skb+0x208/0x470 [ 259.909021][ T9591] xfrm_netlink_rcv+0x79/0x90 [ 259.913706][ T9591] netlink_unicast+0x82c/0x9e0 [ 259.918488][ T9591] netlink_sendmsg+0x805/0xb30 [ 259.923269][ T9591] __sock_sendmsg+0x219/0x270 [ 259.927951][ T9591] ____sys_sendmsg+0x505/0x830 [ 259.932727][ T9591] ___sys_sendmsg+0x21f/0x2a0 [ 259.937429][ T9591] __x64_sys_sendmsg+0x19b/0x260 [ 259.942394][ T9591] do_syscall_64+0xfa/0x3b0 [ 259.946912][ T9591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.952813][ T9591] [ 259.955141][ T9591] Freed by task 5927: [ 259.959118][ T9591] kasan_save_track+0x3e/0x80 [ 259.963810][ T9591] kasan_save_free_info+0x46/0x50 [ 259.968852][ T9591] __kasan_slab_free+0x5b/0x80 [ 259.973630][ T9591] kmem_cache_free+0x18f/0x400 [ 259.978426][ T9591] xfrm_state_gc_task+0x52d/0x6b0 [ 259.983463][ T9591] process_scheduled_works+0xae1/0x17b0 [ 259.989021][ T9591] worker_thread+0x8a0/0xda0 [ 259.993629][ T9591] kthread+0x70e/0x8a0 [ 259.997714][ T9591] ret_from_fork+0x436/0x7d0 [ 260.002339][ T9591] ret_from_fork_asm+0x1a/0x30 [ 260.007114][ T9591] [ 260.009468][ T9591] The buggy address belongs to the object at ffff888057741540 [ 260.009468][ T9591] which belongs to the cache xfrm_state of size 928 [ 260.023441][ T9591] The buggy address is located 816 bytes inside of [ 260.023441][ T9591] freed 928-byte region [ffff888057741540, ffff8880577418e0) [ 260.037258][ T9591] [ 260.039597][ T9591] The buggy address belongs to the physical page: [ 260.046028][ T9591] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057742200 pfn:0x57740 [ 260.056099][ T9591] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 260.064610][ T9591] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 260.072165][ T9591] page_type: f5(slab) [ 260.076152][ T9591] raw: 00fff00000000040 ffff8881426a43c0 dead000000000122 0000000000000000 [ 260.084740][ T9591] raw: ffff888057742200 00000000800f000b 00000000f5000000 0000000000000000 [ 260.093326][ T9591] head: 00fff00000000040 ffff8881426a43c0 dead000000000122 0000000000000000 [ 260.102001][ T9591] head: ffff888057742200 00000000800f000b 00000000f5000000 0000000000000000 [ 260.110677][ T9591] head: 00fff00000000002 ffffea00015dd001 00000000ffffffff 00000000ffffffff [ 260.119356][ T9591] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 260.128034][ T9591] page dumped because: kasan: bad access detected [ 260.134458][ T9591] page_owner tracks the page as allocated [ 260.140175][ T9591] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6182, tgid 6181 (syz.2.50), ts 102278691767, free_ts 102249878578 [ 260.159286][ T9591] post_alloc_hook+0x240/0x2a0 [ 260.164064][ T9591] get_page_from_freelist+0x21e4/0x22c0 [ 260.169616][ T9591] __alloc_frozen_pages_noprof+0x181/0x370 [ 260.175459][ T9591] alloc_pages_mpol+0x232/0x4a0 [ 260.180312][ T9591] allocate_slab+0x8a/0x370 [ 260.184823][ T9591] ___slab_alloc+0xbeb/0x1420 [ 260.189505][ T9591] kmem_cache_alloc_noprof+0x283/0x3c0 [ 260.194975][ T9591] xfrm_state_alloc+0x24/0x2f0 [ 260.199757][ T9591] xfrm_add_sa+0x17d1/0x4070 [ 260.204364][ T9591] xfrm_user_rcv_msg+0x7a3/0xab0 [ 260.209324][ T9591] netlink_rcv_skb+0x208/0x470 [ 260.214100][ T9591] xfrm_netlink_rcv+0x79/0x90 [ 260.218784][ T9591] netlink_unicast+0x82c/0x9e0 [ 260.223564][ T9591] netlink_sendmsg+0x805/0xb30 [ 260.228340][ T9591] __sock_sendmsg+0x219/0x270 [ 260.233022][ T9591] ____sys_sendmsg+0x505/0x830 [ 260.237814][ T9591] page last free pid 5234 tgid 5234 stack trace: [ 260.244139][ T9591] __free_frozen_pages+0xbc4/0xd30 [ 260.249259][ T9591] __put_partials+0x156/0x1a0 [ 260.253948][ T9591] put_cpu_partial+0x17c/0x250 [ 260.258719][ T9591] __slab_free+0x2d5/0x3c0 [ 260.263141][ T9591] qlist_free_all+0x97/0x140 [ 260.267736][ T9591] kasan_quarantine_reduce+0x148/0x160 [ 260.273229][ T9591] __kasan_slab_alloc+0x22/0x80 [ 260.278085][ T9591] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 260.283641][ T9591] getname_flags+0xb8/0x540 [ 260.288187][ T9591] vfs_fstatat+0x43/0x170 [ 260.292520][ T9591] __x64_sys_newfstatat+0x116/0x190 [ 260.297811][ T9591] do_syscall_64+0xfa/0x3b0 [ 260.302321][ T9591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.308251][ T9591] [ 260.310574][ T9591] Memory state around the buggy address: [ 260.316204][ T9591] ffff888057741700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.324268][ T9591] ffff888057741780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.332357][ T9591] >ffff888057741800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.340429][ T9591] ^ [ 260.348152][ T9591] ffff888057741880: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 260.356217][ T9591] ffff888057741900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 260.364282][ T9591] ================================================================== [ 260.372606][ T9591] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 260.379835][ T9591] CPU: 0 UID: 0 PID: 9591 Comm: syz.0.947 Not tainted syzkaller #0 PREEMPT(full) [ 260.389070][ T9591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 260.399158][ T9591] Call Trace: [ 260.402464][ T9591] [ 260.405423][ T9591] dump_stack_lvl+0x99/0x250 [ 260.410055][ T9591] ? __asan_memcpy+0x40/0x70 [ 260.414686][ T9591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.419916][ T9591] ? __pfx__printk+0x10/0x10 [ 260.424555][ T9591] vpanic+0x281/0x750 [ 260.428664][ T9591] ? __pfx_vpanic+0x10/0x10 [ 260.433197][ T9591] ? irqentry_exit+0x74/0x90 [ 260.437835][ T9591] panic+0xb9/0xc0 [ 260.441580][ T9591] ? __pfx_panic+0x10/0x10 [ 260.446014][ T9591] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 260.451918][ T9591] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 260.457856][ T9591] ? is_module_address+0x17/0xf0 [ 260.462821][ T9591] ? __xfrm_state_insert+0x8af/0x1450 [ 260.468209][ T9591] check_panic_on_warn+0x89/0xb0 [ 260.473161][ T9591] ? __xfrm_state_insert+0x8af/0x1450 [ 260.478544][ T9591] end_report+0x78/0x160 [ 260.482801][ T9591] kasan_report+0x129/0x150 [ 260.487316][ T9591] ? __xfrm_state_insert+0x8af/0x1450 [ 260.492709][ T9591] __xfrm_state_insert+0x8af/0x1450 [ 260.498013][ T9591] ? xfrm_state_insert+0x44/0x60 [ 260.502964][ T9591] xfrm_state_insert+0x54/0x60 [ 260.507739][ T9591] ipcomp6_init_state+0x655/0x900 [ 260.512780][ T9591] __xfrm_init_state+0xa76/0x13f0 [ 260.517828][ T9591] ? __xfrm_init_state+0x7ef/0x13f0 [ 260.523046][ T9591] xfrm_add_sa+0x2f5b/0x4070 [ 260.527655][ T9591] ? __pfx_xfrm_add_sa+0x10/0x10 [ 260.532603][ T9591] ? apparmor_capable+0x137/0x1b0 [ 260.537646][ T9591] ? __nla_parse+0x40/0x60 [ 260.542079][ T9591] xfrm_user_rcv_msg+0x7a3/0xab0 [ 260.547030][ T9591] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 260.552515][ T9591] ? __pfx___mutex_trylock_common+0x10/0x10 [ 260.558426][ T9591] ? rcu_is_watching+0x15/0xb0 [ 260.563199][ T9591] ? trace_contention_end+0x39/0x120 [ 260.568489][ T9591] ? __mutex_lock+0x335/0x1350 [ 260.573267][ T9591] netlink_rcv_skb+0x208/0x470 [ 260.578054][ T9591] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 260.583698][ T9591] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.589005][ T9591] ? netlink_deliver_tap+0x2e/0x1b0 [ 260.594216][ T9591] ? netlink_deliver_tap+0x2e/0x1b0 [ 260.599429][ T9591] xfrm_netlink_rcv+0x79/0x90 [ 260.604378][ T9591] netlink_unicast+0x82c/0x9e0 [ 260.609162][ T9591] ? __pfx_netlink_unicast+0x10/0x10 [ 260.614573][ T9591] ? netlink_sendmsg+0x642/0xb30 [ 260.619518][ T9591] ? skb_put+0x11b/0x210 [ 260.623774][ T9591] netlink_sendmsg+0x805/0xb30 [ 260.628554][ T9591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.633866][ T9591] ? aa_sock_msg_perm+0xf1/0x1d0 [ 260.638827][ T9591] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.644321][ T9591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.649717][ T9591] __sock_sendmsg+0x219/0x270 [ 260.654410][ T9591] ____sys_sendmsg+0x505/0x830 [ 260.659195][ T9591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.664673][ T9591] ? import_iovec+0x74/0xa0 [ 260.669199][ T9591] ___sys_sendmsg+0x21f/0x2a0 [ 260.673891][ T9591] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.679121][ T9591] ? __fget_files+0x2a/0x420 [ 260.683729][ T9591] ? __fget_files+0x2a/0x420 [ 260.688385][ T9591] ? __fget_files+0x3a0/0x420 [ 260.693081][ T9591] __x64_sys_sendmsg+0x19b/0x260 [ 260.698125][ T9591] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.703614][ T9591] ? rcu_is_watching+0x15/0xb0 [ 260.708394][ T9591] ? do_syscall_64+0xbe/0x3b0 [ 260.713169][ T9591] do_syscall_64+0xfa/0x3b0 [ 260.717702][ T9591] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.722911][ T9591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.728981][ T9591] ? clear_bhb_loop+0x60/0xb0 [ 260.733672][ T9591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.739574][ T9591] RIP: 0033:0x7f91b5b8eec9 [ 260.744000][ T9591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.763608][ T9591] RSP: 002b:00007f91b698b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.772031][ T9591] RAX: ffffffffffffffda RBX: 00007f91b5de6090 RCX: 00007f91b5b8eec9 [ 260.780007][ T9591] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000088 [ 260.787982][ T9591] RBP: 00007f91b5c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 260.795967][ T9591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.804034][ T9591] R13: 00007f91b5de6128 R14: 00007f91b5de6090 R15: 00007ffd684a0b78 [ 260.812121][ T9591] [ 260.815508][ T9591] Kernel Offset: disabled [ 260.819837][ T9591] Rebooting in 86400 seconds..