last executing test programs: 42.438195626s ago: executing program 1 (id=1698): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, 0x0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b0000000800000020000000ffffffff01000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000f0ffb857e7f0d9e4911f3f7748ce6a244e2a"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, r1}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8089, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x114000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[@ANYBLOB], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, 0x0, 0x24000840) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 42.337122812s ago: executing program 4 (id=1700): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000002a00)=@newtaction={0x1da0, 0x30, 0x9, 0x0, 0x0, {}, [{0x1d8c, 0x1, [@m_simple={0x102c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x24, 0x3, 'blkio.bfq.io_serviced_recursive\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfa9, 0xbd, 0x0, 0x10000, 0x7}}]}, {0xfc4, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0xc30, 0x18, 0x0, 0x0, {{0x9}, {0x4}, {0xc04, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0x4c, 0xe, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0xe0, 0x1b, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3ffc0, 0x49a, 0x0, 0x0, 0x6}, 0x5}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xe}, @TCA_SKBMOD_SMAC={0xa}]}, {0x6a, 0x6, "446512685a392f049a0e80c2f172a56a99b80bd3b42361f289eca26197a53dc9af99345f151619ef4e8c38ddc011425b138a11a3567c0c0b417f5bc356312c2c0a9845a930befef9c39416dd973e3f0b7358b355bff266975937a01f23217adbc1b701f0c40d"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x1da0}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000ec0), 0x4) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x37, 0x0, 0x9}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000036004b63d25a59ce0630fc60105d52d9", 0x14}], 0x1}, 0x20000040) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xff, '\x00', 0x0, r1, 0x4, 0x0, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket(0x840000000002, 0x3, 0xff) sendmsg$nl_route_sched(r10, &(0x7f0000000600)={&(0x7f0000000440), 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=@gettclass={0x24, 0x2a, 0x520, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x6, 0xd}, {0x6, 0xc}, {0x8, 0x1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x801) sendmsg$nl_route_sched_retired(r10, &(0x7f0000001000)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000680)=@newtclass={0x53c, 0x28, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x8, 0xfff1}, {0xfff1, 0xc}, {0xfff3, 0xfff1}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x80}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x8}}}, @c_cbq={{0x8}, {0x440, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x8, 0x1, 0x0, 0x7, 0x3, 0x5}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xa, 0x1}, 0x6}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x7, 0x2, 0x1f, 0x1, 0x80000001, 0x9}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x3, 0x5, 0x1, 0x0, 0x4, 0x5, 0x6, 0x2, 0x5, 0x8000, 0x5, 0xffff0000, 0x8, 0x6, 0x7, 0xfff, 0xa, 0x3ff, 0x80000000, 0x0, 0x5, 0x2, 0x2, 0x7fffffff, 0x3, 0x4, 0x6, 0x0, 0x3, 0x81, 0xfffffff5, 0x3, 0x0, 0x8, 0x57f6, 0x8001, 0x0, 0x5, 0x1000, 0x2, 0x1, 0x6, 0x0, 0x8, 0x7, 0x5, 0x2, 0xfff, 0xc1f0, 0x57, 0x6f12, 0x8, 0x401, 0x7a90, 0x7, 0x8, 0x8, 0x7, 0x6, 0xa, 0x8c6, 0x2, 0xffffff6e, 0x3, 0x5, 0x1000, 0x0, 0x7, 0xa8, 0xa5, 0x7, 0x8, 0x9, 0xd, 0x3, 0x2, 0x3, 0xb, 0x4, 0x10001, 0xd, 0x5, 0x4, 0x7, 0x52, 0x4, 0x0, 0x7, 0x4000401, 0x6, 0x7f, 0x7, 0x7fff, 0x9, 0xed, 0x1ff, 0x5, 0x7ff, 0x7, 0xffff9206, 0x3, 0x8, 0xffffffe8, 0x6, 0xfffffbff, 0x41, 0x0, 0x4c0d, 0x2, 0x0, 0x40, 0x8001, 0x0, 0xfffffff9, 0xd23, 0xfffffffe, 0x1, 0x2, 0x80000001, 0x6, 0x8a02, 0x5, 0x9e, 0x5, 0x2706e4a, 0x7fff, 0x5, 0xb6c4, 0x3, 0x3, 0x1, 0x7, 0x5, 0xfffffff6, 0x7, 0x1, 0x40, 0x0, 0xabcf, 0xac5, 0x7, 0x1, 0x7, 0x3, 0x7, 0x8, 0x79614cc3, 0x6, 0x6, 0x1, 0x70cc, 0x38279301, 0x8, 0x7, 0x0, 0x2, 0x4, 0x5, 0x7f, 0x6, 0xfc000000, 0x4, 0x2, 0x8, 0x5, 0x907, 0xf, 0x52, 0x800, 0x3, 0x100, 0x4, 0x0, 0x0, 0x5, 0xe601, 0xffffffff, 0x400, 0x1, 0x8, 0x8, 0x2, 0x3, 0x100, 0xfeb, 0x6, 0x2f, 0xfff, 0x7, 0x3, 0x9, 0x4, 0x3, 0x8, 0x8aae, 0x1, 0x4, 0xffff, 0x69, 0xffff, 0x0, 0x2, 0x9, 0x6, 0xe, 0x8, 0xffff0001, 0x4800, 0x9, 0x3, 0x9, 0x1, 0x101, 0x1, 0x3, 0x7b18, 0x3, 0x40, 0x8, 0x4, 0x1, 0x69ac, 0x3, 0xeb, 0x2, 0x10001, 0xcf9, 0xfff, 0x10001, 0x4, 0x1, 0x6, 0x1, 0x3, 0x101, 0x9, 0x1, 0x80000001, 0x7fff, 0x8, 0x1, 0x5, 0x8, 0x0, 0x0, 0x0, 0x400, 0x7ff, 0x3, 0x4, 0x100, 0x5, 0x2, 0x1, 0x2]}]}}, @c_cbq={{0x8}, {0x34, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x4, 0xfffd}, 0x8, 0x9}}, @TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x1, 0x6, 0x18f2, 0x6, 0xfffffff7}}, @TCA_CBQ_RATE={0x10, 0x5, {0x8, 0x2, 0x5, 0x3, 0x800, 0x8000}}]}}, @c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xd, 0xfff1}, 0x3dd0, 0x5}}]}}, @c_atm={{0x8}, {0x34, 0x2, [@TCA_ATM_HDR={0x2e, 0x3, "0c00e8e06b6992cd5f1f37850ef10da698461e6fe8c29c42e3d3e4e28a0ef209a5cd8c933ab6dd83d802"}]}}, @c_cbq={{0x8}, {0x4}}]}, 0x53c}, 0x1, 0x0, 0x0, 0x40}, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xc, 0x0, 0x5, 0x0, 0x0, 0x5, 0xb1011, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x2, @perf_config_ext={0x9, 0xce9}, 0x8f51, 0x100, 0x9, 0x8, 0x8, 0x0, 0x5e, 0x0, 0x9, 0x0, 0xa9}, 0x0, 0x1, r9, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x8, 0x9, 0xe1, 0x40404, r7, 0x9, '\x00', r8, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0xa}, 0x50) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000f0000000401a80016000800014009001120036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x8000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x44}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}}]}]}, 0x64}}, 0x300008c4) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 42.05742326s ago: executing program 2 (id=1702): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r0, 0x58, &(0x7f0000000740)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)={0x14, 0x1, 0x8, 0x0, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00'/23], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, &(0x7f0000001b40), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000725900003eb925d3b9d9a15a000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x18, r5}, 0x18) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02037f02210000000000000000000000030006000000000002000000ac14142e00000000000000000200010000000000000002007fffffff030005002b00000002000000ac1414aa0000000000000000170008007805"], 0x108}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xb976, 0x7, 0xfffffff7, 0x4, r6, 0x7c, '\x00', 0x0, r1, 0x4, 0x1, 0x1, 0x2}, 0x50) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8906, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) 42.004158924s ago: executing program 2 (id=1704): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x8110, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@ifindex, 0x9, 0x0, 0x4, &(0x7f0000000640)=[0x0], 0x1, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x7, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f00000003c0), &(0x7f0000001d40)=r8}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@map=r9, 0xffffffffffffffff, 0x29, 0x2010, 0x0, @value, @void, @void, @void, r7}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af0b"], 0x6) r10 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002040)=""/4067, 0xfe3}, {&(0x7f00000037c0)=""/4069, 0xfe5}], 0x2}, 0x40000100) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f91c240685", 0x14}], 0x1}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="19ac721e4479cae500000004000000000000000280000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r11, 0x0, 0x0}, 0x20) 41.579284045s ago: executing program 1 (id=1707): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x18000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000511d25a80648c63940d0424fc600b003540", 0x18}], 0x1}, 0x0) 41.570593442s ago: executing program 0 (id=1708): gettid() socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x2d, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffb, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x15}, [@call={0x6f}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x46, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socket$kcm(0x2, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0800000d0a030000000000000000000100000608000440f9ff000368fd693111f5298578c504f0ffaccb936f0d03df3956fb5c0606d57f08040a77c40c504997649728056f2111bed703478765ad05b66a7bf4900f2621d61da056a12585a16cc85708cd"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40001) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000000)=r3, 0x4) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x1, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x53) 41.356247337s ago: executing program 4 (id=1709): close(0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3c, 0x7}, 0x100008, 0x0, 0x0, 0x8, 0x3fd, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}}, 0x40) 41.241126861s ago: executing program 0 (id=1710): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000080000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 41.225873376s ago: executing program 1 (id=1711): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x20}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000040) 41.224517636s ago: executing program 4 (id=1712): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='/..\x00') openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xfffffffe, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, 0x0) mount$bpf(0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(r0, 0x84, 0x82, &(0x7f0000000000)=r3, 0x8) 41.180056551s ago: executing program 0 (id=1713): r0 = socket(0x10, 0x3, 0x9) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x104101, 0x4, 0x3, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x3fb, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3ed}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 41.091281005s ago: executing program 2 (id=1715): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014000000001208002e000040a8001b000400014006000d00000000000000035c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2e18000000000000001fb7e4ce1b14d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bdffcaab0000", 0xd8}], 0x1}, 0x20000800) 41.001685367s ago: executing program 4 (id=1716): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x40000000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$kcm(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000001000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) 40.898268278s ago: executing program 1 (id=1717): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, 0x0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b0000000800000020000000ffffffff01000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000f0ffb857e7f0d9e4911f3f7748ce6a244e2a"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, r1}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8089, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x114000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[@ANYBLOB], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, 0x0, 0x24000840) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 40.86241177s ago: executing program 2 (id=1718): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x345a7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x105503, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x60980, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) 40.809893076s ago: executing program 0 (id=1719): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 40.355594892s ago: executing program 4 (id=1721): gettid() socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x2d, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffb, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x15}, [@call={0x6f}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x46, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socket$kcm(0x2, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0800000d0a030000000000000000000100000608000440f9ff000368fd693111f5298578c504f0ffaccb936f0d03df3956fb5c0606d57f08040a77c40c504997649728056f2111bed703478765ad05b66a7bf4900f2621d61da056a12585a16cc85708cd"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40001) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000000)=r3, 0x4) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x1, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x53) 40.101461764s ago: executing program 2 (id=1722): socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0xfa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89b0, &(0x7f0000000080)) 40.007035534s ago: executing program 0 (id=1723): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100e64, 0xc78, 0x0, 0x8, 0x101, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r2 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r2, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000100)) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000040)="25a688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b907fa19ed4dd0", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='rdma.current\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 39.949892565s ago: executing program 1 (id=1724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r1 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="00000000000001000000000000007827aa5196dc1d1fb288c882f83540f80889cde8cc4224a037671b", @ANYRES32=0x0, @ANYBLOB='\x00'/10], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000c40)=ANY=[@ANYBLOB="2b637075206b033f138e02b500e63d16d49580dc24f1f4cbdc219ab6b5a5bd8b9425b8673f253d89d3e1a9144e41c172ac215e0d073cbf345a165ba8db07d3107eb4835e"], 0x5) openat$cgroup_int(r2, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100), &(0x7f0000001140), 0x0, 0xb4, 0x0, 0x0, 0x10, &(0x7f0000001200), 0x0, 0x0, 0x57, 0x8, 0x8, &(0x7f0000001300)}}, 0x10) close(0xffffffffffffffff) close(0xffffffffffffffff) socketpair(0x1e, 0x80000, 0x10000000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8924, &(0x7f0000000080)) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0xc, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000008400000000000000", @ANYRESHEX], 0x18}, 0x41) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELSETELEM={0x15ac, 0xe, 0xa, 0x201, 0x0, 0x0, {0x8cc5d093d65de963}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1c4, 0x3, 0x0, 0x1, [{0x1b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5d, 0x1, "1468f646b8468939626cbcb70359e5ff631e58bd99622bc01ae44bf1e57d348c696674e71d4e41e34275456d39da6135fe154b2fa0a22ebdc3524bd568a80ab6fdc49f500181ae4f62d7b83e39995fe8246cc9507f36a872d6"}]}, @NFTA_SET_ELEM_DATA={0x88, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY={0x8c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "2addb13891754b09999d6891a8f5f70c1d6b0c902fbed0ae9449b08345417bae87"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x51, 0x1, "c9829618cb96d447a23f26cb001ac45a76744bba4ceadf27513b72a99528731de6d8d47f2e3f86bd4cc239a92cda89115d39ceb3e6ed4bfde9996ce3119ee0cddc51c0fb1a4601e1533225e355"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x471b}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '\xb7}\x00'}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x8}]}}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x13a8, 0x3, 0x0, 0x1, [{0x1254, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x118c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4f, 0x1, "5dde13348172113672281cbee6f277c3ca4180e89e82aa2f685038899dcdad90e936d69c8e771debf22ddd360a3f1dafefd08f6fe44f8bbb8de7bfd0674fbed3b7bc88ad8e7298c7b4a754"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x8a, 0x1, "dcf0abf15a104da48de41c98e3b2ce931793b5cf8c62123817423eca647d8ea0cf2bcd56a60ace60f2d91ba92462392af74b2dc770e26d70b73c67b1dcbad93b250fb2c4fee89b4b80529af887e84e23e0e4f37eab94cd455bb83e9ba17e8e402772cbfb0aac7dd3506131cb1490b31fc1fa3e25be6a714ea6c09520c458d26ac2447c8ff6ee"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x84, 0x1, "937485dfcbb65d372cab99bce2d9288ba373d87b8be9272e119f5fce42ed787a0c59e0c93cd5a491d12ca3d321497983ff1442d46ad9b134359405ca7d3f116103929d1a726ede894bbeab21a51ed43b8225b445102cc86e855ed69881b4790865a16c78cd0b9ac6e67b965995a1763a273f02eab5e850375869cdc2e021e40b"}]}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_USERDATA={0x2f, 0x6, 0x1, 0x0, "0e3c04bc97cbff2616a5535b735450be8450d0765f7d4dabd7bf0218fb76450f9bd7caabebf7cfbb9708b8"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000000}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x21}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz0\x00'}]}}}, {0x54, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x140, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xd2, 0x6, 0x1, 0x0, "1ee9fc4336eeff7ff535cab0f59362a4cd4b350a47499a22b93f54428c0fb17ccca27515820286bcb0e1de4a7a3e0c910cf2ff6e3dd6e0943c4572c0ac9f3103bf12a8acadd89f1d778e32a05d9e38861450d03a1c9fd866f001f6e8174f78dcec537bba86e16e622b2d457e116e21b1b55dce013efc7a19e014451f2fae72011d8e1297515d6293541dcef52075a50b9a676f6ca0b646b4d4f6c7cafd95fd61e0612b6067266d2f6f4570c445b95d51d359c4ae39d255eb267b49da5c97dfb21ca53e6337f02f61978468875f1f"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0x4d, 0x6, 0x1, 0x0, "f27719a630d20a7d0c3e88fd3fd44ab75099d12c899cbb3bc773b29c3b3fe2462a6926ad15e5de641424dd559d78e626b596a7e82f885c1279db78fa018faa7a316907369e78d8de69"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x15d4}}, 0x4) 39.905617441s ago: executing program 4 (id=1725): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x8110, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@ifindex, 0x9, 0x0, 0x4, &(0x7f0000000640)=[0x0], 0x1, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x7, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f00000003c0), &(0x7f0000001d40)=r8}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@map=r9, 0xffffffffffffffff, 0x29, 0x2010, 0x0, @value, @void, @void, @void, r7}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af0b"], 0x6) r10 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002040)=""/4067, 0xfe3}, {&(0x7f00000037c0)=""/4069, 0xfe5}], 0x2}, 0x40000100) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f91c240685", 0x14}], 0x1}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="19ac721e4479cae500000004000000000000000280000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r11, 0x0, 0x0}, 0x20) 39.487556173s ago: executing program 32 (id=1725): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x8110, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@ifindex, 0x9, 0x0, 0x4, &(0x7f0000000640)=[0x0], 0x1, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x7, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f00000003c0), &(0x7f0000001d40)=r8}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@map=r9, 0xffffffffffffffff, 0x29, 0x2010, 0x0, @value, @void, @void, @void, r7}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af0b"], 0x6) r10 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002040)=""/4067, 0xfe3}, {&(0x7f00000037c0)=""/4069, 0xfe5}], 0x2}, 0x40000100) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f91c240685", 0x14}], 0x1}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="19ac721e4479cae500000004000000000000000280000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r11, 0x0, 0x0}, 0x20) 39.478796424s ago: executing program 0 (id=1727): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0xb, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) gettid() socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50622, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 39.10102497s ago: executing program 33 (id=1727): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0xb, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) gettid() socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50622, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 39.068538978s ago: executing program 1 (id=1728): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r0, 0x58, &(0x7f0000000740)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)={0x14, 0x1, 0x8, 0x0, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00'/23], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, &(0x7f0000001b40), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000725900003eb925d3b9d9a15a000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02037f02210000000000000000000000030006000000000002000000ac14142e00000000000000000200010000000000000002007fffffff030005002b00000002000000ac1414aa0000000000000000170008007805"], 0x108}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xb976, 0x7, 0xfffffff7, 0x4, 0xffffffffffffffff, 0x7c, '\x00', r6, r1, 0x4, 0x1, 0x1, 0x2}, 0x50) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8906, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) 39.067978537s ago: executing program 34 (id=1728): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r0, 0x58, &(0x7f0000000740)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)={0x14, 0x1, 0x8, 0x0, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00'/23], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, &(0x7f0000001b40), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000725900003eb925d3b9d9a15a000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02037f02210000000000000000000000030006000000000002000000ac14142e00000000000000000200010000000000000002007fffffff030005002b00000002000000ac1414aa0000000000000000170008007805"], 0x108}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xb976, 0x7, 0xfffffff7, 0x4, 0xffffffffffffffff, 0x7c, '\x00', r6, r1, 0x4, 0x1, 0x1, 0x2}, 0x50) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8906, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) 39.067707324s ago: executing program 2 (id=1729): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000640)='-.%\x00') bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x600, 0x0, 0x0, 0x0, 0x75}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0xa8}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32], 0x48) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x1042, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000013fc0)={0x0, 0x0, &(0x7f0000013f80)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000000706010200000000000000000500000505000100070000000800064009"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) 39.067396756s ago: executing program 35 (id=1729): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000640)='-.%\x00') bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x600, 0x0, 0x0, 0x0, 0x75}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0xa8}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32], 0x48) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x1042, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000013fc0)={0x0, 0x0, &(0x7f0000013f80)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000000706010200000000000000000500000505000100070000000800064009"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) 8.745417843s ago: executing program 5 (id=1892): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, 0x0, 0x240440c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)}, 0x900000000000000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff814f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c36981edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ce852364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b00000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58f0225f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e20280e14700eb4acff907560500ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ad72a89a7f6d74126f327bf7dfa718d3e1e9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d7462c080c159ce40c14089c82759106f425a2554644b2582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e1000000b81b6790062e61cd000000acb1b33c38ddd302e28e8e30b5c180d38bb1cd770195799c541a7481f5d34ca75d74b3833d399371c8f09f6745d0e43d46f7c82ff1b7d6c04467d083fc708348f35ae9bb9b78f2984a0ee55647d4c4a63c4f438fdec726e7d8228eaff2374b2300b9c35f4259e3452b53ee114bb8a6c0ea6fc89a55fef6673013d7dd4597660865423e978dd6e41e201bb3a584d6fe6f24e290613b677271603c558ee2021be29c4a06a057b2acc5bfd34898afac0d839079bbcb3acd43532563367ac8ae6c4379fb5fdcdab5fe55e1a3a521284209871216817338073cbc4ec9903725b788a25b5a6003b579b8f0e20d78be3d885557292971e65f4f1daefad2c5ccbca608b46406ffff25610c3cbae9c3d6d47678f482e2c1f7cdfc5ce2a67c1545c1192f2ac3990f9c850788401469fbca801e73cd9efbcc6ea52ff414cdff5c49e706d699b5bfa75526f700c4e32611b826b2787f99532c02262a9c60e4b07a09377c38747c7f05e38b6db5d8cc625873af8fc5a7d362334c509f6bb4e36e1c9e08949679e0ed9f84e668588b9f1b21069bd5ffe263b191d1a7f5d4e85de1a2a46579d497000000000000000000000000000085890d719cfd2eef4805fc5ebd790e94908d24a9002b0e658d593da7811e099e1c7c5699331e98eda4c706a90e22047fe27cae6994f70772815879c3d6a16e769eb6a745ca0ebcd90d81d109c1569129c0f26bb037806c424ae349391b4a5723afeffdb940ac1de55b1022c7d9aee805706e8fcdfaf3ab14ca4eae5b534fea2565d4dfa5a0fe38d7aa7d9f3c7bc6e895852a9035283b89ddbc41c54dbf9392c8dcc65178726eae650e"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89fb, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x140}}, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0xa954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x8, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0x1d, 0x30e4, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 8.548083505s ago: executing program 5 (id=1894): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newtaction={0x1b8, 0x30, 0xb, 0x40, 0xfffffffd, {}, [{0x1a4, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x800, 0x0, 0x0, 0x15, 0x6}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf97}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0x13c, 0xa, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xb}]}, {0xfd, 0x6, "7d73c8321c1b155d8d531a71061655376a85b277f109ab69afbe121fa85d7459abb3d5029df184b906a7921b9857533d98fefc01a9c58c0113adf1d1ec061463b40df29f5c06e407313766cd0d2bc712f467ef58a8557b9ecb6590b9179e5bf78702bc294d99da0cbd41dad6149407573e2ec5c7b7afa54273d3437ab0635c5c2b04a7f0714881284b22fa5bb581923d8c3b0b500ed00634e0e60aa2fe66d57d1d0516b6659da8862be948abd382e3fc42cce710d1165d9ee16f0428ed55739cedd8baf102130926847792188f9d27996dd64aadced570a37b0eb3e8118b5ba9dcd2b22f9a229f8fa417bf2d78699e2107dfbc861a96275a68"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 8.272596794s ago: executing program 5 (id=1897): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, 0x0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b0000000800000020000000ffffffff01000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000f0ffb857e7f0d9e4911f3f7748ce6a244e2a"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, r1}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8089, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x114000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[@ANYBLOB], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 7.356815017s ago: executing program 5 (id=1908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000050) 6.708763231s ago: executing program 3 (id=1916): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x28, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x11}, [@typed={0x14, 0xd2, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x23}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44897}, 0x0) 6.306780293s ago: executing program 3 (id=1917): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104511, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e", 0x19}], 0x1}, 0x20) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) 5.918132433s ago: executing program 7 (id=1919): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0xc7, 0x0}, 0x20040010) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0xfe}, 0x80, 0x0}, 0x20000000) 5.749746553s ago: executing program 8 (id=1920): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800ff207c05e8fe55a10a0015000a00142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 5.546459007s ago: executing program 6 (id=1921): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r8) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b28de000"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.440669693s ago: executing program 7 (id=1922): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[], 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'macvlan0\x00', @multicast}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdir(0x0, 0x100) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x12, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000b000000043542c92f50c85a929e01a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef62b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x40004000) 4.58637765s ago: executing program 3 (id=1923): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4008054) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000180)) 4.586003421s ago: executing program 8 (id=1924): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x4, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x200, 0x1000000, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x72, &(0x7f0000000000)=r3, 0xc) 4.549986841s ago: executing program 6 (id=1925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r1 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="00000000000001000000000000007827aa5196dc1d1fb288c882f83540f80889cde8cc4224a037671b", @ANYRES32=0x0, @ANYBLOB='\x00'/10], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000c40)=ANY=[@ANYBLOB="2b637075206b033f138e02b500e63d16d49580dc24f1f4cbdc219ab6b5a5bd8b9425b8673f253d89d3e1a9144e41c172ac215e0d073cbf345a165ba8db07d3107eb4835e"], 0x5) openat$cgroup_int(r2, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100), &(0x7f0000001140), 0x0, 0xb4, 0x0, 0x0, 0x10, &(0x7f0000001200), 0x0, 0x0, 0x57, 0x8, 0x8, &(0x7f0000001300)}}, 0x10) close(0xffffffffffffffff) close(0xffffffffffffffff) socketpair(0x1e, 0x80000, 0x10000000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8924, &(0x7f0000000080)) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0xc, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000008400000000000000", @ANYRESHEX], 0x18}, 0x41) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELSETELEM={0x15ac, 0xe, 0xa, 0x201, 0x0, 0x0, {0x8cc5d093d65de963}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1c4, 0x3, 0x0, 0x1, [{0x1b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5d, 0x1, "1468f646b8468939626cbcb70359e5ff631e58bd99622bc01ae44bf1e57d348c696674e71d4e41e34275456d39da6135fe154b2fa0a22ebdc3524bd568a80ab6fdc49f500181ae4f62d7b83e39995fe8246cc9507f36a872d6"}]}, @NFTA_SET_ELEM_DATA={0x88, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY={0x8c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "2addb13891754b09999d6891a8f5f70c1d6b0c902fbed0ae9449b08345417bae87"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x51, 0x1, "c9829618cb96d447a23f26cb001ac45a76744bba4ceadf27513b72a99528731de6d8d47f2e3f86bd4cc239a92cda89115d39ceb3e6ed4bfde9996ce3119ee0cddc51c0fb1a4601e1533225e355"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x471b}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '\xb7}\x00'}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x8}]}}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x13a8, 0x3, 0x0, 0x1, [{0x1254, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x118c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4f, 0x1, "5dde13348172113672281cbee6f277c3ca4180e89e82aa2f685038899dcdad90e936d69c8e771debf22ddd360a3f1dafefd08f6fe44f8bbb8de7bfd0674fbed3b7bc88ad8e7298c7b4a754"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x8a, 0x1, "dcf0abf15a104da48de41c98e3b2ce931793b5cf8c62123817423eca647d8ea0cf2bcd56a60ace60f2d91ba92462392af74b2dc770e26d70b73c67b1dcbad93b250fb2c4fee89b4b80529af887e84e23e0e4f37eab94cd455bb83e9ba17e8e402772cbfb0aac7dd3506131cb1490b31fc1fa3e25be6a714ea6c09520c458d26ac2447c8ff6ee"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x84, 0x1, "937485dfcbb65d372cab99bce2d9288ba373d87b8be9272e119f5fce42ed787a0c59e0c93cd5a491d12ca3d321497983ff1442d46ad9b134359405ca7d3f116103929d1a726ede894bbeab21a51ed43b8225b445102cc86e855ed69881b4790865a16c78cd0b9ac6e67b965995a1763a273f02eab5e850375869cdc2e021e40b"}]}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_USERDATA={0x2f, 0x6, 0x1, 0x0, "0e3c04bc97cbff2616a5535b735450be8450d0765f7d4dabd7bf0218fb76450f9bd7caabebf7cfbb9708b8"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000000}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x21}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz0\x00'}]}}}, {0x54, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x140, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xd2, 0x6, 0x1, 0x0, "1ee9fc4336eeff7ff535cab0f59362a4cd4b350a47499a22b93f54428c0fb17ccca27515820286bcb0e1de4a7a3e0c910cf2ff6e3dd6e0943c4572c0ac9f3103bf12a8acadd89f1d778e32a05d9e38861450d03a1c9fd866f001f6e8174f78dcec537bba86e16e622b2d457e116e21b1b55dce013efc7a19e014451f2fae72011d8e1297515d6293541dcef52075a50b9a676f6ca0b646b4d4f6c7cafd95fd61e0612b6067266d2f6f4570c445b95d51d359c4ae39d255eb267b49da5c97dfb21ca53e6337f02f61978468875f1f"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0x4d, 0x6, 0x1, 0x0, "f27719a630d20a7d0c3e88fd3fd44ab75099d12c899cbb3bc773b29c3b3fe2462a6926ad15e5de641424dd559d78e626b596a7e82f885c1279db78fa018faa7a316907369e78d8de69"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x15d4}}, 0x4) 4.287957665s ago: executing program 8 (id=1926): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, 0x0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b0000000800000020000000ffffffff01000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000f0ffb857e7f0d9e4911f3f7748ce6a244e2a"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, r1}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8089, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x114000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[@ANYBLOB], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00'}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, 0x0, 0x24000840) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.730250658s ago: executing program 3 (id=1927): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3c, 0x7}, 0x100009, 0x0, 0x0, 0x8, 0x3fd, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.615354757s ago: executing program 6 (id=1928): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x15) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xf, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/249, 0xf9}], 0x1}, 0x40000140) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 3.066526026s ago: executing program 8 (id=1929): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1080}], 0x1}, 0x4000010) 3.048544378s ago: executing program 3 (id=1930): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x8110, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@ifindex, 0x9, 0x0, 0x4, &(0x7f0000000640)=[0x0], 0x1, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x7, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f00000003c0), &(0x7f0000001d40)=r8}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@map=r9, 0xffffffffffffffff, 0x29, 0x2010, 0x0, @value, @void, @void, @void, r7}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af0b"], 0x6) r10 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002040)=""/4067, 0xfe3}, {&(0x7f00000037c0)=""/4069, 0xfe5}], 0x2}, 0x40000100) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f91c240685", 0x14}], 0x1}, 0x0) recvmsg$kcm(r10, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="19ac721e4479cae500000004000000000000000280000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r11, 0x0, 0x0}, 0x20) 2.983021546s ago: executing program 8 (id=1931): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x0, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x84}, 0x20000000) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00%`', @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000000) 2.886944042s ago: executing program 7 (id=1932): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10) socket$kcm(0xa, 0x1, 0x106) 2.526179817s ago: executing program 6 (id=1933): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r0, 0x0, &(0x7f0000000700)=""/44}, 0x20) 2.525615897s ago: executing program 7 (id=1934): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fcffffff00000000fcff000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x22}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xaa}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 2.426890896s ago: executing program 6 (id=1935): gettid() socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x2d, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffb, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x15}, [@call={0x6f}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x46, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socket$kcm(0x2, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0800000d0a030000000000000000000100000608000440f9ff000368fd693111f5298578c504f0ffaccb936f0d03df3956fb5c0606d57f08040a77c40c504997649728056f2111bed703478765ad05b66a7bf4900f2621d61da056a12585a16cc85708cd"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40001) close(r4) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000000)=r4, 0x4) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x1, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x53) 2.326190448s ago: executing program 7 (id=1936): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x2}, 0x10a8, 0x6, 0x0, 0x0, 0x9, 0x7ffffc, 0xfffc, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close(0x3) 2.098613395s ago: executing program 6 (id=1937): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r8) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b28de000"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.046980646s ago: executing program 3 (id=1938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) sendmsg$inet6(r1, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x5b0}, 0x20008001) sendmsg$inet6(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)}, 0x20000044) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) 1.939381181s ago: executing program 8 (id=1939): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 1.179614384s ago: executing program 7 (id=1940): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, 0x0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b0000000800000020000000ffffffff01000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000f0ffb857e7f0d9e4911f3f7748ce6a244e2a"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, r1}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8089, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x114000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[@ANYBLOB], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00'}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, 0x0, 0x24000840) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 90.009356ms ago: executing program 5 (id=1941): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) close(0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x88, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) 0s ago: executing program 5 (id=1942): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763608646667033", @ANYRESDEC], 0xffdd) kernel console output (not intermixed with test programs): ][ T6074] Mem-Info: [ 82.367591][ T6074] active_anon:5750 inactive_anon:0 isolated_anon:0 [ 82.367591][ T6074] active_file:2436 inactive_file:39872 isolated_file:0 [ 82.367591][ T6074] unevictable:768 dirty:1629 writeback:0 [ 82.367591][ T6074] slab_reclaimable:10622 slab_unreclaimable:94812 [ 82.367591][ T6074] mapped:29235 shmem:1356 pagetables:1108 [ 82.367591][ T6074] sec_pagetables:0 bounce:0 [ 82.367591][ T6074] kernel_misc_reclaimable:0 [ 82.367591][ T6074] free:1317386 free_pcp:27985 free_cma:0 [ 82.505077][ T6074] Node 0 active_anon:23000kB inactive_anon:0kB active_file:9744kB inactive_file:159288kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116940kB dirty:6508kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11892kB pagetables:4296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 82.544508][ T6062] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 82.667591][ T6076] netlink: 3 bytes leftover after parsing attributes in process `syz.0.25'. [ 82.678428][ T6074] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 82.899749][ T6074] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 82.977819][ T6074] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 83.013566][ T6074] Node 0 DMA32 free:1381896kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23020kB inactive_anon:0kB active_file:9944kB inactive_file:157708kB unevictable:1536kB writepending:6520kB present:3129332kB managed:2557368kB mlocked:0kB bounce:0kB free_pcp:81272kB local_pcp:46112kB free_cma:0kB [ 83.101046][ T6074] lowmem_reserve[]: 0 0 1 1 1 [ 83.127158][ T6074] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:8kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 83.187668][ T6062] syz.2.19 (6062) used greatest stack depth: 18328 bytes left [ 83.214926][ T6074] lowmem_reserve[]: 0 0 0 0 0 [ 83.219901][ T6074] Node 1 Normal free:3876736kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:25528kB local_pcp:12128kB free_cma:0kB [ 83.254438][ T6088] netlink: 'syz.4.27': attribute type 39 has an invalid length. [ 83.265039][ T6074] lowmem_reserve[]: 0 0 0 0 0 [ 83.270001][ T6074] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 83.283298][ T6074] Node 0 DMA32: 5*4kB (M) 7*8kB (UME) 6*16kB (ME) 2*32kB (M) 1*64kB (U) 4*128kB (UM) 5*256kB (UME) 2*512kB (UM) 6*1024kB (ME) 2*2048kB (UM) 334*4096kB (M) = 1381420kB [ 83.301358][ T6074] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 83.319697][ T6074] Node 1 Normal: 150*4kB (UME) 55*8kB (UME) 51*16kB (UME) 40*32kB (UME) 19*64kB (UME) 7*128kB (UME) 5*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 943*4096kB (M) = 3876736kB [ 83.339144][ T6074] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 83.348843][ T6074] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 83.358290][ T6074] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 83.367957][ T6074] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 83.377380][ T6074] 43710 total pagecache pages [ 83.382161][ T6074] 0 pages in swap cache [ 83.386432][ T6074] Free swap = 124996kB [ 83.390759][ T6074] Total swap = 124996kB [ 83.395102][ T6074] 2097051 pages RAM [ 83.398977][ T6074] 0 pages HighMem/MovableOnly [ 83.403913][ T6074] 425683 pages reserved [ 83.413558][ T6074] 0 pages cma reserved [ 83.763122][ T6094] netlink: 104 bytes leftover after parsing attributes in process `syz.1.29'. [ 83.781619][ T6088] veth0_macvtap: left promiscuous mode [ 83.968728][ T6098] netlink: 830 bytes leftover after parsing attributes in process `syz.3.30'. [ 83.992377][ T6098] bond_slave_1: entered promiscuous mode [ 84.031764][ T6099] netlink: 'syz.0.31': attribute type 29 has an invalid length. [ 84.076139][ T6098] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.30'. [ 84.096893][ T6099] netlink: 'syz.0.31': attribute type 29 has an invalid length. [ 84.127044][ T6099] netlink: 'syz.0.31': attribute type 29 has an invalid length. [ 84.237501][ T6105] netlink: 'syz.0.31': attribute type 29 has an invalid length. [ 84.583518][ T6111] netlink: 'syz.1.34': attribute type 25 has an invalid length. [ 84.591193][ T6111] netlink: 'syz.1.34': attribute type 28 has an invalid length. [ 86.273601][ T6134] syzkaller0: entered promiscuous mode [ 86.383263][ T6134] syzkaller0: entered allmulticast mode [ 86.796150][ T6146] macvlan0: entered promiscuous mode [ 86.824137][ T6146] macvlan0: entered allmulticast mode [ 86.847342][ T6146] veth1_vlan: entered allmulticast mode [ 86.900023][ T6149] netlink: 'syz.2.44': attribute type 11 has an invalid length. [ 86.990831][ T6149] netlink: 168 bytes leftover after parsing attributes in process `syz.2.44'. [ 87.096570][ T920] cfg80211: failed to load regulatory.db [ 87.450873][ T6162] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.47'. [ 87.531364][ T6158] netlink: 'syz.3.48': attribute type 39 has an invalid length. [ 88.525956][ T6160] netlink: 'syz.4.49': attribute type 29 has an invalid length. [ 88.535654][ T6161] netlink: 830 bytes leftover after parsing attributes in process `syz.2.47'. [ 88.545357][ T6161] bond_slave_0: entered promiscuous mode [ 88.551023][ T6161] bond_slave_1: entered promiscuous mode [ 88.556734][ T6161] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 88.690966][ T6163] netlink: 'syz.4.49': attribute type 29 has an invalid length. [ 88.715252][ T6165] netlink: 'syz.4.49': attribute type 29 has an invalid length. [ 88.758524][ T6167] netlink: 'syz.4.49': attribute type 29 has an invalid length. [ 88.861454][ T6177] netlink: 'syz.3.52': attribute type 4 has an invalid length. [ 88.906803][ T6177] netlink: 'syz.3.52': attribute type 2 has an invalid length. [ 88.916895][ T6177] netlink: 199408 bytes leftover after parsing attributes in process `syz.3.52'. [ 89.186588][ T6190] netlink: 132 bytes leftover after parsing attributes in process `syz.1.53'. [ 89.998261][ T6199] macvlan0: entered promiscuous mode [ 90.029931][ T6199] macvlan0: entered allmulticast mode [ 90.194550][ T6199] veth1_vlan: entered allmulticast mode [ 90.234397][ T6204] netlink: 'syz.3.58': attribute type 11 has an invalid length. [ 90.595379][ T6204] netlink: 168 bytes leftover after parsing attributes in process `syz.3.58'. [ 90.803097][ T6210] netlink: 'syz.1.62': attribute type 39 has an invalid length. [ 91.267046][ T6221] netlink: 'syz.1.66': attribute type 10 has an invalid length. [ 91.339690][ T6221] netlink: 168 bytes leftover after parsing attributes in process `syz.1.66'. [ 91.451404][ T6208] syzkaller0: entered promiscuous mode [ 91.457013][ T6208] syzkaller0: entered allmulticast mode [ 91.738953][ T6234] veth0_vlan: left promiscuous mode [ 91.759923][ T6234] veth0_vlan: entered promiscuous mode [ 91.844105][ T6234] team0: Device veth0_vlan failed to register rx_handler [ 93.398053][ T6247] netlink: 156 bytes leftover after parsing attributes in process `syz.1.72'. [ 93.539694][ T6253] macvlan0: entered promiscuous mode [ 93.557560][ T6253] macvlan0: entered allmulticast mode [ 93.595286][ T6253] veth1_vlan: entered allmulticast mode [ 93.608432][ T6254] validate_nla: 2 callbacks suppressed [ 93.608465][ T6254] netlink: 'syz.3.73': attribute type 10 has an invalid length. [ 93.616395][ T6255] netlink: 'syz.1.74': attribute type 11 has an invalid length. [ 93.672765][ T6255] netlink: 168 bytes leftover after parsing attributes in process `syz.1.74'. [ 93.811855][ T6259] netlink: 'syz.4.76': attribute type 39 has an invalid length. [ 94.140188][ T6254] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 94.228430][ T6254] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 94.927490][ T6278] netlink: 'syz.2.82': attribute type 21 has an invalid length. [ 95.014130][ T6278] netlink: 156 bytes leftover after parsing attributes in process `syz.2.82'. [ 95.409267][ T6275] option changes via remount are deprecated (pid=6274 comm=syz.0.80) [ 95.421452][ T6282] netlink: 'syz.3.84': attribute type 11 has an invalid length. [ 95.429329][ T6282] netlink: 168 bytes leftover after parsing attributes in process `syz.3.84'. [ 95.660649][ T6290] netlink: 132 bytes leftover after parsing attributes in process `syz.2.86'. [ 95.678426][ T6290] netlink: 'syz.2.86': attribute type 10 has an invalid length. [ 95.747254][ T6280] netlink: 'syz.4.81': attribute type 39 has an invalid length. [ 95.814587][ T6290] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 95.823806][ T6290] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 95.865486][ T6295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.87'. [ 96.029144][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 96.088399][ T6300] netlink: 'syz.2.90': attribute type 29 has an invalid length. [ 96.120416][ T6304] macvlan0: entered promiscuous mode [ 96.127132][ T6304] macvlan0: entered allmulticast mode [ 96.132741][ T6304] veth1_vlan: entered allmulticast mode [ 96.142490][ T6300] netlink: 'syz.2.90': attribute type 29 has an invalid length. [ 96.151450][ T6304] netlink: 'syz.0.89': attribute type 11 has an invalid length. [ 96.159691][ T6304] netlink: 168 bytes leftover after parsing attributes in process `syz.0.89'. [ 97.561779][ T6314] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 97.600886][ T6326] netlink: 1 bytes leftover after parsing attributes in process `syz.2.96'. [ 97.819977][ T6331] netlink: 168 bytes leftover after parsing attributes in process `syz.0.97'. [ 97.845569][ T6326] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.603753][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.104'. [ 99.676440][ T6362] macvlan0: entered promiscuous mode [ 99.682103][ T6362] macvlan0: entered allmulticast mode [ 99.691976][ T6362] veth1_vlan: entered allmulticast mode [ 99.702809][ T6362] validate_nla: 7 callbacks suppressed [ 99.702823][ T6362] netlink: 'syz.4.106': attribute type 11 has an invalid length. [ 99.731318][ T6362] netlink: 168 bytes leftover after parsing attributes in process `syz.4.106'. [ 99.753500][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 99.975564][ T6369] netlink: 'syz.0.107': attribute type 39 has an invalid length. [ 101.182913][ T6389] netlink: 'syz.4.111': attribute type 39 has an invalid length. [ 102.149087][ T6410] netlink: 60 bytes leftover after parsing attributes in process `syz.4.116'. [ 103.178236][ T6421] netlink: 'syz.4.121': attribute type 11 has an invalid length. [ 103.188035][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.122'. [ 103.237249][ T6421] netlink: 168 bytes leftover after parsing attributes in process `syz.4.121'. [ 103.483917][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 103.801324][ T6427] netlink: 22 bytes leftover after parsing attributes in process `syz.0.123'. [ 104.333173][ T6440] netlink: 'syz.3.125': attribute type 29 has an invalid length. [ 104.356585][ T6440] netlink: 'syz.3.125': attribute type 29 has an invalid length. [ 104.412606][ T6440] netlink: 'syz.3.125': attribute type 29 has an invalid length. [ 104.453525][ T6442] netlink: 'syz.4.126': attribute type 39 has an invalid length. [ 105.093059][ T6446] netlink: 'syz.3.125': attribute type 29 has an invalid length. [ 105.359360][ T6449] netlink: 'syz.0.128': attribute type 39 has an invalid length. [ 105.414272][ T6449] veth0_macvtap: left promiscuous mode [ 105.880397][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'. [ 105.993659][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 107.344758][ T6487] netlink: 180 bytes leftover after parsing attributes in process `syz.1.142'. [ 108.236390][ T6505] netlink: 32 bytes leftover after parsing attributes in process `syz.0.147'. [ 108.752034][ T6527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'. [ 108.865573][ T6525] netlink: 216 bytes leftover after parsing attributes in process `syz.4.151'. [ 108.972209][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 109.357805][ T6504] infiniband syz1: set down [ 109.372900][ T6504] infiniband syz1: added ipvlan1 [ 109.390352][ T6504] syz1: rxe_create_cq: returned err = -12 [ 109.403920][ T6504] infiniband syz1: Couldn't create ib_mad CQ [ 109.423923][ T6504] infiniband syz1: Couldn't open port 1 [ 109.520591][ T6504] RDS/IB: syz1: added [ 109.539074][ T6504] smc: adding ib device syz1 with port count 1 [ 109.561101][ T6504] smc: ib device syz1 port 1 has pnetid [ 110.650868][ T6553] netlink: 32 bytes leftover after parsing attributes in process `syz.4.160'. [ 111.044454][ T6564] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 111.139950][ T6563] netlink: 'syz.1.162': attribute type 29 has an invalid length. [ 111.206949][ T6564] netlink: 'syz.1.162': attribute type 10 has an invalid length. [ 111.256140][ T6569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.164'. [ 111.597775][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 111.853549][ T6563] netlink: 'syz.1.162': attribute type 29 has an invalid length. [ 112.425206][ T6564] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 114.160546][ T6593] netlink: 32 bytes leftover after parsing attributes in process `syz.3.173'. [ 114.730975][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.176'. [ 115.072754][ T6620] netlink: 'syz.1.180': attribute type 11 has an invalid length. [ 115.103688][ T6620] netlink: 168 bytes leftover after parsing attributes in process `syz.1.180'. [ 115.107235][ T6610] tap0: tun_chr_ioctl cmd 1074025677 [ 115.179849][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 115.209416][ T6610] tap0: linktype set to 776 [ 115.670644][ T6627] netlink: 36 bytes leftover after parsing attributes in process `syz.3.179'. [ 115.717272][ T6627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.179'. [ 116.681297][ T6635] netlink: 'syz.3.184': attribute type 21 has an invalid length. [ 116.914252][ T6635] netlink: 156 bytes leftover after parsing attributes in process `syz.3.184'. [ 117.123999][ T6640] netlink: 'syz.4.186': attribute type 29 has an invalid length. [ 117.168719][ T6640] netlink: 'syz.4.186': attribute type 29 has an invalid length. [ 117.275219][ T30] audit: type=1107 audit(1758648166.981:2): pid=6639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 117.388202][ T6640] netlink: 'syz.4.186': attribute type 29 has an invalid length. [ 117.410806][ T6645] netlink: 'syz.4.186': attribute type 29 has an invalid length. [ 117.441528][ T6640] netlink: 'syz.4.186': attribute type 29 has an invalid length. [ 118.109025][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.197'. [ 118.256643][ T6671] tap0: tun_chr_ioctl cmd 1074025677 [ 118.271107][ T6675] netlink: 'syz.1.199': attribute type 21 has an invalid length. [ 118.271624][ T6671] tap0: linktype set to 776 [ 118.304371][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 118.314796][ T6675] netlink: 156 bytes leftover after parsing attributes in process `syz.1.199'. [ 119.042137][ T6680] netlink: 'syz.1.200': attribute type 3 has an invalid length. [ 119.081560][ T6680] netlink: 152 bytes leftover after parsing attributes in process `syz.1.200'. [ 120.948339][ T6719] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 121.257313][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 121.342230][ T6728] tap0: tun_chr_ioctl cmd 1074025677 [ 121.367600][ T6728] tap0: linktype set to 776 [ 121.389935][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'. [ 122.946923][ T6755] netlink: 'syz.4.224': attribute type 21 has an invalid length. [ 123.043776][ T6755] netlink: 156 bytes leftover after parsing attributes in process `syz.4.224'. [ 123.131618][ T6762] netlink: 830 bytes leftover after parsing attributes in process `syz.3.227'. [ 124.861857][ T6804] žÿ: renamed from team_slave_1 (while UP) [ 125.069957][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 125.126652][ T6815] netlink: 'syz.0.243': attribute type 21 has an invalid length. [ 125.156102][ T6804] netlink: 32 bytes leftover after parsing attributes in process `syz.4.240'. [ 125.170350][ T6815] netlink: 156 bytes leftover after parsing attributes in process `syz.0.243'. [ 125.779830][ T6826] netlink: 'syz.4.246': attribute type 10 has an invalid length. [ 127.152376][ T6826] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.161458][ T6826] bond0: (slave team0): Enslaving as an active interface with an up link [ 127.355420][ T6852] žÿ: renamed from team_slave_1 (while UP) [ 127.496092][ T6852] netlink: 32 bytes leftover after parsing attributes in process `syz.3.256'. [ 130.026691][ T6920] netlink: 'syz.2.274': attribute type 4 has an invalid length. [ 130.043660][ T6920] netlink: 152 bytes leftover after parsing attributes in process `syz.2.274'. [ 130.077744][ T6920] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 130.356518][ T6933] syz.0.277: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 130.441347][ T6933] CPU: 1 UID: 0 PID: 6933 Comm: syz.0.277 Not tainted syzkaller #0 PREEMPT(full) [ 130.441376][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.441387][ T6933] Call Trace: [ 130.441395][ T6933] [ 130.441407][ T6933] dump_stack_lvl+0x189/0x250 [ 130.441438][ T6933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.441459][ T6933] ? __pfx__printk+0x10/0x10 [ 130.441484][ T6933] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 130.441505][ T6933] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 130.441528][ T6933] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 130.441551][ T6933] warn_alloc+0x214/0x310 [ 130.441571][ T6933] ? stack_depot_save_flags+0x40/0x860 [ 130.441605][ T6933] ? __pfx_warn_alloc+0x10/0x10 [ 130.441626][ T6933] ? kasan_save_track+0x4f/0x80 [ 130.441655][ T6933] ? xskq_create+0x56/0x170 [ 130.441677][ T6933] ? xsk_init_queue+0xb0/0x110 [ 130.441693][ T6933] ? xsk_setsockopt+0x57b/0x8d0 [ 130.441709][ T6933] ? do_sock_setsockopt+0x179/0x1b0 [ 130.441731][ T6933] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 130.441752][ T6933] ? do_syscall_64+0xfa/0x3b0 [ 130.441772][ T6933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.441797][ T6933] __vmalloc_node_range_noprof+0x125/0x12f0 [ 130.441849][ T6933] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 130.441874][ T6933] ? __kasan_kmalloc+0x93/0xb0 [ 130.441894][ T6933] vmalloc_user_noprof+0xad/0xf0 [ 130.441913][ T6933] ? xskq_create+0xbf/0x170 [ 130.441934][ T6933] xskq_create+0xbf/0x170 [ 130.441957][ T6933] xsk_init_queue+0xb0/0x110 [ 130.441979][ T6933] xsk_setsockopt+0x57b/0x8d0 [ 130.442002][ T6933] ? __pfx_xsk_setsockopt+0x10/0x10 [ 130.442021][ T6933] ? __pfx_aa_sk_perm+0x10/0x10 [ 130.442044][ T6933] ? __fget_files+0x2a/0x420 [ 130.442061][ T6933] ? aa_sock_opt_perm+0xff/0x1b0 [ 130.442085][ T6933] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 130.442106][ T6933] ? __pfx_xsk_setsockopt+0x10/0x10 [ 130.442126][ T6933] do_sock_setsockopt+0x179/0x1b0 [ 130.442155][ T6933] __x64_sys_setsockopt+0x13f/0x1b0 [ 130.442188][ T6933] do_syscall_64+0xfa/0x3b0 [ 130.442208][ T6933] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.442228][ T6933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.442245][ T6933] ? clear_bhb_loop+0x60/0xb0 [ 130.442267][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.442283][ T6933] RIP: 0033:0x7f1e64b8eec9 [ 130.442299][ T6933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.442313][ T6933] RSP: 002b:00007f1e65ab3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.442330][ T6933] RAX: ffffffffffffffda RBX: 00007f1e64de6090 RCX: 00007f1e64b8eec9 [ 130.442344][ T6933] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 130.442354][ T6933] RBP: 00007f1e64c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 130.442365][ T6933] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 130.442376][ T6933] R13: 00007f1e64de6128 R14: 00007f1e64de6090 R15: 00007ffdffed6ab8 [ 130.442405][ T6933] [ 130.768696][ T6933] Mem-Info: [ 130.771849][ T6933] active_anon:5843 inactive_anon:0 isolated_anon:0 [ 130.771849][ T6933] active_file:16132 inactive_file:39891 isolated_file:0 [ 130.771849][ T6933] unevictable:768 dirty:125 writeback:25 [ 130.771849][ T6933] slab_reclaimable:10751 slab_unreclaimable:98792 [ 130.771849][ T6933] mapped:29377 shmem:1356 pagetables:1159 [ 130.771849][ T6933] sec_pagetables:0 bounce:0 [ 130.771849][ T6933] kernel_misc_reclaimable:0 [ 130.771849][ T6933] free:1306698 free_pcp:19728 free_cma:0 [ 130.774859][ T6931] netlink: 'syz.4.279': attribute type 11 has an invalid length. [ 130.818690][ T6933] Node 0 active_anon:23372kB inactive_anon:0kB active_file:64528kB inactive_file:159364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117508kB dirty:496kB writeback:100kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11992kB pagetables:4500kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 130.858228][ T6933] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 130.891374][ T6933] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 130.921173][ T6933] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 130.928775][ T6933] Node 0 DMA32 free:1333636kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23332kB inactive_anon:0kB active_file:64528kB inactive_file:157784kB unevictable:1536kB writepending:556kB present:3129332kB managed:2557368kB mlocked:0kB bounce:0kB free_pcp:54316kB local_pcp:21788kB free_cma:0kB [ 130.961174][ T6933] lowmem_reserve[]: 0 0 1 1 1 [ 130.966019][ T6933] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 130.995119][ T6933] lowmem_reserve[]: 0 0 0 0 0 [ 130.999866][ T6933] Node 1 Normal free:3877528kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24896kB local_pcp:11968kB free_cma:0kB [ 131.028550][ T6931] netlink: 168 bytes leftover after parsing attributes in process `syz.4.279'. [ 131.031577][ T6933] lowmem_reserve[]: 0 0 0 0 0 [ 131.044971][ T6933] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 131.058143][ T6933] Node 0 DMA32: 1288*4kB (UME) 686*8kB (UME) 479*16kB (UME) 454*32kB (UM) 235*64kB (UM) 144*128kB (UM) 65*256kB (UME) 30*512kB (UME) 16*1024kB (UM) 4*2048kB (UM) 296*4096kB (M) = 1335296kB [ 131.079223][ T6933] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 131.098911][ T6933] Node 1 Normal: 212*4kB (UME) 55*8kB (UME) 51*16kB (UME) 51*32kB (UME) 22*64kB (UME) 7*128kB (UME) 5*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 943*4096kB (M) = 3877528kB [ 131.188397][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.282'. [ 131.269744][ T6933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.662128][ T6933] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.745573][ T6933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.769718][ T6933] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.807454][ T6933] 57377 total pagecache pages [ 131.828481][ T6933] 0 pages in swap cache [ 131.835543][ T6933] Free swap = 124996kB [ 131.839971][ T6933] Total swap = 124996kB [ 131.844666][ T6933] 2097051 pages RAM [ 131.848606][ T6933] 0 pages HighMem/MovableOnly [ 131.853932][ T6933] 425683 pages reserved [ 131.858098][ T6933] 0 pages cma reserved [ 131.879981][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 132.018188][ T6951] tap0: tun_chr_ioctl cmd 1074025677 [ 132.041459][ T6951] tap0: linktype set to 776 [ 132.334201][ T6950] debugfs: '!' already exists in 'ieee80211' [ 132.741263][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.750502][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.191491][ T6966] netlink: 48 bytes leftover after parsing attributes in process `syz.4.290'. [ 134.367466][ T6971] tmpfs: Bad value for 'mode' [ 134.395129][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 135.254388][ T6984] netlink: 'syz.2.294': attribute type 11 has an invalid length. [ 135.262145][ T6984] netlink: 168 bytes leftover after parsing attributes in process `syz.2.294'. [ 135.913526][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.296'. [ 136.022307][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 136.039758][ T6994] tap0: tun_chr_ioctl cmd 1074025677 [ 136.072603][ T6994] tap0: linktype set to 776 [ 136.099502][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 137.014113][ T7017] netlink: 60 bytes leftover after parsing attributes in process `syz.3.303'. [ 137.076986][ T7014] netlink: 'syz.4.305': attribute type 39 has an invalid length. [ 137.775500][ T7017] caif0: entered promiscuous mode [ 137.781073][ T7017] caif0: entered allmulticast mode [ 138.230537][ T7045] netlink: 'syz.3.310': attribute type 11 has an invalid length. [ 138.240218][ T7044] žÿ: renamed from team_slave_1 (while UP) [ 138.251381][ T7045] netlink: 168 bytes leftover after parsing attributes in process `syz.3.310'. [ 138.548941][ T7044] netlink: 32 bytes leftover after parsing attributes in process `syz.1.311'. [ 138.571747][ T7049] netlink: 104 bytes leftover after parsing attributes in process `syz.3.312'. [ 140.132428][ T7072] netlink: 'syz.0.318': attribute type 39 has an invalid length. [ 140.520760][ T7074] netlink: 'syz.3.322': attribute type 11 has an invalid length. [ 140.617491][ T7074] netlink: 168 bytes leftover after parsing attributes in process `syz.3.322'. [ 142.125762][ T7097] tmpfs: Bad value for 'mode' [ 142.162845][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.327'. [ 144.872651][ T7128] netlink: 'syz.2.334': attribute type 39 has an invalid length. [ 145.023945][ T7130] netlink: 'syz.0.335': attribute type 11 has an invalid length. [ 145.148284][ T7130] netlink: 168 bytes leftover after parsing attributes in process `syz.0.335'. [ 145.559316][ T7135] netlink: 'syz.2.337': attribute type 21 has an invalid length. [ 145.594892][ T7135] netlink: 156 bytes leftover after parsing attributes in process `syz.2.337'. [ 145.723654][ T7137] netlink: 'syz.3.338': attribute type 2 has an invalid length. [ 145.751994][ T7137] netlink: 119 bytes leftover after parsing attributes in process `syz.3.338'. [ 145.794878][ T7140] netlink: 48 bytes leftover after parsing attributes in process `syz.3.338'. [ 146.819494][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'. [ 147.008613][ T7166] syz.0.346 uses obsolete (PF_INET,SOCK_PACKET) [ 147.044432][ T7166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.325639][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'. [ 147.410753][ T7174] netlink: 'syz.4.347': attribute type 39 has an invalid length. [ 147.867240][ T7187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.351'. [ 147.906815][ T7188] netlink: 'syz.3.360': attribute type 2 has an invalid length. [ 147.962077][ T7188] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.360'. [ 149.568058][ T7227] netlink: 'syz.1.361': attribute type 39 has an invalid length. [ 149.582186][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 149.645173][ T7233] netlink: 17 bytes leftover after parsing attributes in process `syz.1.365'. [ 149.654444][ T7233] netlink: zone id is out of range [ 149.659900][ T7233] netlink: zone id is out of range [ 149.700696][ T7233] netlink: zone id is out of range [ 149.712946][ T7233] netlink: zone id is out of range [ 149.718461][ T7233] netlink: zone id is out of range [ 149.725678][ T7233] netlink: zone id is out of range [ 149.730931][ T7233] netlink: zone id is out of range [ 149.736536][ T7233] netlink: zone id is out of range [ 149.741783][ T7233] netlink: zone id is out of range [ 150.042113][ T7242] netlink: 'syz.0.367': attribute type 29 has an invalid length. [ 150.078212][ T7242] netlink: 'syz.0.367': attribute type 29 has an invalid length. [ 150.273567][ T30] audit: type=1107 audit(1758648199.951:3): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 150.376855][ T7246] netlink: 'syz.0.367': attribute type 29 has an invalid length. [ 150.487380][ T7242] netlink: 'syz.0.367': attribute type 29 has an invalid length. [ 150.518026][ T7246] netlink: 'syz.0.367': attribute type 29 has an invalid length. [ 150.589294][ T7245] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 150.701450][ T7248] netlink: 'syz.1.368': attribute type 29 has an invalid length. [ 150.748646][ T7248] netlink: 'syz.1.368': attribute type 29 has an invalid length. [ 150.778171][ T7248] netlink: 'syz.1.368': attribute type 10 has an invalid length. [ 151.118989][ T7255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.370'. [ 151.275636][ T7252] netlink: 36 bytes leftover after parsing attributes in process `syz.3.370'. [ 151.963974][ T7279] netlink: 'syz.2.375': attribute type 39 has an invalid length. [ 152.519667][ T7292] netlink: 'syz.2.380': attribute type 10 has an invalid length. [ 152.882502][ T7292] team0 (unregistering): Port device team_slave_0 removed [ 152.908301][ T7292] team0 (unregistering): Port device team_slave_1 removed [ 152.922240][ T7302] netlink: 'syz.4.381': attribute type 16 has an invalid length. [ 152.943336][ T7302] netlink: 48 bytes leftover after parsing attributes in process `syz.4.381'. [ 152.980005][ T7302] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.038906][ T7304] netlink: 'syz.1.382': attribute type 10 has an invalid length. [ 153.070385][ T7304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.101225][ T7304] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 153.139893][ T7305] netlink: 'syz.1.382': attribute type 10 has an invalid length. [ 153.150935][ T7305] netlink: 40 bytes leftover after parsing attributes in process `syz.1.382'. [ 153.192834][ T7307] netlink: 'syz.4.383': attribute type 3 has an invalid length. [ 153.201109][ T7307] netlink: 152 bytes leftover after parsing attributes in process `syz.4.383'. [ 153.212636][ T7305] batadv0: entered promiscuous mode [ 153.235599][ T7305] batadv0: entered allmulticast mode [ 153.252090][ T7305] bond0: (slave batadv0): Releasing backup interface [ 153.318619][ T7305] bridge0: port 3(batadv0) entered blocking state [ 153.342675][ T7305] bridge0: port 3(batadv0) entered disabled state [ 153.638945][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.696794][ T78] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 153.706546][ T78] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 153.724242][ T7317] netlink: 'syz.3.385': attribute type 39 has an invalid length. [ 154.309475][ T7323] net_ratelimit: 76 callbacks suppressed [ 154.309493][ T7323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.892982][ T7341] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.395'. [ 155.030254][ T7346] netlink: 10 bytes leftover after parsing attributes in process `syz.1.396'. [ 155.107651][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 156.191804][ T7365] validate_nla: 1 callbacks suppressed [ 156.191877][ T7365] netlink: 'syz.3.400': attribute type 39 has an invalid length. [ 156.278066][ T7366] netlink: 'syz.1.399': attribute type 10 has an invalid length. [ 156.286907][ T7366] netlink: 'syz.1.399': attribute type 16 has an invalid length. [ 156.295939][ T7366] netlink: 156 bytes leftover after parsing attributes in process `syz.1.399'. [ 158.180328][ T7395] netlink: 'syz.4.406': attribute type 39 has an invalid length. [ 158.754357][ T7413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.701646][ T7430] netlink: 48 bytes leftover after parsing attributes in process `syz.2.416'. [ 159.857659][ T7421] netlink: 44 bytes leftover after parsing attributes in process `syz.3.414'. [ 160.062959][ T7441] openvswitch: netlink: IP tunnel dst address not specified [ 160.151985][ T7441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.418'. [ 160.217694][ T7441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.418'. [ 160.484496][ T7452] netlink: 'syz.3.420': attribute type 39 has an invalid length. [ 160.889002][ T7461] netlink: 'syz.3.426': attribute type 10 has an invalid length. [ 160.914836][ T7461] netlink: 55 bytes leftover after parsing attributes in process `syz.3.426'. [ 161.267575][ T7469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.280870][ T7469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.298236][ T7469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.308723][ T7469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.542961][ T7482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.432'. [ 161.726857][ T7487] netlink: 'syz.1.433': attribute type 21 has an invalid length. [ 161.736975][ T7487] netlink: 156 bytes leftover after parsing attributes in process `syz.1.433'. [ 161.801809][ T7489] netlink: 'syz.4.435': attribute type 39 has an invalid length. [ 161.994154][ T7492] netlink: 'syz.3.436': attribute type 39 has an invalid length. [ 162.887064][ T7508] netlink: 10 bytes leftover after parsing attributes in process `syz.4.442'. [ 163.120263][ T7531] netlink: 'syz.3.446': attribute type 11 has an invalid length. [ 163.138749][ T7531] netlink: 168 bytes leftover after parsing attributes in process `syz.3.446'. [ 163.290597][ T7539] netlink: 'syz.2.449': attribute type 39 has an invalid length. [ 163.451559][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.452'. [ 163.507080][ T7543] netlink: 240 bytes leftover after parsing attributes in process `syz.2.452'. [ 163.830306][ T7553] netlink: 'syz.2.455': attribute type 21 has an invalid length. [ 163.838509][ T7553] netlink: 156 bytes leftover after parsing attributes in process `syz.2.455'. [ 164.656611][ T7572] option changes via remount are deprecated (pid=7567 comm=syz.1.461) [ 165.092649][ T7574] netlink: 'syz.3.462': attribute type 39 has an invalid length. [ 165.856128][ T7594] netlink: 'syz.4.467': attribute type 10 has an invalid length. [ 166.144636][ T7594] bond0: (slave team0): Releasing backup interface [ 166.179840][ T7594] team0 (unregistering): Port device team_slave_0 removed [ 166.214357][ T7594] team0 (unregistering): Port device 76žÿ removed [ 166.854356][ T7615] netlink: 'syz.0.473': attribute type 21 has an invalid length. [ 166.883683][ T7615] netlink: 156 bytes leftover after parsing attributes in process `syz.0.473'. [ 166.910821][ T7614] žÿ: renamed from team_slave_1 [ 167.205710][ T7621] netlink: 'syz.3.475': attribute type 39 has an invalid length. [ 167.603883][ T7628] netlink: 13439 bytes leftover after parsing attributes in process `syz.3.478'. [ 167.629839][ T7628] netlink: 'syz.3.478': attribute type 210 has an invalid length. [ 168.617962][ T7642] netlink: 48 bytes leftover after parsing attributes in process `syz.3.483'. [ 170.457153][ T7663] netlink: 'syz.2.488': attribute type 39 has an invalid length. [ 172.835250][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'. [ 172.904023][ T7719] netlink: 'syz.1.503': attribute type 10 has an invalid length. [ 173.554179][ T7730] netlink: 'syz.0.505': attribute type 39 has an invalid length. [ 174.353862][ T7719] team0 (unregistering): Port device team_slave_0 removed [ 174.382036][ T7719] team0 (unregistering): Port device 76žÿ removed [ 175.887907][ T7768] žÿ: renamed from team_slave_1 (while UP) [ 176.090467][ T7773] netlink: 132 bytes leftover after parsing attributes in process `syz.2.517'. [ 176.830300][ T7790] netlink: 'syz.4.520': attribute type 39 has an invalid length. [ 177.275878][ T7797] netlink: 'syz.1.524': attribute type 39 has an invalid length. [ 177.424227][ T7797] veth0_macvtap: left promiscuous mode [ 178.948182][ T7835] netlink: 132 bytes leftover after parsing attributes in process `syz.3.535'. [ 178.968623][ T7839] netlink: 'syz.2.536': attribute type 39 has an invalid length. [ 179.519806][ T7843] tap0: tun_chr_ioctl cmd 1074025677 [ 179.554069][ T7843] tap0: linktype set to 776 [ 179.786284][ T7845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.538'. [ 181.119804][ T7880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.548'. [ 181.475189][ T7886] lo speed is unknown, defaulting to 1000 [ 181.517445][ T7890] netlink: 'syz.0.549': attribute type 39 has an invalid length. [ 181.628597][ T7886] lo speed is unknown, defaulting to 1000 [ 181.772596][ T7886] lo speed is unknown, defaulting to 1000 [ 182.420442][ T7898] tap0: tun_chr_ioctl cmd 1074025677 [ 182.444851][ T7898] tap0: linktype set to 776 [ 182.563951][ T7901] netlink: 'syz.0.552': attribute type 39 has an invalid length. [ 183.130807][ T7886] infiniband syz2: set active [ 183.135658][ T5970] lo speed is unknown, defaulting to 1000 [ 183.192022][ T7886] infiniband syz2: added lo [ 183.217277][ T7886] syz2: rxe_create_cq: returned err = -12 [ 183.252355][ T7886] infiniband syz2: Couldn't create ib_mad CQ [ 183.263778][ T7886] infiniband syz2: Couldn't open port 1 [ 183.375179][ T7886] RDS/IB: syz2: added [ 183.379252][ T7886] smc: adding ib device syz2 with port count 1 [ 183.398452][ T7886] smc: ib device syz2 port 1 has pnetid [ 183.624266][ T5970] lo speed is unknown, defaulting to 1000 [ 183.644266][ T7886] lo speed is unknown, defaulting to 1000 [ 184.598626][ T7930] netlink: 'syz.0.562': attribute type 39 has an invalid length. [ 184.794259][ T7886] lo speed is unknown, defaulting to 1000 [ 184.947932][ T7933] netlink: 56 bytes leftover after parsing attributes in process `syz.0.565'. [ 185.263976][ T7886] lo speed is unknown, defaulting to 1000 [ 185.553976][ T7942] netlink: 'syz.3.566': attribute type 39 has an invalid length. [ 185.914068][ T7945] tap0: tun_chr_ioctl cmd 1074025677 [ 185.933053][ T7945] tap0: linktype set to 776 [ 186.004562][ T7886] lo speed is unknown, defaulting to 1000 [ 187.169104][ T7886] lo speed is unknown, defaulting to 1000 [ 188.097471][ T7963] netlink: 16 bytes leftover after parsing attributes in process `syz.4.573'. [ 188.671176][ T7977] netlink: 'syz.1.577': attribute type 11 has an invalid length. [ 188.705944][ T7978] netlink: 'syz.2.575': attribute type 39 has an invalid length. [ 188.729326][ T7977] netlink: 168 bytes leftover after parsing attributes in process `syz.1.577'. [ 188.966970][ T7974] syzkaller0: entered promiscuous mode [ 188.972948][ T7974] syzkaller0: entered allmulticast mode [ 189.169351][ T7986] netlink: 188 bytes leftover after parsing attributes in process `syz.1.580'. [ 190.449578][ T8003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.585'. [ 191.136446][ T5881] Bluetooth: hci0: command 0x0406 tx timeout [ 191.139214][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 191.143144][ T5874] Bluetooth: hci2: command 0x0406 tx timeout [ 191.150592][ T5871] Bluetooth: hci3: command 0x0406 tx timeout [ 191.155800][ T5881] Bluetooth: hci4: command 0x0406 tx timeout [ 191.319610][ T8009] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 191.328803][ T8009] CPU: 0 UID: 0 PID: 8009 Comm: syz.4.584 Not tainted syzkaller #0 PREEMPT(full) [ 191.328825][ T8009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.328835][ T8009] Call Trace: [ 191.328842][ T8009] [ 191.328850][ T8009] dump_stack_lvl+0x189/0x250 [ 191.328879][ T8009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.328898][ T8009] ? __pfx__printk+0x10/0x10 [ 191.328924][ T8009] ? kernfs_path_from_node+0x2f/0x290 [ 191.328944][ T8009] ? kernfs_path_from_node+0x250/0x290 [ 191.328964][ T8009] ? kernfs_path_from_node+0x2f/0x290 [ 191.328989][ T8009] sysfs_warn_dup+0x8e/0xa0 [ 191.329011][ T8009] sysfs_do_create_link_sd+0xc0/0x110 [ 191.329034][ T8009] device_add_class_symlinks+0x1cf/0x240 [ 191.329061][ T8009] device_add+0x475/0xb50 [ 191.329088][ T8009] wiphy_register+0x1ba6/0x28d0 [ 191.329127][ T8009] ? __pfx_wiphy_register+0x10/0x10 [ 191.329147][ T8009] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 191.329178][ T8009] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 191.329206][ T8009] ieee80211_register_hw+0x3484/0x4100 [ 191.329238][ T8009] ? ieee80211_register_hw+0x1451/0x4100 [ 191.329266][ T8009] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 191.329287][ T8009] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 191.329316][ T8009] ? __hrtimer_setup+0x187/0x210 [ 191.329332][ T8009] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 191.329356][ T8009] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 191.329406][ T8009] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 191.329423][ T8009] ? trace_kmalloc+0x1f/0xd0 [ 191.329437][ T8009] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 191.329453][ T8009] ? kstrndup+0xbf/0x160 [ 191.329484][ T8009] hwsim_new_radio_nl+0xea4/0x1b10 [ 191.329506][ T8009] ? __pfx___nla_validate_parse+0x10/0x10 [ 191.329543][ T8009] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 191.329576][ T8009] ? __nla_parse+0x40/0x60 [ 191.329600][ T8009] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 191.329627][ T8009] genl_family_rcv_msg_doit+0x215/0x300 [ 191.329662][ T8009] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 191.329693][ T8009] ? bpf_lsm_capable+0x9/0x20 [ 191.329708][ T8009] ? security_capable+0x7e/0x2e0 [ 191.329733][ T8009] genl_rcv_msg+0x60e/0x790 [ 191.329757][ T8009] ? __pfx_genl_rcv_msg+0x10/0x10 [ 191.329772][ T8009] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 191.329792][ T8009] ? __asan_memcpy+0x40/0x70 [ 191.329813][ T8009] ? __pfx_ref_tracker_free+0x10/0x10 [ 191.329839][ T8009] netlink_rcv_skb+0x208/0x470 [ 191.329857][ T8009] ? __lock_acquire+0xab9/0xd20 [ 191.329881][ T8009] ? __pfx_genl_rcv_msg+0x10/0x10 [ 191.329898][ T8009] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 191.329935][ T8009] ? down_read+0x1ad/0x2e0 [ 191.329960][ T8009] genl_rcv+0x28/0x40 [ 191.329974][ T8009] netlink_unicast+0x82f/0x9e0 [ 191.330003][ T8009] ? __pfx_netlink_unicast+0x10/0x10 [ 191.330024][ T8009] ? netlink_sendmsg+0x642/0xb30 [ 191.330043][ T8009] ? skb_put+0x11b/0x210 [ 191.330069][ T8009] netlink_sendmsg+0x805/0xb30 [ 191.330100][ T8009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.330123][ T8009] ? aa_sock_msg_perm+0xf1/0x1d0 [ 191.330146][ T8009] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 191.330167][ T8009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.330189][ T8009] __sock_sendmsg+0x219/0x270 [ 191.330212][ T8009] ____sys_sendmsg+0x505/0x830 [ 191.330242][ T8009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.330277][ T8009] ? import_iovec+0x74/0xa0 [ 191.330306][ T8009] ___sys_sendmsg+0x21f/0x2a0 [ 191.330332][ T8009] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.330396][ T8009] ? __fget_files+0x2a/0x420 [ 191.330411][ T8009] ? __fget_files+0x3a0/0x420 [ 191.330440][ T8009] __x64_sys_sendmsg+0x19b/0x260 [ 191.330465][ T8009] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.330500][ T8009] ? rcu_is_watching+0x15/0xb0 [ 191.330522][ T8009] ? do_syscall_64+0xbe/0x3b0 [ 191.330546][ T8009] do_syscall_64+0xfa/0x3b0 [ 191.330566][ T8009] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.330587][ T8009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.330603][ T8009] ? clear_bhb_loop+0x60/0xb0 [ 191.330624][ T8009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.330650][ T8009] RIP: 0033:0x7fb966b8eec9 [ 191.330666][ T8009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.330681][ T8009] RSP: 002b:00007fb967a61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.330700][ T8009] RAX: ffffffffffffffda RBX: 00007fb966de6360 RCX: 00007fb966b8eec9 [ 191.330713][ T8009] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000004 [ 191.330724][ T8009] RBP: 00007fb966c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 191.330734][ T8009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.330744][ T8009] R13: 00007fb966de63f8 R14: 00007fb966de6360 R15: 00007fff36044938 [ 191.330775][ T8009] [ 192.167814][ T8025] netlink: 'syz.0.591': attribute type 39 has an invalid length. [ 192.766261][ T8029] tap0: tun_chr_ioctl cmd 1074025677 [ 192.771949][ T8029] tap0: linktype set to 776 [ 192.907366][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'. [ 192.951813][ T8040] tap0: tun_chr_ioctl cmd 1074025677 [ 192.985869][ T8040] tap0: linktype set to 776 [ 193.010643][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 193.265517][ T8046] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.596'. [ 193.282793][ T8046] netlink: zone id is out of range [ 193.292217][ T8046] netlink: zone id is out of range [ 193.355232][ T8046] netlink: get zone limit has 8 unknown bytes [ 193.582063][ T8060] netlink: 16 bytes leftover after parsing attributes in process `syz.4.599'. [ 196.113802][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.120121][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.193415][ T8070] netlink: 'syz.1.603': attribute type 39 has an invalid length. [ 196.418088][ T8083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.607'. [ 196.569137][ T8080] tap0: tun_chr_ioctl cmd 1074025677 [ 196.580207][ T8080] tap0: linktype set to 776 [ 196.600992][ T8083] tap0: tun_chr_ioctl cmd 1074025677 [ 196.606843][ T8083] tap0: linktype set to 776 [ 196.621018][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'. [ 197.479313][ T8110] tmpfs: Bad value for 'mode' [ 197.489256][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.615'. [ 197.497287][ T8114] netlink: 'syz.1.617': attribute type 10 has an invalid length. [ 197.579606][ T8114] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 197.582967][ T8110] netlink: 132 bytes leftover after parsing attributes in process `syz.3.615'. [ 197.620046][ T8114] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.617'. [ 197.643500][ T8114] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.617'. [ 197.796012][ T8121] netlink: 'syz.2.618': attribute type 39 has an invalid length. [ 197.920495][ T8123] netlink: 60 bytes leftover after parsing attributes in process `syz.2.621'. [ 197.930674][ T8123] unsupported nlmsg_type 40 [ 198.169505][ T8132] tap0: tun_chr_ioctl cmd 1074025677 [ 198.220614][ T8132] tap0: linktype set to 776 [ 198.546656][ T8143] netlink: 196 bytes leftover after parsing attributes in process `syz.2.626'. [ 199.082316][ T8156] netlink: 'syz.3.631': attribute type 39 has an invalid length. [ 199.204999][ T8159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.632'. [ 200.364546][ T8181] netlink: 'syz.1.638': attribute type 10 has an invalid length. [ 200.385862][ T8181] netlink: 40 bytes leftover after parsing attributes in process `syz.1.638'. [ 200.404616][ T8181] ipvlan1: entered promiscuous mode [ 200.416285][ T8181] ipvlan1: entered allmulticast mode [ 200.428323][ T8181] veth0_vlan: entered allmulticast mode [ 200.514945][ T8181] bridge0: port 4(ipvlan1) entered blocking state [ 200.535990][ T8181] bridge0: port 4(ipvlan1) entered disabled state [ 200.565544][ T8181] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 200.630298][ T8185] tap0: tun_chr_ioctl cmd 1074025677 [ 200.638622][ T8185] tap0: linktype set to 776 [ 201.154302][ T8201] netlink: 'syz.1.643': attribute type 39 has an invalid length. [ 201.986434][ T8220] netlink: 'syz.0.650': attribute type 22 has an invalid length. [ 202.026896][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'. [ 202.601105][ T8232] tap0: tun_chr_ioctl cmd 1074025677 [ 202.607169][ T8232] tap0: linktype set to 776 [ 203.488270][ T8254] netlink: 'syz.3.659': attribute type 39 has an invalid length. [ 204.865737][ T8277] tap0: tun_chr_ioctl cmd 1074025677 [ 204.926816][ T8277] tap0: linktype set to 776 [ 204.980021][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'. [ 205.289032][ T8285] tap0: tun_chr_ioctl cmd 1074025677 [ 205.294659][ T8285] tap0: linktype set to 776 [ 205.303898][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'. [ 205.818698][ T8301] netlink: 'syz.0.675': attribute type 10 has an invalid length. [ 205.931171][ T8301] team0: Device ipvlan1 failed to register rx_handler [ 205.938647][ T8305] netlink: 'syz.2.676': attribute type 39 has an invalid length. [ 206.540941][ T8320] netlink: 'syz.1.683': attribute type 39 has an invalid length. [ 206.659997][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.682'. [ 206.669053][ T8318] netlink: 'syz.3.682': attribute type 1 has an invalid length. [ 206.683548][ T8318] netlink: 'syz.3.682': attribute type 1 has an invalid length. [ 206.691336][ T8318] netlink: 'syz.3.682': attribute type 2 has an invalid length. [ 206.720101][ T8318] netlink: 68 bytes leftover after parsing attributes in process `syz.3.682'. [ 206.933806][ T8328] tap0: tun_chr_ioctl cmd 1074025677 [ 206.939942][ T8328] tap0: linktype set to 776 [ 207.834550][ T8332] netlink: 48 bytes leftover after parsing attributes in process `syz.3.686'. [ 208.399541][ T8342] netlink: 'syz.1.690': attribute type 39 has an invalid length. [ 208.771219][ T8355] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 208.816193][ T8355] CPU: 0 UID: 0 PID: 8355 Comm: syz.4.689 Not tainted syzkaller #0 PREEMPT(full) [ 208.816216][ T8355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 208.816227][ T8355] Call Trace: [ 208.816234][ T8355] [ 208.816242][ T8355] dump_stack_lvl+0x189/0x250 [ 208.816272][ T8355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.816293][ T8355] ? __pfx__printk+0x10/0x10 [ 208.816323][ T8355] ? kernfs_path_from_node+0x2f/0x290 [ 208.816351][ T8355] ? kernfs_path_from_node+0x250/0x290 [ 208.816371][ T8355] ? kernfs_path_from_node+0x2f/0x290 [ 208.816397][ T8355] sysfs_warn_dup+0x8e/0xa0 [ 208.816418][ T8355] sysfs_do_create_link_sd+0xc0/0x110 [ 208.816443][ T8355] device_add_class_symlinks+0x1cf/0x240 [ 208.816471][ T8355] device_add+0x475/0xb50 [ 208.816500][ T8355] wiphy_register+0x1ba6/0x28d0 [ 208.816539][ T8355] ? __pfx_wiphy_register+0x10/0x10 [ 208.816568][ T8355] ? ieee80211_register_hw+0x3127/0x4100 [ 208.816594][ T8355] ieee80211_register_hw+0x3484/0x4100 [ 208.816626][ T8355] ? ieee80211_register_hw+0x1451/0x4100 [ 208.816654][ T8355] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 208.816675][ T8355] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 208.816703][ T8355] ? __hrtimer_setup+0x187/0x210 [ 208.816720][ T8355] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 208.816744][ T8355] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 208.816797][ T8355] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 208.816813][ T8355] ? trace_kmalloc+0x1f/0xd0 [ 208.816827][ T8355] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 208.816844][ T8355] ? kstrndup+0xbf/0x160 [ 208.816876][ T8355] hwsim_new_radio_nl+0xea4/0x1b10 [ 208.816898][ T8355] ? __pfx___nla_validate_parse+0x10/0x10 [ 208.816935][ T8355] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 208.816955][ T8355] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 208.816977][ T8355] ? __nla_parse+0x24/0x60 [ 208.817004][ T8355] ? __nla_parse+0x40/0x60 [ 208.817029][ T8355] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 208.817056][ T8355] genl_family_rcv_msg_doit+0x215/0x300 [ 208.817081][ T8355] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 208.817113][ T8355] ? bpf_lsm_capable+0x9/0x20 [ 208.817128][ T8355] ? security_capable+0x7e/0x2e0 [ 208.817155][ T8355] genl_rcv_msg+0x60e/0x790 [ 208.817179][ T8355] ? __pfx_genl_rcv_msg+0x10/0x10 [ 208.817195][ T8355] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 208.817215][ T8355] ? __asan_memcpy+0x40/0x70 [ 208.817237][ T8355] ? __pfx_ref_tracker_free+0x10/0x10 [ 208.817265][ T8355] netlink_rcv_skb+0x208/0x470 [ 208.817284][ T8355] ? __lock_acquire+0xab9/0xd20 [ 208.817308][ T8355] ? __pfx_genl_rcv_msg+0x10/0x10 [ 208.817326][ T8355] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 208.817374][ T8355] ? down_read+0x1ad/0x2e0 [ 208.817400][ T8355] genl_rcv+0x28/0x40 [ 208.817414][ T8355] netlink_unicast+0x82f/0x9e0 [ 208.817443][ T8355] ? __pfx_netlink_unicast+0x10/0x10 [ 208.817465][ T8355] ? netlink_sendmsg+0x642/0xb30 [ 208.817484][ T8355] ? skb_put+0x11b/0x210 [ 208.817512][ T8355] netlink_sendmsg+0x805/0xb30 [ 208.817544][ T8355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.817568][ T8355] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.817588][ T8355] ? aa_sock_msg_perm+0xf1/0x1d0 [ 208.817611][ T8355] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 208.817631][ T8355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.817654][ T8355] __sock_sendmsg+0x219/0x270 [ 208.817677][ T8355] ____sys_sendmsg+0x505/0x830 [ 208.817708][ T8355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.817743][ T8355] ? import_iovec+0x74/0xa0 [ 208.817773][ T8355] ___sys_sendmsg+0x21f/0x2a0 [ 208.817799][ T8355] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.817865][ T8355] ? __fget_files+0x2a/0x420 [ 208.817883][ T8355] ? __fget_files+0x3a0/0x420 [ 208.817913][ T8355] __x64_sys_sendmsg+0x19b/0x260 [ 208.817936][ T8355] ? clockevents_program_event+0x24d/0x360 [ 208.817961][ T8355] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.818006][ T8355] ? do_syscall_64+0xbe/0x3b0 [ 208.818032][ T8355] do_syscall_64+0xfa/0x3b0 [ 208.818054][ T8355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.818070][ T8355] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 208.818087][ T8355] ? clear_bhb_loop+0x60/0xb0 [ 208.818108][ T8355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.818124][ T8355] RIP: 0033:0x7fb966b8eec9 [ 208.818139][ T8355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.818153][ T8355] RSP: 002b:00007fb967aa3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.818171][ T8355] RAX: ffffffffffffffda RBX: 00007fb966de6180 RCX: 00007fb966b8eec9 [ 208.818183][ T8355] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000005 [ 208.818194][ T8355] RBP: 00007fb966c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 208.818205][ T8355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.818215][ T8355] R13: 00007fb966de6218 R14: 00007fb966de6180 R15: 00007fff36044938 [ 208.818246][ T8355] [ 209.435797][ T8354] netlink: 60 bytes leftover after parsing attributes in process `syz.1.693'. [ 210.283799][ T8375] tap0: tun_chr_ioctl cmd 1074025677 [ 210.349514][ T8375] tap0: linktype set to 776 [ 210.381640][ T8384] netlink: 'syz.0.702': attribute type 10 has an invalid length. [ 210.548715][ T8381] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.702'. [ 210.786456][ T8384] team0 (unregistering): Port device team_slave_0 removed [ 210.796526][ T8384] team0 (unregistering): Port device 76žÿ removed [ 211.606617][ T8410] openvswitch: netlink: Flow key attribute not present in set flow. [ 212.228187][ T8428] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.716'. [ 212.308143][ T8430] tap0: tun_chr_ioctl cmd 1074025677 [ 212.318938][ T8430] tap0: linktype set to 776 [ 212.687321][ T8437] netlink: 'syz.1.728': attribute type 39 has an invalid length. [ 213.026764][ T8450] netlink: 'syz.3.721': attribute type 10 has an invalid length. [ 213.054413][ T8450] netlink: 'syz.3.721': attribute type 16 has an invalid length. [ 213.073525][ T8450] netlink: 156 bytes leftover after parsing attributes in process `syz.3.721'. [ 213.227248][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.725'. [ 213.306015][ T8464] netlink: 'syz.3.725': attribute type 10 has an invalid length. [ 213.369986][ T8465] openvswitch: netlink: Message has 4 unknown bytes. [ 213.662124][ T8476] tap0: tun_chr_ioctl cmd 1074025677 [ 213.667603][ T8476] tap0: linktype set to 776 [ 214.134424][ T8489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.852555][ T8508] netlink: 'syz.4.741': attribute type 2 has an invalid length. [ 214.870683][ T8508] netlink: 137592 bytes leftover after parsing attributes in process `syz.4.741'. [ 215.577109][ T8528] tap0: tun_chr_ioctl cmd 1074025677 [ 215.603889][ T8528] tap0: linktype set to 776 [ 216.390901][ T8553] rdma_rxe: rxe_newlink: failed to add lo [ 216.523934][ T8558] netlink: 'syz.4.754': attribute type 11 has an invalid length. [ 216.582705][ T8558] netlink: 168 bytes leftover after parsing attributes in process `syz.4.754'. [ 217.434800][ T8571] netlink: 'syz.1.757': attribute type 25 has an invalid length. [ 217.600858][ T8571] netlink: 'syz.1.757': attribute type 28 has an invalid length. [ 219.159205][ T8584] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.761'. [ 219.401970][ T8588] netlink: 'syz.1.762': attribute type 39 has an invalid length. [ 220.212018][ T8603] vxcan1: entered allmulticast mode [ 220.281553][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 220.384326][ T8602] netlink: 32 bytes leftover after parsing attributes in process `syz.2.768'. [ 222.865017][ T8628] netlink: 948 bytes leftover after parsing attributes in process `syz.0.775'. [ 222.958460][ T8639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.499762][ T8655] bridge_slave_1: left allmulticast mode [ 223.505890][ T8655] bridge_slave_1: left promiscuous mode [ 223.512520][ T8655] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.688146][ T8662] netlink: 'syz.1.786': attribute type 39 has an invalid length. [ 223.749880][ T8655] bridge_slave_0: left allmulticast mode [ 223.765709][ T8655] bridge_slave_0: left promiscuous mode [ 223.795692][ T8655] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.115283][ T8673] netlink: 'syz.3.788': attribute type 10 has an invalid length. [ 224.127417][ T8673] netlink: 'syz.3.788': attribute type 16 has an invalid length. [ 224.137052][ T8673] netlink: 156 bytes leftover after parsing attributes in process `syz.3.788'. [ 224.547732][ T8680] netlink: 'syz.0.791': attribute type 39 has an invalid length. [ 224.810494][ T8697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.798'. [ 225.198341][ T8705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.800'. [ 225.400700][ T8710] netlink: 132 bytes leftover after parsing attributes in process `syz.4.800'. [ 225.792943][ T8716] netlink: 'syz.2.803': attribute type 39 has an invalid length. [ 225.923360][ T8722] netlink: 'syz.1.805': attribute type 10 has an invalid length. [ 226.019010][ T8724] netlink: 'syz.3.806': attribute type 10 has an invalid length. [ 226.039374][ T8724] netlink: 40 bytes leftover after parsing attributes in process `syz.3.806'. [ 226.094757][ T8724] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 226.120996][ T8724] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.203815][ T8731] netlink: 'syz.2.807': attribute type 39 has an invalid length. [ 226.228957][ T8724] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 227.138920][ T8753] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.815'. [ 227.418667][ T8755] netlink: 'syz.1.817': attribute type 39 has an invalid length. [ 227.677339][ T8764] netlink: 'syz.3.818': attribute type 39 has an invalid length. [ 228.080334][ T8767] siw: device registration error -23 [ 228.424364][ T8776] lo: entered allmulticast mode [ 228.989752][ T8799] netlink: 'syz.3.829': attribute type 39 has an invalid length. [ 229.495172][ T8805] netlink: 'syz.4.832': attribute type 39 has an invalid length. [ 229.816223][ T8818] netlink: 132 bytes leftover after parsing attributes in process `syz.1.836'. [ 230.637677][ T8834] netlink: 'syz.1.841': attribute type 39 has an invalid length. [ 231.306353][ T8845] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.844'. [ 231.404643][ T8851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.845'. [ 231.427815][ T8851] netlink: 96 bytes leftover after parsing attributes in process `syz.0.845'. [ 231.848988][ T8865] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.850'. [ 232.069652][ T8864] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.850'. [ 232.989048][ T8880] netlink: 'syz.4.854': attribute type 39 has an invalid length. [ 233.330337][ T8888] netlink: 'syz.3.855': attribute type 39 has an invalid length. [ 234.374276][ T8900] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.861'. [ 234.555368][ T8911] netlink: 'syz.1.873': attribute type 39 has an invalid length. [ 234.624167][ T8909] netlink: 'syz.4.863': attribute type 10 has an invalid length. [ 234.661863][ T8912] netlink: 188 bytes leftover after parsing attributes in process `syz.3.864'. [ 234.734569][ T8913] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.863'. [ 234.755102][ T8913] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.863'. [ 234.795473][ T8909] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 235.607864][ T8933] netlink: 'syz.4.868': attribute type 39 has an invalid length. [ 235.676869][ T8935] netlink: 'syz.2.871': attribute type 10 has an invalid length. [ 235.727078][ T8935] netlink: 40 bytes leftover after parsing attributes in process `syz.2.871'. [ 236.015714][ T8946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.875'. [ 236.028104][ T8946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.875'. [ 236.048044][ T8951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.872'. [ 236.307257][ T8959] netlink: 'syz.3.877': attribute type 39 has an invalid length. [ 237.540980][ T8986] netlink: 'syz.1.896': attribute type 10 has an invalid length. [ 237.550315][ T8986] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.560871][ T8986] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.677265][ T8986] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.679909][ T8980] netlink: 'syz.4.885': attribute type 39 has an invalid length. [ 237.684931][ T8986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.686035][ T8986] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.708014][ T8986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.827245][ T8986] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 237.993160][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.889'. [ 238.260615][ T9010] netlink: 'syz.4.890': attribute type 10 has an invalid length. [ 238.535145][ T9009] wg2: entered promiscuous mode [ 238.542093][ T9009] wg2: entered allmulticast mode [ 238.556531][ T9010] veth1_macvtap: left promiscuous mode [ 238.787093][ T9020] netlink: 'syz.0.892': attribute type 39 has an invalid length. [ 239.061480][ T9026] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.898'. [ 239.082363][ T9030] sctp: [Deprecated]: syz.1.899 (pid 9030) Use of int in maxseg socket option. [ 239.082363][ T9030] Use struct sctp_assoc_value instead [ 239.640350][ T9043] netlink: 'syz.0.901': attribute type 39 has an invalid length. [ 240.485279][ T9062] netlink: 32 bytes leftover after parsing attributes in process `syz.4.912'. [ 240.834763][ T9076] netlink: 'syz.2.917': attribute type 39 has an invalid length. [ 241.270537][ T9087] netlink: 'syz.2.921': attribute type 10 has an invalid length. [ 241.340088][ T9092] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.921'. [ 241.374839][ T9092] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.921'. [ 241.457875][ T9087] dummy0: entered promiscuous mode [ 241.470199][ T9087] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 241.707923][ T9100] syz.3.925 (9100) used greatest stack depth: 17864 bytes left [ 242.172098][ T9123] netlink: 'syz.4.930': attribute type 39 has an invalid length. [ 242.239453][ T9124] netlink: 'syz.1.934': attribute type 11 has an invalid length. [ 242.318337][ T9124] netlink: 168 bytes leftover after parsing attributes in process `syz.1.934'. [ 242.362941][ T9121] netlink: 'syz.3.932': attribute type 39 has an invalid length. [ 243.102741][ T9151] netlink: 16 bytes leftover after parsing attributes in process `syz.0.946'. [ 243.814092][ T9171] netlink: 'syz.2.950': attribute type 21 has an invalid length. [ 244.613499][ T9171] netlink: 156 bytes leftover after parsing attributes in process `syz.2.950'. [ 244.640721][ T9170] debugfs: '!' already exists in 'ieee80211' [ 245.510667][ T9207] netlink: 'syz.2.964': attribute type 6 has an invalid length. [ 245.536826][ T9207] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.964'. [ 245.716716][ T9214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 245.836206][ T9219] netlink: 'syz.1.967': attribute type 21 has an invalid length. [ 245.869263][ T9219] netlink: 156 bytes leftover after parsing attributes in process `syz.1.967'. [ 246.252879][ T9221] debugfs: '!' already exists in 'ieee80211' [ 246.925482][ T9249] netlink: 32 bytes leftover after parsing attributes in process `syz.0.977'. [ 246.950798][ T9242] netlink: 20 bytes leftover after parsing attributes in process `syz.3.976'. [ 247.301471][ T9256] netlink: 'syz.3.980': attribute type 39 has an invalid length. [ 247.376558][ T9262] netlink: 'syz.0.981': attribute type 39 has an invalid length. [ 247.793766][ T9271] netlink: 'syz.1.984': attribute type 39 has an invalid length. [ 248.434512][ T9283] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 248.533340][ T9283] CPU: 0 UID: 0 PID: 9283 Comm: syz.0.986 Not tainted syzkaller #0 PREEMPT(full) [ 248.533366][ T9283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 248.533387][ T9283] Call Trace: [ 248.533395][ T9283] [ 248.533404][ T9283] dump_stack_lvl+0x189/0x250 [ 248.533431][ T9283] ? irqentry_exit+0x74/0x90 [ 248.533456][ T9283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.533497][ T9283] sysfs_warn_dup+0x8e/0xa0 [ 248.533520][ T9283] sysfs_do_create_link_sd+0xc0/0x110 [ 248.533553][ T9283] device_add_class_symlinks+0x1cf/0x240 [ 248.533584][ T9283] device_add+0x475/0xb50 [ 248.533613][ T9283] wiphy_register+0x1ba6/0x28d0 [ 248.533661][ T9283] ? __pfx_wiphy_register+0x10/0x10 [ 248.533682][ T9283] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 248.533720][ T9283] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 248.533750][ T9283] ieee80211_register_hw+0x3484/0x4100 [ 248.533783][ T9283] ? ieee80211_register_hw+0x1451/0x4100 [ 248.533811][ T9283] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 248.533832][ T9283] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 248.533861][ T9283] ? __hrtimer_setup+0x187/0x210 [ 248.533877][ T9283] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 248.533901][ T9283] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 248.533953][ T9283] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 248.533970][ T9283] ? trace_kmalloc+0x1f/0xd0 [ 248.533984][ T9283] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 248.534001][ T9283] ? kstrndup+0xbf/0x160 [ 248.534034][ T9283] hwsim_new_radio_nl+0xea4/0x1b10 [ 248.534056][ T9283] ? __pfx___nla_validate_parse+0x10/0x10 [ 248.534094][ T9283] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 248.534127][ T9283] ? __nla_parse+0x40/0x60 [ 248.534152][ T9283] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 248.534180][ T9283] genl_family_rcv_msg_doit+0x215/0x300 [ 248.534205][ T9283] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 248.534237][ T9283] ? bpf_lsm_capable+0x9/0x20 [ 248.534252][ T9283] ? security_capable+0x7e/0x2e0 [ 248.534279][ T9283] genl_rcv_msg+0x60e/0x790 [ 248.534303][ T9283] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.534319][ T9283] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 248.534338][ T9283] ? irqentry_enter+0x3d/0x60 [ 248.534359][ T9283] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 248.534392][ T9283] netlink_rcv_skb+0x208/0x470 [ 248.534411][ T9283] ? __lock_acquire+0xab9/0xd20 [ 248.534436][ T9283] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.534454][ T9283] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 248.534498][ T9283] ? down_read+0x1ad/0x2e0 [ 248.534523][ T9283] genl_rcv+0x28/0x40 [ 248.534544][ T9283] netlink_unicast+0x82f/0x9e0 [ 248.534574][ T9283] ? __pfx_netlink_unicast+0x10/0x10 [ 248.534596][ T9283] ? netlink_sendmsg+0x642/0xb30 [ 248.534616][ T9283] ? skb_put+0x11b/0x210 [ 248.534643][ T9283] netlink_sendmsg+0x805/0xb30 [ 248.534677][ T9283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.534704][ T9283] ? aa_sock_msg_perm+0xf1/0x1d0 [ 248.534727][ T9283] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.534747][ T9283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.534769][ T9283] __sock_sendmsg+0x219/0x270 [ 248.534793][ T9283] ____sys_sendmsg+0x505/0x830 [ 248.534824][ T9283] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.534859][ T9283] ? import_iovec+0x74/0xa0 [ 248.534889][ T9283] ___sys_sendmsg+0x21f/0x2a0 [ 248.534916][ T9283] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.534983][ T9283] ? __fget_files+0x2a/0x420 [ 248.535000][ T9283] ? __fget_files+0x3a0/0x420 [ 248.535031][ T9283] __x64_sys_sendmsg+0x19b/0x260 [ 248.535058][ T9283] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 248.535111][ T9283] do_syscall_64+0xfa/0x3b0 [ 248.535134][ T9283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.535150][ T9283] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.535166][ T9283] ? clear_bhb_loop+0x60/0xb0 [ 248.535188][ T9283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.535204][ T9283] RIP: 0033:0x7f1e64b8eec9 [ 248.535220][ T9283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.535235][ T9283] RSP: 002b:00007f1e65a92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.535253][ T9283] RAX: ffffffffffffffda RBX: 00007f1e64de6180 RCX: 00007f1e64b8eec9 [ 248.535266][ T9283] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000005 [ 248.535276][ T9283] RBP: 00007f1e64c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 248.535286][ T9283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.535296][ T9283] R13: 00007f1e64de6218 R14: 00007f1e64de6180 R15: 00007ffdffed6ab8 [ 248.535327][ T9283] [ 249.495919][ T9299] netlink: 32 bytes leftover after parsing attributes in process `syz.4.991'. [ 250.394001][ T9308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.252848][ T9333] netlink: 'syz.0.996': attribute type 39 has an invalid length. [ 253.151711][ T9345] netlink: 'syz.2.1005': attribute type 39 has an invalid length. [ 253.549157][ T9353] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1008'. [ 253.761607][ T9361] netlink: 'syz.4.1009': attribute type 21 has an invalid length. [ 253.785474][ T9361] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1009'. [ 254.197088][ T9372] netlink: 'syz.0.1014': attribute type 39 has an invalid length. [ 255.325111][ T9402] netlink: 'syz.4.1024': attribute type 11 has an invalid length. [ 255.349617][ T9402] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1024'. [ 255.626903][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.633459][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.678772][ T9418] netlink: 'syz.3.1031': attribute type 11 has an invalid length. [ 255.736210][ T9418] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1031'. [ 255.815115][ T9423] netlink: 'syz.0.1028': attribute type 39 has an invalid length. [ 255.856546][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1034'. [ 256.156656][ T9426] tap0: tun_chr_ioctl cmd 1074025677 [ 256.168352][ T9426] tap0: linktype set to 776 [ 256.179304][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1034'. [ 256.280044][ T9436] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1037'. [ 256.672559][ T9448] netlink: 'syz.1.1042': attribute type 11 has an invalid length. [ 256.680540][ T9448] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1042'. [ 256.855212][ T9453] netlink: 'syz.0.1043': attribute type 21 has an invalid length. [ 257.033528][ T9453] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1043'. [ 257.550795][ T9475] netlink: 'syz.3.1052': attribute type 21 has an invalid length. [ 257.667645][ T9475] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1052'. [ 258.600461][ T9509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1065'. [ 259.016066][ T9526] netlink: 'syz.4.1072': attribute type 11 has an invalid length. [ 259.028738][ T9526] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1072'. [ 259.319071][ T9534] netlink: 'syz.2.1074': attribute type 39 has an invalid length. [ 259.753487][ T9551] netlink: 'syz.3.1082': attribute type 21 has an invalid length. [ 259.761377][ T9552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.775034][ T9551] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1082'. [ 260.259038][ T9574] netlink: 'syz.4.1092': attribute type 21 has an invalid length. [ 260.279479][ T9573] netlink: 'syz.3.1093': attribute type 39 has an invalid length. [ 260.289452][ T9574] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1092'. [ 260.896186][ T9595] netlink: 'syz.0.1101': attribute type 35 has an invalid length. [ 261.420179][ T9603] netlink: 'syz.3.1106': attribute type 39 has an invalid length. [ 261.449460][ T9612] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1109'. [ 261.907547][ T9631] netlink: 'syz.2.1118': attribute type 11 has an invalid length. [ 261.918446][ T9631] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1118'. [ 262.134674][ T9638] wg2: entered promiscuous mode [ 262.141513][ T9638] wg2: entered allmulticast mode [ 262.192727][ T9638] netlink: 'syz.2.1121': attribute type 10 has an invalid length. [ 262.249876][ T9638] veth1_macvtap: left promiscuous mode [ 262.368871][ T9659] tap0: tun_chr_ioctl cmd 1074025677 [ 262.463454][ T9659] tap0: linktype set to 776 [ 262.681596][ T9667] netlink: 'syz.0.1131': attribute type 11 has an invalid length. [ 262.711714][ T9667] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1131'. [ 263.039712][ T9683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.039533][ T9710] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1149'. [ 264.357576][ T9725] netlink: 'syz.0.1152': attribute type 11 has an invalid length. [ 264.365766][ T9725] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1152'. [ 265.326145][ T9743] netlink: 'syz.3.1160': attribute type 39 has an invalid length. [ 265.401141][ T9756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1167'. [ 265.928223][ T9775] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1174'. [ 266.454768][ T9790] netlink: 'syz.1.1180': attribute type 10 has an invalid length. [ 266.752327][ T9790] veth1_macvtap: left promiscuous mode [ 267.771588][ T9817] netlink: 'syz.0.1187': attribute type 21 has an invalid length. [ 267.813589][ T9817] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1187'. [ 267.900505][ T9826] netlink: 'syz.2.1189': attribute type 3 has an invalid length. [ 267.969088][ T9829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1191'. [ 268.057695][ T9832] netlink: 'syz.3.1192': attribute type 39 has an invalid length. [ 268.783940][ T9847] netlink: 'syz.4.1197': attribute type 39 has an invalid length. [ 269.272977][ T9849] netlink: 'syz.1.1198': attribute type 11 has an invalid length. [ 269.311944][ T9849] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1198'. [ 270.049941][ T9875] netlink: 'syz.4.1210': attribute type 10 has an invalid length. [ 270.074976][ T9875] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1210'. [ 270.096691][ T9875] dummy0: entered promiscuous mode [ 270.128216][ T9875] bond0: (slave dummy0): Releasing backup interface [ 270.148337][ T9875] bridge0: port 3(dummy0) entered blocking state [ 270.159421][ T9875] bridge0: port 3(dummy0) entered disabled state [ 270.168698][ T9875] dummy0: entered allmulticast mode [ 270.390619][ T9886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1214'. [ 270.599886][ T9890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1215'. [ 270.626834][ T9890] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1215'. [ 270.932756][ T9896] netlink: 'syz.3.1218': attribute type 39 has an invalid length. [ 271.112104][ T9907] netlink: 'syz.0.1221': attribute type 39 has an invalid length. [ 272.430747][ T9944] netlink: 'syz.1.1238': attribute type 10 has an invalid length. [ 272.459694][ T9944] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1238'. [ 272.512286][ T9945] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1239'. [ 272.548570][ T9945] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1239'. [ 273.953764][ T9983] netlink: 'syz.0.1252': attribute type 39 has an invalid length. [ 274.894213][T10007] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1262'. [ 275.291162][T10016] netlink: 'syz.4.1265': attribute type 39 has an invalid length. [ 275.572842][T10023] netlink: 'syz.4.1268': attribute type 39 has an invalid length. [ 275.999002][T10046] netlink: 'syz.0.1277': attribute type 11 has an invalid length. [ 276.181149][T10046] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1277'. [ 276.208698][T10049] netlink: 'syz.2.1278': attribute type 39 has an invalid length. [ 276.830315][T10057] netlink: 'syz.2.1281': attribute type 11 has an invalid length. [ 276.872694][T10057] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1281'. [ 276.911940][T10059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1283'. [ 277.892276][T10101] netlink: 'syz.1.1299': attribute type 29 has an invalid length. [ 277.910236][T10101] netlink: 'syz.1.1299': attribute type 29 has an invalid length. [ 278.039780][T10105] netlink: 'syz.1.1301': attribute type 11 has an invalid length. [ 278.052062][T10105] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1301'. [ 278.128689][T10109] netlink: 'syz.3.1303': attribute type 1 has an invalid length. [ 278.286101][T10116] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1305'. [ 278.849854][T10141] openvswitch: netlink: IP tunnel TTL not specified. [ 281.069509][T10213] validate_nla: 1 callbacks suppressed [ 281.069527][T10213] netlink: 'syz.1.1342': attribute type 39 has an invalid length. [ 281.277116][T10217] wg2: left promiscuous mode [ 281.289089][T10217] wg2: left allmulticast mode [ 281.314218][T10224] netlink: 'syz.2.1345': attribute type 10 has an invalid length. [ 281.389846][T10221] wg2: entered promiscuous mode [ 281.397233][T10221] wg2: entered allmulticast mode [ 282.017783][T10245] netlink: 'syz.3.1355': attribute type 3 has an invalid length. [ 282.038685][T10245] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1355'. [ 282.514706][T10256] netlink: 'syz.2.1360': attribute type 11 has an invalid length. [ 282.547289][T10256] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1360'. [ 282.714733][T10263] wg2: entered promiscuous mode [ 282.753708][T10263] wg2: entered allmulticast mode [ 282.757304][T10268] netlink: 'syz.0.1362': attribute type 10 has an invalid length. [ 282.840145][T10268] veth1_macvtap: left promiscuous mode [ 283.079941][T10280] wg2: entered promiscuous mode [ 283.092815][T10280] wg2: entered allmulticast mode [ 283.108455][T10275] netlink: 'syz.3.1368': attribute type 10 has an invalid length. [ 283.396908][T10290] xt_l2tp: missing protocol rule (udp|l2tpip) [ 283.425055][T10286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1373'. [ 283.577485][T10294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1377'. [ 283.640477][T10294] tap0: tun_chr_ioctl cmd 1074025677 [ 283.654735][T10294] tap0: linktype set to 776 [ 283.666740][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1377'. [ 283.916658][T10309] netlink: 'syz.1.1381': attribute type 39 has an invalid length. [ 284.107274][T10315] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1387'. [ 284.129097][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1385'. [ 286.028667][T10363] tap0: tun_chr_ioctl cmd 1074025677 [ 286.044397][T10363] tap0: linktype set to 776 [ 286.079094][T10365] netlink: 'syz.4.1401': attribute type 39 has an invalid length. [ 286.219553][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1407'. [ 286.231788][T10377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.252313][T10409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1421'. [ 287.276210][T10409] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1421'. [ 287.301025][T10412] netlink: 'syz.1.1423': attribute type 39 has an invalid length. [ 288.603797][T10448] netlink: 'syz.2.1436': attribute type 39 has an invalid length. [ 289.532181][T10481] wg2: left promiscuous mode [ 289.544217][T10481] wg2: left allmulticast mode [ 289.610090][T10481] wg2: entered promiscuous mode [ 289.657172][T10484] netlink: 'syz.4.1451': attribute type 10 has an invalid length. [ 289.658067][T10481] wg2: entered allmulticast mode [ 289.818365][T10497] netlink: 'syz.3.1453': attribute type 39 has an invalid length. [ 289.848978][T10499] hsr0: entered promiscuous mode [ 289.859179][T10499] hsr0: entered allmulticast mode [ 289.865497][T10499] hsr_slave_0: entered allmulticast mode [ 289.871450][T10499] hsr_slave_1: entered allmulticast mode [ 289.914570][T10494] netlink: 'syz.1.1457': attribute type 10 has an invalid length. [ 289.949868][T10498] wg2: entered promiscuous mode [ 289.982905][T10498] wg2: entered allmulticast mode [ 290.993812][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1473'. [ 291.196348][T10541] netlink: 'syz.1.1475': attribute type 11 has an invalid length. [ 291.233473][T10541] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1475'. [ 291.382146][T10555] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1482'. [ 291.632438][T10565] netlink: 'syz.1.1487': attribute type 21 has an invalid length. [ 291.657876][T10565] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1487'. [ 291.885388][T10580] netlink: 'syz.1.1492': attribute type 1 has an invalid length. [ 291.895263][T10580] netlink: 35347 bytes leftover after parsing attributes in process `syz.1.1492'. [ 292.116292][T10587] netlink: 'syz.1.1493': attribute type 39 has an invalid length. [ 292.706215][T10602] netlink: 'syz.3.1500': attribute type 39 has an invalid length. [ 293.298597][T10622] C: renamed from team_slave_0 [ 293.328392][T10622] netlink: 'syz.0.1508': attribute type 4 has an invalid length. [ 293.344576][T10622] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 293.423549][T10627] netlink: 'syz.1.1511': attribute type 29 has an invalid length. [ 293.449926][T10627] netlink: 'syz.1.1511': attribute type 29 has an invalid length. [ 293.501885][T10629] netlink: 'syz.2.1510': attribute type 11 has an invalid length. [ 293.510713][T10629] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1510'. [ 293.921185][T10644] wg2: left promiscuous mode [ 293.952788][T10644] wg2: left allmulticast mode [ 294.009359][T10645] netlink: 'syz.0.1516': attribute type 39 has an invalid length. [ 294.018364][T10644] wg2: entered promiscuous mode [ 294.064038][T10644] wg2: entered allmulticast mode [ 294.637083][T10669] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1527'. [ 295.117405][T10685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1535'. [ 295.130254][T10687] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1534'. [ 295.147253][T10683] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1534'. [ 295.189321][T10687] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1534'. [ 295.486027][T10685] tap0: tun_chr_ioctl cmd 1074025677 [ 295.509226][T10685] tap0: linktype set to 776 [ 295.532146][T10685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1535'. [ 295.630472][T10700] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1539'. [ 296.394928][T10725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1548'. [ 296.488430][T10731] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1548'. [ 296.544391][T10729] validate_nla: 6 callbacks suppressed [ 296.552123][T10729] netlink: 'syz.3.1550': attribute type 39 has an invalid length. [ 297.075052][T10752] wg2: left promiscuous mode [ 297.098419][T10752] wg2: left allmulticast mode [ 297.176681][T10756] wg2: entered promiscuous mode [ 297.186325][T10756] wg2: entered allmulticast mode [ 297.201668][T10752] netlink: 'syz.2.1558': attribute type 10 has an invalid length. [ 297.832035][T10780] netlink: 'syz.1.1568': attribute type 1 has an invalid length. [ 298.922430][T10820] netlink: 'syz.1.1584': attribute type 29 has an invalid length. [ 298.957963][T10820] netlink: 'syz.1.1584': attribute type 29 has an invalid length. [ 298.980049][T10822] dummy0: mtu less than device minimum [ 299.012240][T10823] netlink: 'syz.1.1584': attribute type 29 has an invalid length. [ 299.034345][T10818] netlink: 'syz.2.1582': attribute type 39 has an invalid length. [ 300.090555][T10855] __nla_validate_parse: 5 callbacks suppressed [ 300.090572][T10855] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1595'. [ 300.231929][T10866] netlink: 'syz.2.1597': attribute type 39 has an invalid length. [ 300.615384][T10878] netlink: 'syz.2.1604': attribute type 11 has an invalid length. [ 300.629542][T10878] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1604'. [ 301.121562][T10903] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1613'. [ 301.151143][T10902] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1613'. [ 301.166335][T10902] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1613'. [ 301.189627][T10905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1614'. [ 301.302350][T10916] netlink: 'syz.0.1618': attribute type 29 has an invalid length. [ 301.549673][T10923] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1621'. [ 302.204781][T10944] validate_nla: 3 callbacks suppressed [ 302.204797][T10944] netlink: 'syz.0.1629': attribute type 39 has an invalid length. [ 302.443643][T10957] netlink: 'syz.2.1631': attribute type 39 has an invalid length. [ 302.478158][T10957] veth0_macvtap: left promiscuous mode [ 302.500695][T10960] netlink: 'syz.0.1633': attribute type 21 has an invalid length. [ 302.697736][T10967] netlink: 209332 bytes leftover after parsing attributes in process `syz.0.1636'. [ 302.699558][T10962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1634'. [ 302.707358][T10967] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 302.729103][T10962] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1634'. [ 302.741023][T10967] openvswitch: netlink: Key 0 has unexpected len 5 expected 0 [ 302.865886][T10974] openvswitch: netlink: Multiple metadata blocks provided [ 305.148627][T11040] __nla_validate_parse: 4 callbacks suppressed [ 305.148644][T11040] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1659'. [ 305.296512][T11044] netlink: 'syz.0.1661': attribute type 39 has an invalid length. [ 305.729208][T11055] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1666'. [ 306.264439][T11083] wg2: left promiscuous mode [ 306.266016][T11081] netlink: 'syz.1.1676': attribute type 21 has an invalid length. [ 306.271778][T11083] wg2: left allmulticast mode [ 306.346292][T11086] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1677'. [ 306.357536][T11081] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1676'. [ 306.381440][T11080] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1677'. [ 306.387709][T11083] netlink: 'syz.3.1678': attribute type 10 has an invalid length. [ 306.393610][T11084] wg2: entered promiscuous mode [ 306.409082][T11084] wg2: entered allmulticast mode [ 306.538653][T11089] netlink: 'syz.4.1679': attribute type 11 has an invalid length. [ 306.547983][T11089] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1679'. [ 307.780225][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'. [ 307.894116][T11129] wg2: left promiscuous mode [ 307.900102][T11129] wg2: left allmulticast mode [ 307.925016][T11129] wg2: entered promiscuous mode [ 307.931264][T11129] wg2: entered allmulticast mode [ 308.075838][T11137] wg2: left promiscuous mode [ 308.080839][T11137] wg2: left allmulticast mode [ 308.111800][T11137] wg2: entered promiscuous mode [ 308.118988][T11137] wg2: entered allmulticast mode [ 308.180101][T11140] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1699'. [ 308.193925][T11140] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1699'. [ 308.229694][T11137] netlink: 'syz.1.1698': attribute type 10 has an invalid length. [ 308.280451][T11145] netlink: 'syz.4.1700': attribute type 21 has an invalid length. [ 308.288826][T11145] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1700'. [ 309.518454][T11184] netlink: 'syz.2.1715': attribute type 4 has an invalid length. [ 309.842935][T11187] wg2: left promiscuous mode [ 309.892366][T11187] wg2: left allmulticast mode [ 310.124899][T11190] wg2: entered promiscuous mode [ 310.147369][T11190] wg2: entered allmulticast mode [ 311.068303][ T974] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.195211][ T974] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.381652][ T974] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.612405][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.622654][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.634387][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.660926][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.683278][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.924765][ T974] bridge0: port 3(batadv0) entered disabled state [ 312.005131][ T974] bridge_slave_1: left allmulticast mode [ 312.010923][ T974] bridge_slave_1: left promiscuous mode [ 312.030703][ T974] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.074940][ T974] bridge_slave_0: left allmulticast mode [ 312.080616][ T974] bridge_slave_0: left promiscuous mode [ 312.097943][ T974] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.223053][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.232015][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.240066][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.248422][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.256700][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.303897][ T5880] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.312287][ T5880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.324222][ T5880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.332301][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.340778][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.373970][ T5877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 312.384246][ T5877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 312.392521][ T5877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 312.401562][ T5877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 312.415227][ T5877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 312.567874][ T974] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 312.678046][ T974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.689715][ T974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.701683][ T974] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 312.711049][ T974] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 312.723672][ T974] bond0 (unregistering): Released all slaves [ 312.742043][T11213] lo speed is unknown, defaulting to 1000 [ 313.250136][T11222] lo speed is unknown, defaulting to 1000 [ 313.608847][T11213] chnl_net:caif_netlink_parms(): no params data found [ 313.774393][ T5880] Bluetooth: hci0: command tx timeout [ 314.005274][T11213] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.027333][T11213] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.037775][T11213] bridge_slave_0: entered allmulticast mode [ 314.048026][T11213] bridge_slave_0: entered promiscuous mode [ 314.110337][T11213] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.118602][T11213] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.126321][T11213] bridge_slave_1: entered allmulticast mode [ 314.133702][T11213] bridge_slave_1: entered promiscuous mode [ 314.147616][T11220] lo speed is unknown, defaulting to 1000 [ 314.208344][T11213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.231469][T11213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.333428][ T5880] Bluetooth: hci1: command tx timeout [ 314.401409][T11213] team0: Port device team_slave_0 added [ 314.413582][ T5880] Bluetooth: hci2: command tx timeout [ 314.421081][T11213] team0: Port device team_slave_1 added [ 314.473566][T11218] lo speed is unknown, defaulting to 1000 [ 314.515668][ T5877] Bluetooth: hci4: command tx timeout [ 314.683676][T11213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.690642][T11213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.717694][T11213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.760117][T11213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.783370][T11213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.823267][T11213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.960135][T11222] chnl_net:caif_netlink_parms(): no params data found [ 315.081140][T11213] hsr_slave_0: entered promiscuous mode [ 315.090018][T11213] hsr_slave_1: entered promiscuous mode [ 315.100534][T11213] debugfs: 'hsr0' already exists in 'hsr' [ 315.106557][T11213] Cannot create hsr debugfs directory [ 315.127943][ T974] hsr_slave_0: left promiscuous mode [ 315.135032][ T974] hsr_slave_1: left promiscuous mode [ 315.141819][ T974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.149377][ T974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.158301][ T974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.166902][ T974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.863425][ T5880] Bluetooth: hci0: command tx timeout [ 316.040617][T11222] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.048442][T11222] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.056498][T11222] bridge_slave_0: entered allmulticast mode [ 316.064366][T11222] bridge_slave_0: entered promiscuous mode [ 316.126757][T11222] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.134204][T11222] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.141324][T11222] bridge_slave_1: entered allmulticast mode [ 316.149358][T11222] bridge_slave_1: entered promiscuous mode [ 316.276274][T11222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.289904][T11222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.414098][ T5880] Bluetooth: hci1: command tx timeout [ 316.454483][T11222] team0: Port device team_slave_0 added [ 316.493610][ T5880] Bluetooth: hci2: command tx timeout [ 316.501355][T11222] team0: Port device team_slave_1 added [ 316.529949][T11220] chnl_net:caif_netlink_parms(): no params data found [ 316.573580][ T5880] Bluetooth: hci4: command tx timeout [ 316.590159][T11218] chnl_net:caif_netlink_parms(): no params data found [ 316.611533][T11222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.619259][T11222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.645265][T11222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.658423][T11222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.665472][T11222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.691808][T11222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.742936][ T974] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.825791][T11213] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 316.855881][ T974] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.912521][T11213] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 316.932759][T11222] hsr_slave_0: entered promiscuous mode [ 316.939655][T11222] hsr_slave_1: entered promiscuous mode [ 316.946811][T11222] debugfs: 'hsr0' already exists in 'hsr' [ 316.952562][T11222] Cannot create hsr debugfs directory [ 316.977451][T11220] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.984682][T11220] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.991816][T11220] bridge_slave_0: entered allmulticast mode [ 316.999695][T11220] bridge_slave_0: entered promiscuous mode [ 317.019567][ T974] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.036813][T11213] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 317.064242][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.070585][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.091029][T11220] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.098421][T11220] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.109610][T11220] bridge_slave_1: entered allmulticast mode [ 317.121653][T11220] bridge_slave_1: entered promiscuous mode [ 317.148961][T11213] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 317.207539][ T974] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.258055][T11220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.288666][T11218] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.296329][T11218] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.305992][T11218] bridge_slave_0: entered allmulticast mode [ 317.312917][T11218] bridge_slave_0: entered promiscuous mode [ 317.349602][T11220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.369512][T11218] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.382190][T11218] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.393695][T11218] bridge_slave_1: entered allmulticast mode [ 317.397909][T11286] __nla_validate_parse: 5 callbacks suppressed [ 317.397922][T11286] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1746'. [ 317.412699][T11218] bridge_slave_1: entered promiscuous mode [ 317.559868][T11220] team0: Port device team_slave_0 added [ 317.585500][T11218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.624442][T11220] team0: Port device team_slave_1 added [ 317.648732][T11218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.722646][T11220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.729965][T11220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.756541][T11220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.789098][ T974] bridge_slave_1: left allmulticast mode [ 317.794971][ T974] bridge_slave_1: left promiscuous mode [ 317.800711][ T974] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.811472][ T974] bridge_slave_0: left allmulticast mode [ 317.817445][ T974] bridge_slave_0: left promiscuous mode [ 317.823182][ T974] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.935289][ T5880] Bluetooth: hci0: command tx timeout [ 318.150322][ T974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.161472][ T974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.171884][ T974] bond0 (unregistering): Released all slaves [ 318.199510][T11220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.207029][T11220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.233781][T11220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.307939][T11218] team0: Port device team_slave_0 added [ 318.355377][T11218] team0: Port device team_slave_1 added [ 318.428399][T11220] hsr_slave_0: entered promiscuous mode [ 318.435577][T11220] hsr_slave_1: entered promiscuous mode [ 318.441624][T11220] debugfs: 'hsr0' already exists in 'hsr' [ 318.448371][T11220] Cannot create hsr debugfs directory [ 318.485521][T11218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.492479][T11218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.495232][ T5880] Bluetooth: hci1: command tx timeout [ 318.530107][T11218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.573561][ T5880] Bluetooth: hci2: command tx timeout [ 318.580743][T11218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.584881][T11297] netlink: 'syz.3.1750': attribute type 10 has an invalid length. [ 318.588882][T11218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.628024][T11218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.663417][ T5880] Bluetooth: hci4: command tx timeout [ 318.865070][T11297] team0: Port device dummy0 added [ 319.031571][T11222] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 319.047593][T11222] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 319.101641][T11218] hsr_slave_0: entered promiscuous mode [ 319.113188][T11218] hsr_slave_1: entered promiscuous mode [ 319.121984][T11218] debugfs: 'hsr0' already exists in 'hsr' [ 319.135127][T11218] Cannot create hsr debugfs directory [ 319.146084][T11222] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 319.289002][T11222] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 319.430526][T11213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.700810][ T974] hsr_slave_0: left promiscuous mode [ 319.713025][ T974] hsr_slave_1: left promiscuous mode [ 319.720980][ T974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.728632][ T974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.737516][ T974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.746022][ T974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.765630][ T974] veth1_vlan: left allmulticast mode [ 319.771089][ T974] veth1_vlan: left promiscuous mode [ 319.778292][ T974] veth0_vlan: left promiscuous mode [ 320.017605][ T5880] Bluetooth: hci0: command tx timeout [ 320.573719][ T5880] Bluetooth: hci1: command tx timeout [ 320.582476][T11213] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.656742][ T5880] Bluetooth: hci2: command tx timeout [ 320.681279][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.688458][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.715547][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.722684][ T4434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.736633][ T5880] Bluetooth: hci4: command tx timeout [ 320.807654][T11315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1755'. [ 320.816932][T11315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1755'. [ 320.827298][T11315] netlink: 'syz.3.1755': attribute type 4 has an invalid length. [ 320.847248][T11220] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 320.888342][T11220] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 320.902455][T11220] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 320.927171][T11220] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 320.992831][T11321] wg2: left promiscuous mode [ 320.998812][T11321] wg2: left allmulticast mode [ 321.022196][T11321] wg2: entered promiscuous mode [ 321.027523][T11321] wg2: entered allmulticast mode [ 321.080789][T11218] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 321.103032][T11213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.116116][T11218] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 321.128319][T11218] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 321.157947][T11218] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 321.232385][T11222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.310133][T11222] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.336138][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.343321][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.367998][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.375205][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.432382][T11213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.467696][T11220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.560400][T11220] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.592025][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.599213][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.660424][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.667614][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.718557][T11218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.786575][T11218] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.826356][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.833678][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.900573][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.907742][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.961263][T11220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.028851][T11222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.122425][T11213] veth0_vlan: entered promiscuous mode [ 322.224588][T11213] veth1_vlan: entered promiscuous mode [ 322.410437][T11213] veth0_macvtap: entered promiscuous mode [ 322.448309][T11213] veth1_macvtap: entered promiscuous mode [ 322.581290][T11220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.658431][T11213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.725397][T11213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.833133][ T4434] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.854004][ T4434] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.862981][ T4434] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.922799][ T4434] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.994115][T11218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.038538][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.074760][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.167021][ T974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.203786][ T974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.272418][T11222] veth0_vlan: entered promiscuous mode [ 323.339089][T11222] veth1_vlan: entered promiscuous mode [ 323.495619][T11222] veth0_macvtap: entered promiscuous mode [ 323.512523][T11220] veth0_vlan: entered promiscuous mode [ 323.555962][T11222] veth1_macvtap: entered promiscuous mode [ 323.593851][T11220] veth1_vlan: entered promiscuous mode [ 323.672389][T11222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.694672][T11222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.744390][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.786739][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.824309][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.842116][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.863104][T11218] veth0_vlan: entered promiscuous mode [ 323.891709][T11220] veth0_macvtap: entered promiscuous mode [ 323.921765][T11218] veth1_vlan: entered promiscuous mode [ 323.955668][T11220] veth1_macvtap: entered promiscuous mode [ 324.058173][T11220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.099685][T11220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.122930][T11218] veth0_macvtap: entered promiscuous mode [ 324.138630][ T974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.159398][ T974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.173140][T11218] veth1_macvtap: entered promiscuous mode [ 324.189467][ T3558] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.205026][T11389] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1763'. [ 324.235368][ T3558] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.248472][T11389] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1763'. [ 324.259035][ T3558] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.283917][ T3558] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.293819][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1763'. [ 324.309450][T11388] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1763'. [ 324.319224][T11389] netlink: 128092 bytes leftover after parsing attributes in process `syz.5.1763'. [ 324.412151][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.445822][T11391] netlink: 'syz.5.1764': attribute type 11 has an invalid length. [ 324.454845][T11391] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1764'. [ 324.456006][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.878274][T11218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.010852][T11218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.251729][ T3558] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.411997][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.461969][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.481956][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.494782][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.503885][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.769859][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.814239][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.993957][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.020280][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.147209][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.187002][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.311942][T11415] wg2: entered promiscuous mode [ 326.322081][T11415] wg2: entered allmulticast mode [ 326.370105][T11415] netlink: 'syz.5.1772': attribute type 10 has an invalid length. [ 326.424215][T11415] veth1_macvtap: left promiscuous mode [ 326.585770][T11431] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1776'. [ 326.643689][T11426] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1776'. [ 326.704486][T11432] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1776'. [ 328.292159][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.376883][T11472] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1789'. [ 328.468851][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.674697][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.382458][ T36] bond0: (slave netdevsim0): Releasing backup interface [ 329.461751][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.871896][ T36] dummy0: left allmulticast mode [ 329.902699][ T36] bridge0: port 3(dummy0) entered disabled state [ 329.949341][ T36] bridge_slave_1: left allmulticast mode [ 329.964990][ T36] bridge_slave_1: left promiscuous mode [ 329.970793][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.016199][ T36] bridge_slave_0: left promiscuous mode [ 330.032557][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.058716][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.071318][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.088003][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 331.120440][ T36] bond0 (unregistering): Released all slaves [ 331.730584][ T30] audit: type=1107 audit(1758648381.431:4): pid=11564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='£s' [ 332.462196][T11588] netlink: 'syz.3.1826': attribute type 10 has an invalid length. [ 333.420694][ T36] hsr_slave_0: left promiscuous mode [ 333.440764][ T36] hsr_slave_1: left promiscuous mode [ 333.473881][ T36] veth1_vlan: left allmulticast mode [ 333.482660][ T36] veth1_vlan: left promiscuous mode [ 333.491781][ T36] veth0_vlan: left promiscuous mode [ 333.723186][T11602] __nla_validate_parse: 1 callbacks suppressed [ 333.723207][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1833'. [ 334.412440][T11609] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1835'. [ 334.451591][T11609] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1835'. [ 334.994174][ T12] smc: removing ib device syz2 [ 335.007408][T11579] wg2: left promiscuous mode [ 335.012142][T11579] wg2: left allmulticast mode [ 335.031578][T11585] wg2: entered promiscuous mode [ 335.040003][T11585] wg2: entered allmulticast mode [ 335.119753][ T920] lo speed is unknown, defaulting to 1000 [ 335.120349][T11606] netlink: 'syz.6.1834': attribute type 4 has an invalid length. [ 335.139440][ T920] syz2: Port: 1 Link DOWN [ 335.163902][T11612] netlink: 61967 bytes leftover after parsing attributes in process `syz.5.1836'. [ 335.652620][T11630] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1842'. [ 335.714275][T11630] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1842'. [ 335.760591][T11633] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1843'. [ 336.854632][T11653] openvswitch: netlink: Missing key (keys=2000040, expected=2000) [ 339.084001][T11667] netlink: 'syz.7.1854': attribute type 39 has an invalid length. [ 339.310473][T11668] netlink: 'syz.8.1855': attribute type 39 has an invalid length. [ 340.092638][T11703] netlink: 'syz.7.1870': attribute type 10 has an invalid length. [ 340.105825][T11703] netlink: 'syz.7.1870': attribute type 1 has an invalid length. [ 340.119668][T11698] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1867'. [ 340.146124][T11703] bridge0: port 1(bridge_slave_0) entered learning state [ 340.192660][T11706] netlink: 'syz.3.1868': attribute type 11 has an invalid length. [ 340.208137][T11706] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1868'. [ 340.661974][T11719] wg2: left promiscuous mode [ 340.675477][T11719] wg2: left allmulticast mode [ 340.706537][T11720] wg2: entered promiscuous mode [ 340.726843][T11720] wg2: entered allmulticast mode [ 340.780283][T11719] netlink: 'syz.3.1875': attribute type 10 has an invalid length. [ 341.446161][T11748] macvlan0: entered promiscuous mode [ 341.495050][T11748] macvlan0: entered allmulticast mode [ 341.500663][T11748] veth1_vlan: entered allmulticast mode [ 341.507523][T11750] netlink: 'syz.5.1885': attribute type 11 has an invalid length. [ 341.515793][T11750] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1885'. [ 342.240328][T11782] wg2: left promiscuous mode [ 342.256218][T11782] wg2: left allmulticast mode [ 342.325038][T11785] netlink: 'syz.5.1897': attribute type 10 has an invalid length. [ 342.337906][T11782] wg2: entered promiscuous mode [ 342.343870][T11782] wg2: entered allmulticast mode [ 342.489332][T11787] netlink: 'syz.6.1899': attribute type 33 has an invalid length. [ 342.497298][T11787] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1899'. [ 342.746078][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.823910][T11795] macvlan0: entered promiscuous mode [ 342.848407][T11795] macvlan0: entered allmulticast mode [ 342.869812][T11795] veth1_vlan: entered allmulticast mode [ 342.935838][T11795] netlink: 'syz.8.1902': attribute type 11 has an invalid length. [ 343.013518][T11795] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1902'. [ 343.099616][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.467127][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.673592][ T49] bond0: (slave netdevsim0): Releasing backup interface [ 343.717937][T11823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1914'. [ 343.725564][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.730705][T11823] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1914'. [ 344.215825][T11832] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1917'. [ 344.253132][ T49] bond_slave_0: left promiscuous mode [ 344.268127][ T49] bond_slave_1: left promiscuous mode [ 344.285996][ T49] dummy0: left promiscuous mode [ 344.965349][T11838] validate_nla: 4 callbacks suppressed [ 344.965369][T11838] netlink: 'syz.8.1920': attribute type 21 has an invalid length. [ 345.217023][T11846] netlink: 'syz.7.1922': attribute type 11 has an invalid length. [ 345.228254][T11846] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1922'. [ 345.621093][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.648831][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.677310][ T49] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 345.706936][ T49] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 345.741276][ T49] bond0 (unregistering): Released all slaves [ 345.793408][T11832] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.844116][T11843] macvlan0: entered promiscuous mode [ 345.877312][T11843] macvlan0: entered allmulticast mode [ 345.915861][T11843] veth1_vlan: entered allmulticast mode [ 346.561941][T11858] netlink: 'syz.8.1926': attribute type 10 has an invalid length. [ 346.683145][T11857] wg2: entered promiscuous mode [ 346.698261][T11857] wg2: entered allmulticast mode [ 346.724078][T11858] veth1_macvtap: left promiscuous mode [ 348.532660][ T49] hsr_slave_0: left promiscuous mode [ 348.624743][ T49] hsr_slave_1: left promiscuous mode [ 348.642259][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.667434][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.736321][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.754286][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.789067][ T49] veth1_vlan: left allmulticast mode [ 348.806218][ T49] veth1_vlan: left promiscuous mode [ 348.811581][ T49] veth0_vlan: left promiscuous mode [ 349.128557][ T3581] smc: removing ib device syz1 [ 349.408412][T11897] netlink: 'syz.7.1940': attribute type 10 has an invalid length. [ 350.349373][T11807] Set syz1 is full, maxelem 65536 reached [ 350.493376][ T848] ================================================================== [ 350.501481][ T848] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 350.510256][ T848] Read of size 8 at addr ffff8880720222e8 by task kworker/0:2/848 [ 350.518056][ T848] [ 350.520373][ T848] CPU: 0 UID: 0 PID: 848 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 350.520386][ T848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 350.520393][ T848] Workqueue: events smc_ib_port_event_work [ 350.520409][ T848] Call Trace: [ 350.520414][ T848] [ 350.520418][ T848] dump_stack_lvl+0x189/0x250 [ 350.520431][ T848] ? rcu_is_watching+0x15/0xb0 [ 350.520441][ T848] ? __kasan_check_byte+0x12/0x40 [ 350.520451][ T848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.520461][ T848] ? rcu_is_watching+0x15/0xb0 [ 350.520470][ T848] ? lock_release+0x4b/0x3e0 [ 350.520484][ T848] ? __virt_addr_valid+0x1c8/0x5c0 [ 350.520496][ T848] ? __virt_addr_valid+0x4a5/0x5c0 [ 350.520508][ T848] print_report+0xca/0x240 [ 350.520517][ T848] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 350.520531][ T848] kasan_report+0x118/0x150 [ 350.520540][ T848] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 350.520555][ T848] __ethtool_get_link_ksettings+0x6e/0x190 [ 350.520569][ T848] ib_get_eth_speed+0x15e/0x7b0 [ 350.520583][ T848] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 350.520598][ T848] ? do_raw_spin_unlock+0x122/0x240 [ 350.520611][ T848] rxe_query_port+0x93/0x3b0 [ 350.520623][ T848] ib_query_port+0x16d/0x830 [ 350.520633][ T848] smc_ib_port_event_work+0x15a/0x940 [ 350.520644][ T848] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.520655][ T848] ? process_scheduled_works+0x9ef/0x17b0 [ 350.520664][ T848] ? process_scheduled_works+0x9ef/0x17b0 [ 350.520672][ T848] process_scheduled_works+0xae1/0x17b0 [ 350.520687][ T848] ? __pfx_process_scheduled_works+0x10/0x10 [ 350.520698][ T848] worker_thread+0x8a0/0xda0 [ 350.520708][ T848] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 350.520720][ T848] ? __kthread_parkme+0x7b/0x200 [ 350.520732][ T848] kthread+0x70e/0x8a0 [ 350.520743][ T848] ? __pfx_worker_thread+0x10/0x10 [ 350.520752][ T848] ? __pfx_kthread+0x10/0x10 [ 350.520762][ T848] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.520772][ T848] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.520782][ T848] ? __pfx_kthread+0x10/0x10 [ 350.520793][ T848] ret_from_fork+0x436/0x7d0 [ 350.520803][ T848] ? __pfx_ret_from_fork+0x10/0x10 [ 350.520815][ T848] ? __switch_to_asm+0x39/0x70 [ 350.520828][ T848] ? __switch_to_asm+0x33/0x70 [ 350.520839][ T848] ? __pfx_kthread+0x10/0x10 [ 350.520849][ T848] ret_from_fork_asm+0x1a/0x30 [ 350.520864][ T848] [ 350.520867][ T848] [ 350.753640][ T848] Allocated by task 5875: [ 350.757943][ T848] kasan_save_track+0x3e/0x80 [ 350.762606][ T848] __kasan_kmalloc+0x93/0xb0 [ 350.767174][ T848] __kvmalloc_node_noprof+0x30d/0x5f0 [ 350.772523][ T848] alloc_netdev_mqs+0xa3/0x11b0 [ 350.777351][ T848] rtnl_create_link+0x31f/0xd10 [ 350.782183][ T848] rtnl_newlink_create+0x25c/0xb00 [ 350.787294][ T848] rtnl_newlink+0x16d6/0x1c70 [ 350.791951][ T848] rtnetlink_rcv_msg+0x7cc/0xb70 [ 350.796873][ T848] netlink_rcv_skb+0x208/0x470 [ 350.801632][ T848] netlink_unicast+0x82f/0x9e0 [ 350.806372][ T848] netlink_sendmsg+0x805/0xb30 [ 350.811117][ T848] __sock_sendmsg+0x219/0x270 [ 350.815775][ T848] __sys_sendto+0x3bd/0x520 [ 350.820259][ T848] __x64_sys_sendto+0xde/0x100 [ 350.825004][ T848] do_syscall_64+0xfa/0x3b0 [ 350.829491][ T848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.835359][ T848] [ 350.837661][ T848] Freed by task 49: [ 350.841444][ T848] kasan_save_track+0x3e/0x80 [ 350.846128][ T848] kasan_save_free_info+0x46/0x50 [ 350.851141][ T848] __kasan_slab_free+0x5b/0x80 [ 350.855898][ T848] kfree+0x18e/0x440 [ 350.859779][ T848] device_release+0x99/0x1c0 [ 350.864349][ T848] kobject_put+0x22b/0x480 [ 350.868761][ T848] netdev_run_todo+0xd2e/0xea0 [ 350.873509][ T848] default_device_exit_batch+0x81e/0x890 [ 350.879140][ T848] ops_undo_list+0x525/0x990 [ 350.883717][ T848] cleanup_net+0x4c5/0x800 [ 350.888121][ T848] process_scheduled_works+0xae1/0x17b0 [ 350.893653][ T848] worker_thread+0x8a0/0xda0 [ 350.898232][ T848] kthread+0x70e/0x8a0 [ 350.902296][ T848] ret_from_fork+0x436/0x7d0 [ 350.906869][ T848] ret_from_fork_asm+0x1a/0x30 [ 350.911620][ T848] [ 350.913926][ T848] The buggy address belongs to the object at ffff888072022000 [ 350.913926][ T848] which belongs to the cache kmalloc-cg-4k of size 4096 [ 350.928225][ T848] The buggy address is located 744 bytes inside of [ 350.928225][ T848] freed 4096-byte region [ffff888072022000, ffff888072023000) [ 350.942175][ T848] [ 350.944481][ T848] The buggy address belongs to the physical page: [ 350.950876][ T848] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x72020 [ 350.959643][ T848] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 350.968120][ T848] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 350.975654][ T848] page_type: f5(slab) [ 350.979636][ T848] raw: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 350.988234][ T848] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 350.996799][ T848] head: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 351.005470][ T848] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 351.014128][ T848] head: 00fff00000000003 ffffea0001c80801 00000000ffffffff 00000000ffffffff [ 351.022790][ T848] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 351.031456][ T848] page dumped because: kasan: bad access detected [ 351.037854][ T848] page_owner tracks the page as allocated [ 351.043549][ T848] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5873, tgid 5873 (syz-executor), ts 71598419696, free_ts 71586164877 [ 351.064884][ T848] post_alloc_hook+0x240/0x2a0 [ 351.069635][ T848] get_page_from_freelist+0x21e4/0x22c0 [ 351.075184][ T848] __alloc_frozen_pages_noprof+0x181/0x370 [ 351.081002][ T848] alloc_pages_mpol+0x232/0x4a0 [ 351.085836][ T848] allocate_slab+0x8a/0x370 [ 351.090320][ T848] ___slab_alloc+0xbeb/0x1420 [ 351.094976][ T848] __kmalloc_noprof+0x305/0x4f0 [ 351.099808][ T848] __register_sysctl_table+0x72/0x1340 [ 351.105254][ T848] __addrconf_sysctl_register+0x328/0x4c0 [ 351.110964][ T848] addrconf_sysctl_register+0x168/0x1c0 [ 351.116490][ T848] ipv6_add_dev+0xd46/0x1370 [ 351.121064][ T848] addrconf_notify+0x794/0x1010 [ 351.125894][ T848] notifier_call_chain+0x1b3/0x3e0 [ 351.130987][ T848] register_netdevice+0x1608/0x1ae0 [ 351.136170][ T848] register_vlan_dev+0x3cb/0x800 [ 351.141106][ T848] vlan_newlink+0x4b2/0x610 [ 351.145604][ T848] page last free pid 5864 tgid 5864 stack trace: [ 351.151904][ T848] __free_frozen_pages+0xbc4/0xd30 [ 351.156994][ T848] __slab_free+0x303/0x3c0 [ 351.161390][ T848] qlist_free_all+0x97/0x140 [ 351.165968][ T848] kasan_quarantine_reduce+0x148/0x160 [ 351.171410][ T848] __kasan_slab_alloc+0x22/0x80 [ 351.176236][ T848] __kmalloc_cache_noprof+0x1be/0x3d0 [ 351.181585][ T848] ref_tracker_alloc+0x133/0x460 [ 351.186506][ T848] register_netdevice+0x14a3/0x1ae0 [ 351.191684][ T848] veth_newlink+0x42f/0xa50 [ 351.196172][ T848] rtnl_newlink_create+0x30d/0xb00 [ 351.201280][ T848] rtnl_newlink+0x16d6/0x1c70 [ 351.205939][ T848] rtnetlink_rcv_msg+0x7cc/0xb70 [ 351.210856][ T848] netlink_rcv_skb+0x208/0x470 [ 351.215604][ T848] netlink_unicast+0x82f/0x9e0 [ 351.220368][ T848] netlink_sendmsg+0x805/0xb30 [ 351.225128][ T848] __sock_sendmsg+0x219/0x270 [ 351.229787][ T848] [ 351.232089][ T848] Memory state around the buggy address: [ 351.237695][ T848] ffff888072022180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 351.245738][ T848] ffff888072022200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 351.253792][ T848] >ffff888072022280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 351.261847][ T848] ^ [ 351.269279][ T848] ffff888072022300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 351.277317][ T848] ffff888072022380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 351.285352][ T848] ================================================================== [ 351.299739][ T848] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 351.306936][ T848] CPU: 0 UID: 0 PID: 848 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 351.316213][ T848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 351.326261][ T848] Workqueue: events smc_ib_port_event_work [ 351.332053][ T848] Call Trace: [ 351.335318][ T848] [ 351.338270][ T848] dump_stack_lvl+0x99/0x250 [ 351.342849][ T848] ? __asan_memcpy+0x40/0x70 [ 351.347438][ T848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.352633][ T848] ? __pfx__printk+0x10/0x10 [ 351.357384][ T848] vpanic+0x281/0x750 [ 351.361349][ T848] ? preempt_schedule+0xae/0xc0 [ 351.366182][ T848] ? __pfx_vpanic+0x10/0x10 [ 351.370668][ T848] ? preempt_schedule_common+0x83/0xd0 [ 351.376132][ T848] ? preempt_schedule+0xae/0xc0 [ 351.380961][ T848] ? __pfx_preempt_schedule+0x10/0x10 [ 351.386327][ T848] panic+0xb9/0xc0 [ 351.390045][ T848] ? __pfx_panic+0x10/0x10 [ 351.394449][ T848] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 351.400343][ T848] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 351.406320][ T848] check_panic_on_warn+0x89/0xb0 [ 351.411247][ T848] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 351.417217][ T848] end_report+0x78/0x160 [ 351.421443][ T848] kasan_report+0x129/0x150 [ 351.425930][ T848] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 351.431928][ T848] __ethtool_get_link_ksettings+0x6e/0x190 [ 351.437728][ T848] ib_get_eth_speed+0x15e/0x7b0 [ 351.442568][ T848] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 351.447927][ T848] ? do_raw_spin_unlock+0x122/0x240 [ 351.453114][ T848] rxe_query_port+0x93/0x3b0 [ 351.457690][ T848] ib_query_port+0x16d/0x830 [ 351.462268][ T848] smc_ib_port_event_work+0x15a/0x940 [ 351.467626][ T848] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.472808][ T848] ? process_scheduled_works+0x9ef/0x17b0 [ 351.478510][ T848] ? process_scheduled_works+0x9ef/0x17b0 [ 351.484211][ T848] process_scheduled_works+0xae1/0x17b0 [ 351.489746][ T848] ? __pfx_process_scheduled_works+0x10/0x10 [ 351.495718][ T848] worker_thread+0x8a0/0xda0 [ 351.500292][ T848] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 351.506607][ T848] ? __kthread_parkme+0x7b/0x200 [ 351.511532][ T848] kthread+0x70e/0x8a0 [ 351.515592][ T848] ? __pfx_worker_thread+0x10/0x10 [ 351.520685][ T848] ? __pfx_kthread+0x10/0x10 [ 351.525263][ T848] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.530444][ T848] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.535624][ T848] ? __pfx_kthread+0x10/0x10 [ 351.540199][ T848] ret_from_fork+0x436/0x7d0 [ 351.544773][ T848] ? __pfx_ret_from_fork+0x10/0x10 [ 351.549867][ T848] ? __switch_to_asm+0x39/0x70 [ 351.554616][ T848] ? __switch_to_asm+0x33/0x70 [ 351.559363][ T848] ? __pfx_kthread+0x10/0x10 [ 351.564020][ T848] ret_from_fork_asm+0x1a/0x30 [ 351.568771][ T848] [ 351.572057][ T848] Kernel Offset: disabled [ 351.576366][ T848] Rebooting in 86400 seconds..