last executing test programs: 2.851165557s ago: executing program 3 (id=4): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0xe76188a61d36c46a, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x10800, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x6}, 0x1306, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000002040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80980, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0xa004, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) 2.767880398s ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000000001010400000000000000000a000004440001802c00017a0a318014000300ff01000000000000000000000000003516000400ffcbe0c7523a4f1de03242a818aa0100000000000000000000000000010c00028005000100000000000600034000000000fd9d6d9e55cb9f88d0f5c050f611f1495b3b4d933962389bc56a1411512705c33c602539eab1184a3cd7f81f0ebf525bbb"], 0x58}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1b, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='THAWED\x00', 0x7) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r4, 0x24, 0x0, 0xd8, &(0x7f00000001c0), 0x3ffffd7c, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x42, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x4, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0xd900, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0xffffffffffffff82, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.695905079s ago: executing program 3 (id=6): r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000040)={'full', 0x20, 0x4, 0x20, 0x8}, 0x2f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x8}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x40}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd0}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c", @ANYRES32, @ANYRES8=r3], 0xfe33) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x22, 0x2, 0x22, &(0x7f00000006c0)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x7, 0x0, 0x10, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=[0x0], 0x0, 0x83, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@ifindex, r2, 0x37, 0x20, 0x0, @void, @void, @void, @value=r5, r4}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x1, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x61, 0x2e, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0x51bace31}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0", 0x34}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c00178008000180040019"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) r8 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r10, &(0x7f0000000840)='cpuset.cpu_exclusive\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x72, &(0x7f0000000000)=r9, 0xc) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000880010001"], 0x50) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r12, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000d0}, 0x100440d0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r9, 0xffffffffffffffff, 0x30, 0x4, 0x0, @void, @value=r11, @void, @void, r4}, 0x20) 1.613517701s ago: executing program 0 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1946}, 0x8120, 0x0, 0x0, 0x3, 0x401, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x8, 0x0, 0x0, 0x4d2e, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000500), 0x1}, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000008510000001000000950000000000f9d848008505eb506c2500000000002020207b1a00fe00000000bda100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x88, &(0x7f0000000000)=""/136}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x11a410}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e26}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x24000848) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000090605000000000000000004060000000900020073797a30000000000c000780060004404e2000000500010007ffde00cc8a5400431504b3888f0ede3882a358685e78b19b416d30d9d177ce04c1ae248f22474fff1c7c43ee27e097c0cdc47ab18c1fc1edfc327f82b62eaa947a36e69fac6939784843ad3f7c89eca80a29a369a4e0ffbea5141559921b9449f78296a6f5f51c0b10192195cda73d9c0b675ade3c2b61027db9804aa26c46"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x20000041}, 0x40010) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e80)={r2, &(0x7f0000000d80), 0x0}, 0x20) 1.523639914s ago: executing program 2 (id=3): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0xd900, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfe9e, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0xe, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.382919s ago: executing program 1 (id=2): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1b, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486"], 0xfdef) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000140)=r6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0xd, &(0x7f0000000480), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed38775c6d20920e392f5", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.253427531s ago: executing program 0 (id=8): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x39, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/50}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00060005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000f80)="9b", 0x1}], 0x1}, 0x40060) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r3, &(0x7f0000000800)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/187, 0xbb}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000000480)=""/230, 0xe6}, {&(0x7f0000000580)=""/113, 0x71}, {&(0x7f0000000600)=""/145, 0x91}, {&(0x7f00000006c0)=""/32, 0x20}], 0x8, &(0x7f0000000780)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x10020) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x20044c81) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x50) 1.084213484s ago: executing program 1 (id=9): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0xfe33) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xd000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00'}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a97, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000010800164000000004"], 0x6c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000003010104000000000000002002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x4048000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x80, 0x0, 0xb, 0x9, 0xc, 0x0, 0x100000000, 0x4081, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x10, 0x5, 0x4, 0x5, 0x6, 0x2, 0xfc01, 0x0, 0x2, 0x0, 0xa}, r7, 0xffffffffffffffff, r4, 0x5) close(r1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 708.884679ms ago: executing program 3 (id=10): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x408a00, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0x100000aea}, 0x14105, 0x2e, 0xfffffbfd, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x80008300, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f00000001c0)='cpu.stat\x00', 0x7a05, 0x1700) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000200000000008000000000000069c5d50542e8c7f68c9c1ffdc38d4e5392d5ad1d8cd7cd955eda39b67539c5bdd5bb3331d363aa9ffee21bd415951460ce8a7bc5a4c8ae759c524dbb720c7f6416", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="181100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000020000000000001100000000000000000200000001000013020000000200000000000000000000000000000e0000000000000000000061"], 0x0, 0x52}, 0x28) sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x10ff, @local}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x240003e8) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000900)=r4, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0) 630.249564ms ago: executing program 2 (id=11): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000600)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB, @ANYRES32, @ANYRES64=0x0], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1c, 0x2d, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x0, 0x0, 0x1, 0x2, 0x40, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @ringbuf_query, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0xe7d2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0x5, 0xa07}, 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5f, &(0x7f0000000980)}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@loopback, 0xfffd, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x7, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@private2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x3}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd, 0x33}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@loopback, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffe, 0x33}, 0x2, @in=@broadcast, 0x0, 0x0, 0x2}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)}, 0x122) r7 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8080, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7deb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a3000000000"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) r9 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_DISABLE(r9, 0x2401, 0xb3) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="e29d2cc61b1bf710aeb3919e8419a99f09efc90939da94ddf8a3ecae58b7d7870a06fb7db49732711a589166784d77", @ANYRES64=r0, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4880d}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x18) 544.42809ms ago: executing program 4 (id=5): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000007c0)={0x1, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x99, 0x3}, 0x100102, 0xfffffffffffffffa, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x9) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x5, 0x1, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000002c0), 0x3}, 0xa0, 0x2, 0x0, 0x8, 0x3fb, 0x7ff7fffc}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x83e00, 0xe9db43bfdbf63341, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffff1a) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x6, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100010}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0700000004000000800000000e00000028000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000cac64d43350615457dc5d1df0969fc09458ff91f60945e995bf96024318342a5f48112b0127b8d980c3eb50abea3b9b7ff062b978269d0a4d4a3e80022975de2575ac7a23e5c3684d5e4448ad9eec01118d93e5cbf1946a761e0127482f0ca0d393294349b6ee071a0cb4c7305371f3c0a595fc61ce01d9ff23c6d4fcc55f7ac02cd6de862ab0e39701dd868104b21662be431cf895bb80bb47fd063808b401e1fc6362e810fc3dfda83d50cbac949ce50c4a8c84c6178cc1773f868ffe4e4e75ca8729d20aedf821d36f20fb412b281078afd39d5b8a8ac9543d12a88b9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000f9ffffff850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='sched_switch\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffd82) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffece, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x10, 0x4}, 0x94) socketpair(0x1e, 0x80005, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) write$cgroup_int(r5, &(0x7f0000000200), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x100, 0x2c120, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 94.24688ms ago: executing program 0 (id=12): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, &(0x7f0000000640)=""/156}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x1946}, 0x3002, 0x0, 0x0, 0x8, 0x3fe, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r2, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000008100000081"], 0x48) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x55) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r6}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000023008000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe0000000085000000180000009700000001000100950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb4413c0bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdee75dca3772be2c9d2d29"], 0x0}, 0x94) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 62.550175ms ago: executing program 4 (id=13): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0x94, &(0x7f00000002c0)=""/148, 0x41100, 0x20}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x2, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 56.448383ms ago: executing program 1 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x20020000}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x3, 0xa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x3, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) socket$kcm(0x23, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82030, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x18) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8901, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 0s ago: executing program 3 (id=15): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0x94, &(0x7f00000002c0)=""/148, 0x41100, 0x20}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x2, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xfc, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0xd0, 0x4, 0x0, 0x1, [{0xcc, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xbc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0xa2, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916d15322c934e3341516334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x124}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.243' (ED25519) to the list of known hosts. [ 66.393180][ T5847] cgroup: Unknown subsys name 'net' [ 66.492351][ T5847] cgroup: Unknown subsys name 'cpuset' [ 66.501413][ T5847] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.866602][ T5847] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.325591][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.343573][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.353042][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.354403][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.360780][ T5877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.376890][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.384744][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.384761][ T5870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.398339][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.406134][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.413501][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.421458][ T5880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.422244][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.428705][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.435548][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.450522][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.452606][ T5878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.458272][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.466684][ T5878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.473738][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.478581][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.489494][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.495375][ T5880] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.504978][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.508739][ T5880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.521301][ T5880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.525882][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.007488][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 72.206308][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 72.251394][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.259067][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.266348][ T5873] bridge_slave_0: entered allmulticast mode [ 72.274423][ T5873] bridge_slave_0: entered promiscuous mode [ 72.331599][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.338755][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.346370][ T5873] bridge_slave_1: entered allmulticast mode [ 72.353497][ T5873] bridge_slave_1: entered promiscuous mode [ 72.432632][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.442089][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 72.456396][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.513535][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 72.588804][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.597156][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.605370][ T5860] bridge_slave_0: entered allmulticast mode [ 72.613457][ T5860] bridge_slave_0: entered promiscuous mode [ 72.636712][ T5873] team0: Port device team_slave_0 added [ 72.664743][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.672987][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.680401][ T5860] bridge_slave_1: entered allmulticast mode [ 72.687490][ T5860] bridge_slave_1: entered promiscuous mode [ 72.706792][ T5873] team0: Port device team_slave_1 added [ 72.750172][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 72.806027][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.814288][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.840515][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.859139][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.891357][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.898517][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.925141][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.950130][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.959740][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.966906][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.974206][ T5861] bridge_slave_0: entered allmulticast mode [ 72.981622][ T5861] bridge_slave_0: entered promiscuous mode [ 72.990097][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.997227][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.004876][ T5861] bridge_slave_1: entered allmulticast mode [ 73.012545][ T5861] bridge_slave_1: entered promiscuous mode [ 73.105509][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.113016][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.122567][ T5859] bridge_slave_0: entered allmulticast mode [ 73.129761][ T5859] bridge_slave_0: entered promiscuous mode [ 73.153505][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.174428][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.181896][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.189153][ T5859] bridge_slave_1: entered allmulticast mode [ 73.196278][ T5859] bridge_slave_1: entered promiscuous mode [ 73.216165][ T5860] team0: Port device team_slave_0 added [ 73.236794][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.285647][ T5860] team0: Port device team_slave_1 added [ 73.315183][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.322775][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.330370][ T5871] bridge_slave_0: entered allmulticast mode [ 73.337617][ T5871] bridge_slave_0: entered promiscuous mode [ 73.347828][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.373158][ T5873] hsr_slave_0: entered promiscuous mode [ 73.380091][ T5873] hsr_slave_1: entered promiscuous mode [ 73.387939][ T5861] team0: Port device team_slave_0 added [ 73.394247][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.401744][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.408962][ T5871] bridge_slave_1: entered allmulticast mode [ 73.415865][ T5871] bridge_slave_1: entered promiscuous mode [ 73.425183][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.459396][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.466362][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.492589][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.506198][ T5861] team0: Port device team_slave_1 added [ 73.549912][ T5879] Bluetooth: hci0: command tx timeout [ 73.555689][ T5879] Bluetooth: hci1: command tx timeout [ 73.561774][ T5877] Bluetooth: hci4: command tx timeout [ 73.570246][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.577212][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.603286][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.629036][ T5877] Bluetooth: hci3: command tx timeout [ 73.629043][ T5879] Bluetooth: hci2: command tx timeout [ 73.648498][ T5859] team0: Port device team_slave_0 added [ 73.669632][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.676628][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.702691][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.716423][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.729279][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.740591][ T5859] team0: Port device team_slave_1 added [ 73.765274][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.772403][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.798356][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.911990][ T5860] hsr_slave_0: entered promiscuous mode [ 73.918223][ T5860] hsr_slave_1: entered promiscuous mode [ 73.925078][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 73.932004][ T5860] Cannot create hsr debugfs directory [ 73.939542][ T5871] team0: Port device team_slave_0 added [ 73.946129][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.953151][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.979721][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.992386][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.999382][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.025434][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.066734][ T5871] team0: Port device team_slave_1 added [ 74.136346][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.144093][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.170315][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.201981][ T5861] hsr_slave_0: entered promiscuous mode [ 74.208214][ T5861] hsr_slave_1: entered promiscuous mode [ 74.214651][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 74.220454][ T5861] Cannot create hsr debugfs directory [ 74.241207][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.248171][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.274340][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.383930][ T5859] hsr_slave_0: entered promiscuous mode [ 74.390735][ T5859] hsr_slave_1: entered promiscuous mode [ 74.397045][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 74.405330][ T5859] Cannot create hsr debugfs directory [ 74.501857][ T5871] hsr_slave_0: entered promiscuous mode [ 74.508117][ T5871] hsr_slave_1: entered promiscuous mode [ 74.514726][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 74.520551][ T5871] Cannot create hsr debugfs directory [ 74.779852][ T5873] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.793980][ T5873] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.827110][ T5873] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.871736][ T5873] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.971482][ T5860] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.985731][ T5860] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.998742][ T5860] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.014389][ T5860] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.118277][ T5871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.154129][ T5871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.190274][ T5871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.201699][ T5871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.272260][ T5859] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.287417][ T5859] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.298167][ T5859] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.311003][ T5859] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.341257][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.404324][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.426324][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.433663][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.470861][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.478062][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.505500][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.516743][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.531398][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.546462][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.558463][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.626735][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.635171][ T5877] Bluetooth: hci4: command tx timeout [ 75.636504][ T5879] Bluetooth: hci0: command tx timeout [ 75.641356][ T5869] Bluetooth: hci1: command tx timeout [ 75.692437][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.699627][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.710175][ T5869] Bluetooth: hci3: command tx timeout [ 75.713707][ T5877] Bluetooth: hci2: command tx timeout [ 75.735369][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.755012][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.762154][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.833034][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.874550][ T5860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.885888][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.931320][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.951738][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.959110][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.027666][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.034866][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.056378][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.095490][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.142885][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.150080][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.163585][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.170775][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.198829][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.302280][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.309465][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.347943][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.355215][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.394387][ T5859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.431349][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.507555][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.653932][ T5873] veth0_vlan: entered promiscuous mode [ 76.733980][ T5873] veth1_vlan: entered promiscuous mode [ 76.784972][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.793343][ T5860] veth0_vlan: entered promiscuous mode [ 76.827544][ T5860] veth1_vlan: entered promiscuous mode [ 76.977112][ T5873] veth0_macvtap: entered promiscuous mode [ 76.998919][ T5860] veth0_macvtap: entered promiscuous mode [ 77.008717][ T5871] veth0_vlan: entered promiscuous mode [ 77.020958][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.034001][ T5860] veth1_macvtap: entered promiscuous mode [ 77.053685][ T5873] veth1_macvtap: entered promiscuous mode [ 77.067421][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.092590][ T5871] veth1_vlan: entered promiscuous mode [ 77.118403][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.152159][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.170585][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.192020][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.242521][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.255824][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.284882][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.303835][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.351082][ T5861] veth0_vlan: entered promiscuous mode [ 77.356885][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.395987][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.421287][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.452508][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.468073][ T5861] veth1_vlan: entered promiscuous mode [ 77.483260][ T5871] veth0_macvtap: entered promiscuous mode [ 77.504312][ T5871] veth1_macvtap: entered promiscuous mode [ 77.596491][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.597342][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.617600][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.623065][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.650911][ T5861] veth0_macvtap: entered promiscuous mode [ 77.678164][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.693886][ T5861] veth1_macvtap: entered promiscuous mode [ 77.710262][ T5877] Bluetooth: hci0: command tx timeout [ 77.710737][ T5869] Bluetooth: hci4: command tx timeout [ 77.715688][ T5879] Bluetooth: hci1: command tx timeout [ 77.734920][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.748953][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.762610][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.789714][ T5869] Bluetooth: hci2: command tx timeout [ 77.790109][ T5877] Bluetooth: hci3: command tx timeout [ 77.812624][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.826356][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.843579][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.851466][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.859822][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.871485][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.882489][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.916568][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.933066][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.950718][ T1140] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.960515][ T1140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.980499][ T1140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.010594][ T1140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.038712][ T5859] veth0_vlan: entered promiscuous mode [ 78.090586][ C1] hrtimer: interrupt took 35994 ns [ 78.143823][ T5982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 78.185139][ T5859] veth1_vlan: entered promiscuous mode [ 78.369767][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.377614][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.588047][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.608815][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.070015][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.101443][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.120945][ T5859] veth0_macvtap: entered promiscuous mode [ 79.170787][ T2962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.175914][ T5859] veth1_macvtap: entered promiscuous mode [ 79.194031][ T2962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.285679][ T5987] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.6'. [ 79.299573][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.311843][ T5987] delete_channel: no stack [ 79.322708][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.330511][ T5987] delete_channel: no stack [ 79.346681][ T5987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.374557][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.416536][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.504732][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.540130][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.657659][ T5996] sctp: [Deprecated]: syz.1.2 (pid 5996) Use of int in maxseg socket option. [ 79.657659][ T5996] Use struct sctp_assoc_value instead [ 79.731239][ T5999] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8'. [ 79.792159][ T5877] Bluetooth: hci4: command tx timeout [ 79.801233][ T5877] Bluetooth: hci0: command tx timeout [ 79.806761][ T5877] Bluetooth: hci1: command tx timeout [ 79.869807][ T5869] Bluetooth: hci2: command tx timeout [ 79.879782][ T5869] Bluetooth: hci3: command tx timeout [ 79.967855][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.024178][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.095547][ T2962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.122812][ T2962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.437733][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11'. [ 81.000678][ T6021] warning: `syz.4.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.132718][ T6023] ================================================================== [ 81.140846][ T6023] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x677/0xcf0 [ 81.148680][ T6023] Write of size 8 at addr ffff88805686c658 by task syz.1.14/6023 [ 81.156390][ T6023] [ 81.158726][ T6023] CPU: 0 UID: 0 PID: 6023 Comm: syz.1.14 Not tainted syzkaller #0 PREEMPT(full) [ 81.158743][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.158757][ T6023] Call Trace: [ 81.158764][ T6023] [ 81.158771][ T6023] dump_stack_lvl+0x189/0x250 [ 81.158791][ T6023] ? __virt_addr_valid+0x1c8/0x5c0 [ 81.158809][ T6023] ? rcu_is_watching+0x15/0xb0 [ 81.158822][ T6023] ? __kasan_check_byte+0x12/0x40 [ 81.158841][ T6023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.158856][ T6023] ? rcu_is_watching+0x15/0xb0 [ 81.158870][ T6023] ? lock_release+0x4b/0x3e0 [ 81.158893][ T6023] ? __virt_addr_valid+0x1c8/0x5c0 [ 81.158912][ T6023] ? __virt_addr_valid+0x4a5/0x5c0 [ 81.158932][ T6023] print_report+0xca/0x240 [ 81.158949][ T6023] ? __bpf_get_stackid+0x677/0xcf0 [ 81.158969][ T6023] kasan_report+0x118/0x150 [ 81.158992][ T6023] ? __bpf_get_stackid+0x677/0xcf0 [ 81.159014][ T6023] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 81.159051][ T6023] __bpf_get_stackid+0x677/0xcf0 [ 81.159081][ T6023] ? bpf_prog_12712c88fd19bd5b+0x2a/0x32 [ 81.159101][ T6023] bpf_get_stackid_raw_tp+0x196/0x210 [ 81.159123][ T6023] bpf_prog_12712c88fd19bd5b+0x2a/0x32 [ 81.159137][ T6023] bpf_trace_run4+0x28b/0x4a0 [ 81.159157][ T6023] ? bpf_trace_run4+0x19c/0x4a0 [ 81.159175][ T6023] ? __pfx_bpf_trace_run4+0x10/0x10 [ 81.159191][ T6023] ? lock_release+0x2b5/0x3e0 [ 81.159213][ T6023] ? __pfx_get_page_from_freelist+0x10/0x10 [ 81.159229][ T6023] ? prepare_alloc_pages+0x213/0x610 [ 81.159244][ T6023] trace_mm_page_alloc+0x129/0x150 [ 81.159262][ T6023] __alloc_frozen_pages_noprof+0x1d6/0x370 [ 81.159280][ T6023] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 81.159305][ T6023] alloc_pages_bulk_noprof+0x560/0x710 [ 81.159325][ T6023] ? alloc_pages_noprof+0xbe/0x190 [ 81.159345][ T6023] kasan_populate_vmalloc+0xba/0x1a0 [ 81.159368][ T6023] alloc_vmap_area+0xd51/0x1490 [ 81.159393][ T6023] ? __pfx_alloc_vmap_area+0x10/0x10 [ 81.159413][ T6023] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 81.159433][ T6023] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 81.159448][ T6023] ? __get_vm_area_node+0x13f/0x300 [ 81.159469][ T6023] ? bpf_ringbuf_alloc+0x341/0x570 [ 81.159486][ T6023] __get_vm_area_node+0x1f8/0x300 [ 81.159509][ T6023] ? bpf_ringbuf_alloc+0x341/0x570 [ 81.159526][ T6023] vmap+0x162/0x310 [ 81.159547][ T6023] ? bpf_ringbuf_alloc+0x341/0x570 [ 81.159565][ T6023] bpf_ringbuf_alloc+0x341/0x570 [ 81.159584][ T6023] ringbuf_map_alloc+0x1c8/0x2f0 [ 81.159608][ T6023] map_create+0xaa3/0x14d0 [ 81.159631][ T6023] ? security_bpf+0x7e/0x300 [ 81.159653][ T6023] __sys_bpf+0x60f/0x870 [ 81.159672][ T6023] ? __pfx___sys_bpf+0x10/0x10 [ 81.159693][ T6023] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 81.159711][ T6023] ? perf_trace_preemptirq_template+0xa3/0x340 [ 81.159727][ T6023] ? irqentry_exit_to_user_mode+0xd1/0x120 [ 81.159748][ T6023] __x64_sys_bpf+0x7c/0x90 [ 81.159763][ T6023] do_syscall_64+0xfa/0x3b0 [ 81.159780][ T6023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.159793][ T6023] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 81.159808][ T6023] ? clear_bhb_loop+0x60/0xb0 [ 81.159822][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.159835][ T6023] RIP: 0033:0x7f67ead8ebe9 [ 81.159848][ T6023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.159859][ T6023] RSP: 002b:00007f67ebb93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 81.159875][ T6023] RAX: ffffffffffffffda RBX: 00007f67eafc5fa0 RCX: 00007f67ead8ebe9 [ 81.159885][ T6023] RDX: 0000000000000048 RSI: 00002000000007c0 RDI: 0000000000000000 [ 81.159894][ T6023] RBP: 00007f67eae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 81.159903][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.159912][ T6023] R13: 00007f67eafc6038 R14: 00007f67eafc5fa0 R15: 00007ffc6ce6b768 [ 81.159928][ T6023] [ 81.159933][ T6023] [ 81.545150][ T6023] Allocated by task 6023: [ 81.549466][ T6023] kasan_save_track+0x3e/0x80 [ 81.554148][ T6023] __kasan_kmalloc+0x93/0xb0 [ 81.558733][ T6023] __kmalloc_node_noprof+0x276/0x4e0 [ 81.564020][ T6023] bpf_map_area_alloc+0x64/0x180 [ 81.568961][ T6023] prealloc_elems_and_freelist+0x86/0x1d0 [ 81.574677][ T6023] stack_map_alloc+0x33f/0x4c0 [ 81.579436][ T6023] map_create+0xaa3/0x14d0 [ 81.583861][ T6023] __sys_bpf+0x60f/0x870 [ 81.588108][ T6023] __x64_sys_bpf+0x7c/0x90 [ 81.592516][ T6023] do_syscall_64+0xfa/0x3b0 [ 81.597017][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.602895][ T6023] [ 81.605203][ T6023] The buggy address belongs to the object at ffff88805686c000 [ 81.605203][ T6023] which belongs to the cache kmalloc-cg-2k of size 2048 [ 81.619510][ T6023] The buggy address is located 24 bytes to the right of [ 81.619510][ T6023] allocated 1600-byte region [ffff88805686c000, ffff88805686c640) [ 81.634172][ T6023] [ 81.636485][ T6023] The buggy address belongs to the physical page: [ 81.642890][ T6023] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56868 [ 81.651643][ T6023] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 81.660127][ T6023] memcg:ffff88802ba49d01 [ 81.664379][ T6023] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 81.671922][ T6023] page_type: f5(slab) [ 81.675924][ T6023] raw: 00fff00000000040 ffff88801a44b3c0 dead000000000122 0000000000000000 [ 81.684493][ T6023] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff88802ba49d01 [ 81.693235][ T6023] head: 00fff00000000040 ffff88801a44b3c0 dead000000000122 0000000000000000 [ 81.701890][ T6023] head: 0000000000000000 0000000000080008 00000000f5000000 ffff88802ba49d01 [ 81.710558][ T6023] head: 00fff00000000003 ffffea00015a1a01 00000000ffffffff 00000000ffffffff [ 81.719563][ T6023] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 81.728214][ T6023] page dumped because: kasan: bad access detected [ 81.734623][ T6023] page_owner tracks the page as allocated [ 81.740326][ T6023] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6018, tgid 6017 (syz.0.12), ts 81013896885, free_ts 21113173788 [ 81.761324][ T6023] post_alloc_hook+0x240/0x2a0 [ 81.766089][ T6023] get_page_from_freelist+0x21e4/0x22c0 [ 81.771619][ T6023] __alloc_frozen_pages_noprof+0x181/0x370 [ 81.777413][ T6023] alloc_pages_mpol+0x232/0x4a0 [ 81.782248][ T6023] allocate_slab+0x8a/0x370 [ 81.786732][ T6023] ___slab_alloc+0xbeb/0x1410 [ 81.791398][ T6023] __kmalloc_cache_noprof+0x296/0x3d0 [ 81.796778][ T6023] copy_verifier_state+0x837/0xf10 [ 81.801877][ T6023] push_stack+0x19d/0x390 [ 81.806189][ T6023] check_cond_jmp_op+0x1469/0x2910 [ 81.811316][ T6023] do_check+0x6751/0xe520 [ 81.815633][ T6023] do_check_common+0x1949/0x24f0 [ 81.820558][ T6023] bpf_check+0x1746a/0x1d2d0 [ 81.825134][ T6023] bpf_prog_load+0x1318/0x1930 [ 81.829883][ T6023] __sys_bpf+0x528/0x870 [ 81.834109][ T6023] __x64_sys_bpf+0x7c/0x90 [ 81.838507][ T6023] page last free pid 1 tgid 1 stack trace: [ 81.844290][ T6023] __free_frozen_pages+0xbc4/0xd30 [ 81.849392][ T6023] free_contig_range+0x1bd/0x4a0 [ 81.854310][ T6023] destroy_args+0x64/0x4a0 [ 81.858708][ T6023] debug_vm_pgtable+0x39f/0x3b0 [ 81.863543][ T6023] do_one_initcall+0x233/0x820 [ 81.868297][ T6023] do_initcall_level+0x104/0x190 [ 81.873314][ T6023] do_initcalls+0x59/0xa0 [ 81.877630][ T6023] kernel_init_freeable+0x334/0x4b0 [ 81.882812][ T6023] kernel_init+0x1d/0x1d0 [ 81.887213][ T6023] ret_from_fork+0x3f9/0x770 [ 81.891791][ T6023] ret_from_fork_asm+0x1a/0x30 [ 81.896544][ T6023] [ 81.898858][ T6023] Memory state around the buggy address: [ 81.904480][ T6023] ffff88805686c500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 81.912524][ T6023] ffff88805686c580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 81.920659][ T6023] >ffff88805686c600: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 81.928697][ T6023] ^ [ 81.935612][ T6023] ffff88805686c680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.943671][ T6023] ffff88805686c700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.951708][ T6023] ================================================================== [ 81.978041][ T6023] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 81.985281][ T6023] CPU: 0 UID: 0 PID: 6023 Comm: syz.1.14 Not tainted syzkaller #0 PREEMPT(full) [ 81.994398][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.004472][ T6023] Call Trace: [ 82.007760][ T6023] [ 82.010694][ T6023] dump_stack_lvl+0x99/0x250 [ 82.015299][ T6023] ? __asan_memcpy+0x40/0x70 [ 82.019898][ T6023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.025116][ T6023] ? __pfx__printk+0x10/0x10 [ 82.029729][ T6023] vpanic+0x281/0x750 [ 82.033722][ T6023] ? irqentry_exit+0x74/0x90 [ 82.038330][ T6023] ? __pfx_vpanic+0x10/0x10 [ 82.042843][ T6023] ? irqentry_exit+0x74/0x90 [ 82.047452][ T6023] panic+0xb9/0xc0 [ 82.051189][ T6023] ? __pfx_panic+0x10/0x10 [ 82.055616][ T6023] ? __bpf_get_stackid+0x677/0xcf0 [ 82.060753][ T6023] ? __bpf_get_stackid+0x677/0xcf0 [ 82.065876][ T6023] check_panic_on_warn+0x89/0xb0 [ 82.070825][ T6023] ? __bpf_get_stackid+0x677/0xcf0 [ 82.076009][ T6023] end_report+0x78/0x160 [ 82.080269][ T6023] kasan_report+0x129/0x150 [ 82.084769][ T6023] ? __bpf_get_stackid+0x677/0xcf0 [ 82.089869][ T6023] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 82.095835][ T6023] __bpf_get_stackid+0x677/0xcf0 [ 82.100770][ T6023] ? bpf_prog_12712c88fd19bd5b+0x2a/0x32 [ 82.106385][ T6023] bpf_get_stackid_raw_tp+0x196/0x210 [ 82.111745][ T6023] bpf_prog_12712c88fd19bd5b+0x2a/0x32 [ 82.117191][ T6023] bpf_trace_run4+0x28b/0x4a0 [ 82.121874][ T6023] ? bpf_trace_run4+0x19c/0x4a0 [ 82.126743][ T6023] ? __pfx_bpf_trace_run4+0x10/0x10 [ 82.131927][ T6023] ? lock_release+0x2b5/0x3e0 [ 82.136596][ T6023] ? __pfx_get_page_from_freelist+0x10/0x10 [ 82.142474][ T6023] ? prepare_alloc_pages+0x213/0x610 [ 82.147742][ T6023] trace_mm_page_alloc+0x129/0x150 [ 82.152837][ T6023] __alloc_frozen_pages_noprof+0x1d6/0x370 [ 82.158627][ T6023] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 82.164941][ T6023] alloc_pages_bulk_noprof+0x560/0x710 [ 82.170387][ T6023] ? alloc_pages_noprof+0xbe/0x190 [ 82.175489][ T6023] kasan_populate_vmalloc+0xba/0x1a0 [ 82.180765][ T6023] alloc_vmap_area+0xd51/0x1490 [ 82.185613][ T6023] ? __pfx_alloc_vmap_area+0x10/0x10 [ 82.190887][ T6023] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 82.196854][ T6023] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 82.202840][ T6023] ? __get_vm_area_node+0x13f/0x300 [ 82.208050][ T6023] ? bpf_ringbuf_alloc+0x341/0x570 [ 82.213160][ T6023] __get_vm_area_node+0x1f8/0x300 [ 82.218193][ T6023] ? bpf_ringbuf_alloc+0x341/0x570 [ 82.223298][ T6023] vmap+0x162/0x310 [ 82.227100][ T6023] ? bpf_ringbuf_alloc+0x341/0x570 [ 82.232202][ T6023] bpf_ringbuf_alloc+0x341/0x570 [ 82.237132][ T6023] ringbuf_map_alloc+0x1c8/0x2f0 [ 82.242062][ T6023] map_create+0xaa3/0x14d0 [ 82.246466][ T6023] ? security_bpf+0x7e/0x300 [ 82.251044][ T6023] __sys_bpf+0x60f/0x870 [ 82.255275][ T6023] ? __pfx___sys_bpf+0x10/0x10 [ 82.260035][ T6023] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 82.266612][ T6023] ? perf_trace_preemptirq_template+0xa3/0x340 [ 82.272759][ T6023] ? irqentry_exit_to_user_mode+0xd1/0x120 [ 82.278571][ T6023] __x64_sys_bpf+0x7c/0x90 [ 82.282977][ T6023] do_syscall_64+0xfa/0x3b0 [ 82.287472][ T6023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.293523][ T6023] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 82.299663][ T6023] ? clear_bhb_loop+0x60/0xb0 [ 82.304325][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.310204][ T6023] RIP: 0033:0x7f67ead8ebe9 [ 82.314609][ T6023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.334202][ T6023] RSP: 002b:00007f67ebb93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.342618][ T6023] RAX: ffffffffffffffda RBX: 00007f67eafc5fa0 RCX: 00007f67ead8ebe9 [ 82.350591][ T6023] RDX: 0000000000000048 RSI: 00002000000007c0 RDI: 0000000000000000 [ 82.358549][ T6023] RBP: 00007f67eae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 82.366506][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.374484][ T6023] R13: 00007f67eafc6038 R14: 00007f67eafc5fa0 R15: 00007ffc6ce6b768 [ 82.382459][ T6023] [ 82.385729][ T6023] Kernel Offset: disabled [ 82.390038][ T6023] Rebooting in 86400 seconds..