last executing test programs: 1m38.609928595s ago: executing program 1 (id=2469): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="160000000000000004010000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES64=0x0, @ANYRES32, @ANYBLOB="000000000000000000000058350000000000007f000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x400, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_clone(0x4112400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000300)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x8000000000002, 0xfffffffe, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, r0, 0xd, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r7, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfffc}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000840)="b9aea252ff030703008cb89e0800", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000938ecefc9c28437de846000008000540000000020900020073797a310000000008000a40fffffffc14000000110001000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1m37.643627789s ago: executing program 1 (id=2478): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES16, @ANYRES32], 0xffdd) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xb3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fstat(r3, 0x0) fstat(r3, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x0, &(0x7f0000000ac0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r5, r4]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}, @rights={{0x20, 0x1, 0x1, [r5, r5, 0xffffffffffffffff, r4]}}], 0xa0, 0x40000}, 0x4044001) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, @val=@tcx}, 0x1c) fstat(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r9, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000002940)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440), 0x1000060, &(0x7f0000000540)=ANY=[@ANYBLOB='mode=00000000000040000000000,mode=00000000000000000017156,gid=', @ANYRESHEX=r11, @ANYBLOB="287569643d243cf70677ba40d5774615e82cbb68865cff947d8b591ff65a99f824765f2ab62c87b6e0e074c2f44c0bd51127da67d59cedeb1eb71f6ab6", @ANYRESHEX=r10, @ANYBLOB=',\x00']) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20) r14 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r14, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f00000005c0)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000300), 0x0, &(0x7f00000006c0)=[@rights={{0x38, 0x1, 0x1, [r0, r0, r0, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r11}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r12, r0, r0, r1, r13]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}], 0x108, 0x10}, 0x1000) r17 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r17, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m37.114571709s ago: executing program 1 (id=2482): r0 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18380000000000000000000002000002ab1ca06a0600000018100000", @ANYRES32, @ANYBLOB="000000000000000000000000000000001800000000000000000000000000000095000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70200000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x21) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) recvmsg(r3, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="534008225c60d19510988bcfa16b73f350624749ce1c994701a099931bc81d57221624e556799fe66cb20b74a4a6c3a95550cd231033b12ba7ee3cab06fb3c196cf1ddf76702e63513c3d015e03bb0c8e985f7ab", @ANYRESDEC=r0, @ANYRES32=r5, @ANYRES8, @ANYRESOCT, @ANYBLOB="d3b3481f8da5422e1c4a2b1756ee2b287c9e8870e11084f3413db228e06936a9d9f61c94de66531d48d511a90b5c9c02c055fd26c7997375135a0f097e11aaa6a523418b4ffdff13b155783c1de06b8639d3ad87793035d04dd92c63432bb7292df550524e037f0544b15c18037368c4efc98fb2a82b59a242750e6889c3b5ec2a5fd0e2de76655d4e0f5c7a6e28e4e181ec560a11c6914ffad49c18907d24dc2bb1b1f6e71bdc6d8f90ae51d85f04e3c274f52cc1fb181f726f78c42dba74a5abfd72735b4c35dbba426e8cddbab95d2515870b3010f7cdb4", @ANYRESHEX], 0xb4}}, 0x0) 1m36.149089167s ago: executing program 1 (id=2488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x18) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) socket$kcm(0x10, 0x3, 0x10) (async) r2 = socket$kcm(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) sendmsg$can_raw(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$can_raw(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x104, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x4, 0x100003fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x1, 0x84) (async) r4 = socket$kcm(0x2, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) setsockopt$sock_attach_bpf(r4, 0x84, 0x83, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90b24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047ce4ff07004280040008000c00018006000600894f"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1m35.554794415s ago: executing program 1 (id=2494): r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080009000000000000000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x28, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x8, 0x3, 0x0, 0x0, @uid}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x50) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x28, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x8, 0x3, 0x0, 0x0, @uid}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8000) (async) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8000) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x46, &(0x7f0000000040)=r5, 0x4) sendmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000240081064e810ba1f1ffffff0200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fa215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbddd4f644ec7032de8dee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55c82148d29e000000000000000000000000000000004a", 0xd8}], 0x1}, 0x40844) 1m35.172419969s ago: executing program 1 (id=2495): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x4a88, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$inet(r2, &(0x7f0000000740)={&(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000200)=[{&(0x7f00000003c0)="5e55f9178f035b6efffb757d732d802e54dd8003cf5186aacaf192a18e231df373ff601b5d541630c239855413d854d37e3d1f0910edfa1d36de30a40a19b39ca19aa2562df1e3bca5ee87e652926122e5eab195bf7b909bb9207a594d3e1893f3d53c27e4bd99934d6c527034d998d187048ee8536419a1cceee3aa95860ca3c450de37d8de78320a8b5a5c41eef953132ec933cf5cace56c629dc95843340b94a6e2990472088d74e13fb85a4f3dfc131759fbc1", 0xb5}], 0x1, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}, 0x801) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000fff0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000850000000000000000100000186600000800800000000000040000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)}, 0x94) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r6, r3, 0x0, 0x4, &(0x7f00000000c0)='GPL\x00'}, 0x30) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x4a88, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000740)={&(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000200)=[{&(0x7f00000003c0)="5e55f9178f035b6efffb757d732d802e54dd8003cf5186aacaf192a18e231df373ff601b5d541630c239855413d854d37e3d1f0910edfa1d36de30a40a19b39ca19aa2562df1e3bca5ee87e652926122e5eab195bf7b909bb9207a594d3e1893f3d53c27e4bd99934d6c527034d998d187048ee8536419a1cceee3aa95860ca3c450de37d8de78320a8b5a5c41eef953132ec933cf5cace56c629dc95843340b94a6e2990472088d74e13fb85a4f3dfc131759fbc1", 0xb5}], 0x1, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}, 0x801) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000fff0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000850000000000000000100000186600000800800000000000040000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)}, 0x94) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r6, r3, 0x0, 0x4, &(0x7f00000000c0)='GPL\x00'}, 0x30) (async) 1m20.08997928s ago: executing program 32 (id=2495): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x4a88, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$inet(r2, &(0x7f0000000740)={&(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000200)=[{&(0x7f00000003c0)="5e55f9178f035b6efffb757d732d802e54dd8003cf5186aacaf192a18e231df373ff601b5d541630c239855413d854d37e3d1f0910edfa1d36de30a40a19b39ca19aa2562df1e3bca5ee87e652926122e5eab195bf7b909bb9207a594d3e1893f3d53c27e4bd99934d6c527034d998d187048ee8536419a1cceee3aa95860ca3c450de37d8de78320a8b5a5c41eef953132ec933cf5cace56c629dc95843340b94a6e2990472088d74e13fb85a4f3dfc131759fbc1", 0xb5}], 0x1, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}, 0x801) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000fff0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000850000000000000000100000186600000800800000000000040000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)}, 0x94) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r6, r3, 0x0, 0x4, &(0x7f00000000c0)='GPL\x00'}, 0x30) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x4a88, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000740)={&(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000200)=[{&(0x7f00000003c0)="5e55f9178f035b6efffb757d732d802e54dd8003cf5186aacaf192a18e231df373ff601b5d541630c239855413d854d37e3d1f0910edfa1d36de30a40a19b39ca19aa2562df1e3bca5ee87e652926122e5eab195bf7b909bb9207a594d3e1893f3d53c27e4bd99934d6c527034d998d187048ee8536419a1cceee3aa95860ca3c450de37d8de78320a8b5a5c41eef953132ec933cf5cace56c629dc95843340b94a6e2990472088d74e13fb85a4f3dfc131759fbc1", 0xb5}], 0x1, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}, 0x801) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000fff0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000850000000000000000100000186600000800800000000000040000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)}, 0x94) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r6, r3, 0x0, 0x4, &(0x7f00000000c0)='GPL\x00'}, 0x30) (async) 34.133403651s ago: executing program 5 (id=2887): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x44, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="951e37a6030000000400010005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/51}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@flushpolicy={0x1c, 0x1d, 0x1, 0x70bd25, 0x25dfdbfc, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x10, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000280), &(0x7f0000000340), 0x8, 0x19, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@gettfilter={0x6c, 0x2e, 0x8, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x7, 0xfff2}, {0xe, 0x4}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0xffff165b}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x844) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x8, &(0x7f0000000cc0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @generic={0x8, 0x8, 0xc, 0x5, 0xca28}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f0000000d00)='syzkaller\x00', 0x1ff, 0x3f, &(0x7f0000000d40)=""/63, 0x40f00, 0x20, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000dc0)={0x1, 0x2, 0xc7, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000e00)=[r6], &(0x7f0000000e40)=[{0x0, 0x3, 0xa, 0x1}, {0x5, 0x3, 0x3, 0x3}, {0x3, 0x4, 0x2, 0x6}, {0x3, 0x2, 0xd}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x14, &(0x7f0000000040)=ANY=[@ANYRES64=r5, @ANYRES8=r1, @ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)={0xe4, 0x3c, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x48, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xb9, 0x1, 0x0, 0x1, [@generic="045f0f62c0448a8a17cba95bbab7d06713a637356ca4e10f3c0d4dc84cffebd6dd97bfa96fec2754cc34c7e5e20ca36f0daaf62c58479690b6810bb6100a83971845249964700e7393bfd59e651168aaa9acef54fbd6ba1c473f1f22c9c5ed1103f86b2b2f86ffd679abb87c23b6890fcd176adca141fefdd1029414dd7a84d02df661d4198eb43dce697ea34f9e6c644666c48dd564b6e93d1a49b6e924ab73ea3207cbdb8081d147b7b2ab4c0df0adb5c84ef7f6"]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0xe4}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x3}, 0x2, 0x0, 0x0, 0x5, 0x3fe, 0x7fffffff, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x6) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa100, 0x7, 0x8, 0x0, 0x2b66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 32.971511088s ago: executing program 5 (id=2891): socket$kcm(0x1e, 0x5, 0x0) r0 = socket$kcm(0x25, 0x1, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff56}, 0x94) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r4}, 0x10) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x10, r4}, 0x18) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000b80)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0xfffffffffffffd41) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000040000000000000000000007110ad000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="f400000000001896b520a30d286a8e34ff94e1a9e2000079112208771600001e000000000000009500000c0000000042"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)=0x12800) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, r6, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={r7, &(0x7f0000000600)="c0ce0eab25e02eb246857d8dbe4548fc0e72cbff1e1dac1ef050f9ceae1090d9621d067604a8d804ede41d7f0f8e9a2ead208c04720a1ff14b015ab1ca6c1395e2a172bc1b182ae82959a643271c55", &(0x7f0000000700)=""/163, 0x4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000037000100feffffff00000000017c00000c008e0006"], 0x28}, 0x1, 0x0, 0x0, 0x4048051}, 0x4c080) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000000000007911b000000000008510000002000000850000000800000095000007000000009500a52e3c7e360500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) (async) socketpair(0x22, 0x2, 0x3, &(0x7f0000000000)) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000207010100000000000000000a0000054d00078008000140000000010800024000000200080002400000000a080001400000000b080001400000000308000240000007b2080001400000003b080002400000000a0800014000000008"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 32.599444436s ago: executing program 5 (id=2893): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711211000000000095"], &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 32.44642778s ago: executing program 5 (id=2895): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4, 0x3000c}], 0x10, 0xfffffff6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x27, 0x0, &(0x7f0000000c40)="bcceb54f8793761baf54949ccc1878cb76c70000001b23f64e322f258a5acd9fa6c3616f23f307", 0x0, 0x2, 0x0, 0x5}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b6a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0953fc0b10000300", 0x33fe0}], 0x1}, 0x4000804) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x81}, 0x11efa, 0x5, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x6, 0x80, 0x9, 0x2, 0x5, 0x7, 0x0, 0x6, 0x4200, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x200, 0x6, 0xc1, 0x2, 0x80000001, 0x10001, 0xd84, 0x0, 0x80000001, 0x0, 0x5}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x89e0, &(0x7f00000007c0)={'netdevsim0\x00', @broadcast}) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f913a3c92b", 0x14}], 0x1}, 0x0) 31.932471283s ago: executing program 5 (id=2899): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000880)}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8b, 0x5, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f0000000040)}, 0x20) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x10000}, 0x50) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r5, 0x0, 0x0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x9, 0x23, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81d6, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}, @exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}, @ldst={0x2, 0x1, 0x0, 0x7, 0x1, 0xfffffffffffffffe, 0x10}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0xd9, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x8, 0x9, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000380)=[{0x3, 0x1, 0x9}], 0x10, 0xfff}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000003c0)=r6, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r7) r8 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f0000000100), &(0x7f0000000740)=r6}, 0x20) sendmsg$kcm(r7, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x4, 0x3, 0x1, 0x40000003, {0xa, 0x4e20, 0xffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x80, 0x0}, 0x886f5cad098bbc1) ioctl$SIOCSIFHWADDR(r7, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) 30.291865178s ago: executing program 5 (id=2903): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x19c5a, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x49) (async) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0xd}, 0x80, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000440)="cb4e88a8af3288a8eef1", 0xa}], 0x2}, 0x0) r6 = getpid() r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, r6, 0x3, 0xffffffffffffffff, 0x0) r8 = getpid() r9 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r8, 0x0, r7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r10, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40010000) (async, rerun: 32) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x2400, 0x3) (async, rerun: 32) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000002140)=ANY=[@ANYBLOB="020afc000700000028bd7000fedb66ec05001a000000000000000000000000000000000064010100000000002c002000b9eabdbc1f1dd4b02d"], 0x38}}, 0x40408c0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x10c4, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x100000}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}, {0x1074, 0x1, [@m_mirred={0x1070, 0x20, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x864, 0x1, 0x20000000, 0x3c9, 0x4}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x4, 0x10000000, 0x7, 0x3ff}, 0x1, r2}}]}, {0x1004, 0x6, "1784e6ce5019f19a7e635a82dd005f36dfb031b4d68aab5a7f756c92cbbd11d43c616e561597f92b8b6396774b0c57ec84d271cf682743f1de25073325c4b2993a6ca65b70055e727a1722c3473376fd3ce76f264807cff1545c3b645244141c85849ed7ca86aeee09bbf8744cdcb08164d6376a7f69ff4521f54ddb4a4b5519d45b95c516a65a3f39e1078088b0ee5a4ff33ecc08296b08401cccd50a8ab65dae29e429c4a02fcca760ed4f71c43e2b273ba13689aee01b672b189384429c395598e781a86083277484d5cb18817a23de0136c7bec56f1e1de4e7f55e6aea0b2adcc3e2359c2c119bdb8040ea9af43d091ef822aff2aa591d6f0334a44f12db48638f9a4fa13a1a150b9530a56d4277e498bfbfdf435763f3be1b67762b6304dd2ed2b19c21aa192ab49a11600730086e87f9de107ba939d1e02a4417a16d0e4f0c90023ea5b4f544b73d5cc7961e67b2eb8d2eaabf2d5be13616d239b9a5314487f5c12bdfae0a95eadfbe7ab7b2b4393dcbbd123cb429d9dd7280db83682f357bc08fcb5873e9df1b68193c7ddf38ceec5cb7eecdd2878a6bbc60040442532cb3043231edaf49f74e433be8ef53f22c581e54ff701bf2f633e9ce292e4643102e07c3dba7004722bfc70684da4a7b7e8428eccf8c24b82f81533162522da7b12250f2be8dbb773f108c2c6b4f7053b7befc449a28adfee0aba0427c0805b51e3ee4af96eca6f905620b02ed282d7a0999b0de4fd2c360c48b9dcf85075f8bee615fc61d03872163c3a1db6f00112d4c6ddc7ad2adff202d022e51a4d90764cc5ddaa4091fd70595aec305d53b88d9770f79b1300d78f29cc7328e0172d035eb98b9de479c5aacbf3bb8f3d399ef84e2763bcb4bd73a2e80027caa7b8b8bee16a893e0550c683f8c6f55bd8c336fed01a64b28b60f4a520ee74f8edeef1619a57547ccbd4d3f4d9eac2f04937a017e3a9cda4c3901de03a533b3967ffd0cd977cb30e8daae5e25adefa736aad9afab1a4798872ddbec213d709a1151d9f41fd714493e9329cc5d993602dce250ad7c9af0ee581b2a96fb940be597b621ac1e7c9be8c0e5c9f5555fcefa1207ba342cf0bf756e5e77080e251ef590448a618312f11b583ed3f938e49956b651002a3d8d25281d8b8c21a5064bb9ff46590b3b0a104f1217ffbe9bfcad4319eb98161083c47f8a96b479f57499e26754e717d03c07a9c8536a278dfe32f8d8fc43eab4ceaa5898219fff4d6adba32e1f369eccb3b427d7ecf6f065e21b14dcb1ab93fa760f86a35cff453a20b7b36c5efa41bffa91a889cd6a048e094b431625fc56c80533a3f28ceaa92184b47e68be38ac4606305d062ce70b74ed85f12d4e31b24516438942258ed838021f6f83ba1308e426dad664e0a1c4cc3da689d78f3111c30b33cc380c66b056c9569606e024a4da309f222045ca738d49d847ce860a14d9779af0e73001bbec88499c24404dfd445bf88350155ebf2bcdec24796b8f05e0073bdeeae5638b28b938cbb9087fa8db5fdd17e7ab470460b59277254eb6acc3f90655e93bc5fe9f479df0bf22f04d354f687416763dad7e58809bd08f8262206aede5f99a16caeb189c027edf5bcfd9162d71759ca9c162110cb7132e3064eb3a8f2efa84ec161d67106cb8b5b810605751b390c33404dbe8e3bc88a7e7d3b9ce7343d896465da1563bda4589f5324261be11eb8ee697695d3ca85202aebd8ebc42fba9dd66168b766a2f6db9da20c8edaa23de4e8dce65a757ddfcb72a00098b71028d732bf3d2b38c3467c6a54ab738530089864bb44f02f85a2981e2a3df760aeb5b2124ce19c0fd6ec7cb92e38ba4a783ca968f2669db307f47fdf0f8178cf47fb12c0180fd9b68fe75535faeddf451797113b1c1245fbc14ad0ab6fb43cb4e3632124242986c9b292d46fbd5295fe1c73bb3301a5e6e41aff77a571d3ef5c4d7d38e7e4bd29c4d10e05af1057412854624cc944eaf856f52537e09995dfe3f4bfd02bd4ec7adca0bfd6c3a6c6ffc89a245f9438812cbaa2a5851ccc99425d7dc4a443c297974ca4a1170bfb710c0783c9642bdd35bd34f13d68874aa01edba57328b8d330244006bc889a07b7042e319e89fcdcbf8a68a46e1184dd497d7744e80de94c7ee1c5bc43cf6f8e9fa9b33fad0f878b9fd1ef7a359641c6e50eadb458c742f6d3803816119622d28aa0fd31118432d99bc9eb22bbdf97dd8f9ce2de9a9596ec729884bb33a5b06d51ff263585f52f0cebda3243f8da66422ba10c08a86d7c4078a7bf5c2f5d2ae902be2ee6e7cfd86d08c70b369af375ad44cc44fc9f83c6e1ca3a70b66f044789b78367815ed324ea918bfc1c77b7060d10daff06f2b8758bd08e751285bd227e4f83b1627f744061e035925f05ab419fe66765173dd0bf8e3cfb0bb6a4c489e0118fd9aed5287f1bb81f9109bda93d2df21fda572d7ac0da9ecf8d6cdf232584dc02f5e30f3db4cf0440efc139af8ee8cb50071de9ed4b6eb33091343fc9a29ad2ce98b0411b4e26fafd2d9e46c23cab2b86ede0c9116551a1039f83c2d4f975fd00ffbc7d4720b98ca74acd363c71fbce4ec0a7dee7e59b81026ce1fe4971945c6a4f20c383628d36f8166486a645b106090f4f0cc8b46c3814ad88c0533f11c5b0e114910d28c130a83d51f43d7768d0636ce4990a1cc9f9189df7b34421be678f4481a608863d7f8d3275363e03d90286cb52941efb24b4580be361adb1f3dc55e296283dc487c1cc4fcfe3211ce6ab04771483939869f8a9e825336558a435d483d8d260d255652115fb2e5a366ddf6ddd46d7bd1d2c458cf0af1f6cb9847f1a643c93e6bfbbc2e5b4a294cfccbb54c007a5b32b12a139e0f1af980d5655d883fa2b7d8e25cc9b6de336b94c863bed303c5d5494edd5ce47a1dea542bdadb7230aa744f4feab1ee5f4ccfc5a1f9984c8a662e5261a60dddcae0745c044290fec805f21cbc4a525f9b6daf38316bb11d3af272eaccfe17f0ca45a23e634e56ab948bc5e8454443e178ed32f022a1410637539dbe3f3fc4178be4ef817100209dda47e68dbd3a883e43b49c74b21b15b4a6ddf174ce4f8c60448761ae69b65c828bc5157c32bd6fef69c04cdc7ffed94e86e9af3a48e4d3f71287f1d1e1a2fa4c9eb6ee46bf0912103e08328b9129d608ad1236c9952ac9fd5d774ff75d3fdf136ff3c19fca7bea8419968662569ca5f7e2166f51972804a47f84a5fc73e0c4f06227719f39cf2e6dc3ff74ae99d3cbd4dab280c2d0c62b79724980b433ca7cbb6df0185c3b095e55f416f77d270afcd818a382215cf8d6a9c42d3f021defbac7aaba5a099e52eb1bd9de7a6d4a90f79070a7a4c7d3a77d5b73de694961df989ba83f0426cd3baee9c9aeb1c5091506c589a01cdc3e5f557ddab41a818881725001fe2810c9d80a39c45f47b6a12de50ca7573665e7764baf0c6299338ef8e1b9a7b316289ca2bf0dc68df1c6097917ed777c92a0c3f53ebac7f6c57fce9b59e85fd0f981c65bee56cd31cac9476ea8301be8468f135f9b9cefb93c75a678a2cb51c772be2c6d239c24b0da3034ed684cc99935b05215c06b424fb161819462042044994b9a1344c8a07eb6b7cade900b62ab61ab26d959cdef1636c938dd31131167d88ee826183dd8242e241a10c15a90da6cea2eff612e5fe60cc3156efca31ce1e1ed1d192632f4ee793bcdd33bbb4206ed0c33b2f1fb36d35e50d2a8193633277f86249c5e5b8fde7332ad1fb29b607e8852042a1f2806b303dda0e4883770fef06bc6f04db4caaa79bc7a20cdfcb72f508ab7d6b5d41939bc4bf8312cae129a74f3af39d6e61cbb9bca9f3f151cac199ee226b4928a5368cc55146024ab783c65d7e507d7b7a7f9e7e8210fa1903cfd8e38c18a73793abdb23cc9680b8378017504ca9c9dde518b2def90bb2c48a8423b400eb9cd6823865e44e69170f411de16676ec2052a2b8e2c315f5be3e9edd07ee22f6d0b564f92509759c52b2fc250f221b539e998d522a1c8f30fe6de2548316eb9b12475b4281c8b64fa24314d527a366519847ac4e5486260bb65deb98b33791621bda6b699eaed1c92c49ee2b3a626db611fb4faaa81f8249d7cf3e9b4e94f4c4f15d0a40f93a7fd2adb1f8b79dac35b637f143efe302ae79cbda0daf2204c649d9a11e20aac97ab35e778b61239efdca2f28eb394a606dcf0c29d55b661479b2d9449c58605fca937dabe5bb1406c1dd59d5b38052ed56a1b25ae4c9519a3363b84b16bc27a6f699360a38e640e5711cbc337d98273546aaf74b3daaf675c7a154ba941eabfbce77174d4fbbf6bd8e3cdc694f5154d68bdfe7ee770a37fd95dac7ccc20f10efaccb84343b9e652443d1ec4d9881a5c980602f5461708df058050d5d8511197484095da37a698065edbdd4d49268e595179cc46edca8203cc4c2685c6ca7647caf7c2c0862353d7cd8c5bea5e256c50b5cbad9d2649445fccff352e0fcb3174bad655b18e5bc242d176658ceef5d334aeb8be846bfaf86309c3bd91dffb4bc14699e43fda81bcdf3d668acf8eff5b45796ae7f0297fa31e6da1cd9d286211e478aff527f5c4d43d85e3f989232839b8b31c5bd33b3ce40345963dfda40e3ce2ceb9f25295ad3c01e09484f04e5be57ef58f378f18d3dfeec52ec6a0dc7095ce6c85975d864e4ea2179550fb6865dcb45ffbfd8d21ed9aa1928c75571afdc26a61c9e2a9f724d57a65e0346423c607d92f0a6e498041471f13ceb197ff963b57260012856e488c0caaa11d2f27647f0128036ddd837ae2d91417a94571d085d340e3e9c057cce0e9718e5150b155f6a7a626daabad57a135073b98b23af17504aa7af6dc5f773b651406e9cd03326df967c9bc34d6d68c30fb829bdb4116125e98a8dcf0d1bd742fc923473756c544ad2102fec3f965b535f65f24318527ea48620b2e85d3dd26cafacec18298d3e40a08162ce910a9ae248ad5f8ca2e33bbe0b5ddf87b5eb517a85fa816523ca33e66ca6a77922c88cd89657d2e96d258087d2a2b77b0462a0cceca6821555370179caa5c4734b23cb0963d442a99c1ee6bd95d97d6bbe9d22e06bf672ad0901f2b97d47cee91f68c3d79b1a064e6cfe5417743c26a12d8e44f9f30de91e871810a8fc1d574c6601db0e987bfedc77011243be99a7841d942e5bbbce1de3d3b861ded913e61d131fb4cba471e0a1e71a363f1745f6a1e6594a9e6732500723a544d0d0bac703df4685741e565dbc11f15cab53afca4f4db6fdcea0bd8d0e401d07063d865eecaba53c1417befa80e02cc0d0fa5e4c285e74d3d83c251498256f278a01410a955cf173df3ca2ffdd04ec9479ee05ec7ba44d2ec7f9bef62e7bf01676998746163755718206c1d3af54d886485ffaeaa5114e9670beff04cbd962d9e82e7111ba12fe949796f980549b76555904ba0833df8877a367937ce4dc2faa61ef6b96a12f8ced6739cfc65cfdecc01f951c7cf843f328e1d0e3590b342b56437067b5283e5b7d214cef77e6e59065076145932fa14aec0c77fd7bb552c4dc68337e627992f74e378473139f83afdf07eb674e859f60776b19a7b822ee5797c93fbe2a9ea5fadb4bdb424bdff0975ac730d1e32df86817501e3039402259f17f2b8a7da276ebe48f102b41e42b587a3b046c22646969b3d32cfcd405963f974b435809070dc888344be5b038373cbf7231b0bed09cc0b7c51f9b3fd0103bbc3ae689d939e91d102e70236caa4fdd160001175653221"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x10c4}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 14.791204469s ago: executing program 33 (id=2903): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x19c5a, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x49) (async) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0xd}, 0x80, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000440)="cb4e88a8af3288a8eef1", 0xa}], 0x2}, 0x0) r6 = getpid() r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, r6, 0x3, 0xffffffffffffffff, 0x0) r8 = getpid() r9 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r8, 0x0, r7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r10, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40010000) (async, rerun: 32) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x2400, 0x3) (async, rerun: 32) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000002140)=ANY=[@ANYBLOB="020afc000700000028bd7000fedb66ec05001a000000000000000000000000000000000064010100000000002c002000b9eabdbc1f1dd4b02d"], 0x38}}, 0x40408c0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x10c4, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x100000}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}, {0x1074, 0x1, [@m_mirred={0x1070, 0x20, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x864, 0x1, 0x20000000, 0x3c9, 0x4}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x4, 0x10000000, 0x7, 0x3ff}, 0x1, r2}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x10c4}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3.752453659s ago: executing program 3 (id=3084): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r1, 0x0, 0x10000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r2, @ANYBLOB="ffa53c16e2b7c5fa7600", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) close(r0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a21"], 0x230}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000150000008500000007"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0xffff, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x11}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x8, 0x4, 0x6}, 0x48}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2404c080}, 0x40000) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x894b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40100000000e5000095000800"/32], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.271243996s ago: executing program 2 (id=3086): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600}}, 0x20) r1 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x21, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x1, @void}, 0x10) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000740)={&(0x7f0000000100)=@nl=@unspec, 0x80, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000000206030000000000000000000100000a05000400030000000900020073797a30000000000c00078005001400ed000000050005100a000000050001000600000011000300686173683a69702c706f727400000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvmsg$can_raw(r3, &(0x7f0000000240)={&(0x7f0000000080)=@x25, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/24, 0x18}], 0x1, &(0x7f0000000200)=""/29, 0x1d}, 0x10022) 3.061874893s ago: executing program 2 (id=3088): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000480)=@nfc_llcp={0xa, 0x0, 0xe0ffffff, 0x0, 0x0, 0x0, "be467b1f4cfd8c642c13334c199f91732d13b884b4ad52d055d6d5ae3b991ffc48ca221108c4d3aa623010eab68d9504000034ea00000001f000"}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="8000", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x6, 0x28, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065"], 0x88}, 0x0) close(r5) close(r4) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c00000400950300000000000000000c0002800400148004001980"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc0000010000000027bd70e50000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a000000000000001a4e460c85ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a00000000000000000000008040000000000000000008010000000000000000010000000000004400050000000000000000000000000000000001000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cc000000210001000000000004000000ff010000000000000000000000000001fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc0100000000000000000000000000010a0101000000000000000000000000003c000000000000000a000a002c0013"], 0xcc}}, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_crypto(0x10, 0x3, 0x15) 2.978559465s ago: executing program 3 (id=3089): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x10008, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.614584122s ago: executing program 3 (id=3091): close(0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x1946}, 0x4000, 0xf, 0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="020100050c0000000000000000000000050005000000000a004e22fffff195000000000000000000be79c2652752cf89ea4c9073c0d500000000000001040000000000000005000600000000000a004e2402000000fc020000000000000000000000000800020000000000000000"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180200ffffffffffffffff0000080000a76f503811afcd0db9ffd4d637b96583ca04cf2998918878b3af8900c8046ee428c74b77ccb8bf418621efc9d0d2f076f9d8"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000270000002700000007000000060000000200000f0300fb050000070000000100000005000000000000007d865f00005f615f5f2e00"], &(0x7f0000000680)=""/202, 0x47, 0xca, 0x9, 0x10}, 0x28) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x3633b81f6be8eb6) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000001f000000000000007e000000181100978dacf2293400", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b30000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x14, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x800}, 0x9010, 0x0, 0x0, 0x7, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0x0, {0xa, 0x4e22, 0x1, @private0, 0xda}}}, 0x80, 0x0}, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x6, @perf_config_ext={0x9, 0x3}, 0xc86, 0x2000, 0x0, 0x5, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x4, 0x0, 0x8000000000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$inet(r6, 0x0, 0x200040d1) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f91c240685", 0x14}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000500)={r4, 0x0, &(0x7f0000001780)=""/4080}, 0x20) 2.399249932s ago: executing program 2 (id=3093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5e8e51b09ba8aa5d758522eb3203d245b6e3c6da3d270e9462364958f019ccce18f1a870e0e9a8ec1203afcfccb8331a53c271f26d19d144ade957b888ef99ae95a5313c7dd733fcc54d2782389e57475a54519f89df013e0848cdac7e667a8f8ffb8ab6c21bb01370dd5c1c0953cd8a8f5ae88b0b400c0e6a0d733da04d0e75e26c0e", @ANYRES16=r0], 0x7c}}, 0x40000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5e8e51b09ba8aa5d758522eb3203d245b6e3c6da3d270e9462364958f019ccce18f1a870e0e9a8ec1203afcfccb8331a53c271f26d19d144ade957b888ef99ae95a5313c7dd733fcc54d2782389e57475a54519f89df013e0848cdac7e667a8f8ffb8ab6c21bb01370dd5c1c0953cd8a8f5ae88b0b400c0e6a0d733da04d0e75e26c0e", @ANYRES16=r0], 0x7c}}, 0x40000) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) (async) 2.354516613s ago: executing program 4 (id=3094): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x8) socket$kcm(0xa, 0x1, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, @perf_bp={&(0x7f0000000140), 0xc}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000a40)='\x8e\xc67\xf3Lfag\xddi\xdd\x89PO\xbc\xa4\f\xe6\x9f^\fa\'n\xfb\xc6m^\xba\xfcl\xa4wD\xfcsr\x03\xf9\x95.k\x97\xebr\x0e\xdc&\x8d\x1a\x88\x02\x00\x00\x00\xcbB\xa0\xbf\xd7cNz\xdfh\xe2}\xc9\xd8\xca\x8c\xef1=\xfd\xd4\xe9\x9b\x94Z\x81r\x10!7FW\x16c2\x89e\xe1\x7f-\x12\x9e?\xe0c\x8e\r9T\xf4T?\xf6\x91Wrk|\xa1\xf6V\x8aH\xff\xb7%\rs\xbaDM\x8f\xa4\xba\xfe2\xa6\xae?\xd5\x8d\xdb \xb1\x9d\xb9%\xb4\xa9\x84\"\xe8$\x01\x01|C\x99\xb7c1\xc0\x83[\x94\xcc\xe6\xd6P\xc1\xea\xbba@\x01/\xd1\x9f\f\xb4`|v~VSm5\x81\x99d|]9\\0\x03J\x9ch\f\x8e@*\x893\xd3\x95T\x80\xa6\x97Dl\x1c\xf3\x7f\x82\x8b\x15\x99\xb9\xb7L\xd5\xafr\xfb\x87\x03\xa3vi9>\x1b\xe7\x17\x1e\x12\xcbc!\xd5\xab\xf3\xa4O-\x86B\x94\x8aO\xb4\x8d\x9e\x96\xbaY\x06Q\xac\x8e\xa8\xc8n\xaaG\xc74\x86\x01\n\x95W\xa8^\xfa\xd5\xe0?H\xe0\xefW\x1ff\xbd$\f(G)[7\xbe@+\x1fNs\a\xdcZ|\xce\x19\x99eG=\xfb') sendmsg$key(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x2, 0x0, 0x8, 0x8, 0x41, 0x0, 0x70bd29, 0x25dfdbfe, [@sadb_key={0x20, 0x8, 0x790, 0x0, "a0145189e57e07c02f0749f4cbe415b676f59890070b67188da85e3488f2b346ad2394788068d0f00d5b2669de777164cc730abf3b38a143d2d8f02c96c2ade857c0d252310340b1a7dbe9ec4e7b61557037abc78dd4352d3b5339b2a4db05d9cfe476ef51ee9f83b0162787480afb9e8e93ed076d92cfaea85292a019189dd20619a27d5427321b8f1c6ca6eb8e38e83fe7a8bf5387ae865c1d53e1621802359f0874c4858046cb69816209639c9128b4e985054019050efcbdcb19976614769ee310b01105dd093588b8aeb2381f33ebf27791d759b48d55c73b0978c19a06fadf615b6b9ebe73085ded37bafc8d0cf62b"}, @sadb_lifetime={0x4, 0x3, 0xac7, 0x9, 0x7, 0x80000001}, @sadb_key={0x10, 0x9, 0x3c0, 0x0, "76a09abbe602063f8544c2eafd491fc530d566da7abbea4ea67972bb7d0766c4ce4e148d6f33a65a08f92b5f3ba0a3a4ea2461da52a12adadd12ea0d852300becf6c43a23519d405f23e6db22cd224d6541ec65d854064abb18e138f02c3ce7284db254fdae4bb9b5e1df5caf0f7925e68665c070c61674a"}, @sadb_key={0x1, 0x9}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x6e6bb1, 0x81, {0x6, 0x3c, 0xe7, 0x4, 0x0, 0x4, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private1}}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d3}]}, 0x208}}, 0x40001) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x9, 0x1, 0x1, 0x1c}]}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) 1.886297411s ago: executing program 3 (id=3095): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[], 0x0, 0x3a, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x238000, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='\a', 0x3, 0x0, 0x25e}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000009d00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) 1.6588786s ago: executing program 2 (id=3096): socket$kcm(0x29, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000850000000500000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x12, 0x0, 0x0, 0x10, &(0x7f0000000540), 0x0, 0x0, 0x37, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x1000, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)}, 0x4008804) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x15) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8400) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f00000000c0)=@hci={0x1f, 0x0, 0x41}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)="623bed114d421d8b1c60ea4388a8", 0xe}, {&(0x7f0000000240)="16c488a8", 0x4}, {&(0x7f0000000140)="e2fe9fa8", 0x4}], 0x3}, 0x4044) 1.550721637s ago: executing program 4 (id=3097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8942, &(0x7f0000001a80)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x122) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d6173710000000014000280080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 1.536921316s ago: executing program 0 (id=3098): r0 = getpid() r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8024, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x1ffffffe, 0x8, 0x1b17, 0x0, 0x800}, r0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r5, r6]}}], 0x18, 0x40008c1}, 0x84) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) close(r4) r7 = socket$kcm(0x22, 0x3, 0x0) close(r7) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ae46e893f0007000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getpid() (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8024, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x1ffffffe, 0x8, 0x1b17, 0x0, 0x800}, r0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) sendmsg$unix(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r5, r6]}}], 0x18, 0x40008c1}, 0x84) (async) close(r6) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) close(r4) (async) socket$kcm(0x22, 0x3, 0x0) (async) close(r7) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ae46e893f0007000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) 1.236193917s ago: executing program 0 (id=3099): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x4, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x50, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x39, 0x6, "3f5f44b67bc527718f154f4c2d7e7a14cfa8686ed586b118f47c1034a382fd325f50c27333c2c922daf978b978e8ea29a8e2c0923b"}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x41}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x20050800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640bb321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd91be4587f90e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1786eda2b20"], &(0x7f0000000100)='GPL\x00'}, 0x48) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000040000000000000000afa00000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffc"], 0x0, 0xfc5f}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x2, 0xb1, &(0x7f0000000780)=""/177, 0x40f00, 0x4, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x9, 0x1, 0x1}, 0x10, 0x28c43, r3, 0x0, &(0x7f0000000600)=[r2, r2, r2, r2, r2, r2, r5], 0x0, 0x10, 0x800}, 0x94) (async) r6 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) socket$kcm(0xa, 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) 1.151015849s ago: executing program 3 (id=3100): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) (async, rerun: 64) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0) (rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000800000000000000101000010990600f0ffffff95000000000000001db873d59b6714ffd0da9763e688f56e7be2fadf0b74c3283dad1061038496313d28bf43024c7999dc6a3e0694bf9e672db62159c362dd97af644eff3eea3f96c4d1bb2b"], &(0x7f0000000200)='GPL\x00', 0x8001, 0x0, 0x0, 0x40f00, 0x7c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x2, 0x1, 0xa, 0x1}, {0x1, 0x4, 0xe, 0x4}, {0x4, 0x2, 0xb, 0x4}, {0x5, 0x4, 0x0, 0x1}, {0x1, 0x5, 0x8, 0xb}, {0x2, 0x4, 0x0, 0xa}, {0x5, 0x3, 0x1, 0xf328ac246e56b269}, {0x4, 0x1, 0x7, 0x3}, {0x3, 0x2, 0x9, 0x9}, {0x4, 0x3, 0xd, 0xb}], 0x10, 0xbb}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000440)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300006d"], 0xfe33) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000003600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000035c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x2f8c}, 0x1, 0x0, 0x0, 0x48000}, 0x4) (async) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8970, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000010000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000080000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) 1.094956677s ago: executing program 4 (id=3101): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="c8050000000000001100"], 0x5c8}, 0xf7e5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x400, 0x7fffffff, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffefff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) close(r6) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}], 0x10}, 0x10140) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff800}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000017000b63d25a80648c2594f945a3cb0b", 0x14}], 0x1}, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYRES8=r7, @ANYRESDEC=r8, @ANYBLOB="080b149820a8b78dec2475beda7423d8bfdb574226955fff2336acda89d68025c553cf3e7a790dc324f76b155d7b359d874c183ce9d2f64715436d63a04c8a4bbd0ad8ee606efc67c1bc7ba3", @ANYRES16=r4, @ANYRES16=r5], 0x28}}, 0x20000000) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r10}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) 930.033154ms ago: executing program 3 (id=3102): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00132400000000000000000001000000000000", 0x18}], 0x1}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="88"}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x200003cf, &(0x7f0000000340)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000", @ANYRESDEC=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x118, 0xa, 0x8, 0x301, 0x70bd2a, 0x25dfdbfe, {0x5eec36353f3159d6, 0x0, 0x2}, [@generic="233c8211c1c1b72a2b34d8e14f3006121f297e71cadc4fcddec7ca42bf31", @nested={0x37, 0x117, 0x0, 0x1, [@generic="64e6ceb899d608f6e3a814fb5a494538b3326af34ce5a3581935dd3e0a9a6905fc85e35c1a31c8103390d3c077029cf372c441"]}, @generic="93d55623ba7ecf5b42a69375831f1a6cc72a93564d7a45b267b479b5a91ef14768f994bc252c1ec27a5fec4faef776e88129681394a5bf64623f6889edb95545b5af5094a50c5bf37c26f96aa997539713978e64e023c96a1208800f4306aa42067ef762737c4f8c402824e6521904f399e0abee7b60c2db72ddd2db054df9d962fa0eb606f2ab96c588a5f7c701c713", @nested={0x8, 0xa4, 0x0, 0x1, [@nested={0x4, 0xc8}]}, @generic, @typed={0x14, 0x10f, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x32}}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x4001) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00030005080c00bdad01409bbc7a46e39a8285dcdf12", 0x63}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 862.875833ms ago: executing program 0 (id=3103): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611162000000000085000000a900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={&(0x7f00000001c0), 0x4}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x400000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc6010", 0x15}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socketpair(0x2b, 0x7d2497f54538b4df, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x6, 0x12) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x5, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, r1, 0xa) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0xac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xc8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xfffffe9b}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 858.716224ms ago: executing program 4 (id=3104): close(0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x1946}, 0x4000, 0xf, 0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="020100050c0000000000000000000000050005000000000a004e22fffff195000000000000000000be79c2652752cf89ea4c9073c0d500000000000001040000000000000005000600000000000a004e2402000000fc020000000000000000000000000800020000000000000000"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180200ffffffffffffffff0000080000a76f503811afcd0db9ffd4d637b96583ca04cf2998918878b3af8900c8046ee428c74b77ccb8bf418621efc9d0d2f076f9d8"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000270000002700000007000000060000000200000f0300fb050000070000000100000005000000000000007d865f00005f615f5f2e00"], &(0x7f0000000680)=""/202, 0x47, 0xca, 0x9, 0x10}, 0x28) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x3633b81f6be8eb6) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000001f000000000000007e000000181100978dacf2293400", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b30000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x14, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x800}, 0x9010, 0x0, 0x0, 0x7, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0x0, {0xa, 0x4e22, 0x1, @private0, 0xda}}}, 0x80, 0x0}, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x6, @perf_config_ext={0x9, 0x3}, 0xc86, 0x2000, 0x0, 0x5, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x4, 0x0, 0x8000000000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$inet(r6, 0x0, 0x200040d1) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f91c240685", 0x14}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000500)={r4, 0x0, &(0x7f0000001780)=""/4080}, 0x20) 628.511887ms ago: executing program 0 (id=3105): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc, 0x7, {0xe4ffffff}}, {0xc}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x70}}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffa702000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, r4}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001580)}], 0x1}, 0x44000) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000d10a5f75dcfa49f335e10aba49b2e38019a24f03de0e1b87e1b14e6616527f55a70716f6b9282c6ee4870e0a59d7e05fa89098f44151a338fe4f6721", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r6, 0x58, &(0x7f0000000340)}, 0x10) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r8}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x80440, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x100, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socket$kcm(0x28, 0x5, 0x0) (async, rerun: 64) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 624.502976ms ago: executing program 2 (id=3106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUEUE_TOTAL={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x40004) 500.655616ms ago: executing program 4 (id=3107): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000) (async, rerun: 64) r2 = socket$kcm(0xa, 0x5, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r2, 0x0, 0x25, 0x0, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000d3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x80009, 0x10}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x104a3d, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0)}, 0x0, 0x2, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4040851) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="099c104e73453b516aeff56d68a50e415964da0ec42e7f6f788ff5cddd48ccf60d57f59be2a86c2216dddf0691544d83c4f71390e36e32d223ccf40b1c36b908312d68b77be19444aa63352ea79a6ce8a768b12e555d57a18bc05d0ec938dc367957f97ac17a8b", @ANYRES32=r7, @ANYBLOB="05c47136e56172329f", @ANYRES32, @ANYRES32=r6, @ANYRESDEC], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)}], 0x1}, 0x3) (async) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r8 = socket$kcm(0x25, 0x5, 0x0) recvmsg$kcm(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40) (async, rerun: 32) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x7ff, 0xfffffffe, 0x0, 0x2}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00'}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x40814) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) 471.575219ms ago: executing program 2 (id=3108): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180100002020732500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x101}}, @float={0x1, 0x0, 0x0, 0x10, 0x8}, @fwd={0x4}]}, {0x0, [0x30, 0x4f, 0x2e, 0x61]}}, 0x0, 0x4e, 0x0, 0x1}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xd, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r1}, &(0x7f00000002c0), &(0x7f0000000340)='%ps \x00'}, 0x20) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpid() r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x80, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r8, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0x26, &(0x7f0000000600)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r9, @ANYRESOCT=r10, @ANYRES8=r5, @ANYRES32=r4, @ANYBLOB="45d7303f0146c2b44a5b99cda84a9e1451f835c6aa8998ab6e72d56f", @ANYRES8=r2, @ANYRES32=r5], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x20}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc53c06d2626cc3f0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 302.770643ms ago: executing program 0 (id=3109): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000034d99dc000000000067bea4c91900", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r2}, &(0x7f0000001780)=0x4, 0x0}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r2}, &(0x7f0000001780)=0x4, 0x0}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="004000000000000000000000000000000000000400"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000840)=ANY=[@ANYBLOB="180800"/12, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x6, 0x8}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x18}, 0x18) (async) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x12, &(0x7f0000000a00)=ANY=[@ANYBLOB="9500000000000000ac6580ff08000000b7080000000000007b8af8ff00000000b7080000f6ac79227b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018170000", @ANYRES32=r3, @ANYBLOB="00000000000000008520000003000000bd0141abdddde94e269d0dcfa7324d63d76d89df464fbad0ae9afbba7646af50753ced719638b2d2add84c636ce2de1187c75ee3d7eba9fbbf7fa86779ec87ac8341c7507bf27e020222defd75d9c009a22cccffcdfda73edd29f9abb7b64753ef70a00c3f4835d29e4b46a26d44a29e"], &(0x7f0000000040)='GPL\x00', 0x200, 0x69, &(0x7f0000000380)=""/105, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x2, 0x2, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000780)=[r5, 0xffffffffffffffff, r6], &(0x7f00000007c0)=[{0x5, 0x5, 0xf, 0x8}, {0x4, 0x4, 0xd, 0x6}, {0x0, 0x3, 0x5, 0xb}, {0x3, 0x4, 0x4}, {0x5, 0x1, 0x3, 0xa}, {0x5, 0x1, 0x9, 0x4}, {0x1, 0x1, 0x2}, {0x1, 0x4, 0xd, 0xc}], 0x10, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) setsockopt$sock_attach_bpf(r1, 0x29, 0x30, &(0x7f0000000100), 0x90) (async) setsockopt$sock_attach_bpf(r1, 0x29, 0x30, &(0x7f0000000100), 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0x0, 0x1946}, 0x202, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0x0, 0x1946}, 0x202, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2620}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r11}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 35.626446ms ago: executing program 4 (id=3110): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) r1 = perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x0, 0x1947}, 0xd092, 0x0, 0x0, 0x5, 0x3fe, 0x80000003, 0x800, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {0x0, 0x40, 0x0, 0x0, 0x0, 0x1f6}, {}, {}, 0x0, 0x3506, 0xa, 0x1, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)=ANY=[], 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[], 0x1c}}, 0x84) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x15}, @multicast1}}}], 0x20}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1d, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8800) close(0xffffffffffffffff) close(0x4) 0s ago: executing program 0 (id=3111): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x9, 0x80, 0x3, 0x0, 0x0, 0x6, 0x0, 0x9, 0x8055f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xa, 0x7a9d, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x10480, 0x4, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000303b6729d7168aaf115c3b1daeebf30a000000000000000000000062"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, 0x0, 0x20000011) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000600), 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x2b, 0x1, 0x1) sendmsg$rds(r3, 0x0, 0x24000001) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3b05}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x3c}, 0x2, @in6=@loopback, 0x6, 0x4, 0x3, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) openat$cgroup(r5, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) kernel console output (not intermixed with test programs): 68kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19492kB inactive_anon:0kB active_file:61460kB inactive_file:158204kB unevictable:1536kB writepending:692kB present:3129332kB managed:2557364kB mlocked:0kB bounce:0kB free_pcp:38412kB local_pcp:19936kB free_cma:0kB [ 369.334381][T12141] lowmem_reserve[]: 0 0 1 1 1 [ 369.349023][T12141] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1592kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 369.349091][T12155] netlink: 'syz.3.1681': attribute type 39 has an invalid length. [ 369.409119][T12141] lowmem_reserve[]: 0 0 0 0 0 [ 369.427066][T12141] Node 1 Normal free:3885520kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20032kB local_pcp:9216kB free_cma:0kB [ 369.466769][T12159] netlink: 'syz.0.1683': attribute type 5 has an invalid length. [ 369.473046][T12141] lowmem_reserve[]: 0 0 0 0 0 [ 369.479409][T12141] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 369.497914][T12141] Node 0 DMA32: 1003*4kB (UME) 672*8kB (UM) 452*16kB (UME) 366*32kB (UM) 360*64kB (UM) 168*128kB (UM) 79*256kB (UME) 37*512kB (UME) 23*1024kB (UM) 6*2048kB (UME) 293*4096kB (UM) = 1348012kB [ 369.503831][T12159] netlink: 'syz.0.1683': attribute type 7 has an invalid length. [ 369.533009][T12141] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 369.554593][T12141] Node 1 Normal: 212*4kB (UE) 54*8kB (UME) 33*16kB (UME) 82*32kB (UME) 28*64kB (UME) 9*128kB (UME) 5*256kB (UM) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3885520kB [ 369.581501][T12141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.595416][T12141] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 369.607111][T12141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.650965][T12141] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 369.668796][T12141] 56717 total pagecache pages [ 369.678096][T12141] 0 pages in swap cache [ 369.693635][T12141] Free swap = 124996kB [ 369.697869][T12141] Total swap = 124996kB [ 369.704429][T12141] 2097051 pages RAM [ 369.708301][T12141] 0 pages HighMem/MovableOnly [ 369.736868][T12141] 425684 pages reserved [ 369.746519][T12141] 0 pages cma reserved [ 369.855722][T12166] xt_l2tp: v2 sid > 0xffff: 1114112 [ 369.878197][T12170] netlink: 'syz.1.1687': attribute type 2 has an invalid length. [ 369.893027][T12170] netlink: 'syz.1.1687': attribute type 1 has an invalid length. [ 370.320928][T12179] netlink: 'syz.2.1691': attribute type 10 has an invalid length. [ 370.858889][T12193] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1694'. [ 370.922832][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1694'. [ 371.058886][T12193] ip6gretap0 speed is unknown, defaulting to 1000 [ 371.067760][T12193] wg0 speed is unknown, defaulting to 1000 [ 371.134492][T12204] netlink: 14590 bytes leftover after parsing attributes in process `syz.3.1698'. [ 371.187470][T12207] netlink: 13005 bytes leftover after parsing attributes in process `syz.3.1698'. [ 371.363845][T12214] netlink: 'syz.3.1701': attribute type 10 has an invalid length. [ 371.431605][T12218] netlink: 'syz.3.1701': attribute type 10 has an invalid length. [ 371.474555][T12218] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1701'. [ 371.481182][T12220] netlink: 'syz.3.1701': attribute type 10 has an invalid length. [ 371.537709][T12224] netlink: 'syz.0.1702': attribute type 2 has an invalid length. [ 371.548357][T12220] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1701'. [ 371.570778][T12224] openvswitch: netlink: Message has 1 unknown bytes. [ 371.578506][T12224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.679402][T12218] batadv0: entered promiscuous mode [ 371.697787][T12218] batadv0: entered allmulticast mode [ 371.817197][T12218] bond0: (slave batadv0): Releasing backup interface [ 371.849635][T12231] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 371.869227][T12218] bridge0: port 1(batadv0) entered blocking state [ 371.897536][T12218] bridge0: port 1(batadv0) entered disabled state [ 372.452735][ T73] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 372.462779][ T73] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 372.782941][T12263] netlink: 182 bytes leftover after parsing attributes in process `syz.0.1710'. [ 372.963426][T12255] tap0: tun_chr_ioctl cmd 1074025676 [ 372.968814][T12255] tap0: owner set to 0 [ 373.083140][T12268] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1712'. [ 373.902776][T12307] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1720'. [ 374.472085][T12319] validate_nla: 2 callbacks suppressed [ 374.472108][T12319] netlink: 'syz.0.1726': attribute type 5 has an invalid length. [ 374.766732][T12326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1729'. [ 374.777596][T12326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1729'. [ 375.186690][T12333] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1732'. [ 375.238164][T12333] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1732'. [ 375.365861][T12344] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1735'. [ 375.645967][T12349] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 375.658235][T12349] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1736'. [ 375.669048][T12349] hsr_slave_0: left promiscuous mode [ 375.679429][T12349] hsr_slave_1: left promiscuous mode [ 375.970295][T12357] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1737'. [ 376.038569][T12358] netlink: 'syz.2.1738': attribute type 21 has an invalid length. [ 376.047303][T12358] netlink: 'syz.2.1738': attribute type 6 has an invalid length. [ 376.060075][T12358] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1738'. [ 376.589650][T12376] sock: sock_set_timeout: `syz.3.1743' (pid 12376) tries to set negative timeout [ 376.995923][T12399] netlink: 'syz.3.1750': attribute type 2 has an invalid length. [ 377.148866][T12401] netlink: 'syz.3.1752': attribute type 10 has an invalid length. [ 377.188239][T12401] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.200085][T12405] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 377.210289][T12405] netlink: 'syz.2.1753': attribute type 21 has an invalid length. [ 377.253607][T12401] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.260877][T12401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.324236][T12401] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 378.230104][T12436] netlink: 'syz.1.1761': attribute type 23 has an invalid length. [ 378.285590][T12432] __nla_validate_parse: 4 callbacks suppressed [ 378.285642][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1760'. [ 378.344410][T12432] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 378.379670][T12432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.676622][T12481] netlink: 'syz.3.1770': attribute type 2 has an invalid length. [ 379.718376][T12481] netlink: 'syz.3.1770': attribute type 1 has an invalid length. [ 379.766297][T12483] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1771'. [ 379.786141][T12483] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1771'. [ 379.933313][T12492] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1773'. [ 380.126598][T12495] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1774'. [ 380.150805][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1774'. [ 380.173143][T12495] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1774'. [ 380.182775][T12495] netlink: 'syz.4.1774': attribute type 3 has an invalid length. [ 380.192329][T12495] netlink: 'syz.4.1774': attribute type 2 has an invalid length. [ 380.204772][T12495] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1774'. [ 380.573542][T12513] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1779'. [ 380.813292][T12522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1782'. [ 381.140660][T12531] openvswitch: netlink: Flow actions attr not present in new flow. [ 383.351535][T12563] __nla_validate_parse: 2 callbacks suppressed [ 383.351555][T12563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1791'. [ 383.541985][T12573] netlink: 'syz.1.1796': attribute type 2 has an invalid length. [ 383.960772][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.968086][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.085624][T12582] netlink: zone id is out of range [ 384.125508][T12582] netlink: zone id is out of range [ 384.280358][T12592] netlink: 'syz.0.1799': attribute type 3 has an invalid length. [ 384.415232][T12582] netlink: set zone limit has 4 unknown bytes [ 384.747929][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'. [ 384.768232][T12607] openvswitch: netlink: Flow actions attr not present in new flow. [ 385.363923][T12629] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1811'. [ 385.543877][T12641] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1815'. [ 385.548429][T12637] netlink: 'syz.2.1814': attribute type 27 has an invalid length. [ 385.596426][T12637] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1814'. [ 385.640114][T12641] netlink: 'syz.0.1815': attribute type 1 has an invalid length. [ 386.486944][T12662] veth0_vlan: entered allmulticast mode [ 386.817418][T12668] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1824'. [ 386.856188][T12668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1824'. [ 386.909193][T12669] netlink: 'syz.1.1824': attribute type 10 has an invalid length. [ 386.945680][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 387.002713][T12674] netlink: 'syz.1.1824': attribute type 11 has an invalid length. [ 387.043637][T12674] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1824'. [ 387.149196][T12668] netlink: 'syz.1.1824': attribute type 19 has an invalid length. [ 387.303064][T12667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.749462][T12689] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1829'. [ 387.803035][T12640] ip6gretap0 speed is unknown, defaulting to 1000 [ 387.896784][T12640] wg0 speed is unknown, defaulting to 1000 [ 389.066982][T12706] C: renamed from team_slave_0 (while UP) [ 389.112723][T12706] netlink: 'syz.4.1834': attribute type 4 has an invalid length. [ 389.205101][T12706] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 389.270867][T12718] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.1836'. [ 389.280301][T12718] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1836'. [ 389.706958][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 389.725310][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1837'. [ 390.686491][T12742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1841'. [ 390.945768][T12748] netlink: del zone limit has 4 unknown bytes [ 391.195685][T12751] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1843'. [ 392.896930][T12752] netlink: 'syz.1.1844': attribute type 2 has an invalid length. [ 392.959393][T12752] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1844'. [ 392.980338][T12752] nbd: must specify an index to disconnect [ 392.994226][T12770] netlink: 'syz.0.1849': attribute type 10 has an invalid length. [ 393.049559][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1848'. [ 393.277171][T12776] netlink: 'syz.0.1849': attribute type 10 has an invalid length. [ 393.357230][T12776] team0: Port device dummy0 removed [ 393.381604][T12776] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 393.787073][T12795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1856'. [ 393.801858][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'. [ 393.858381][T12801] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1859'. [ 393.987891][T12799] netlink: 'syz.3.1858': attribute type 41 has an invalid length. [ 395.205817][T12801] team0: Port device bond0 removed [ 395.251023][T12801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.318434][T12801] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 395.370758][T12801] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 395.431219][T12801] bond0 (unregistering): Released all slaves [ 395.490117][T12827] netlink: 'syz.3.1865': attribute type 12 has an invalid length. [ 395.508686][T12827] __nla_validate_parse: 1 callbacks suppressed [ 395.508709][T12827] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1865'. [ 395.768788][T12832] netlink: 'syz.0.1866': attribute type 29 has an invalid length. [ 395.793353][T12834] xt_bpf: check failed: parse error [ 395.794997][T12832] netlink: 'syz.0.1866': attribute type 29 has an invalid length. [ 396.012340][T12838] netlink: 'syz.0.1866': attribute type 29 has an invalid length. [ 396.041525][T12839] netlink: 'syz.0.1866': attribute type 29 has an invalid length. [ 396.568517][T12866] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1876'. [ 396.632834][T12866] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1876'. [ 396.729112][T12873] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1876'. [ 396.762276][T12872] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1877'. [ 396.792731][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1876'. [ 396.812136][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1876'. [ 398.309426][T12905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1886'. [ 398.466575][T12912] netlink: 'syz.3.1888': attribute type 2 has an invalid length. [ 398.500500][T12912] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1888'. [ 398.612186][T12912] nbd: must specify an index to disconnect [ 399.068233][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1891'. [ 399.485891][T12936] netlink: 'syz.4.1893': attribute type 22 has an invalid length. [ 402.001804][T12962] __nla_validate_parse: 1 callbacks suppressed [ 402.001828][T12962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1900'. [ 402.040335][T12962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1900'. [ 403.377424][T13030] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1914'. [ 403.611654][T13033] netlink: 'syz.3.1917': attribute type 2 has an invalid length. [ 403.651357][T13033] netlink: 'syz.3.1917': attribute type 7 has an invalid length. [ 403.670024][T13033] netlink: 85 bytes leftover after parsing attributes in process `syz.3.1917'. [ 403.798895][T13034] syzkaller0: entered promiscuous mode [ 403.804733][T13034] syzkaller0: entered allmulticast mode [ 403.857965][T13033] netlink: 130140 bytes leftover after parsing attributes in process `syz.3.1917'. [ 403.889995][T13033] netlink: 'syz.3.1917': attribute type 2 has an invalid length. [ 403.897952][T13033] netlink: 'syz.3.1917': attribute type 7 has an invalid length. [ 403.977300][T13033] netlink: 85 bytes leftover after parsing attributes in process `syz.3.1917'. [ 404.178578][T13037] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1919'. [ 404.194319][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1919'. [ 404.205479][T13037] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1919'. [ 404.633838][T13045] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1921'. [ 404.643728][T13045] netlink: zone id is out of range [ 404.648928][T13045] netlink: zone id is out of range [ 404.654643][T13045] netlink: get zone limit has 8 unknown bytes [ 405.409459][T13047] netlink: 'syz.3.1922': attribute type 11 has an invalid length. [ 405.418035][T13047] netlink: 'syz.3.1922': attribute type 11 has an invalid length. [ 405.426313][T13047] netlink: 'syz.3.1922': attribute type 11 has an invalid length. [ 406.012460][T13054] netlink: 'syz.3.1925': attribute type 10 has an invalid length. [ 406.522084][T13058] netlink: 'syz.1.1926': attribute type 10 has an invalid length. [ 408.933819][T13054] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.013095][T13063] __nla_validate_parse: 2 callbacks suppressed [ 409.013142][T13063] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1927'. [ 409.754601][T13088] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 410.251513][T13100] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1940'. [ 410.277464][T13100] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1940'. [ 411.836584][T13151] netlink: 'syz.0.1949': attribute type 39 has an invalid length. [ 412.439410][T13157] netlink: 'syz.1.1953': attribute type 10 has an invalid length. [ 414.024245][T13157] team0: Port device wlan1 removed [ 414.242165][T13170] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1954'. [ 414.816294][T13185] netlink: 'syz.3.1961': attribute type 21 has an invalid length. [ 414.846420][T13185] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1961'. [ 414.889543][T13185] netlink: 'syz.3.1961': attribute type 4 has an invalid length. [ 415.020910][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1961'. [ 415.053330][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1961'. [ 415.320410][T13202] netlink: 'syz.3.1967': attribute type 16 has an invalid length. [ 415.335903][T13202] netlink: 'syz.3.1967': attribute type 17 has an invalid length. [ 415.373641][T13201] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1965'. [ 415.596667][T13202] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.605444][T13202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.654917][T13202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.777435][T13202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.639085][T13222] C: renamed from team_slave_0 [ 416.673963][T13222] netlink: 'syz.2.1972': attribute type 3 has an invalid length. [ 416.760106][T13222] netlink: 'syz.2.1972': attribute type 1 has an invalid length. [ 416.814305][T13222] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 417.900713][T13238] netlink: 'syz.2.1978': attribute type 1 has an invalid length. [ 417.908909][T13238] netlink: 'syz.2.1978': attribute type 4 has an invalid length. [ 417.961304][T13255] netlink: 'syz.2.1978': attribute type 1 has an invalid length. [ 417.961333][T13255] netlink: 'syz.2.1978': attribute type 4 has an invalid length. [ 417.961355][T13255] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1978'. [ 418.050183][T13238] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1978'. [ 418.644011][T13274] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 418.661429][T13274] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 418.771431][T13275] À: port 1(vlan0) entered blocking state [ 418.849367][T13275] À: port 1(vlan0) entered disabled state [ 419.066622][T13275] vlan0: entered allmulticast mode [ 419.110004][T13275] veth0_vlan: entered allmulticast mode [ 419.175557][T13275] vlan0: entered promiscuous mode [ 419.636154][T13290] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1990'. [ 420.138638][T13341] netlink: 'syz.0.1997': attribute type 4 has an invalid length. [ 421.087627][T13357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2003'. [ 421.150676][T13359] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2002'. [ 421.880346][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 421.920379][T13387] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2009'. [ 422.533193][T13404] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2015'. [ 422.936806][T13414] netlink: 'syz.3.2019': attribute type 16 has an invalid length. [ 426.249479][T13446] netlink: 'syz.0.2028': attribute type 3 has an invalid length. [ 426.257478][T13446] netlink: 'syz.0.2028': attribute type 1 has an invalid length. [ 426.280335][T13446] netlink: 191264 bytes leftover after parsing attributes in process `syz.0.2028'. [ 426.352770][T13330] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.438069][T13451] C: renamed from team_slave_0 (while UP) [ 426.449344][T13451] netlink: 'syz.1.2032': attribute type 3 has an invalid length. [ 426.457670][T13451] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2032'. [ 426.537327][T13451] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 426.838429][T13330] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.113650][T13463] netlink: 'syz.0.2036': attribute type 10 has an invalid length. [ 427.150713][T13330] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.220406][T13467] netlink: 'syz.0.2036': attribute type 10 has an invalid length. [ 427.250238][T13467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2036'. [ 427.287146][T13463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.367453][T13463] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 427.432389][T13467] batadv0: entered promiscuous mode [ 427.437681][T13467] batadv0: entered allmulticast mode [ 427.601216][T13467] bond0: (slave batadv0): Releasing backup interface [ 427.739056][T13467] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 427.963614][T13330] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.090744][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 428.104957][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 428.116497][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 428.133134][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 428.143008][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 428.292717][T13485] ip6gretap0 speed is unknown, defaulting to 1000 [ 428.311089][T13494] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2043'. [ 428.332009][T13485] wg0 speed is unknown, defaulting to 1000 [ 428.389429][T13330] bridge0: port 1(batadv0) entered disabled state [ 428.459268][T13502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.487876][T13330] batadv_slave_1: left allmulticast mode [ 428.511984][T13330] bridge0: port 3(batadv_slave_1) entered disabled state [ 429.255060][T13330] bridge_slave_1: left allmulticast mode [ 429.263638][T13330] bridge_slave_1: left promiscuous mode [ 429.269491][T13330] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.314486][T13330] team0: left allmulticast mode [ 429.327723][T13330] team_slave_1: left allmulticast mode [ 429.345637][T13330] hsr_slave_0: left allmulticast mode [ 429.363654][T13330] team0: left promiscuous mode [ 429.380476][T13512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2046'. [ 429.399092][T13330] team_slave_1: left promiscuous mode [ 429.408841][T13330] hsr_slave_0: left promiscuous mode [ 429.416699][T13330] : port 1(team0) entered disabled state [ 429.567857][T13521] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2049'. [ 430.189948][ T51] Bluetooth: hci0: command tx timeout [ 430.414013][T13330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.442384][T13330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.470527][T13330] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 430.483564][T13330] bond0 (unregistering): Released all slaves [ 430.915040][T13537] netlink: 212172 bytes leftover after parsing attributes in process `syz.3.2055'. [ 430.976382][T13535] siw: device registration error -23 [ 430.985276][T13537] netlink: 212172 bytes leftover after parsing attributes in process `syz.3.2055'. [ 431.054891][T13330] : left promiscuous mode [ 431.520065][T13550] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2057'. [ 432.279978][ T51] Bluetooth: hci0: command tx timeout [ 433.581365][T13586] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2064'. [ 434.353953][ T51] Bluetooth: hci0: command tx timeout [ 435.560282][T13485] chnl_net:caif_netlink_parms(): no params data found [ 436.448576][ T51] Bluetooth: hci0: command tx timeout [ 438.856736][T13485] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.889006][T13485] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.897323][T13485] bridge_slave_0: entered allmulticast mode [ 438.908878][T13627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2075'. [ 438.923704][T13485] bridge_slave_0: entered promiscuous mode [ 438.961612][T13631] netlink: 340 bytes leftover after parsing attributes in process `syz.1.2077'. [ 438.980456][T13631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2077'. [ 438.992086][T13627] cgroup: Unknown subsys name 'uid' [ 438.999547][T13485] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.030074][T13485] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.054600][T13485] bridge_slave_1: entered allmulticast mode [ 439.068382][T13485] bridge_slave_1: entered promiscuous mode [ 439.235107][T13485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.253348][T13485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.383140][T13647] netlink: 'syz.3.2083': attribute type 10 has an invalid length. [ 439.429352][T13647] batadv0: left allmulticast mode [ 439.452155][T13647] batadv0: left promiscuous mode [ 439.459179][T13648] netlink: 'syz.3.2083': attribute type 10 has an invalid length. [ 439.467627][T13647] bridge0: port 1(batadv0) entered disabled state [ 439.475922][T13648] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2083'. [ 439.548100][T13647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.567348][T13647] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 439.591092][T13485] team0: Port device team_slave_0 added [ 439.599666][T13648] batadv0: entered promiscuous mode [ 439.614258][T13648] batadv0: entered allmulticast mode [ 439.640706][T13648] bond0: (slave batadv0): Releasing backup interface [ 439.667588][T13648] bridge0: port 1(batadv0) entered blocking state [ 439.682792][T13648] bridge0: port 1(batadv0) entered disabled state [ 439.741417][T13485] team0: Port device team_slave_1 added [ 439.756156][T13659] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2086'. [ 439.823259][T13330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.835756][T13330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.865124][T13330] veth1_macvtap: left promiscuous mode [ 439.873232][T13330] veth0_macvtap: left promiscuous mode [ 440.468120][T13675] netlink: 'syz.0.2092': attribute type 22 has an invalid length. [ 440.486744][T13675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2092'. [ 440.632128][T13330] team0 (unregistering): Port device hsr_slave_0 removed [ 440.785062][T13330] team0 (unregistering): Port device team_slave_1 removed [ 441.384794][T13485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.393798][T13485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.423627][T13485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.542269][T13485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.549283][T13485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.684698][T13485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.763521][T13684] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2095'. [ 442.056823][T13485] hsr_slave_0: entered promiscuous mode [ 442.081206][T13485] hsr_slave_1: entered promiscuous mode [ 444.539578][T13744] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2112'. [ 444.636545][T13741] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2111'. [ 444.730325][T13738] can: request_module (can-proto-5) failed. [ 445.399402][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.405988][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.858500][T13741] netlink: 'syz.3.2111': attribute type 1 has an invalid length. [ 446.993319][T13485] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 447.035555][T13485] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 447.082024][T13485] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 447.117466][T13485] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 447.650986][T13767] can: request_module (can-proto-3) failed. [ 447.673888][T13771] delete_channel: no stack [ 447.695780][T13768] can: request_module (can-proto-3) failed. [ 447.814769][T13485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.152157][T13485] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.357359][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.364741][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.489737][T13307] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.497107][T13307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.573261][T13771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2120'. [ 449.217002][T13793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2124'. [ 449.265174][T13485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.356154][T13792] netlink: 'syz.1.2123': attribute type 2 has an invalid length. [ 449.380701][T13792] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2123'. [ 449.456991][T13485] veth0_vlan: entered promiscuous mode [ 449.505586][T13485] veth1_vlan: entered promiscuous mode [ 449.521687][T13791] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2125'. [ 449.652363][T13485] veth0_macvtap: entered promiscuous mode [ 449.685731][T13485] veth1_macvtap: entered promiscuous mode [ 449.796883][T13485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.834984][T13485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.906114][T13312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.916036][T13312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.933484][T13312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.949224][T13312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.152647][T13307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.169707][T13307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.227382][T13312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.250285][T13312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.021865][T13831] netlink: 'syz.2.2030': attribute type 21 has an invalid length. [ 451.204367][T13841] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2135'. [ 451.302523][T13841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2135'. [ 451.523357][T13859] netlink: 'syz.2.2143': attribute type 2 has an invalid length. [ 451.531697][ T30] audit: type=1107 audit(1759018007.589:6): pid=13855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 451.597285][T13860] netlink: 'syz.1.2142': attribute type 10 has an invalid length. [ 451.605740][T13860] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2142'. [ 451.918855][T13859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2143'. [ 452.155426][T13869] netlink: 'syz.3.2144': attribute type 1 has an invalid length. [ 452.314557][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2144'. [ 452.545705][T13872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2146'. [ 452.633586][T13878] netlink: 'syz.0.2147': attribute type 10 has an invalid length. [ 452.673203][T13878] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2147'. [ 452.695732][T13877] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.2148'. [ 452.739960][T13877] veth0_to_bond: default FDB implementation only supports local addresses [ 452.792340][T13878] team0: entered promiscuous mode [ 452.898767][T13878] team_slave_0: entered promiscuous mode [ 453.032732][T13878] ±ÿ: entered promiscuous mode [ 453.172762][T13878] geneve1: entered promiscuous mode [ 453.284129][T13878] bond0: entered promiscuous mode [ 453.352853][T13878] bond_slave_0: entered promiscuous mode [ 453.438807][T13878] €Â0: entered promiscuous mode [ 453.464083][T13878] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 453.499657][T13878] batadv_slave_0: entered promiscuous mode [ 453.558096][T13878] dummy0: entered promiscuous mode [ 453.587285][T13878] team0: entered allmulticast mode [ 453.592540][T13878] team_slave_0: entered allmulticast mode [ 453.598424][T13878] ±ÿ: entered allmulticast mode [ 453.635098][T13878] geneve1: entered allmulticast mode [ 453.643036][T13878] bond0: entered allmulticast mode [ 453.648486][T13878] bond_slave_0: entered allmulticast mode [ 453.656133][T13878] €Â0: entered allmulticast mode [ 453.663490][T13878] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 453.671072][T13878] batadv_slave_0: entered allmulticast mode [ 453.677008][T13878] dummy0: entered allmulticast mode [ 453.683770][T13878] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 454.136134][T13911] siw: device registration error -23 [ 454.148682][T13917] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2158'. [ 454.300614][T13922] netlink: 'syz.1.2159': attribute type 2 has an invalid length. [ 454.343530][T13922] netlink: 'syz.1.2159': attribute type 21 has an invalid length. [ 454.360739][T13922] netlink: 'syz.1.2159': attribute type 2 has an invalid length. [ 454.368573][T13922] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2159'. [ 456.648327][T13960] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 456.731543][T13966] TCP: TCP_TX_DELAY enabled [ 456.958805][T13966] netlink: 'syz.4.2171': attribute type 10 has an invalid length. [ 456.991657][T13974] __nla_validate_parse: 5 callbacks suppressed [ 456.991681][T13974] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2174'. [ 457.020393][T13974] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2174'. [ 457.426775][T13966] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.481354][T13966] bond0: (slave team0): Enslaving as an active interface with an up link [ 457.673340][T13984] netlink: 'syz.3.2177': attribute type 1 has an invalid length. [ 457.706147][T13984] netlink: 'syz.3.2177': attribute type 4 has an invalid length. [ 457.719959][T13984] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2177'. [ 458.048294][T13992] netlink: 'syz.3.2180': attribute type 7 has an invalid length. [ 459.020984][T14009] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2185'. [ 461.383996][T14031] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2190'. [ 462.401430][T14026] openvswitch: netlink: VXLAN extension 1 has unexpected len 5 expected 4 [ 462.791690][T14043] syzkaller0: entered promiscuous mode [ 462.797243][T14043] syzkaller0: entered allmulticast mode [ 463.028640][T14055] netlink: 'syz.2.2194': attribute type 10 has an invalid length. [ 463.059732][T14054] netlink: 'syz.4.2193': attribute type 1 has an invalid length. [ 463.174022][T14058] netlink: 'syz.4.2193': attribute type 12 has an invalid length. [ 463.218940][T14058] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.2193'. [ 466.357433][T14073] netlink: 'syz.4.2202': attribute type 29 has an invalid length. [ 466.449724][T14080] netlink: 'syz.4.2202': attribute type 29 has an invalid length. [ 467.335549][T14094] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2205'. [ 467.415152][T14094] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2205'. [ 467.426573][T14091] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2205'. [ 467.471288][T14094] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2205'. [ 468.088722][T14110] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2209'. [ 468.305659][T14118] netlink: 'syz.2.2212': attribute type 21 has an invalid length. [ 468.313742][T14118] netlink: 'syz.2.2212': attribute type 1 has an invalid length. [ 468.547878][T14122] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2213'. [ 469.620790][T14143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2219'. [ 469.673808][T14140] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.2218'. [ 469.682040][T14145] netlink: 'syz.3.2221': attribute type 39 has an invalid length. [ 469.702838][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2219'. [ 469.824781][ T44] wg0 speed is unknown, defaulting to 1000 [ 469.843498][ T44] syz0: Port: 1 Link DOWN [ 469.894536][T14153] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2220'. [ 469.925826][T14153] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 469.958601][T14153] netlink: 'syz.4.2220': attribute type 2 has an invalid length. [ 470.022460][T14153] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2220'. [ 470.241381][T14163] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2226'. [ 471.775664][T14191] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2233'. [ 474.172889][T14254] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2246'. [ 474.705216][T14270] vcan0 speed is unknown, defaulting to 1000 [ 474.716890][T14270] vcan0 speed is unknown, defaulting to 1000 [ 474.743302][T14270] vcan0 speed is unknown, defaulting to 1000 [ 476.301225][T14305] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2261'. [ 476.348631][T14304] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2261'. [ 476.363915][T14270] infiniband syz1: set active [ 476.369601][ T10] vcan0 speed is unknown, defaulting to 1000 [ 476.373209][T14307] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2261'. [ 476.385686][T14308] netlink: 'syz.2.2262': attribute type 10 has an invalid length. [ 476.402541][T14270] infiniband syz1: added vcan0 [ 476.409156][T14304] ªªªªªª: renamed from dummy0 (while UP) [ 476.430744][T14270] syz1: rxe_create_cq: returned err = -12 [ 476.436655][T14270] infiniband syz1: Couldn't create ib_mad CQ [ 476.467992][T14308] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 476.472253][T14270] infiniband syz1: Couldn't open port 1 [ 476.543926][T14308] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 476.569062][T14270] RDS/IB: syz1: added [ 476.581195][T14308] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 476.588627][T14270] smc: adding ib device syz1 with port count 1 [ 476.595116][T14270] smc: ib device syz1 port 1 has pnetid [ 476.601317][ T44] vcan0 speed is unknown, defaulting to 1000 [ 476.619580][T14270] vcan0 speed is unknown, defaulting to 1000 [ 476.957374][T14322] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2267'. [ 477.030872][T14324] netlink: 'syz.2.2267': attribute type 2 has an invalid length. [ 477.039943][T14321] delete_channel: no stack [ 477.065825][T14324] netlink: 'syz.2.2267': attribute type 3 has an invalid length. [ 477.132754][T14324] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2267'. [ 477.236964][T14332] xt_l2tp: v2 sid > 0xffff: 1114112 [ 477.482425][T14270] vcan0 speed is unknown, defaulting to 1000 [ 477.498335][T14336] delete_channel: no stack [ 477.512683][T14336] delete_channel: no stack [ 477.981535][T14347] C: renamed from team_slave_0 (while UP) [ 478.013520][T14347] netlink: 'syz.2.2276': attribute type 3 has an invalid length. [ 478.021905][T14347] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 478.049423][T14270] vcan0 speed is unknown, defaulting to 1000 [ 478.417391][T14366] netlink: 'syz.1.2282': attribute type 10 has an invalid length. [ 478.521357][T14366] netlink: 'syz.1.2282': attribute type 10 has an invalid length. [ 478.529428][T14366] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2282'. [ 478.656079][T14366] batadv0: entered promiscuous mode [ 478.663089][T14366] batadv0: entered allmulticast mode [ 478.680859][T14366] bridge0: port 3(batadv0) entered blocking state [ 478.730092][T14366] bridge0: port 3(batadv0) entered disabled state [ 478.747180][T14270] vcan0 speed is unknown, defaulting to 1000 [ 478.793413][ T37] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 478.802732][ T37] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 478.850093][ T3507] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.457505][T14270] vcan0 speed is unknown, defaulting to 1000 [ 479.731433][T14396] netlink: 'syz.1.2293': attribute type 1 has an invalid length. [ 480.109650][T14403] netlink: 'syz.1.2295': attribute type 10 has an invalid length. [ 481.150202][T14418] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2299'. [ 483.641458][T14403] batadv0: left allmulticast mode [ 483.646563][T14403] batadv0: left promiscuous mode [ 483.651906][T14403] bridge0: port 3(batadv0) entered disabled state [ 483.669342][T14422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.048448][T14471] netlink: 'syz.4.2312': attribute type 10 has an invalid length. [ 485.057236][T14471] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2312'. [ 485.090403][ T51] Bluetooth: hci1: adv larger than maximum supported [ 485.090456][ T51] Bluetooth: hci1: Unknown advertising packet type: 0x73 [ 485.286853][T14469] netlink: 'syz.2.2310': attribute type 4 has an invalid length. [ 485.318653][T14475] FAULT_INJECTION: forcing a failure. [ 485.318653][T14475] name failslab, interval 1, probability 0, space 0, times 0 [ 485.364549][T14475] CPU: 0 UID: 0 PID: 14475 Comm: syz.1.2313 Not tainted syzkaller #0 PREEMPT(full) [ 485.364580][T14475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 485.364594][T14475] Call Trace: [ 485.364602][T14475] [ 485.364612][T14475] dump_stack_lvl+0x189/0x250 [ 485.364645][T14475] ? __pfx____ratelimit+0x10/0x10 [ 485.364672][T14475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.364698][T14475] ? __pfx__printk+0x10/0x10 [ 485.364736][T14475] ? __pfx___might_resched+0x10/0x10 [ 485.364767][T14475] should_fail_ex+0x414/0x560 [ 485.364798][T14475] should_failslab+0xa8/0x100 [ 485.364823][T14475] __kmalloc_noprof+0xcb/0x4f0 [ 485.364842][T14475] ? nf_tables_newrule+0x1506/0x2890 [ 485.364872][T14475] ? nla_strcmp+0x106/0x140 [ 485.364904][T14475] nf_tables_newrule+0x1506/0x2890 [ 485.364959][T14475] ? __pfx_nf_tables_newrule+0x10/0x10 [ 485.364993][T14475] ? nfnl_pernet+0x23/0x240 [ 485.365030][T14475] ? __nla_parse+0x40/0x60 [ 485.365063][T14475] nfnetlink_rcv+0x112f/0x2520 [ 485.365133][T14475] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 485.365180][T14475] ? ref_tracker_free+0x63a/0x7d0 [ 485.365252][T14475] ? __netlink_deliver_tap+0x807/0x850 [ 485.365279][T14475] ? netlink_deliver_tap+0x2e/0x1b0 [ 485.365331][T14475] netlink_unicast+0x82c/0x9e0 [ 485.365369][T14475] ? __pfx_netlink_unicast+0x10/0x10 [ 485.365397][T14475] ? netlink_sendmsg+0x642/0xb30 [ 485.365421][T14475] ? skb_put+0x11b/0x210 [ 485.365461][T14475] netlink_sendmsg+0x805/0xb30 [ 485.365501][T14475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.365533][T14475] ? aa_sock_msg_perm+0xf1/0x1d0 [ 485.365561][T14475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 485.365588][T14475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.365616][T14475] __sock_sendmsg+0x219/0x270 [ 485.365645][T14475] ____sys_sendmsg+0x505/0x830 [ 485.365684][T14475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.365729][T14475] ? import_iovec+0x74/0xa0 [ 485.365766][T14475] ___sys_sendmsg+0x21f/0x2a0 [ 485.365801][T14475] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.365862][T14475] ? __fget_files+0x2a/0x420 [ 485.365903][T14475] ? __fget_files+0x2a/0x420 [ 485.365924][T14475] ? __fget_files+0x3a0/0x420 [ 485.365961][T14475] __x64_sys_sendmsg+0x19b/0x260 [ 485.365996][T14475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 485.366041][T14475] ? __pfx_ksys_write+0x10/0x10 [ 485.366057][T14475] ? rcu_is_watching+0x15/0xb0 [ 485.366086][T14475] ? do_syscall_64+0xbe/0x3b0 [ 485.366120][T14475] do_syscall_64+0xfa/0x3b0 [ 485.366145][T14475] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.366171][T14475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.366191][T14475] ? clear_bhb_loop+0x60/0xb0 [ 485.366218][T14475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.366238][T14475] RIP: 0033:0x7f756c98eec9 [ 485.366258][T14475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.366276][T14475] RSP: 002b:00007f756d904038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.366297][T14475] RAX: ffffffffffffffda RBX: 00007f756cbe5fa0 RCX: 00007f756c98eec9 [ 485.366312][T14475] RDX: 0000000004000800 RSI: 0000200000000280 RDI: 000000000000000b [ 485.366326][T14475] RBP: 00007f756d904090 R08: 0000000000000000 R09: 0000000000000000 [ 485.366339][T14475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.366351][T14475] R13: 00007f756cbe6038 R14: 00007f756cbe5fa0 R15: 00007fffe8a48898 [ 485.366391][T14475] [ 487.509760][T14539] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2328'. [ 487.658795][T14543] netlink: 'syz.1.2329': attribute type 10 has an invalid length. [ 487.695065][T14543] team0: Device hsr_slave_0 failed to register rx_handler [ 487.705112][T14551] netlink: 'syz.3.2331': attribute type 1 has an invalid length. [ 487.931626][T14561] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2333'. [ 488.796692][T14584] netlink: 'syz.2.2344': attribute type 1 has an invalid length. [ 489.157475][T14605] openvswitch: netlink: Missing key (keys=1040, expected=10000000) [ 490.125744][T14618] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2353'. [ 490.647130][T14627] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2355'. [ 491.296317][T14608] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 491.309077][T14608] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 491.309533][T14618] batadv_slave_1: entered promiscuous mode [ 491.320306][T14608] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 491.544019][T14629] netlink: 'syz.3.2356': attribute type 16 has an invalid length. [ 491.557487][T14629] netlink: 'syz.3.2356': attribute type 17 has an invalid length. [ 491.618243][T14635] netlink: 'syz.1.2359': attribute type 1 has an invalid length. [ 491.667247][T14635] netlink: 'syz.1.2359': attribute type 2 has an invalid length. [ 491.749000][T14639] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2360'. [ 491.763892][T14639] netlink: zone id is out of range [ 491.769456][T14639] netlink: zone id is out of range [ 491.778676][T14639] netlink: zone id is out of range [ 491.788510][T14639] netlink: zone id is out of range [ 491.796860][T14639] netlink: zone id is out of range [ 491.806278][T14639] netlink: zone id is out of range [ 491.811886][T14639] netlink: zone id is out of range [ 491.827638][T14639] netlink: zone id is out of range [ 491.839233][T14639] netlink: zone id is out of range [ 492.222293][T14650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2363'. [ 492.273867][T14653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2364'. [ 492.434244][T14667] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2368'. [ 492.957033][T14693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 493.202183][T14696] netlink: 208252 bytes leftover after parsing attributes in process `syz.3.2377'. [ 493.222385][T14696] netlink: 'syz.3.2377': attribute type 1 has an invalid length. [ 493.259759][T14696] netlink: 'syz.3.2377': attribute type 2 has an invalid length. [ 493.286470][T14705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2377'. [ 493.298570][T14696] netlink: 'syz.3.2377': attribute type 3 has an invalid length. [ 493.325705][T14696] netlink: 'syz.3.2377': attribute type 4 has an invalid length. [ 493.829755][T14735] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2388'. [ 494.330828][T14766] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2400'. [ 495.125298][T14801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2408'. [ 495.545043][T14821] delete_channel: no stack [ 495.585117][T14821] delete_channel: no stack [ 495.643805][T14824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2414'. [ 496.607000][T14839] net_ratelimit: 15 callbacks suppressed [ 496.607050][T14839] openvswitch: netlink: IP tunnel dst address not specified [ 497.360664][T14865] netlink: 'syz.2.2428': attribute type 29 has an invalid length. [ 497.391154][T14865] netlink: 'syz.2.2428': attribute type 29 has an invalid length. [ 497.416194][T14865] netlink: 'syz.2.2428': attribute type 29 has an invalid length. [ 497.694735][T14874] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2432'. [ 498.047878][T14887] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2434'. [ 499.377533][T14919] netlink: 'syz.1.2445': attribute type 1 has an invalid length. [ 499.616594][T14921] netlink: 'syz.1.2446': attribute type 10 has an invalid length. [ 501.611902][T14937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2454'. [ 501.637351][T14937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2454'. [ 501.735004][T14935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2452'. [ 501.752934][T14937] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2454'. [ 501.789670][T14935] netlink: 'syz.2.2452': attribute type 3 has an invalid length. [ 501.830193][T14937] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2454'. [ 501.906292][T14947] netlink: 'syz.1.2457': attribute type 10 has an invalid length. [ 501.915607][T14947] batman_adv: batadv0: Adding interface: netdevsim0 [ 501.923930][T14947] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.950733][T14947] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 501.968479][T14948] macvtap0: refused to change device tx_queue_len [ 502.148042][T14951] netlink: 'syz.4.2458': attribute type 29 has an invalid length. [ 502.197771][T14951] netlink: 'syz.4.2458': attribute type 29 has an invalid length. [ 502.241166][T14951] netlink: 'syz.4.2458': attribute type 29 has an invalid length. [ 503.074308][T14986] netlink: 'syz.1.2469': attribute type 10 has an invalid length. [ 503.103446][T14986] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.178118][T14990] netlink: 'syz.1.2469': attribute type 16 has an invalid length. [ 503.186389][T14990] netlink: 'syz.1.2469': attribute type 17 has an invalid length. [ 503.266721][T14993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2469'. [ 503.341050][T14993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2469'. [ 503.420358][T14997] netlink: 'syz.4.2472': attribute type 39 has an invalid length. [ 503.725727][ T5991] ip6gretap0 speed is unknown, defaulting to 1000 [ 504.085174][T15013] netlink: 'syz.2.2477': attribute type 10 has an invalid length. [ 504.147869][T15017] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 504.170008][T15017] syzkaller0: persist disabled [ 504.178175][T15013] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2477'. [ 504.427710][T15024] : port 1(ip6gretap0) entered blocking state [ 504.490215][T15024] : port 1(ip6gretap0) entered disabled state [ 504.523978][T15024] ip6gretap0: entered allmulticast mode [ 504.542410][T15024] ip6gretap0: entered promiscuous mode [ 505.232882][T15036] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2484'. [ 505.281179][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2485'. [ 505.299601][T15046] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2485'. [ 505.596531][T15052] IPv6: Can't replace route, no match found [ 505.596636][T15057] netlink: 809 bytes leftover after parsing attributes in process `syz.1.2488'. [ 505.612026][T15057] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.2488'. [ 505.652447][T15052] netlink: 'syz.0.2487': attribute type 39 has an invalid length. [ 505.658414][T15055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2488'. [ 505.895812][T15061] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2487'. [ 506.266782][T15077] netlink: 'syz.1.2494': attribute type 1 has an invalid length. [ 506.278795][T15078] netlink: 'syz.1.2494': attribute type 1 has an invalid length. [ 506.565087][T15083] netlink: 'syz.3.2497': attribute type 21 has an invalid length. [ 506.857508][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.864632][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.232791][T15135] IPv6: Can't replace route, no match found [ 508.368115][T15140] netlink: 'syz.4.2513': attribute type 23 has an invalid length. [ 508.527028][T15149] __nla_validate_parse: 6 callbacks suppressed [ 508.527048][T15149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2515'. [ 508.545669][T15149] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 508.551065][T15150] netlink: 372 bytes leftover after parsing attributes in process `syz.3.2516'. [ 508.576612][T15149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.592823][T15147] delete_channel: no stack [ 508.859103][T15156] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2519'. [ 509.077931][T15161] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2520'. [ 509.179067][T15161] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2520'. [ 509.230920][T15161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2520'. [ 509.773852][T15187] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2527'. [ 510.435440][T15187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.541226][T15187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.599138][T15187] bond0 (unregistering): (slave team0): Releasing backup interface [ 510.615942][T15200] netlink: 'syz.3.2532': attribute type 3 has an invalid length. [ 510.626713][T15200] netlink: 'syz.3.2532': attribute type 1 has an invalid length. [ 510.642465][T15200] netlink: 'syz.3.2532': attribute type 2 has an invalid length. [ 510.658101][T15187] bond0 (unregistering): Released all slaves [ 510.659944][T15200] netlink: 'syz.3.2532': attribute type 8 has an invalid length. [ 510.700752][T15200] netlink: 'syz.3.2532': attribute type 10 has an invalid length. [ 510.717769][T15200] netlink: 'syz.3.2532': attribute type 11 has an invalid length. [ 510.743751][T15200] netlink: 198236 bytes leftover after parsing attributes in process `syz.3.2532'. [ 510.959662][T15208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2534'. [ 511.064732][T15208] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2534'. [ 511.102801][T15212] netlink: 'syz.2.2535': attribute type 12 has an invalid length. [ 511.825213][T15238] openvswitch: netlink: Missing key (keys=40, expected=100) [ 512.057382][T15243] netlink: 'syz.2.2544': attribute type 3 has an invalid length. [ 512.071471][T15244] netlink: 'syz.4.2545': attribute type 1 has an invalid length. [ 514.072523][T15285] validate_nla: 3 callbacks suppressed [ 514.072578][T15285] netlink: 'syz.3.2557': attribute type 21 has an invalid length. [ 514.098609][T15285] __nla_validate_parse: 14 callbacks suppressed [ 514.098669][T15285] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2557'. [ 514.177224][T15273] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.244409][T15273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 514.294279][ T44] vcan0 speed is unknown, defaulting to 1000 [ 514.728713][T15304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2566'. [ 514.765069][T15304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2566'. [ 515.034197][T15316] netlink: 'syz.4.2568': attribute type 2 has an invalid length. [ 515.062835][T15316] netlink: 'syz.4.2568': attribute type 11 has an invalid length. [ 515.107019][T15316] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2568'. [ 515.131290][T15315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2569'. [ 516.216276][T15330] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2573'. [ 517.813740][T15367] netlink: 'syz.3.2582': attribute type 10 has an invalid length. [ 518.061716][T15374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.037905][T15401] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2592'. [ 519.099159][T15400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2593'. [ 519.134661][T15400] netlink: 'syz.4.2593': attribute type 10 has an invalid length. [ 519.738303][T15412] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2597'. [ 519.762761][T15414] netlink: 'syz.2.2598': attribute type 10 has an invalid length. [ 519.772153][T15414] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2598'. [ 519.794031][T15414] dummy0: entered promiscuous mode [ 519.809289][T15414] dummy0: entered allmulticast mode [ 519.885506][T15414] bridge0: port 3(dummy0) entered blocking state [ 519.916472][T15414] bridge0: port 3(dummy0) entered disabled state [ 520.128794][T15423] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2600'. [ 520.239852][T15414] bridge0: port 3(dummy0) entered blocking state [ 520.250405][T15414] bridge0: port 3(dummy0) entered forwarding state [ 520.469298][T15426] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2602'. [ 520.695834][T15431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 520.937994][T15442] netlink: 'syz.0.2607': attribute type 10 has an invalid length. [ 520.992967][T15442] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2607'. [ 521.009332][T15442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2607'. [ 521.182937][T15445] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2609'. [ 521.212885][T15445] openvswitch: netlink: Missing key (keys=40, expected=100) [ 521.541786][T15456] netlink: 'syz.3.2612': attribute type 3 has an invalid length. [ 521.550046][T15456] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2612'. [ 522.017722][T15468] netlink: 11318 bytes leftover after parsing attributes in process `syz.2.2616'. [ 522.075977][T15474] netlink: 9733 bytes leftover after parsing attributes in process `syz.2.2616'. [ 522.294233][T15480] netlink: 'syz.3.2620': attribute type 10 has an invalid length. [ 522.294290][T15481] netlink: 'syz.3.2620': attribute type 10 has an invalid length. [ 522.352798][T15480] geneve0: entered promiscuous mode [ 522.573759][T15480] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 522.599518][ T5877] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 522.608749][ T5877] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 522.617217][ T5877] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 522.660513][ T5877] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 522.700559][ T5877] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 522.779544][T15486] ip6gretap0 speed is unknown, defaulting to 1000 [ 522.788596][T15486] vcan0 speed is unknown, defaulting to 1000 [ 523.002135][T15493] openvswitch: netlink: Missing key (keys=40, expected=100) [ 523.078214][T15495] openvswitch: netlink: Missing key (keys=40, expected=100) [ 523.333824][ T3507] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.381000][T15503] netlink: 'syz.0.2627': attribute type 1 has an invalid length. [ 523.635371][ T3507] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.895817][ T3507] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.131060][ T3507] batman_adv: batadv0: Removing interface: netdevsim0 [ 524.238679][T15509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.577438][ T3507] bridge_slave_1: left allmulticast mode [ 524.613380][ T3507] bridge_slave_1: left promiscuous mode [ 524.626957][T15530] openvswitch: netlink: Missing key (keys=40, expected=100) [ 524.648598][ T3507] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.672812][ T3507] bridge_slave_0: left allmulticast mode [ 524.678614][ T3507] bridge_slave_0: left promiscuous mode [ 524.688728][ T3507] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.769908][ T5877] Bluetooth: hci5: command tx timeout [ 525.027188][T15547] netlink: 'syz.2.2640': attribute type 10 has an invalid length. [ 525.041649][T15543] syz1: rxe_newlink: already configured on vcan0 [ 525.084693][T15547] __nla_validate_parse: 5 callbacks suppressed [ 525.084714][T15547] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2640'. [ 525.895575][T15560] netlink: 'syz.3.2644': attribute type 10 has an invalid length. [ 525.916151][ T10] ip6gretap0 speed is unknown, defaulting to 1000 [ 525.924508][ T10] infiniband syz2: ib_query_port failed (-19) [ 525.924576][T15547] batadv_slave_1: entered promiscuous mode [ 525.936997][T15547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.947962][T15547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.959265][T15547] bridge0: port 4(batadv_slave_1) entered blocking state [ 525.980687][T15547] bridge0: port 4(batadv_slave_1) entered disabled state [ 525.994352][T15547] batadv_slave_1: entered allmulticast mode [ 526.005419][T15547] bridge0: port 4(batadv_slave_1) entered blocking state [ 526.012680][T15547] bridge0: port 4(batadv_slave_1) entered forwarding state [ 526.026569][T15553] netlink: 'syz.4.2642': attribute type 29 has an invalid length. [ 526.044992][T15554] netlink: 'syz.4.2642': attribute type 29 has an invalid length. [ 526.055759][T15562] netlink: 'syz.3.2644': attribute type 13 has an invalid length. [ 526.099992][T15562] netlink: 'syz.3.2644': attribute type 17 has an invalid length. [ 526.191457][T15566] netlink: 'syz.2.2645': attribute type 1 has an invalid length. [ 526.499497][T15560] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 526.508100][T15560] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 526.522605][T15560] batman_adv: batadv0: Adding interface: netdevsim0 [ 526.529255][T15560] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.555078][T15560] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 526.566386][T15486] chnl_net:caif_netlink_parms(): no params data found [ 526.634765][ T3507] : left promiscuous mode [ 526.647728][T15555] netlink: 'syz.4.2642': attribute type 29 has an invalid length. [ 526.753468][T15563] vcan0 speed is unknown, defaulting to 1000 [ 526.830280][ T5877] Bluetooth: hci5: command tx timeout [ 526.872658][T15486] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.896425][T15486] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.920553][T15486] bridge_slave_0: entered allmulticast mode [ 526.942460][T15486] bridge_slave_0: entered promiscuous mode [ 527.160228][T15486] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.208152][T15486] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.241410][T15486] bridge_slave_1: entered allmulticast mode [ 527.280952][T15486] bridge_slave_1: entered promiscuous mode [ 527.566454][T15486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.577549][T15602] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2653'. [ 527.700079][T15486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.910830][ T5877] Bluetooth: hci5: command tx timeout [ 530.910654][T15617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2658'. [ 530.994425][ T5877] Bluetooth: hci5: command tx timeout [ 531.010142][T15622] netlink: 'syz.0.2658': attribute type 10 has an invalid length. [ 531.018112][T15622] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2658'. [ 531.050063][T15623] netlink: 'syz.4.2660': attribute type 3 has an invalid length. [ 531.121995][T15486] team0: Port device team_slave_0 added [ 531.122873][T15623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.140506][T15622] batadv_slave_1: entered promiscuous mode [ 531.155528][T15622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.187009][T15626] netlink: 'syz.4.2660': attribute type 39 has an invalid length. [ 531.198696][T15622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.220750][T15486] team0: Port device team_slave_1 added [ 531.999344][T15486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.044916][T15486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.143338][T15639] netlink: 'syz.4.2663': attribute type 39 has an invalid length. [ 532.158219][T15486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.225631][T15486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.244385][T15486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.302214][T15486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.594920][T15486] hsr_slave_0: entered promiscuous mode [ 532.622011][T15486] hsr_slave_1: entered promiscuous mode [ 532.634392][T15486] debugfs: 'hsr0' already exists in 'hsr' [ 532.653619][T15486] Cannot create hsr debugfs directory [ 532.971274][T15658] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2668'. [ 533.376818][T15666] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2670'. [ 533.395963][ T3507] hsr_slave_0: left promiscuous mode [ 533.406865][ T3507] hsr_slave_1: left promiscuous mode [ 533.424145][ T3507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.437722][ T3507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.466744][ T3507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.484825][ T3507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.558953][T15677] netlink: 'syz.4.2673': attribute type 11 has an invalid length. [ 533.587527][T15677] netlink: 'syz.4.2673': attribute type 11 has an invalid length. [ 533.984797][ T3507] team0 (unregistering): Port device team_slave_1 removed [ 534.039546][ T3507] team0 (unregistering): Port device C removed [ 534.389324][ T3507] team0 (unregistering): Port device dummy0 removed [ 535.120212][T15699] netlink: 'syz.2.2678': attribute type 13 has an invalid length. [ 535.161925][T15699] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.2678'. [ 535.252975][T15486] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 535.335746][T15486] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 535.356762][T15486] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 535.418710][T15486] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 535.950549][T15486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.975776][T15486] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.996633][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.003921][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.053042][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.060271][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.123478][T15724] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2682'. [ 536.143322][T15724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2682'. [ 536.547166][T15737] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2687'. [ 536.705363][T15735] syzkaller0: entered promiscuous mode [ 536.729521][T15735] syzkaller0: entered allmulticast mode [ 537.004950][T15755] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2692'. [ 539.069599][T15774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2695'. [ 540.167292][T15755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2692'. [ 540.230609][T15486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.694208][T15800] openvswitch: netlink: IPv4 tunnel dst address is zero [ 540.734943][T15801] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2702'. [ 541.423124][T15486] veth0_vlan: entered promiscuous mode [ 541.453779][T15486] veth1_vlan: entered promiscuous mode [ 541.610144][T15486] veth0_macvtap: entered promiscuous mode [ 541.652186][T15486] veth1_macvtap: entered promiscuous mode [ 541.714792][T15486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.748247][T15486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.786177][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.816543][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.935230][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.977534][T15824] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 542.994562][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.027070][T15824] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 543.058746][T15824] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 543.176305][T15837] netlink: 'syz.0.2711': attribute type 4 has an invalid length. [ 543.188907][T15837] netlink: 'syz.0.2711': attribute type 4 has an invalid length. [ 543.214884][T13306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.230613][T15837] netlink: 199756 bytes leftover after parsing attributes in process `syz.0.2711'. [ 543.260360][T13306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.353303][T15846] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2715'. [ 543.393431][T15846] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2715'. [ 543.423289][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.443247][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.791214][T15862] netlink: 'syz.5.2614': attribute type 10 has an invalid length. [ 543.908054][T15862] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 543.941530][T15874] netlink: 'syz.2.2722': attribute type 1 has an invalid length. [ 543.964305][T15874] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2722'. [ 544.179630][T15886] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2725'. [ 545.082510][T15909] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2731'. [ 545.231161][T15905] netlink: 'syz.4.2732': attribute type 39 has an invalid length. [ 545.343758][T15912] syz.3.2734: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 545.594692][T15912] CPU: 0 UID: 0 PID: 15912 Comm: syz.3.2734 Not tainted syzkaller #0 PREEMPT(full) [ 545.594724][T15912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 545.594739][T15912] Call Trace: [ 545.594748][T15912] [ 545.594758][T15912] dump_stack_lvl+0x189/0x250 [ 545.594795][T15912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 545.594823][T15912] ? __pfx__printk+0x10/0x10 [ 545.594855][T15912] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 545.594882][T15912] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 545.594911][T15912] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 545.594941][T15912] warn_alloc+0x214/0x310 [ 545.594968][T15912] ? stack_depot_save_flags+0x40/0x860 [ 545.594997][T15912] ? __pfx_warn_alloc+0x10/0x10 [ 545.595025][T15912] ? kasan_save_track+0x4f/0x80 [ 545.595058][T15912] ? xskq_create+0x56/0x170 [ 545.595083][T15912] ? xsk_init_queue+0xb0/0x110 [ 545.595104][T15912] ? xsk_setsockopt+0x57b/0x8d0 [ 545.595124][T15912] ? do_sock_setsockopt+0x179/0x1b0 [ 545.595164][T15912] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 545.595192][T15912] ? do_syscall_64+0xfa/0x3b0 [ 545.595217][T15912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.595249][T15912] __vmalloc_node_range_noprof+0x125/0x12f0 [ 545.595313][T15912] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 545.595338][T15912] ? xskq_create+0x56/0x170 [ 545.595366][T15912] ? __kasan_kmalloc+0x93/0xb0 [ 545.595391][T15912] vmalloc_user_noprof+0xad/0xf0 [ 545.595414][T15912] ? xskq_create+0xbf/0x170 [ 545.595440][T15912] xskq_create+0xbf/0x170 [ 545.595470][T15912] xsk_init_queue+0xb0/0x110 [ 545.595499][T15912] xsk_setsockopt+0x57b/0x8d0 [ 545.595536][T15912] ? __pfx_xsk_setsockopt+0x10/0x10 [ 545.595578][T15912] ? __pfx_aa_sk_perm+0x10/0x10 [ 545.595609][T15912] ? __fget_files+0x2a/0x420 [ 545.595631][T15912] ? aa_sock_opt_perm+0xff/0x1b0 [ 545.595663][T15912] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 545.595692][T15912] ? __pfx_xsk_setsockopt+0x10/0x10 [ 545.595718][T15912] do_sock_setsockopt+0x179/0x1b0 [ 545.595756][T15912] __x64_sys_setsockopt+0x13f/0x1b0 [ 545.595796][T15912] do_syscall_64+0xfa/0x3b0 [ 545.595822][T15912] ? lockdep_hardirqs_on+0x9c/0x150 [ 545.595849][T15912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.595870][T15912] ? clear_bhb_loop+0x60/0xb0 [ 545.595897][T15912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.595918][T15912] RIP: 0033:0x7fd47d18eec9 [ 545.595939][T15912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.595958][T15912] RSP: 002b:00007fd47e0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 545.595980][T15912] RAX: ffffffffffffffda RBX: 00007fd47d3e6090 RCX: 00007fd47d18eec9 [ 545.595996][T15912] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 545.596009][T15912] RBP: 00007fd47d211f91 R08: 0000000000000004 R09: 0000000000000000 [ 545.596023][T15912] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 545.596037][T15912] R13: 00007fd47d3e6128 R14: 00007fd47d3e6090 R15: 00007ffcb89378b8 [ 545.596077][T15912] [ 545.596087][T15912] Mem-Info: [ 546.026099][T15912] active_anon:4083 inactive_anon:0 isolated_anon:0 [ 546.026099][T15912] active_file:20051 inactive_file:40071 isolated_file:0 [ 546.026099][T15912] unevictable:768 dirty:145 writeback:0 [ 546.026099][T15912] slab_reclaimable:11431 slab_unreclaimable:113230 [ 546.026099][T15912] mapped:32248 shmem:1356 pagetables:997 [ 546.026099][T15912] sec_pagetables:0 bounce:0 [ 546.026099][T15912] kernel_misc_reclaimable:0 [ 546.026099][T15912] free:1292531 free_pcp:15969 free_cma:0 [ 546.104929][T15912] Node 0 active_anon:16332kB inactive_anon:0kB active_file:80204kB inactive_file:160084kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129092kB dirty:580kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11788kB pagetables:3840kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 546.216770][T15912] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 546.247012][T15912] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 546.276467][T15912] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 546.322581][T15912] Node 0 DMA32 free:1269936kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16104kB inactive_anon:0kB active_file:80204kB inactive_file:158492kB unevictable:1536kB writepending:592kB present:3129332kB managed:2557364kB mlocked:0kB bounce:0kB free_pcp:44724kB local_pcp:21292kB free_cma:0kB [ 546.379673][T15912] lowmem_reserve[]: 0 0 1 1 1 [ 546.384684][T15912] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1592kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 546.424810][T15912] lowmem_reserve[]: 0 0 0 0 0 [ 546.433641][T15912] Node 1 Normal free:3885520kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20096kB local_pcp:10816kB free_cma:0kB [ 546.500007][T15912] lowmem_reserve[]: 0 0 0 0 0 [ 546.504854][T15912] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 546.555725][T15912] Node 0 DMA32: 1951*4kB (UM) 692*8kB (UM) 550*16kB (UME) 731*32kB (UME) 292*64kB (UME) 165*128kB (UM) 91*256kB (UM) 41*512kB (UM) 35*1024kB (UME) 5*2048kB (UM) 267*4096kB (M) = 1269340kB [ 546.578721][T15912] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 546.594480][T15912] Node 1 Normal: 212*4kB (UE) 54*8kB (UME) 33*16kB (UME) 82*32kB (UME) 28*64kB (UME) 9*128kB (UME) 5*256kB (UM) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3885520kB [ 546.648778][T15912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 546.666625][T15912] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 546.708930][T15912] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 546.719640][T15912] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 546.734892][T15912] 61475 total pagecache pages [ 546.745078][T15912] 0 pages in swap cache [ 546.749319][T15912] Free swap = 124996kB [ 546.773122][T15942] netlink: 'syz.0.2741': attribute type 11 has an invalid length. [ 546.789816][T15942] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.2741'. [ 546.870689][T15951] netlink: 'syz.4.2742': attribute type 2 has an invalid length. [ 546.870775][T15938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.902768][T15912] Total swap = 124996kB [ 546.906992][T15912] 2097051 pages RAM [ 546.913400][T15912] 0 pages HighMem/MovableOnly [ 546.918796][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2742'. [ 546.919089][T15912] 425684 pages reserved [ 546.936875][T15912] 0 pages cma reserved [ 546.984811][T15951] : entered promiscuous mode [ 546.993843][T15944] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2742'. [ 547.012199][T15944] openvswitch: netlink: Multiple metadata blocks provided [ 547.206495][T15967] netlink: 'syz.4.2749': attribute type 10 has an invalid length. [ 547.282133][T15967] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2749'. [ 547.313000][T15967] batadv_slave_1: entered promiscuous mode [ 547.330621][T15967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.399937][T15967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.327105][T15989] __nla_validate_parse: 4 callbacks suppressed [ 548.327127][T15989] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2754'. [ 548.851998][T15998] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2757'. [ 549.678005][T16031] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2764'. [ 549.745204][T16025] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2764'. [ 549.777603][T16026] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2763'. [ 549.886782][T16031] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2764'. [ 549.919036][T16036] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 550.258752][ T5877] Bluetooth: hci1: ISO packet for unknown connection handle 37 [ 550.563553][T16052] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.2772'. [ 550.611584][T16059] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2773'. [ 550.706659][T16059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2773'. [ 551.363413][T16075] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2779'. [ 552.294237][T16095] netlink: 'syz.2.2785': attribute type 22 has an invalid length. [ 554.627994][T16145] vcan0 speed is unknown, defaulting to 1000 [ 554.694654][T16147] netlink: 'syz.0.2799': attribute type 1 has an invalid length. [ 554.741605][T16153] netlink: 'syz.2.2800': attribute type 10 has an invalid length. [ 554.937719][T16153] team0: Device ipvlan1 failed to register rx_handler [ 554.999454][ T5877] Bluetooth: hci0: command 0x0406 tx timeout [ 555.034142][T16147] netlink: 'syz.0.2799': attribute type 12 has an invalid length. [ 555.361638][T16147] __nla_validate_parse: 3 callbacks suppressed [ 555.361698][T16147] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2799'. [ 556.216862][T16167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.600881][T16175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.609093][T16175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.868123][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2810'. [ 556.926466][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2810'. [ 557.980104][T16204] netlink: 'syz.3.2815': attribute type 10 has an invalid length. [ 558.088253][T16207] netlink: 'syz.3.2815': attribute type 10 has an invalid length. [ 558.119694][T16207] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2815'. [ 558.541181][T16204] batadv0: left allmulticast mode [ 558.546305][T16204] batadv0: left promiscuous mode [ 558.622832][T16204] bridge0: port 1(batadv0) entered disabled state [ 558.700253][T16204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.723222][T16204] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 558.847036][T16207] batadv0: entered promiscuous mode [ 558.854343][T16207] batadv0: entered allmulticast mode [ 558.876035][T16207] bond0: (slave batadv0): Releasing backup interface [ 558.922878][T16207] bridge0: port 1(batadv0) entered blocking state [ 558.950136][T16207] bridge0: port 1(batadv0) entered disabled state [ 559.387942][T13307] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 559.397583][T13307] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 559.874686][T16244] netlink: 'syz.0.2823': attribute type 21 has an invalid length. [ 559.903825][T16244] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2823'. [ 560.213476][T16259] netlink: 'syz.0.2828': attribute type 10 has an invalid length. [ 560.250892][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2830'. [ 560.299585][T16261] netlink: 'syz.2.2830': attribute type 21 has an invalid length. [ 560.313466][T16259] team0: Device ipvlan1 failed to register rx_handler [ 560.571855][T16269] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2831'. [ 560.832577][T16277] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2834'. [ 560.884613][T16277] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2834'. [ 561.209910][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 561.211867][T16290] netlink: 'syz.2.2838': attribute type 10 has an invalid length. [ 561.229170][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 561.243224][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 561.255991][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 561.267472][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 561.365807][T16296] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2838'. [ 561.375011][T16296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2838'. [ 561.474459][T16296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2838'. [ 561.605721][T16283] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 561.637420][T16290] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 561.677465][T16285] debugfs: '!' already exists in 'ieee80211' [ 561.818082][T13307] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.904366][T16289] vcan0 speed is unknown, defaulting to 1000 [ 561.979080][T13307] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.041597][T16301] netlink: 'syz.2.2840': attribute type 33 has an invalid length. [ 562.059910][T16301] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2840'. [ 562.300914][T16311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2843'. [ 562.323485][T13307] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.338952][T16311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2843'. [ 562.358882][T16311] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2843'. [ 562.432382][T16315] openvswitch: netlink: Missing key (keys=40, expected=100) [ 562.531571][T13307] batman_adv: batadv0: Removing interface: netdevsim0 [ 562.550947][T13307] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.636653][T16324] netlink: 'syz.2.2849': attribute type 10 has an invalid length. [ 563.263173][T16324] batman_adv: batadv0: Adding interface: vlan1 [ 563.269401][T16324] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.309912][T16324] batman_adv: batadv0: Interface activated: vlan1 [ 563.549968][ T5877] Bluetooth: hci2: command tx timeout [ 563.571082][T16341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.777598][T16350] openvswitch: netlink: Missing key (keys=40, expected=100) [ 563.788568][T13307] bridge0: port 1(batadv0) entered disabled state [ 563.819506][T13307] bridge_slave_1: left allmulticast mode [ 563.830668][T13307] bridge_slave_1: left promiscuous mode [ 563.846382][T13307] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.116775][T13306] wlan1: Trigger new scan to find an IBSS to join [ 564.301856][T13307] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 564.381857][T13307] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 564.684271][T13307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.701774][T13307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.725707][T13307] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 564.742003][T13307] bond0 (unregistering): Released all slaves [ 564.782337][T16384] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.790318][T16384] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.834249][T16386] bridge_slave_1: left allmulticast mode [ 564.849329][T16386] bridge_slave_1: left promiscuous mode [ 564.858498][T16386] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.874494][T16386] bridge_slave_0: left allmulticast mode [ 564.880935][T16386] bridge_slave_0: left promiscuous mode [ 564.886828][T16386] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.970144][T16289] chnl_net:caif_netlink_parms(): no params data found [ 564.996387][T13307] : left promiscuous mode [ 565.017809][T16363] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 565.027917][T16363] CPU: 0 UID: 0 PID: 16363 Comm: syz.4.2863 Not tainted syzkaller #0 PREEMPT(full) [ 565.027947][T16363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 565.027961][T16363] Call Trace: [ 565.027969][T16363] [ 565.027978][T16363] dump_stack_lvl+0x189/0x250 [ 565.028014][T16363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.028040][T16363] ? __pfx__printk+0x10/0x10 [ 565.028075][T16363] ? kernfs_path_from_node+0x2f/0x290 [ 565.028102][T16363] ? kernfs_path_from_node+0x250/0x290 [ 565.028128][T16363] ? kernfs_path_from_node+0x2f/0x290 [ 565.028159][T16363] sysfs_warn_dup+0x8e/0xa0 [ 565.028186][T16363] sysfs_do_create_link_sd+0xc0/0x110 [ 565.028216][T16363] device_add_class_symlinks+0x1cf/0x240 [ 565.028250][T16363] device_add+0x475/0xb50 [ 565.028285][T16363] wiphy_register+0x1ba6/0x28d0 [ 565.028331][T16363] ? __pfx_wiphy_register+0x10/0x10 [ 565.028356][T16363] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 565.028397][T16363] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 565.028434][T16363] ieee80211_register_hw+0x3484/0x4100 [ 565.028472][T16363] ? ieee80211_register_hw+0x1491/0x4100 [ 565.028505][T16363] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 565.028523][T16363] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 565.028552][T16363] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 565.028585][T16363] ? __hrtimer_setup+0x187/0x210 [ 565.028604][T16363] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 565.028634][T16363] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 565.028694][T16363] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 565.028716][T16363] ? trace_kmalloc+0x1f/0xd0 [ 565.028732][T16363] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 565.028752][T16363] ? kstrndup+0xbf/0x160 [ 565.028792][T16363] hwsim_new_radio_nl+0xea4/0x1b10 [ 565.028817][T16363] ? __pfx___nla_validate_parse+0x10/0x10 [ 565.028869][T16363] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 565.028901][T16363] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 565.028931][T16363] ? __nla_parse+0x40/0x60 [ 565.028962][T16363] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 565.028994][T16363] genl_family_rcv_msg_doit+0x215/0x300 [ 565.029024][T16363] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 565.029061][T16363] ? bpf_lsm_capable+0x9/0x20 [ 565.029080][T16363] ? security_capable+0x7e/0x2e0 [ 565.029112][T16363] genl_rcv_msg+0x60e/0x790 [ 565.029140][T16363] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.029160][T16363] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 565.029182][T16363] ? netlink_deliver_tap+0x2e/0x1b0 [ 565.029209][T16363] ? strlen+0x1f/0x70 [ 565.029247][T16363] netlink_rcv_skb+0x208/0x470 [ 565.029270][T16363] ? __lock_acquire+0xab9/0xd20 [ 565.029302][T16363] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.029324][T16363] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 565.029374][T16363] ? down_read+0x1ad/0x2e0 [ 565.029406][T16363] genl_rcv+0x28/0x40 [ 565.029423][T16363] netlink_unicast+0x82c/0x9e0 [ 565.029459][T16363] ? __pfx_netlink_unicast+0x10/0x10 [ 565.029479][T16363] ? security_netlink_send+0x9e/0x290 [ 565.029510][T16363] ? security_netlink_send+0x232/0x290 [ 565.029545][T16363] netlink_sendmsg+0x805/0xb30 [ 565.029591][T16363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.029623][T16363] ? aa_sock_msg_perm+0xf1/0x1d0 [ 565.029650][T16363] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 565.029677][T16363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.029705][T16363] __sock_sendmsg+0x219/0x270 [ 565.029733][T16363] ____sys_sendmsg+0x505/0x830 [ 565.029770][T16363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 565.029810][T16363] ? import_iovec+0x74/0xa0 [ 565.029856][T16363] ___sys_sendmsg+0x21f/0x2a0 [ 565.029889][T16363] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.029945][T16363] ? __fget_files+0x2a/0x420 [ 565.029984][T16363] ? __fget_files+0x2a/0x420 [ 565.030005][T16363] ? __fget_files+0x3a0/0x420 [ 565.030040][T16363] __x64_sys_sendmsg+0x19b/0x260 [ 565.030069][T16363] ? clockevents_program_event+0x24d/0x360 [ 565.030099][T16363] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 565.030152][T16363] ? do_syscall_64+0xbe/0x3b0 [ 565.030184][T16363] do_syscall_64+0xfa/0x3b0 [ 565.030212][T16363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.030232][T16363] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 565.030252][T16363] ? clear_bhb_loop+0x60/0xb0 [ 565.030277][T16363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.030298][T16363] RIP: 0033:0x7fb66c78eec9 [ 565.030316][T16363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.030334][T16363] RSP: 002b:00007fb66d5d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.030357][T16363] RAX: ffffffffffffffda RBX: 00007fb66c9e6090 RCX: 00007fb66c78eec9 [ 565.030371][T16363] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000004 [ 565.030383][T16363] RBP: 00007fb66c811f91 R08: 0000000000000000 R09: 0000000000000000 [ 565.030396][T16363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.030407][T16363] R13: 00007fb66c9e6128 R14: 00007fb66c9e6090 R15: 00007ffdcea80708 [ 565.030443][T16363] [ 565.635793][ T5877] Bluetooth: hci2: command tx timeout [ 565.688689][T16400] __nla_validate_parse: 4 callbacks suppressed [ 565.688709][T16400] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2872'. [ 565.719301][T16400] openvswitch: netlink: Missing key (keys=40, expected=100) [ 565.785508][T16289] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.793280][T16289] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.800614][T16289] bridge_slave_0: entered allmulticast mode [ 565.808639][T16289] bridge_slave_0: entered promiscuous mode [ 565.835401][T16289] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.847227][T16289] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.854682][T16289] bridge_slave_1: entered allmulticast mode [ 565.863086][T16289] bridge_slave_1: entered promiscuous mode [ 566.033555][T16414] netlink: 'syz.4.2876': attribute type 29 has an invalid length. [ 566.047449][T16414] netlink: 'syz.4.2876': attribute type 29 has an invalid length. [ 566.097559][T16289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.184174][T16289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.111710][T16289] team0: Port device team_slave_0 added [ 567.254288][T16289] team0: Port device team_slave_1 added [ 567.490440][T16445] netlink: 'syz.2.2883': attribute type 9 has an invalid length. [ 567.498852][T16445] netlink: 40451 bytes leftover after parsing attributes in process `syz.2.2883'. [ 567.527703][T16450] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2884'. [ 567.709990][ T5877] Bluetooth: hci2: command tx timeout [ 568.043626][T16289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.076949][T16289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.328118][ T37] wlan1: Trigger new scan to find an IBSS to join [ 568.371763][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.378439][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.405227][T16289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.436596][T16462] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2887'. [ 568.466303][T16289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.489946][T16289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.526237][T16289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.767999][T16476] netlink: 'syz.2.2890': attribute type 17 has an invalid length. [ 569.093391][T13307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.117969][T13307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.141882][T13307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.157691][T13307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.206962][T13307] veth0_macvtap: left promiscuous mode [ 569.219278][T13307] veth0_vlan: left promiscuous mode [ 569.234591][T16493] netlink: 147608 bytes leftover after parsing attributes in process `syz.5.2895'. [ 569.264896][T16493] netlink: 61831 bytes leftover after parsing attributes in process `syz.5.2895'. [ 569.299355][T13331] wlan1: Creating new IBSS network, BSSID 4e:6f:06:ef:e5:1b [ 569.605239][T16504] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.2898'. [ 569.792789][ T5877] Bluetooth: hci2: command tx timeout [ 570.719378][T16520] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2902'. [ 571.169687][T16289] hsr_slave_0: entered promiscuous mode [ 571.177640][T16289] hsr_slave_1: entered promiscuous mode [ 571.189585][T16289] debugfs: 'hsr0' already exists in 'hsr' [ 571.195986][T16289] Cannot create hsr debugfs directory [ 571.226806][T16520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2902'. [ 571.388256][T16527] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2904'. [ 572.128533][T16543] netlink: 'syz.0.2909': attribute type 10 has an invalid length. [ 572.180890][T16543] syz_tun: entered promiscuous mode [ 572.322148][T16543] syz_tun: entered allmulticast mode [ 572.339342][T16543] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 572.659179][T16552] delete_channel: no stack [ 573.056298][T16563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2914'. [ 573.605579][T16289] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 573.651670][T16579] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2917'. [ 573.671582][T16289] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 573.691527][T16573] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2917'. [ 573.724460][T16289] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 573.743206][T16579] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2917'. [ 573.792353][T16289] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 574.103676][T16597] netlink: 'syz.0.2922': attribute type 49 has an invalid length. [ 574.296191][T16289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.395017][T16289] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.467115][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.474457][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.549661][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.556949][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.262451][T16627] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32 [ 575.827690][T16632] syz.4.2930: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 575.850771][T16632] CPU: 1 UID: 0 PID: 16632 Comm: syz.4.2930 Not tainted syzkaller #0 PREEMPT(full) [ 575.850803][T16632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 575.850817][T16632] Call Trace: [ 575.850827][T16632] [ 575.850837][T16632] dump_stack_lvl+0x189/0x250 [ 575.850876][T16632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.850915][T16632] ? __pfx__printk+0x10/0x10 [ 575.850948][T16632] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 575.850975][T16632] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 575.851006][T16632] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 575.851038][T16632] warn_alloc+0x214/0x310 [ 575.851067][T16632] ? stack_depot_save_flags+0x40/0x860 [ 575.851096][T16632] ? __pfx_warn_alloc+0x10/0x10 [ 575.851125][T16632] ? kasan_save_track+0x4f/0x80 [ 575.851158][T16632] ? xskq_create+0x56/0x170 [ 575.851181][T16632] ? xsk_init_queue+0xb0/0x110 [ 575.851202][T16632] ? xsk_setsockopt+0x57b/0x8d0 [ 575.851222][T16632] ? do_sock_setsockopt+0x179/0x1b0 [ 575.851250][T16632] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 575.851277][T16632] ? do_syscall_64+0xfa/0x3b0 [ 575.851302][T16632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.851338][T16632] __vmalloc_node_range_noprof+0x125/0x12f0 [ 575.851414][T16632] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 575.851449][T16632] ? __kasan_kmalloc+0x93/0xb0 [ 575.851476][T16632] vmalloc_user_noprof+0xad/0xf0 [ 575.851499][T16632] ? xskq_create+0xbf/0x170 [ 575.851527][T16632] xskq_create+0xbf/0x170 [ 575.851559][T16632] xsk_init_queue+0xb0/0x110 [ 575.851590][T16632] xsk_setsockopt+0x57b/0x8d0 [ 575.851620][T16632] ? __pfx_xsk_setsockopt+0x10/0x10 [ 575.851645][T16632] ? __pfx_aa_sk_perm+0x10/0x10 [ 575.851677][T16632] ? __fget_files+0x2a/0x420 [ 575.851698][T16632] ? aa_sock_opt_perm+0xff/0x1b0 [ 575.851732][T16632] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 575.851759][T16632] ? __pfx_xsk_setsockopt+0x10/0x10 [ 575.851785][T16632] do_sock_setsockopt+0x179/0x1b0 [ 575.851823][T16632] __x64_sys_setsockopt+0x13f/0x1b0 [ 575.851872][T16632] do_syscall_64+0xfa/0x3b0 [ 575.851898][T16632] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.851930][T16632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.851950][T16632] ? clear_bhb_loop+0x60/0xb0 [ 575.851978][T16632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.851998][T16632] RIP: 0033:0x7fb66c78eec9 [ 575.852018][T16632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.852036][T16632] RSP: 002b:00007fb66d5f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 575.852058][T16632] RAX: ffffffffffffffda RBX: 00007fb66c9e5fa0 RCX: 00007fb66c78eec9 [ 575.852072][T16632] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 575.852083][T16632] RBP: 00007fb66c811f91 R08: 0000000000000004 R09: 0000000000000000 [ 575.852096][T16632] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 575.852108][T16632] R13: 00007fb66c9e6038 R14: 00007fb66c9e5fa0 R15: 00007ffdcea80708 [ 575.852151][T16632] [ 575.852160][T16632] Mem-Info: [ 575.867856][T16289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.976152][T16632] active_anon:3963 inactive_anon:0 isolated_anon:0 [ 575.976152][T16632] active_file:20435 inactive_file:40084 isolated_file:0 [ 575.976152][T16632] unevictable:768 dirty:253 writeback:0 [ 575.976152][T16632] slab_reclaimable:11523 slab_unreclaimable:114358 [ 575.976152][T16632] mapped:29242 shmem:1356 pagetables:951 [ 575.976152][T16632] sec_pagetables:0 bounce:0 [ 575.976152][T16632] kernel_misc_reclaimable:0 [ 575.976152][T16632] free:1288483 free_pcp:17919 free_cma:0 [ 576.215239][T16632] Node 0 active_anon:15968kB inactive_anon:0kB active_file:81740kB inactive_file:160136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116844kB dirty:1012kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11596kB pagetables:3620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 576.251882][T16289] veth0_vlan: entered promiscuous mode [ 576.269096][T16632] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 576.313218][T16289] veth1_vlan: entered promiscuous mode [ 576.333327][T16635] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2931'. [ 576.359563][T16632] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 576.404664][T16289] veth0_macvtap: entered promiscuous mode [ 576.439683][T16289] veth1_macvtap: entered promiscuous mode [ 576.450666][T16632] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 576.456708][T16632] Node 0 DMA32 free:1255080kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15924kB inactive_anon:0kB active_file:81740kB inactive_file:158544kB unevictable:1536kB writepending:1008kB present:3129332kB managed:2557364kB mlocked:0kB bounce:0kB free_pcp:48316kB local_pcp:15576kB free_cma:0kB [ 576.497310][T16632] lowmem_reserve[]: 0 0 1 1 1 [ 576.544155][T16632] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1592kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 576.600875][T16289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.621626][T16289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.629084][T16632] lowmem_reserve[]: 0 0 0 0 0 [ 576.672694][T13330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.679839][T16632] Node 1 Normal free:3885520kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20100kB local_pcp:10816kB free_cma:0kB [ 576.723605][T13330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.767125][T13330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.799455][T16632] lowmem_reserve[]: 0 0 0 0 0 [ 576.811908][T13330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.854784][T16632] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 576.876748][T16641] netlink: 'syz.2.2934': attribute type 16 has an invalid length. [ 576.886452][T16632] Node 0 DMA32: 2678*4kB (UME) 1355*8kB (UME) 1031*16kB (UM) 255*32kB (UME) 424*64kB (UME) 219*128kB (UME) 78*256kB (UM) 49*512kB (UM) 17*1024kB (UME) 6*2048kB (UM) 263*4096kB (M) = 1253376kB [ 576.929998][T16641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2934'. [ 576.978872][T16632] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 577.004033][T13331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.037859][T16632] Node 1 Normal: 212*4kB (UE) 54*8kB (UME) 33*16kB (UME) 82*32kB (UME) 28*64kB (UME) 9*128kB (UME) 5*256kB (UM) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3885520kB [ 577.059862][T13331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.089932][T16632] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.099553][T16632] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 577.158235][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.181215][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.187232][T16632] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.198970][T16632] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 577.208966][T16632] 61874 total pagecache pages [ 577.216231][T16632] 0 pages in swap cache [ 577.275884][T16632] Free swap = 124996kB [ 577.304402][T16632] Total swap = 124996kB [ 577.316960][T16632] 2097051 pages RAM [ 577.348304][T16632] 0 pages HighMem/MovableOnly [ 577.373392][T16632] 425684 pages reserved [ 577.399441][T16632] 0 pages cma reserved [ 577.743041][T16659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2937'. [ 578.153072][T16666] netlink: 'syz.0.2941': attribute type 4 has an invalid length. [ 578.161300][T16666] netlink: 'syz.0.2941': attribute type 11 has an invalid length. [ 578.169186][T16666] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2941'. [ 579.138223][T16689] netlink: 'syz.4.2949': attribute type 10 has an invalid length. [ 579.162385][T16689] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2949'. [ 579.178927][T16689] team0: entered promiscuous mode [ 579.184409][T16689] C: entered promiscuous mode [ 579.191776][T16689] team_slave_1: entered promiscuous mode [ 579.203814][T16689] dummy0: entered promiscuous mode [ 579.211595][T16689] team0: entered allmulticast mode [ 579.229514][T16689] C: entered allmulticast mode [ 579.240748][T16689] team_slave_1: entered allmulticast mode [ 579.246698][T16689] dummy0: entered allmulticast mode [ 579.260712][T16689] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 579.409457][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2952'. [ 579.446928][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2952'. [ 579.724504][T16703] mac80211_hwsim hwsim20 .3ãc¤±: renamed from wlan1 [ 580.554430][T16722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2962'. [ 580.623338][T16721] delete_channel: no stack [ 580.728831][T16735] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2967'. [ 580.740345][T16735] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2967'. [ 580.753306][T16735] netlink: 'syz.4.2967': attribute type 5 has an invalid length. [ 581.197031][T16752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.627657][T16773] __nla_validate_parse: 1 callbacks suppressed [ 581.627679][T16773] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2979'. [ 581.664506][T16773] openvswitch: netlink: Missing key (keys=40, expected=100) [ 582.004882][T16782] netlink: 'syz.2.2983': attribute type 10 has an invalid length. [ 582.024802][T16782] veth1_vlan: entered allmulticast mode [ 582.037952][T16779] netlink: 'syz.0.2982': attribute type 1 has an invalid length. [ 582.060357][T16779] netlink: 'syz.0.2982': attribute type 4 has an invalid length. [ 582.068251][T16779] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2982'. [ 582.105874][T16782] team0: Device veth1_vlan failed to register rx_handler [ 582.124315][T16783] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2982'. [ 582.415072][T16796] vcan0 speed is unknown, defaulting to 1000 [ 583.348236][T16822] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2993'. [ 583.402043][T16822] openvswitch: netlink: Missing key (keys=40, expected=100) [ 583.466713][T16824] netlink: 'syz.3.2995': attribute type 2 has an invalid length. [ 583.492876][T16824] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2995'. [ 583.522237][T16825] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2995'. [ 583.711569][T16831] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2997'. [ 584.664334][T16855] netlink: 'syz.2.3004': attribute type 10 has an invalid length. [ 584.680185][T16855] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3004'. [ 584.714869][T16856] netlink: 'syz.0.3003': attribute type 39 has an invalid length. [ 584.778119][T16859] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3006'. [ 584.787709][T16855] dummy0: left allmulticast mode [ 584.803560][T16859] openvswitch: netlink: Missing key (keys=40, expected=100) [ 584.826902][T16855] bridge0: port 3(dummy0) entered disabled state [ 585.022843][T16865] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3005'. [ 585.808320][T16880] tmpfs: Bad value for 'mode' [ 587.314057][T16920] netlink: 'syz.0.3021': attribute type 13 has an invalid length. [ 587.536816][T16927] netlink: 'syz.3.3025': attribute type 3 has an invalid length. [ 587.570385][T16927] __nla_validate_parse: 3 callbacks suppressed [ 587.570408][T16927] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3025'. [ 587.959070][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 587.976458][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 588.000216][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 588.028755][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 588.038510][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 588.169188][T16944] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3029'. [ 588.251985][T16937] vcan0 speed is unknown, defaulting to 1000 [ 588.388155][T16952] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3031'. [ 588.433569][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.814220][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.243858][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.467620][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.902770][T16937] chnl_net:caif_netlink_parms(): no params data found [ 589.902887][T17000] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3043'. [ 590.117882][ T51] Bluetooth: hci3: command tx timeout [ 590.176974][T17002] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 590.292655][T16937] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.316804][T16937] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.360854][T16937] bridge_slave_0: entered allmulticast mode [ 590.391668][T16937] bridge_slave_0: entered promiscuous mode [ 591.034985][T17019] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3047'. [ 591.124952][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.138201][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.155397][ T36] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 591.168212][ T36] bond0 (unregistering): Released all slaves [ 591.188126][T16937] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.196258][T16937] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.203769][T16937] bridge_slave_1: entered allmulticast mode [ 591.220000][T16937] bridge_slave_1: entered promiscuous mode [ 591.317443][T17019] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.422932][T17019] bridge_slave_0 (unregistering): left allmulticast mode [ 591.431967][T17019] bridge_slave_0 (unregistering): left promiscuous mode [ 591.439503][T17019] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.625421][T17028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3050'. [ 591.844994][T16937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.965686][T16937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.070305][T17036] openvswitch: netlink: Key type 29 is not supported [ 592.192824][ T51] Bluetooth: hci3: command tx timeout [ 592.451286][T16937] team0: Port device team_slave_0 added [ 592.494200][T16937] team0: Port device team_slave_1 added [ 592.500954][T17044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3055'. [ 592.715420][T16937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.729136][T16937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.775672][T16937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.796224][T16937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.869458][T16937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.907028][T16937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.997500][T17069] openvswitch: netlink: Flow actions attr not present in new flow. [ 593.349212][T17073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3063'. [ 593.511400][T16937] hsr_slave_0: entered promiscuous mode [ 593.528690][T16937] hsr_slave_1: entered promiscuous mode [ 593.549549][T16937] debugfs: 'hsr0' already exists in 'hsr' [ 593.579582][T16937] Cannot create hsr debugfs directory [ 593.683899][ T36] hsr_slave_0: left promiscuous mode [ 593.714999][ T36] hsr_slave_1: left promiscuous mode [ 593.737461][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.756868][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.800859][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.826034][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.853660][T17091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3070'. [ 593.884492][ T36] veth1_macvtap: left promiscuous mode [ 593.892815][ T36] veth0_macvtap: left promiscuous mode [ 593.899036][ T36] veth1_vlan: left promiscuous mode [ 593.918856][ T36] veth0_vlan: left promiscuous mode [ 594.271072][ T51] Bluetooth: hci3: command tx timeout [ 595.973709][T17117] netlink: 'syz.0.3074': attribute type 39 has an invalid length. [ 596.084772][ T36] team0 (unregistering): Port device team_slave_1 removed [ 596.136818][ T36] team0 (unregistering): Port device team_slave_0 removed [ 596.349893][ T51] Bluetooth: hci3: command tx timeout [ 596.626780][T17095] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3070'. [ 596.644793][T17109] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 596.651097][T17109] syzkaller0: persist disabled [ 596.658577][T17112] syzkaller0: tun_chr_ioctl cmd 21731 [ 596.775713][T17097] netlink: 'syz.2.3069': attribute type 1 has an invalid length. [ 596.967435][T17119] openvswitch: netlink: IP tunnel dst address not specified [ 598.005896][T16937] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 598.048482][T16937] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 598.055496][T17155] netlink: 'syz.4.3085': attribute type 3 has an invalid length. [ 598.055520][T17155] netlink: 'syz.4.3085': attribute type 2 has an invalid length. [ 598.055534][T17155] netlink: 198112 bytes leftover after parsing attributes in process `syz.4.3085'. [ 598.093291][T16937] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 598.106494][T16937] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 598.145002][T17158] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3084'. [ 598.165344][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3083'. [ 598.439178][T16937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.493977][T16937] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.572124][T13307] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.579373][T13307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.686718][T13307] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.694020][T13307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.782204][T17174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3088'. [ 598.810412][T17174] openvswitch: netlink: Flow key attr not present in new flow. [ 599.359616][T13330] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 599.913830][T16937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.089610][T17211] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3096'. [ 600.305251][T17215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3097'. [ 600.711335][T16937] veth0_vlan: entered promiscuous mode [ 600.736460][T16937] veth1_vlan: entered promiscuous mode [ 600.896663][T16937] veth0_macvtap: entered promiscuous mode [ 600.924096][T16937] veth1_macvtap: entered promiscuous mode [ 601.118932][T16937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.143178][T16937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.161222][T13330] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.266667][T13330] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.325682][T13330] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.353503][T13330] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.618942][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.627704][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.678445][T17269] ================================================================== [ 601.686616][T17269] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450 [ 601.694803][T17269] Read of size 1 at addr ffff88802f3b0770 by task syz.4.3110/17269 [ 601.702707][T17269] [ 601.705064][T17269] CPU: 0 UID: 0 PID: 17269 Comm: syz.4.3110 Not tainted syzkaller #0 PREEMPT(full) [ 601.705088][T17269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 601.705100][T17269] Call Trace: [ 601.705107][T17269] [ 601.705114][T17269] dump_stack_lvl+0x189/0x250 [ 601.705139][T17269] ? __virt_addr_valid+0x1c8/0x5c0 [ 601.705161][T17269] ? rcu_is_watching+0x15/0xb0 [ 601.705182][T17269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 601.705204][T17269] ? rcu_is_watching+0x15/0xb0 [ 601.705220][T17269] ? lock_release+0x4b/0x3e0 [ 601.705244][T17269] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 601.705264][T17269] ? __virt_addr_valid+0x1c8/0x5c0 [ 601.705284][T17269] ? __virt_addr_valid+0x4a5/0x5c0 [ 601.705305][T17269] print_report+0xca/0x240 [ 601.705321][T17269] ? __xfrm_state_insert+0x8af/0x1450 [ 601.705345][T17269] kasan_report+0x118/0x150 [ 601.705363][T17269] ? __xfrm_state_insert+0x8af/0x1450 [ 601.705398][T17269] __xfrm_state_insert+0x8af/0x1450 [ 601.705426][T17269] ? xfrm_state_insert+0x44/0x60 [ 601.705451][T17269] xfrm_state_insert+0x54/0x60 [ 601.705476][T17269] ipcomp6_init_state+0x655/0x900 [ 601.705503][T17269] __xfrm_init_state+0xa76/0x13f0 [ 601.705519][T17269] ? __xfrm_init_state+0x7ef/0x13f0 [ 601.705538][T17269] xfrm_add_sa+0x2f5b/0x4070 [ 601.705558][T17269] ? __pfx_xfrm_add_sa+0x10/0x10 [ 601.705571][T17269] ? apparmor_capable+0x137/0x1b0 [ 601.705598][T17269] ? __nla_parse+0x40/0x60 [ 601.705622][T17269] xfrm_user_rcv_msg+0x7a3/0xab0 [ 601.705642][T17269] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 601.705675][T17269] ? __pfx___mutex_trylock_common+0x10/0x10 [ 601.705693][T17269] ? kasan_check_range+0x9b/0x2c0 [ 601.705711][T17269] ? rcu_is_watching+0x15/0xb0 [ 601.705727][T17269] ? trace_contention_end+0x39/0x120 [ 601.705745][T17269] ? __mutex_lock+0x335/0x1350 [ 601.705769][T17269] netlink_rcv_skb+0x208/0x470 [ 601.705790][T17269] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 601.705807][T17269] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 601.705833][T17269] ? netlink_deliver_tap+0x2e/0x1b0 [ 601.705853][T17269] ? netlink_deliver_tap+0x2e/0x1b0 [ 601.705874][T17269] xfrm_netlink_rcv+0x79/0x90 [ 601.705889][T17269] netlink_unicast+0x82c/0x9e0 [ 601.705912][T17269] ? __pfx_netlink_unicast+0x10/0x10 [ 601.705930][T17269] ? netlink_sendmsg+0x642/0xb30 [ 601.705950][T17269] ? skb_put+0x11b/0x210 [ 601.705973][T17269] netlink_sendmsg+0x805/0xb30 [ 601.705998][T17269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.706023][T17269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.706044][T17269] __sock_sendmsg+0x219/0x270 [ 601.706063][T17269] ____sys_sendmsg+0x505/0x830 [ 601.706089][T17269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 601.706117][T17269] ? import_iovec+0x74/0xa0 [ 601.706143][T17269] ___sys_sendmsg+0x21f/0x2a0 [ 601.706168][T17269] ? __pfx____sys_sendmsg+0x10/0x10 [ 601.706207][T17269] ? __fget_files+0x2a/0x420 [ 601.706225][T17269] ? __fget_files+0x3a0/0x420 [ 601.706246][T17269] __x64_sys_sendmsg+0x19b/0x260 [ 601.706271][T17269] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 601.706306][T17269] do_syscall_64+0xfa/0x3b0 [ 601.706328][T17269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.706344][T17269] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 601.706361][T17269] ? clear_bhb_loop+0x60/0xb0 [ 601.706378][T17269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.706400][T17269] RIP: 0033:0x7fb66c78eec9 [ 601.706416][T17269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.706432][T17269] RSP: 002b:00007fb66d5d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.706450][T17269] RAX: ffffffffffffffda RBX: 00007fb66c9e6090 RCX: 00007fb66c78eec9 [ 601.706463][T17269] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000008 [ 601.706475][T17269] RBP: 00007fb66c811f91 R08: 0000000000000000 R09: 0000000000000000 [ 601.706487][T17269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.706497][T17269] R13: 00007fb66c9e6128 R14: 00007fb66c9e6090 R15: 00007ffdcea80708 [ 601.706516][T17269] [ 601.706522][T17269] [ 602.100469][T17269] Allocated by task 16257: [ 602.104898][T17269] kasan_save_track+0x3e/0x80 [ 602.109620][T17269] __kasan_slab_alloc+0x6c/0x80 [ 602.114507][T17269] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 602.120426][T17269] xfrm_state_alloc+0x24/0x2f0 [ 602.125652][T17269] __find_acq_core+0x8a7/0x1c00 [ 602.130520][T17269] xfrm_find_acq+0x78/0xa0 [ 602.134946][T17269] xfrm_alloc_userspi+0x6b3/0xc90 [ 602.139977][T17269] xfrm_user_rcv_msg+0x7a3/0xab0 [ 602.144923][T17269] netlink_rcv_skb+0x208/0x470 [ 602.149697][T17269] xfrm_netlink_rcv+0x79/0x90 [ 602.154472][T17269] netlink_unicast+0x82c/0x9e0 [ 602.159264][T17269] netlink_sendmsg+0x805/0xb30 [ 602.164127][T17269] __sock_sendmsg+0x219/0x270 [ 602.168808][T17269] ____sys_sendmsg+0x505/0x830 [ 602.173582][T17269] ___sys_sendmsg+0x21f/0x2a0 [ 602.178269][T17269] __x64_sys_sendmsg+0x19b/0x260 [ 602.183224][T17269] do_syscall_64+0xfa/0x3b0 [ 602.187736][T17269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.193663][T17269] [ 602.195992][T17269] Freed by task 106: [ 602.199889][T17269] kasan_save_track+0x3e/0x80 [ 602.204580][T17269] kasan_save_free_info+0x46/0x50 [ 602.209611][T17269] __kasan_slab_free+0x5b/0x80 [ 602.214396][T17269] kmem_cache_free+0x18f/0x400 [ 602.219163][T17269] xfrm_state_gc_task+0x52d/0x6b0 [ 602.224199][T17269] process_scheduled_works+0xae1/0x17b0 [ 602.229766][T17269] worker_thread+0x8a0/0xda0 [ 602.234364][T17269] kthread+0x70e/0x8a0 [ 602.238444][T17269] ret_from_fork+0x436/0x7d0 [ 602.243040][T17269] ret_from_fork_asm+0x1a/0x30 [ 602.247821][T17269] [ 602.250147][T17269] The buggy address belongs to the object at ffff88802f3b0440 [ 602.250147][T17269] which belongs to the cache xfrm_state of size 928 [ 602.264118][T17269] The buggy address is located 816 bytes inside of [ 602.264118][T17269] freed 928-byte region [ffff88802f3b0440, ffff88802f3b07e0) [ 602.277921][T17269] [ 602.280252][T17269] The buggy address belongs to the physical page: [ 602.286684][T17269] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f3b1100 pfn:0x2f3b0 [ 602.296761][T17269] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 602.305267][T17269] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 602.312818][T17269] page_type: f5(slab) [ 602.316810][T17269] raw: 00fff00000000040 ffff888020aee140 dead000000000122 0000000000000000 [ 602.325405][T17269] raw: ffff88802f3b1100 00000000800f000a 00000000f5000000 0000000000000000 [ 602.334003][T17269] head: 00fff00000000040 ffff888020aee140 dead000000000122 0000000000000000 [ 602.342802][T17269] head: ffff88802f3b1100 00000000800f000a 00000000f5000000 0000000000000000 [ 602.351481][T17269] head: 00fff00000000002 ffffea0000bcec01 00000000ffffffff 00000000ffffffff [ 602.360175][T17269] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 602.368848][T17269] page dumped because: kasan: bad access detected [ 602.375363][T17269] page_owner tracks the page as allocated [ 602.381095][T17269] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6010, tgid 6008 (syz.3.4), ts 96084315193, free_ts 95274109580 [ 602.399958][T17269] post_alloc_hook+0x240/0x2a0 [ 602.404744][T17269] get_page_from_freelist+0x21e4/0x22c0 [ 602.410325][T17269] __alloc_frozen_pages_noprof+0x181/0x370 [ 602.416151][T17269] alloc_pages_mpol+0x232/0x4a0 [ 602.421015][T17269] allocate_slab+0x8a/0x370 [ 602.425541][T17269] ___slab_alloc+0xbeb/0x1420 [ 602.430237][T17269] kmem_cache_alloc_noprof+0x283/0x3c0 [ 602.435718][T17269] xfrm_state_alloc+0x24/0x2f0 [ 602.440494][T17269] pfkey_add+0x6e4/0x2e00 [ 602.444846][T17269] pfkey_sendmsg+0xbfe/0x1090 [ 602.449545][T17269] __sock_sendmsg+0x219/0x270 [ 602.454239][T17269] ____sys_sendmsg+0x505/0x830 [ 602.459023][T17269] ___sys_sendmsg+0x21f/0x2a0 [ 602.463715][T17269] __x64_sys_sendmsg+0x19b/0x260 [ 602.468667][T17269] do_syscall_64+0xfa/0x3b0 [ 602.473184][T17269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.479088][T17269] page last free pid 5851 tgid 5851 stack trace: [ 602.485423][T17269] __free_frozen_pages+0xbc4/0xd30 [ 602.490549][T17269] __put_partials+0x156/0x1a0 [ 602.495237][T17269] put_cpu_partial+0x17c/0x250 [ 602.500022][T17269] __slab_free+0x2d5/0x3c0 [ 602.504462][T17269] qlist_free_all+0x97/0x140 [ 602.509091][T17269] kasan_quarantine_reduce+0x148/0x160 [ 602.514582][T17269] __kasan_slab_alloc+0x22/0x80 [ 602.519451][T17269] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 602.525378][T17269] kmalloc_reserve+0xbd/0x290 [ 602.530075][T17269] __alloc_skb+0x142/0x2d0 [ 602.534593][T17269] tcp_stream_alloc_skb+0x3d/0x340 [ 602.539801][T17269] tcp_sendmsg_locked+0xf38/0x5620 [ 602.544926][T17269] tcp_sendmsg+0x2f/0x50 [ 602.549181][T17269] __sock_sendmsg+0x19c/0x270 [ 602.553869][T17269] sock_write_iter+0x258/0x330 [ 602.558635][T17269] vfs_write+0x5c9/0xb30 [ 602.562897][T17269] [ 602.565231][T17269] Memory state around the buggy address: [ 602.570955][T17269] ffff88802f3b0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 602.579105][T17269] ffff88802f3b0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 602.587214][T17269] >ffff88802f3b0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 602.595284][T17269] ^ [ 602.603007][T17269] ffff88802f3b0780: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 602.611080][T17269] ffff88802f3b0800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 602.619145][T17269] ================================================================== [ 602.627475][T17269] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 602.634713][T17269] CPU: 0 UID: 0 PID: 17269 Comm: syz.4.3110 Not tainted syzkaller #0 PREEMPT(full) [ 602.644116][T17269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 602.654217][T17269] Call Trace: [ 602.657576][T17269] [ 602.660537][T17269] dump_stack_lvl+0x99/0x250 [ 602.665161][T17269] ? __asan_memcpy+0x40/0x70 [ 602.669795][T17269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 602.675034][T17269] ? __pfx__printk+0x10/0x10 [ 602.679678][T17269] vpanic+0x281/0x750 [ 602.683701][T17269] ? __pfx_vpanic+0x10/0x10 [ 602.688242][T17269] ? irqentry_exit+0x74/0x90 [ 602.692885][T17269] panic+0xb9/0xc0 [ 602.696658][T17269] ? __pfx_panic+0x10/0x10 [ 602.701114][T17269] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 602.707054][T17269] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 602.712972][T17269] ? is_module_address+0x17/0xf0 [ 602.717930][T17269] ? __xfrm_state_insert+0x8af/0x1450 [ 602.723325][T17269] check_panic_on_warn+0x89/0xb0 [ 602.728288][T17269] ? __xfrm_state_insert+0x8af/0x1450 [ 602.733682][T17269] end_report+0x78/0x160 [ 602.737943][T17269] kasan_report+0x129/0x150 [ 602.742549][T17269] ? __xfrm_state_insert+0x8af/0x1450 [ 602.747949][T17269] __xfrm_state_insert+0x8af/0x1450 [ 602.753199][T17269] ? xfrm_state_insert+0x44/0x60 [ 602.758202][T17269] xfrm_state_insert+0x54/0x60 [ 602.762984][T17269] ipcomp6_init_state+0x655/0x900 [ 602.768036][T17269] __xfrm_init_state+0xa76/0x13f0 [ 602.773111][T17269] ? __xfrm_init_state+0x7ef/0x13f0 [ 602.778326][T17269] xfrm_add_sa+0x2f5b/0x4070 [ 602.782932][T17269] ? __pfx_xfrm_add_sa+0x10/0x10 [ 602.787895][T17269] ? apparmor_capable+0x137/0x1b0 [ 602.792943][T17269] ? __nla_parse+0x40/0x60 [ 602.797373][T17269] xfrm_user_rcv_msg+0x7a3/0xab0 [ 602.802323][T17269] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 602.807810][T17269] ? __pfx___mutex_trylock_common+0x10/0x10 [ 602.813801][T17269] ? kasan_check_range+0x9b/0x2c0 [ 602.818841][T17269] ? rcu_is_watching+0x15/0xb0 [ 602.823616][T17269] ? trace_contention_end+0x39/0x120 [ 602.828969][T17269] ? __mutex_lock+0x335/0x1350 [ 602.833933][T17269] netlink_rcv_skb+0x208/0x470 [ 602.838725][T17269] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 602.844279][T17269] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 602.849582][T17269] ? netlink_deliver_tap+0x2e/0x1b0 [ 602.854866][T17269] ? netlink_deliver_tap+0x2e/0x1b0 [ 602.860108][T17269] xfrm_netlink_rcv+0x79/0x90 [ 602.864808][T17269] netlink_unicast+0x82c/0x9e0 [ 602.869680][T17269] ? __pfx_netlink_unicast+0x10/0x10 [ 602.874980][T17269] ? netlink_sendmsg+0x642/0xb30 [ 602.879931][T17269] ? skb_put+0x11b/0x210 [ 602.884195][T17269] netlink_sendmsg+0x805/0xb30 [ 602.888979][T17269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.894285][T17269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.899597][T17269] __sock_sendmsg+0x219/0x270 [ 602.904292][T17269] ____sys_sendmsg+0x505/0x830 [ 602.909076][T17269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 602.914411][T17269] ? import_iovec+0x74/0xa0 [ 602.919022][T17269] ___sys_sendmsg+0x21f/0x2a0 [ 602.923717][T17269] ? __pfx____sys_sendmsg+0x10/0x10 [ 602.929039][T17269] ? __fget_files+0x2a/0x420 [ 602.933646][T17269] ? __fget_files+0x3a0/0x420 [ 602.938336][T17269] __x64_sys_sendmsg+0x19b/0x260 [ 602.943299][T17269] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 602.948784][T17269] do_syscall_64+0xfa/0x3b0 [ 602.953306][T17269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.959377][T17269] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 602.965536][T17269] ? clear_bhb_loop+0x60/0xb0 [ 602.970222][T17269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.976126][T17269] RIP: 0033:0x7fb66c78eec9 [ 602.980665][T17269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.000294][T17269] RSP: 002b:00007fb66d5d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.008731][T17269] RAX: ffffffffffffffda RBX: 00007fb66c9e6090 RCX: 00007fb66c78eec9 [ 603.016714][T17269] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000008 [ 603.024700][T17269] RBP: 00007fb66c811f91 R08: 0000000000000000 R09: 0000000000000000 [ 603.032686][T17269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.040672][T17269] R13: 00007fb66c9e6128 R14: 00007fb66c9e6090 R15: 00007ffdcea80708 [ 603.048668][T17269] [ 603.052201][T17269] Kernel Offset: disabled [ 603.056545][T17269] Rebooting in 86400 seconds..