last executing test programs: 44.271394772s ago: executing program 3 (id=457): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x800003ff, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x1, 0x0) r1 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000380)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x80, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x5084, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x401}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000000000000010000130200000074853ac6"], 0x0, 0x34}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x5, 0x29, 0x0, &(0x7f0000000080)="98f12bbfce230fe47886151c2b7da33e20dbcd71f260a710511a31e4ce53508b78cd08d42859c62827", 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2000000008, 0x800}, 0x11120c, 0x9, 0x1ff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) unlink(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 43.49035628s ago: executing program 3 (id=461): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x401, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x33, 0x5e, 0x6, 0x9, 0x0, 0xfffffffffffffffc, 0x80001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x4, 0x6e2}, 0x4, 0xf5f7, 0x4, 0x1, 0x1000, 0x1, 0xfc00, 0x0, 0x40000000, 0x0, 0x9}, 0x0, 0x4, 0xffffffffffffffff, 0xb) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400e0fff7ffffff00000000000000000e"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x24000000) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020605000700000000000000020000050c0007800800120000000ffe050001000600000005000500020000000f191474859905000400000000000900020073797a300000003a69702c706f72742c697000000000"], 0x58}, 0x1, 0x0, 0x0, 0x814}, 0x8404) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$can_raw(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x1d, r5}, 0x10, &(0x7f0000000680)={&(0x7f0000000580)=@can={{0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "ce8035f2d468ad86"}, 0x10}, 0x1, 0x0, 0x0, 0x24008011}, 0x0) 42.92217952s ago: executing program 3 (id=465): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000080) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb, 0x830d}, 0x0, 0x4, 0xfffffffe, 0x5, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002500010125bd7000fbfffffe150000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x11efa, 0x9, 0x0, 0x0, 0x2, 0x7, 0xfffc, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x95c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xf7fff271, 0xffff, 0x0, 0x0, 0x0, 0x8000000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x2950b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x96, 0x0, 0x2, 0xfefff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, r7, 0xb, r3, 0x19) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB], 0x10) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r8 = perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x9, 0xa, 0x56, 0x0, 0xaa, 0x2000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x2, 0xfffffffffffff801}, 0x10881, 0xd75, 0x5, 0x1, 0x9, 0x6, 0x6, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0xc, r3, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r8, 0xc008240a, &(0x7f0000000080)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 40.992368895s ago: executing program 3 (id=472): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) (async) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) (async) sendmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000180)='l', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4ccd4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/time_for_children\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time_for_children\x00') sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x14, 0xd, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000014) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x114c51, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x14, 0x47, 0x707, 0xfffffffe, 0xffffffff, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 40.334418372s ago: executing program 3 (id=477): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x4201, 0x0, 0x0, 0x0, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000048000000060a010400002200000000000100000008000b40000000000900010073797a3000000000200004801c000180090001006d617371000000000c00028008000240000000abb6"], 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000240)="b9ffc0b800000000000008f086dd4e37059fbeee844bfefcd317bfd3b25d0fb0986a0f35ac011b01", 0x0, 0xa1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=@newsa={0x158, 0x10, 0x1, 0x4, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@multicast2, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x80000000}, {}, 0x0, 0x0, 0xa, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2a, 0x0, 0x70bd2b, 0x0, 0xb, [0x8]}}]}, 0x158}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830e}, 0x100600, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x17, &(0x7f0000000a00)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x3081bf0b056d2e46) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0xf, &(0x7f00000002c0), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r7, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x4001890) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x17}, 0x12000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r9, 0x10f, 0x8a, &(0x7f0000000180)=r8, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}, {0x0}], 0x2}, 0x60044084) 38.166233694s ago: executing program 3 (id=489): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, @perf_config_ext={0x85, 0xffffffffffffffff}, 0x3212, 0x7, 0x2, 0x2, 0xc, 0x3, 0x2, 0x0, 0x0, 0x0, 0x800000000e48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000004c0)='cpu&\t03\t\t') perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2d, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = getpid() r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x103, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x2000, 0x1, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x1}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x7, 0x0, 0x47) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2000000008, 0x800}, 0x0, 0x9, 0x0, 0x4, 0xa970, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, r4, 0xfffffbffffffffff, r0, 0x1) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000314010029bd7000fddbdf25090002002f797a320000000008004100727865001400330076657468305f746f5f626174616476"], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 22.718984212s ago: executing program 32 (id=489): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, @perf_config_ext={0x85, 0xffffffffffffffff}, 0x3212, 0x7, 0x2, 0x2, 0xc, 0x3, 0x2, 0x0, 0x0, 0x0, 0x800000000e48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000004c0)='cpu&\t03\t\t') perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2d, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = getpid() r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x103, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x2000, 0x1, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x1}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x7, 0x0, 0x47) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2000000008, 0x800}, 0x0, 0x9, 0x0, 0x4, 0xa970, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, r4, 0xfffffbffffffffff, r0, 0x1) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000314010029bd7000fddbdf25090002002f797a320000000008004100727865001400330076657468305f746f5f626174616476"], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 6.005563808s ago: executing program 2 (id=570): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="9110003f002000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x3f}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0a02, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) r2 = gettid() r3 = perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x5, 0xfe, 0x5, 0x0, 0x0, 0x7f, 0x4, 0xb317bee49ae2bf05, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={&(0x7f0000000080), 0x6}, 0x1cb32, 0x2, 0x1000, 0x3, 0x800000000000, 0xd079, 0x4, 0x0, 0x6, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x81, 0x1, 0xa, 0x0, 0x3, 0x100, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x4, 0xb385}, 0x10808, 0x5, 0x6, 0x3, 0x7fffffffffffffff, 0x1, 0x2, 0x0, 0xfff, 0x0, 0x7fffffff}, r2, 0x4, r3, 0x0) 2.282214151s ago: executing program 1 (id=574): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000240)="e02751b07d98767e42e868fba54e", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.281435208s ago: executing program 2 (id=575): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x120c, 0x0, 0x2, 0x5, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044041}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="14c80dcdd70178595a200b89ce223b42", 0x10}], 0x1, 0x0, 0x1048}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x38, 0x140a, 0x0, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x48880) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x1f, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.210680212s ago: executing program 0 (id=576): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x76, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000140)=0x6) socket$kcm(0x2, 0x5, 0x84) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r0, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 2.062471457s ago: executing program 4 (id=577): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000010a010300000000000000000a00000a46cdd5bcdfa029eef1a1429dcfe4db77f29a717bb444f383ba8480e125e09866db653a02e3942dd36bdcf3fa7f56249179e9488c3f4b4e2807bb5ce3f8b23870eb8899e029234f451366d14ebbaa2e27686d824f94efd8578216f41da553a046505a9d"], 0x14}, 0x1, 0x0, 0x0, 0x4013}, 0x8000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x1}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000000000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r3 = socket(0x1d, 0x2, 0xffffff17) recvmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) openat$cgroup_freezer_state(r1, &(0x7f0000000280), 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) openat$cgroup_devices(r1, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x7, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x89}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001e002102000000000000000007000000140019801000f380080028800400b9000400318066fd1d9b82835a0f9ddb88b9395406e19c41deb99c138fbfdd0f55bb433eb5e548cff7ac7828ec25d70156c0aaf27859b9e4001932b4dcd817d7ac134faf753e371b266bacac04d2ac193806342e164dfd323c7d55e899facfb5231f4a03cbb70d12873dcebd3254d6487a5329e8c9c9cc211a1384482f17c09756448b9520a194bdce967b3c3dd45a92757da8651c56e90c1c"], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="01001a0000000674000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000480)="c274386d178550cb864bd57221bc", 0x0, 0x400001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x630) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x800000, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x28, 0x0, 0x0, 0xb100}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008840}, 0x800) 1.990022475s ago: executing program 1 (id=578): socket$kcm(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="0010000900"}) 1.963738062s ago: executing program 0 (id=579): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.777382476s ago: executing program 2 (id=580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x7, 0x2, 0x80, 0xffffffffffffffff, 0x4000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfffffffffffffff9}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x44004}, 0x40000) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x804, 0x4c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x4, @perf_bp={0x0, 0x4}, 0xa0, 0x58, 0x8, 0x6, 0x2, 0x2c9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)={0x14, 0x3c, 0x301, 0x70bd2b, 0x25dfdbff, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x24044093}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)={0x14, 0x3c, 0x301, 0x70bd2b, 0x25dfdbff, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x24044093}, 0x0) 1.756810925s ago: executing program 0 (id=581): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x1f, &(0x7f00000000c0), 0xd8) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xa0ea1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xe, 0x80000000, 0x10000000, 0xdbe, 0x300}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.555500709s ago: executing program 2 (id=582): socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000), 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@ifindex, 0xb, 0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000040012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, 0x0, 0x40094) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000400), &(0x7f0000000480)=@tcp6, 0x1}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) 1.551734786s ago: executing program 1 (id=583): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x1, 0x10}, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, &(0x7f0000000800)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x3, 0x0, 0x41000, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000440)={0x3, 0x80, 0x83, 0x9, 0x7, 0x1, 0x0, 0x0, 0x21020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x4}, 0x2, 0x4, 0x1, 0x3, 0x9, 0x8001, 0x19, 0x0, 0xf90c, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r4, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1c, 0xc, &(0x7f0000000680)=ANY=[@ANYRES64=r0, @ANYRES32=0x1, @ANYRESHEX, @ANYBLOB="0000000000000000b70200000000000085000800860000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x4, 0x47, &(0x7f0000000740)=""/71, 0x41100, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000800)=[0xffffffffffffffff, r1, 0x1, 0xffffffffffffffff], &(0x7f0000000840)=[{0x4, 0xfd4, 0x7, 0x2}, {0x5, 0x4, 0xd, 0x3}, {0x4, 0x5, 0xb}, {0x4, 0x5, 0xb, 0x2}, {0x2, 0x3, 0xf, 0x3}, {0x1, 0x1, 0x0, 0xe}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={0x1}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xa7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)=@o_path={&(0x7f0000000a80)='./file0\x00', 0x0, 0x4020, r0}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x19) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000640)={r7, 0x0, 0x0, 0x4}, 0x20) socket$kcm(0x2, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0xa}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) 1.39053196s ago: executing program 0 (id=584): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000002"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="3f26c009eb444ed793fa58cb570904353b71ca91f5ca016c41978d8f2a1fe133778437897875326f6561501a291edaead4b917e55392d424c561f20f337166668778d289c839c18da2124a0cd86a7544de290846df191c25afecc4cf7fe2566f3af683", @ANYRES8=r0, @ANYRESOCT=r2], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000080)="04000000df000000428b4c6588f5", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='@\x00') perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x6}, 0x8100, 0xc8, 0x8, 0x0, 0x0, 0x343}, 0x0, 0x8, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg$unix(r5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0xcfa4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r5, @ANYRES16=r1, @ANYRES16=r6, @ANYRESOCT=r2], 0x0, 0x58, 0x0, 0x4000}, 0x28) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) 1.389530036s ago: executing program 4 (id=585): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffb, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f00000013c0)={&(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f00000006c0)=""/226, 0xe2}, {&(0x7f00000007c0)=""/108, 0x6c}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f00000009c0)=""/153, 0x99}, {&(0x7f0000000a80)}], 0x6, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x2, 0x10}, {&(0x7f0000000b40)=""/144, 0x90}, &(0x7f00000011c0)=[{&(0x7f0000000c00)=""/199, 0xc7}, {&(0x7f0000000d00)=""/226, 0xe2}, {&(0x7f0000000e00)=""/158, 0x9e}, {&(0x7f0000000ec0)=""/210, 0xd2}, {&(0x7f0000000fc0)=""/204, 0xcc}, {&(0x7f00000010c0)=""/222, 0xde}], 0x6, 0x8, 0x7f}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x9}, @mask_fadd={0x58, 0x114, 0x8, {{0x3, 0x6}, &(0x7f0000001240)=0x6, &(0x7f0000001280)=0x101, 0x101, 0x8, 0x2e2a, 0x9, 0x19, 0xdd1}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x6}], 0xd0, 0x80}, 0x4000001) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x800) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000001c000380180003801400010067656e657665300000000000008900001400000011000100"], 0x70}}, 0x24040884) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}}, 0x0) 1.212425822s ago: executing program 1 (id=586): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000240005022abd7000fbdbdf2509000000060003000000000006000400000000000600030000000000060004c066facd"], 0x5c}}, 0x4000000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x4, 0xfffffffd, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0xb, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd, 0x800, 0x5, 0xef00, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.121425677s ago: executing program 4 (id=587): perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000001a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000e000000850000001b000000b700000000000000850000007d00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000cc0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2000000000000009}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x4000010) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, r4, 0x25, 0x4, @val=@kprobe_multi=@syms={0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)='\x00'], 0x0, 0x4}}, 0x30) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa2721, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000001a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000e000000850000001b000000b700000000000000850000007d00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000cc0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2000000000000009}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x4000010) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, r4, 0x25, 0x4, @val=@kprobe_multi=@syms={0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)='\x00'], 0x0, 0x4}}, 0x30) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) (async) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa2721, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 794.275894ms ago: executing program 1 (id=588): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x76, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000140)=0x6) socket$kcm(0x2, 0x5, 0x84) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r0, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 793.310073ms ago: executing program 2 (id=589): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000000001, 0x1ef7}, 0x11eea, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r0, &(0x7f0000002780)) getpid() fstat(r0, &(0x7f0000002800)) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000008873dd30364fab8058351cc0994e11814f64e186b3c3197e252d9eb2fdaddaa457b11e90854e50d2e937d4c12817286f84519fa6e07bb9e28095c49646253857831bea4975e8fc30cc8146cd181df3fd8ddf87954152770232b2a48a230896f5532fe970d34c290bafa20cf0abbf2b3799655d9e8125b2ae5edee354f38cfc03b1ff8f347b81aac514918ebd67fa84b0dfd3a394b287b53861916df9d9a0483443a219df16e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x25, 0x1, 0x70bd29, 0x25dfdbfd, {0x15}, [@nested={0x8, 0x131, 0x0, 0x1, [@typed={0x4, 0x9d, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x3e59cdaa2f3a420c) fstat(0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000380)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0043, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffeffff, 0x3}, 0x100001, 0x0, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x1, 0x6, 0x45048, 0xffffffffffffffff, 0x50, '\x00', 0x0, r4, 0x1, 0x0, 0x4}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000880000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, 0x0, 0x80) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fstat(r9, &(0x7f0000000280)) fstat(0xffffffffffffffff, &(0x7f0000000540)) fstat(r2, &(0x7f00000005c0)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x20000000}, 0x11) 790.776175ms ago: executing program 0 (id=590): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8, r0}, 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc2240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x7ff}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x1e, 0x1, 0x0) (async) r2 = socket$kcm(0x1e, 0x1, 0x0) recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=0x1, 0x13, 0x0, 0x6, &(0x7f0000000240)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=0x1, 0x13, 0x0, 0x6, &(0x7f0000000240)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0xffff, 0x18}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@map=r4, r1, 0xd, 0x20, 0x0, @void, @void, @void, @value=r5, r3}, 0x20) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) (async) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000009c0)={r4, &(0x7f00000007c0)="2a897f3f86fce79ca1b81dcb6f20779227bece1a94490bd910f0dd6a97fed956017b5200a5e66bc84ce48e2e022848aebc0bb8197b57a6b2bed4d688614d91223b8f44285f2f4e788247a5d96bfad43d245e6e86b787d38f157f5b9741d8141f8c0a13cc653dc4f5237d09e90484fcb945e1d2a661337859a0011ce2d046a3c83614d5ed9516edcdcceb76c73e711f9accd00b770559b8a3aa4d5b0656a252bc4135c2637131e3a3b2bbffa0481d58836707c97cd6d5adf8d5f1004f14dd4d84f82296be773d1c6358ed92ca6e6ad6dcad1a5fce6a9c242df9197f386247ab5461e5fdf62c888774cabcbf64e6fd6301", &(0x7f00000008c0)=@buf="82889a9a300eaae475b5a3e98b7897abceba38c97d116f0df2f2652d7e2d69e03ffa26d3273d30f3f7978c8e64c83c997b7f4fb3170facdf8d06784cf6e7f1cb8dd236750af73b7f936e9bad42fc766b751c7575fce2f167cde998bc5638c8b9204f43a297b597fa091e1edb4139a3121ce0537fb8074a5b5c5f75aa481206729471d52b6b8f621040b4d9c321ae6de402af3974afb3cb5e1626f2dd7ab41bd2e37e8573421062767ed8e170c09d87e0da6a25a63d4d6dc6041f17ef3d9699a4be1e0e905a6069b332954815c16f6dca0448452989b4defc5ed778ea8c0fb40c9e579372f994e1c12a048882db392e59de011656db", 0x2}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x200, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x200, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @remote}}}]}]}, 0x88}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r7}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r10, @ANYBLOB="04"], 0xc4}}, 0x20004804) sendmsg$kcm(r7, 0x0, 0x2400c094) (async) sendmsg$kcm(r7, 0x0, 0x2400c094) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', r7}, 0x18) 566.458263ms ago: executing program 4 (id=591): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000400)="5c00000014006bcc9e3be05c6e17aa31286b876c1d0000007ea60864160af36514001ac0080002002c26d330196e87c0568cff3407000c0005007c2ed239122dbd94c9affe1801c00364bc24eab556a705251e618294ff0051f60a84", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r0}) 491.337329ms ago: executing program 4 (id=592): socket$kcm(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="0010000900"}) 341.561461ms ago: executing program 0 (id=593): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffe}, 0x50) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0xa}, 0x0, 0xfffffffffffffffe, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) r3 = syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x6) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$inet_sctp(0x2, 0xe, 0x84) r4 = perf_event_open(&(0x7f00000002c0)={0x5d689ad35295c432, 0x80, 0x1, 0x6, 0xf7, 0x6, 0x0, 0xcbe4, 0x6080, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0x9, 0x1ff, 0x4, 0x6, 0x9, 0x9, 0xc2f7, 0x0, 0x100, 0x0, 0xd64}, r3, 0x10, r1, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000480)='\'()]:-$)[\x00') perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9549, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000200), 0x4) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x4, @perf_bp={0x0, 0x3}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0xa, 0x3, 0x73) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000440)) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0xe00}) 179.292734ms ago: executing program 4 (id=594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x158, 0x1, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x5d, 0x6, "0090c887a7c5b8fc1dd99e3fbb66b98110df3341f9693411d9bd9c6936781e59a6c1d849fef9c8587f3b8b30a72a5d8abb4ab0949f54046123c07e0b56497a09b3ee05fea33bf5355501dca5b3d2c000f89b727c906bf50f3d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb6, 0x6, "1d08cdef45d74c7bb135ce02efd2df0dd2c75bbc7aaf7205d299648b0f60049d3661ac86dbcaf4a196886fc73b5febaba0fbb4da08930a859a0e2268f496457d30fd5cfb9ea792c9e6bfc737d1fa14d635c65b60978fa4ad226f260281b15e265737f34bf4e0e36d2eeb70adfbc7d3afd3647d8632c7a9f0cfeca03f969aed1105401abd3b3baa4b6c6581800aca004cf91afc80ea36ec014c5f213b9099cd4ce27a5e101941145b299652d33f14e984fef0"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x158}, 0x1, 0x0, 0x0, 0x20004005}, 0x11) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) 10.677887ms ago: executing program 2 (id=595): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 1 (id=596): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004080) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair(0xf, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8911, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0xc0045878, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x2, 0x3, 0x1, 0x0, 0xffffffffffff9986, 0x30285, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x7fffffff, 0x7}, 0x4400, 0x4, 0x20000003, 0x6, 0x5, 0x4, 0x81, 0x0, 0x2007, 0x0, 0x10000001}, r3, 0x8, 0xffffffffffffffff, 0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r4, 0x0, 0x5, &(0x7f0000000080)='[,:#\x00'}, 0x30) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x10, 0x1404, 0x1, 0x70bd29, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20004892}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts. [ 80.945312][ T5815] cgroup: Unknown subsys name 'net' [ 81.054172][ T5815] cgroup: Unknown subsys name 'cpuset' [ 81.064500][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.757724][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.081899][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.089967][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.099420][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.107392][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.115841][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.124660][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.133095][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.140959][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.148573][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.150034][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.159721][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.171059][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.180661][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.191427][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.199544][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.201732][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.215074][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.219779][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.230336][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.233738][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.238394][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.252749][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.261580][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.270327][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.277580][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.878736][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 86.004994][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 86.106173][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 86.226554][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 86.256899][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.265517][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.272974][ T5828] bridge_slave_0: entered allmulticast mode [ 86.280928][ T5828] bridge_slave_0: entered promiscuous mode [ 86.307865][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 86.328734][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.336236][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.343720][ T5828] bridge_slave_1: entered allmulticast mode [ 86.351612][ T5828] bridge_slave_1: entered promiscuous mode [ 86.427060][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.434589][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.442177][ T5834] bridge_slave_0: entered allmulticast mode [ 86.450015][ T5834] bridge_slave_0: entered promiscuous mode [ 86.506645][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.514037][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.522186][ T5834] bridge_slave_1: entered allmulticast mode [ 86.530069][ T5834] bridge_slave_1: entered promiscuous mode [ 86.543980][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.551193][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.558399][ T5829] bridge_slave_0: entered allmulticast mode [ 86.566041][ T5829] bridge_slave_0: entered promiscuous mode [ 86.578017][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.612300][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.619615][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.626854][ T5829] bridge_slave_1: entered allmulticast mode [ 86.635428][ T5829] bridge_slave_1: entered promiscuous mode [ 86.644504][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.713374][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.771091][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.798131][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.810266][ T5828] team0: Port device team_slave_0 added [ 86.816128][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.823596][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.831320][ T5830] bridge_slave_0: entered allmulticast mode [ 86.838845][ T5830] bridge_slave_0: entered promiscuous mode [ 86.864402][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.872102][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.880648][ T5827] bridge_slave_0: entered allmulticast mode [ 86.888908][ T5827] bridge_slave_0: entered promiscuous mode [ 86.904968][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.933307][ T5828] team0: Port device team_slave_1 added [ 86.955885][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.964395][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.971967][ T5830] bridge_slave_1: entered allmulticast mode [ 86.980396][ T5830] bridge_slave_1: entered promiscuous mode [ 87.007628][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.016547][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.024331][ T5827] bridge_slave_1: entered allmulticast mode [ 87.033112][ T5827] bridge_slave_1: entered promiscuous mode [ 87.091984][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.099042][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.133441][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.165044][ T5834] team0: Port device team_slave_0 added [ 87.192907][ T5829] team0: Port device team_slave_0 added [ 87.200802][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.207833][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.234628][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.266287][ T5834] team0: Port device team_slave_1 added [ 87.277614][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.283681][ T5840] Bluetooth: hci3: command tx timeout [ 87.297740][ T5829] team0: Port device team_slave_1 added [ 87.318515][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.346983][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.350392][ T5840] Bluetooth: hci4: command tx timeout [ 87.356592][ T5839] Bluetooth: hci1: command tx timeout [ 87.364073][ T5840] Bluetooth: hci2: command tx timeout [ 87.368092][ T5833] Bluetooth: hci0: command tx timeout [ 87.395585][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.448638][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.455905][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.481960][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.504403][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.511796][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.538959][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.572010][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.579424][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.605716][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.618900][ T5830] team0: Port device team_slave_0 added [ 87.625386][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.632833][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.658913][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.679366][ T5827] team0: Port device team_slave_0 added [ 87.705778][ T5830] team0: Port device team_slave_1 added [ 87.736320][ T5827] team0: Port device team_slave_1 added [ 87.747852][ T5828] hsr_slave_0: entered promiscuous mode [ 87.755036][ T5828] hsr_slave_1: entered promiscuous mode [ 87.777697][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.785037][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.812137][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.849812][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.856832][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.883051][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.907281][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.914515][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.940993][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.975122][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.982402][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.009949][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.034175][ T5834] hsr_slave_0: entered promiscuous mode [ 88.040927][ T5834] hsr_slave_1: entered promiscuous mode [ 88.047394][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 88.053358][ T5834] Cannot create hsr debugfs directory [ 88.129323][ T5829] hsr_slave_0: entered promiscuous mode [ 88.135838][ T5829] hsr_slave_1: entered promiscuous mode [ 88.143010][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 88.149477][ T5829] Cannot create hsr debugfs directory [ 88.247406][ T5827] hsr_slave_0: entered promiscuous mode [ 88.254181][ T5827] hsr_slave_1: entered promiscuous mode [ 88.260676][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 88.266532][ T5827] Cannot create hsr debugfs directory [ 88.335195][ T5830] hsr_slave_0: entered promiscuous mode [ 88.342611][ T5830] hsr_slave_1: entered promiscuous mode [ 88.349441][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 88.355258][ T5830] Cannot create hsr debugfs directory [ 88.877935][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.890372][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.898724][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.910128][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.929668][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.942060][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.963814][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.977015][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.040893][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.055273][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.068137][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.081940][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.095100][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.106306][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.114934][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.124810][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.230230][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.241694][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.260308][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.272830][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.281983][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.293055][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.301743][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.312424][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.350631][ T5833] Bluetooth: hci3: command tx timeout [ 89.423732][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.430626][ T5839] Bluetooth: hci4: command tx timeout [ 89.430724][ T5149] Bluetooth: hci0: command tx timeout [ 89.436079][ T5833] Bluetooth: hci2: command tx timeout [ 89.436109][ T5833] Bluetooth: hci1: command tx timeout [ 89.495777][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.507397][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.532704][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.542980][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.566866][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.578453][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.586689][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.597400][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.607070][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.669047][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.677359][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.713136][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.720625][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.755413][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.765890][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.785243][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.797241][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.805817][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.815356][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.832441][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.842394][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.853953][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.927116][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.972736][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.979996][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.047529][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.054964][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.078525][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.202479][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.255958][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.263239][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.283629][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.306362][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.313665][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.357172][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.386092][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.416765][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.424235][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.455683][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.462936][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.501055][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.531988][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.588744][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.596045][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.668161][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.675442][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.798229][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.885090][ T5828] veth0_vlan: entered promiscuous mode [ 90.946865][ T5828] veth1_vlan: entered promiscuous mode [ 90.993059][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.070516][ T5830] veth0_vlan: entered promiscuous mode [ 91.138337][ T5828] veth0_macvtap: entered promiscuous mode [ 91.171344][ T5828] veth1_macvtap: entered promiscuous mode [ 91.196145][ T5830] veth1_vlan: entered promiscuous mode [ 91.281339][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.302390][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.330594][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.374054][ T164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.385423][ T164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.413127][ T5830] veth0_macvtap: entered promiscuous mode [ 91.435101][ T164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.446265][ T5149] Bluetooth: hci3: command tx timeout [ 91.452371][ T164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.482957][ T5830] veth1_macvtap: entered promiscuous mode [ 91.510309][ T5840] Bluetooth: hci4: command tx timeout [ 91.513059][ T5839] Bluetooth: hci1: command tx timeout [ 91.515853][ T5840] Bluetooth: hci2: command tx timeout [ 91.515980][ T5149] Bluetooth: hci0: command tx timeout [ 91.564892][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.583447][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.626770][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.647254][ T5834] veth0_vlan: entered promiscuous mode [ 91.715992][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.725788][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.750971][ T5834] veth1_vlan: entered promiscuous mode [ 91.761407][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.771492][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.802101][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.818833][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.874846][ T5829] veth0_vlan: entered promiscuous mode [ 91.896271][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.908956][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.998809][ T2160] cfg80211: failed to load regulatory.db [ 92.012834][ T5834] veth0_macvtap: entered promiscuous mode [ 92.055547][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.061927][ T5829] veth1_vlan: entered promiscuous mode [ 92.087463][ T5834] veth1_macvtap: entered promiscuous mode [ 92.121496][ T5827] veth0_vlan: entered promiscuous mode [ 92.137593][ T5827] veth1_vlan: entered promiscuous mode [ 92.164408][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.179924][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.284563][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.313223][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.329630][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.366064][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.426276][ T164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.462462][ T5829] veth0_macvtap: entered promiscuous mode [ 92.478056][ T164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.498179][ T164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.528956][ T5827] veth0_macvtap: entered promiscuous mode [ 92.565299][ T164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.599981][ T5829] veth1_macvtap: entered promiscuous mode [ 92.633239][ T5827] veth1_macvtap: entered promiscuous mode [ 92.738927][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.851232][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.898925][ T1340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.910979][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.925599][ T1340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.936923][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.131115][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.144564][ T5957] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 93.192310][ T1340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.206049][ T1340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.304920][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.349272][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.370713][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.503306][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.515293][ T5839] Bluetooth: hci3: command tx timeout [ 93.532574][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.542437][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.589769][ T5839] Bluetooth: hci1: command tx timeout [ 93.593941][ T5149] Bluetooth: hci2: command tx timeout [ 93.595326][ T5839] Bluetooth: hci4: command tx timeout [ 93.601422][ T5833] Bluetooth: hci0: command tx timeout [ 93.630384][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.642226][ T5965] tc_dump_action: action bad kind [ 93.682595][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.692435][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.828812][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.878495][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.111193][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.141990][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.284198][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.319532][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.343554][ T5991] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.055906][ T6005] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 95.084065][ T6005] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.122390][ T6005] veth0_vlan: entered allmulticast mode [ 95.135305][ T6005] bridge0: port 3(veth0_vlan) entered blocking state [ 95.167067][ T6005] bridge0: port 3(veth0_vlan) entered disabled state [ 95.245894][ T6005] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 95.264080][ T6009] syz.2.14 uses obsolete (PF_INET,SOCK_PACKET) [ 95.374358][ T6011] Zero length message leads to an empty skb [ 95.606894][ T6017] netlink: 'syz.1.17': attribute type 21 has an invalid length. [ 96.618382][ T6037] macvlan1: entered promiscuous mode [ 96.674931][ T6037] macvlan1: entered allmulticast mode [ 96.684574][ T6037] veth1_vlan: entered allmulticast mode [ 97.398208][ T6056] bpf: Bad value for 'gid' [ 98.774651][ T6067] IPv6: NLM_F_CREATE should be specified when creating new route [ 98.802609][ T6067] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.810901][ T6067] IPv6: NLM_F_CREATE should be set when creating new route [ 98.857563][ T6068] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.333216][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 99.731764][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.41'. [ 99.875230][ T6093] syzkaller0: entered promiscuous mode [ 99.893270][ T6093] syzkaller0: entered allmulticast mode [ 99.916462][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 99.938638][ T6107] netlink: 'syz.4.41': attribute type 29 has an invalid length. [ 99.972599][ T6109] netlink: 'syz.3.43': attribute type 4 has an invalid length. [ 99.980884][ T6099] netlink: 'syz.4.41': attribute type 29 has an invalid length. [ 99.991926][ T6113] netlink: 'syz.4.41': attribute type 29 has an invalid length. [ 100.425385][ T6117] netlink: 'syz.2.45': attribute type 6 has an invalid length. [ 100.441898][ T6117] netlink: 'syz.2.45': attribute type 6 has an invalid length. [ 101.359695][ T6146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.52'. [ 103.627110][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'. [ 103.646584][ T6143] netlink: 'syz.2.51': attribute type 1 has an invalid length. [ 103.668996][ T6143] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.51'. [ 104.313239][ T6159] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 104.776251][ T6166] netlink: 'syz.2.56': attribute type 6 has an invalid length. [ 104.806151][ T6166] netlink: 'syz.2.56': attribute type 7 has an invalid length. [ 104.841430][ T6166] netlink: 'syz.2.56': attribute type 8 has an invalid length. [ 104.958255][ T6166] netlink: 'syz.2.56': attribute type 1 has an invalid length. [ 104.989913][ T6166] netlink: 'syz.2.56': attribute type 1 has an invalid length. [ 105.038604][ T6166] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.56'. [ 106.388480][ T6192] warning: `syz.3.66' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.690365][ T6206] ======================================================= [ 107.690365][ T6206] WARNING: The mand mount option has been deprecated and [ 107.690365][ T6206] and is ignored by this kernel. Remove the mand [ 107.690365][ T6206] option from the mount to silence this warning. [ 107.690365][ T6206] ======================================================= [ 107.763037][ T6207] netlink: 'syz.2.68': attribute type 6 has an invalid length. [ 107.783838][ T6207] netlink: 360 bytes leftover after parsing attributes in process `syz.2.68'. [ 108.030882][ T6211] netlink: 'syz.2.68': attribute type 6 has an invalid length. [ 108.066536][ T6211] netlink: 3936 bytes leftover after parsing attributes in process `syz.2.68'. [ 108.116033][ T6211] netlink: 'syz.2.68': attribute type 1 has an invalid length. [ 111.063389][ T6228] netlink: 'syz.0.77': attribute type 1 has an invalid length. [ 111.098453][ T6228] netlink: 'syz.0.77': attribute type 3 has an invalid length. [ 111.117283][ T6239] netlink: 140 bytes leftover after parsing attributes in process `syz.1.79'. [ 111.134118][ T6228] netlink: 132 bytes leftover after parsing attributes in process `syz.0.77'. [ 111.738484][ T6242] netlink: 96 bytes leftover after parsing attributes in process `syz.1.81'. [ 111.803902][ T6252] bridge_slave_1: left allmulticast mode [ 111.868942][ T6252] bridge_slave_1: left promiscuous mode [ 111.889754][ T6252] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.899787][ T6255] FAULT_INJECTION: forcing a failure. [ 111.899787][ T6255] name failslab, interval 1, probability 0, space 0, times 0 [ 111.976836][ T6252] bridge_slave_0: left allmulticast mode [ 111.985829][ T6255] CPU: 0 UID: 0 PID: 6255 Comm: syz.4.85 Not tainted syzkaller #0 PREEMPT(full) [ 111.985858][ T6255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 111.985879][ T6255] Call Trace: [ 111.985891][ T6255] [ 111.985900][ T6255] dump_stack_lvl+0xe8/0x150 [ 111.985958][ T6255] should_fail_ex+0x412/0x560 [ 111.985986][ T6255] ? __d_alloc+0x37/0x6f0 [ 111.986005][ T6255] should_failslab+0xa8/0x100 [ 111.986032][ T6255] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 111.986068][ T6255] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 111.986095][ T6255] __d_alloc+0x37/0x6f0 [ 111.986114][ T6255] ? _raw_spin_unlock+0x28/0x50 [ 111.986148][ T6255] d_make_root+0x41/0x80 [ 111.986168][ T6255] simple_fill_super+0x242/0x710 [ 111.986194][ T6255] ? __pfx___mutex_lock+0x10/0x10 [ 111.986216][ T6255] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 111.986243][ T6255] bpf_fill_super+0xf7/0xa60 [ 111.986262][ T6255] ? __raw_spin_lock_init+0x45/0x100 [ 111.986289][ T6255] ? __init_swait_queue_head+0xa9/0x150 [ 111.986312][ T6255] ? __pfx_bpf_fill_super+0x10/0x10 [ 111.986332][ T6255] ? shrinker_register+0x16b/0x230 [ 111.986362][ T6255] ? sget_fc+0x962/0xa40 [ 111.986442][ T6255] ? __pfx_set_anon_super_fc+0x10/0x10 [ 111.986462][ T6255] ? __pfx_bpf_fill_super+0x10/0x10 [ 111.986483][ T6255] get_tree_nodev+0xbb/0x150 [ 111.986507][ T6255] vfs_get_tree+0x92/0x2a0 [ 111.986531][ T6255] do_new_mount+0x341/0xd30 [ 111.986557][ T6255] ? apparmor_capable+0x126/0x170 [ 111.986593][ T6255] ? __pfx_do_new_mount+0x10/0x10 [ 111.986620][ T6255] ? ns_capable+0x89/0xe0 [ 111.986660][ T6255] ? user_path_at+0xd4/0x160 [ 111.986694][ T6255] __se_sys_mount+0x31d/0x420 [ 111.986728][ T6255] ? __pfx___se_sys_mount+0x10/0x10 [ 111.986763][ T6255] ? __x64_sys_mount+0x20/0xc0 [ 111.986789][ T6255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.986812][ T6255] do_syscall_64+0x15f/0xf80 [ 111.986832][ T6255] ? trace_irq_disable+0x3b/0x140 [ 111.986857][ T6255] ? clear_bhb_loop+0x40/0x90 [ 111.986882][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.986902][ T6255] RIP: 0033:0x7f3ade19c819 [ 111.986933][ T6255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.986949][ T6255] RSP: 002b:00007f3adf01d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 111.986971][ T6255] RAX: ffffffffffffffda RBX: 00007f3ade415fa0 RCX: 00007f3ade19c819 [ 111.986985][ T6255] RDX: 0000200000000000 RSI: 0000200000000440 RDI: 0000200000002000 [ 111.986999][ T6255] RBP: 00007f3adf01d090 R08: 0000000000000000 R09: 0000000000000000 [ 111.987010][ T6255] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 111.987022][ T6255] R13: 00007f3ade416038 R14: 00007f3ade415fa0 R15: 00007ffcb6c0db18 [ 111.987054][ T6255] [ 112.308011][ T6252] bridge_slave_0: left promiscuous mode [ 112.320611][ T6252] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.748350][ T6277] netlink: 181284 bytes leftover after parsing attributes in process `syz.4.89'. [ 113.134773][ T6282] netlink: 132 bytes leftover after parsing attributes in process `syz.0.91'. [ 113.452456][ T6272] netlink: 'syz.4.89': attribute type 29 has an invalid length. [ 113.510705][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'. [ 113.514443][ T6271] netlink: 'syz.4.89': attribute type 29 has an invalid length. [ 113.723200][ T6267] syz.4.89 (6267) used greatest stack depth: 15840 bytes left [ 113.843059][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.97'. [ 114.354790][ T6311] netlink: 'syz.1.100': attribute type 2 has an invalid length. [ 114.426461][ T6316] netlink: 'syz.2.102': attribute type 15 has an invalid length. [ 114.739234][ T6328] netlink: 60 bytes leftover after parsing attributes in process `syz.2.105'. [ 115.716745][ T6346] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.111'. [ 115.745312][ T6348] netlink: 80 bytes leftover after parsing attributes in process `syz.3.113'. [ 116.192284][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 116.229464][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 117.553123][ T6395] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.127'. [ 117.647864][ T6400] netlink: 'syz.0.129': attribute type 39 has an invalid length. [ 117.782642][ T6404] openvswitch: netlink: Message has -2 unknown bytes. [ 118.308813][ T6416] netlink: 'syz.3.130': attribute type 9 has an invalid length. [ 118.335638][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'. [ 118.347207][ T6416] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.130'. [ 118.519539][ T6423] netlink: 104 bytes leftover after parsing attributes in process `syz.1.136'. [ 119.427042][ T6429] netlink: 'syz.2.137': attribute type 1 has an invalid length. [ 119.436230][ T6430] netlink: 'syz.2.137': attribute type 1 has an invalid length. [ 119.446507][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'. [ 119.473488][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'. [ 119.515308][ T6432] netlink: 368 bytes leftover after parsing attributes in process `syz.3.138'. [ 119.686051][ T6436] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.140'. [ 121.289400][ T6473] netlink: 'syz.4.148': attribute type 10 has an invalid length. [ 121.339729][ T6473] __nla_validate_parse: 2 callbacks suppressed [ 121.339747][ T6473] netlink: 40 bytes leftover after parsing attributes in process `syz.4.148'. [ 121.567897][ T6473] team0: entered promiscuous mode [ 121.578220][ T6473] team_slave_0: entered promiscuous mode [ 121.585016][ T6473] team_slave_1: entered promiscuous mode [ 121.603110][ T6473] team0: entered allmulticast mode [ 121.626800][ T6440] infiniband syz0: set active [ 121.647763][ T6473] team_slave_0: entered allmulticast mode [ 121.653872][ T6440] infiniband syz0: added bridge_slave_1 [ 121.684364][ T6473] team_slave_1: entered allmulticast mode [ 121.706477][ T6473] bridge0: port 3(team0) entered blocking state [ 121.723658][ T6473] bridge0: port 3(team0) entered disabled state [ 121.738277][ T6473] bridge0: port 3(team0) entered blocking state [ 121.744810][ T6473] bridge0: port 3(team0) entered forwarding state [ 121.786454][ T6440] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 121.835999][ T6440] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 121.853732][ T6440] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 121.948596][ T6440] RDS/IB: syz0: added [ 121.967312][ T6440] smc: adding ib device syz0 with port count 1 [ 121.999449][ T6440] smc: ib device syz0 port 1 has no pnetid [ 122.066076][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.151'. [ 122.101210][ T6488] openvswitch: netlink: Flow actions attr not present in new flow. [ 122.239933][ T6495] netlink: 84 bytes leftover after parsing attributes in process `syz.2.152'. [ 122.362503][ T6497] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.153'. [ 123.978278][ T6531] openvswitch: netlink: Message has -2 unknown bytes. [ 124.266716][ T6538] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.166'. [ 124.692157][ T6546] netlink: 'syz.3.169': attribute type 10 has an invalid length. [ 125.044936][ T6564] openvswitch: netlink: Message has -2 unknown bytes. [ 125.128041][ T6568] netlink: 'syz.1.176': attribute type 10 has an invalid length. [ 125.217520][ T6570] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.177'. [ 126.284018][ T6597] netlink: 5204 bytes leftover after parsing attributes in process `syz.1.184'. [ 126.423165][ T6592] netlink: 20 bytes leftover after parsing attributes in process `syz.3.178'. [ 126.646733][ T6571] delete_channel: no stack [ 127.744920][ T6598] netlink: 140 bytes leftover after parsing attributes in process `syz.3.178'. [ 128.154643][ T6606] FAULT_INJECTION: forcing a failure. [ 128.154643][ T6606] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 128.220630][ T6606] CPU: 1 UID: 0 PID: 6606 Comm: syz.1.187 Not tainted syzkaller #0 PREEMPT(full) [ 128.220657][ T6606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 128.220669][ T6606] Call Trace: [ 128.220676][ T6606] [ 128.220683][ T6606] dump_stack_lvl+0xe8/0x150 [ 128.220727][ T6606] should_fail_ex+0x412/0x560 [ 128.220751][ T6606] _copy_from_user+0x2d/0xb0 [ 128.220775][ T6606] ___sys_sendmsg+0x1c6/0x360 [ 128.220800][ T6606] ? __lock_acquire+0x6b5/0x2cf0 [ 128.220827][ T6606] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.220878][ T6606] ? __fget_files+0x2a/0x420 [ 128.220902][ T6606] ? __fget_files+0x3a0/0x420 [ 128.220939][ T6606] __x64_sys_sendmsg+0x1bd/0x2a0 [ 128.221001][ T6606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 128.221032][ T6606] ? __pfx_ksys_write+0x10/0x10 [ 128.221120][ T6606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.221203][ T6606] do_syscall_64+0x15f/0xf80 [ 128.221222][ T6606] ? trace_irq_disable+0x3b/0x140 [ 128.221243][ T6606] ? clear_bhb_loop+0x40/0x90 [ 128.221266][ T6606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.221283][ T6606] RIP: 0033:0x7f8baa59c819 [ 128.221308][ T6606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.221321][ T6606] RSP: 002b:00007f8bab37b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.221346][ T6606] RAX: ffffffffffffffda RBX: 00007f8baa815fa0 RCX: 00007f8baa59c819 [ 128.221358][ T6606] RDX: 000000000800c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 128.221375][ T6606] RBP: 00007f8bab37b090 R08: 0000000000000000 R09: 0000000000000000 [ 128.221386][ T6606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.221395][ T6606] R13: 00007f8baa816038 R14: 00007f8baa815fa0 R15: 00007fffd09401a8 [ 128.221421][ T6606] [ 128.799322][ T6602] FAULT_INJECTION: forcing a failure. [ 128.799322][ T6602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.812905][ T6602] CPU: 1 UID: 0 PID: 6602 Comm: syz.2.185 Not tainted syzkaller #0 PREEMPT(full) [ 128.812932][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 128.812945][ T6602] Call Trace: [ 128.812953][ T6602] [ 128.812962][ T6602] dump_stack_lvl+0xe8/0x150 [ 128.812999][ T6602] should_fail_ex+0x412/0x560 [ 128.813029][ T6602] _copy_from_user+0x2d/0xb0 [ 128.813060][ T6602] __sys_bpf+0x229/0x950 [ 128.813089][ T6602] ? __pfx___sys_bpf+0x10/0x10 [ 128.813131][ T6602] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 128.813162][ T6602] ? rcu_is_watching+0x15/0xb0 [ 128.813188][ T6602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.813211][ T6602] __x64_sys_bpf+0x7c/0x90 [ 128.813235][ T6602] do_syscall_64+0x15f/0xf80 [ 128.813258][ T6602] ? clear_bhb_loop+0x40/0x90 [ 128.813283][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.813304][ T6602] RIP: 0033:0x7f4c50b9c819 [ 128.813323][ T6602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.813339][ T6602] RSP: 002b:00007f4c519b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.813360][ T6602] RAX: ffffffffffffffda RBX: 00007f4c50e15fa0 RCX: 00007f4c50b9c819 [ 128.813375][ T6602] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 0300000000000000 [ 128.813388][ T6602] RBP: 00007f4c519b9090 R08: 0000000000000000 R09: 0000000000000000 [ 128.813401][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.813412][ T6602] R13: 00007f4c50e16038 R14: 00007f4c50e15fa0 R15: 00007ffc74a869a8 [ 128.813444][ T6602] [ 129.120208][ T6624] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.192'. [ 129.715165][ T6640] netlink: 'syz.4.197': attribute type 1 has an invalid length. [ 129.734466][ T6640] netlink: 'syz.4.197': attribute type 2 has an invalid length. [ 129.804673][ T6644] FAULT_INJECTION: forcing a failure. [ 129.804673][ T6644] name failslab, interval 1, probability 0, space 0, times 0 [ 129.851771][ T6644] CPU: 1 UID: 0 PID: 6644 Comm: syz.2.200 Not tainted syzkaller #0 PREEMPT(full) [ 129.851805][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 129.851817][ T6644] Call Trace: [ 129.851825][ T6644] [ 129.851834][ T6644] dump_stack_lvl+0xe8/0x150 [ 129.851873][ T6644] should_fail_ex+0x412/0x560 [ 129.851912][ T6644] should_failslab+0xa8/0x100 [ 129.851941][ T6644] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 129.851962][ T6644] ? __alloc_skb+0x186/0x7d0 [ 129.851987][ T6644] ? __alloc_skb+0x1d0/0x7d0 [ 129.852009][ T6644] ? __local_bh_enable_ip+0xd0/0x130 [ 129.852047][ T6644] __alloc_skb+0x1d0/0x7d0 [ 129.852082][ T6644] netlink_sendmsg+0x5d4/0xb40 [ 129.852123][ T6644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.852156][ T6644] ? aa_sock_msg_perm+0xf1/0x1b0 [ 129.852186][ T6644] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 129.852214][ T6644] ____sys_sendmsg+0x972/0x9f0 [ 129.852245][ T6644] ? __might_fault+0xaf/0x130 [ 129.852287][ T6644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.852329][ T6644] ? import_iovec+0x73/0xa0 [ 129.852364][ T6644] ___sys_sendmsg+0x2a5/0x360 [ 129.852402][ T6644] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.852494][ T6644] ? irqentry_exit+0x218/0x730 [ 129.852516][ T6644] ? trace_irq_disable+0x3b/0x140 [ 129.852580][ T6644] ? __fget_files+0x2a/0x420 [ 129.852609][ T6644] ? __fget_files+0x3a0/0x420 [ 129.852651][ T6644] __x64_sys_sendmsg+0x1bd/0x2a0 [ 129.852686][ T6644] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.852713][ T6644] ? perf_trace_preemptirq_template+0xb2/0x350 [ 129.852751][ T6644] ? __pfx_ksys_write+0x10/0x10 [ 129.852785][ T6644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.852810][ T6644] do_syscall_64+0x15f/0xf80 [ 129.852831][ T6644] ? trace_irq_disable+0x3b/0x140 [ 129.852856][ T6644] ? clear_bhb_loop+0x40/0x90 [ 129.852882][ T6644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.852903][ T6644] RIP: 0033:0x7f4c50b9c819 [ 129.852923][ T6644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.852939][ T6644] RSP: 002b:00007f4c519b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.852961][ T6644] RAX: ffffffffffffffda RBX: 00007f4c50e15fa0 RCX: 00007f4c50b9c819 [ 129.852975][ T6644] RDX: 000000000800c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 129.852987][ T6644] RBP: 00007f4c519b9090 R08: 0000000000000000 R09: 0000000000000000 [ 129.852999][ T6644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.853010][ T6644] R13: 00007f4c50e16038 R14: 00007f4c50e15fa0 R15: 00007ffc74a869a8 [ 129.853048][ T6644] [ 130.457527][ T6654] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.203'. [ 131.538676][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 131.583421][ T6681] openvswitch: netlink: Message has -2 unknown bytes. [ 131.747729][ T6677] netlink: 68 bytes leftover after parsing attributes in process `syz.4.207'. [ 132.372028][ T6674] netlink: 'syz.3.208': attribute type 61 has an invalid length. [ 132.412752][ T6674] netlink: 16 bytes leftover after parsing attributes in process `syz.3.208'. [ 132.958935][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.968166][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.974272][ T6700] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.215'. [ 133.013039][ T6704] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 133.088520][ T6702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.146581][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.217'. [ 133.177029][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'. [ 133.265190][ T6705] netlink: 'syz.3.217': attribute type 2 has an invalid length. [ 133.727064][ T6711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'. [ 133.767813][ T6711] netlink: 'syz.2.218': attribute type 1 has an invalid length. [ 133.824881][ T6711] netlink: 36 bytes leftover after parsing attributes in process `syz.2.218'. [ 133.859338][ T6714] netlink: 'syz.2.218': attribute type 4 has an invalid length. [ 134.407130][ T6723] netlink: 'syz.4.222': attribute type 1 has an invalid length. [ 134.456291][ T6729] FAULT_INJECTION: forcing a failure. [ 134.456291][ T6729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.520273][ T6729] CPU: 1 UID: 0 PID: 6729 Comm: syz.3.224 Not tainted syzkaller #0 PREEMPT(full) [ 134.520301][ T6729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 134.520314][ T6729] Call Trace: [ 134.520322][ T6729] [ 134.520331][ T6729] dump_stack_lvl+0xe8/0x150 [ 134.520371][ T6729] should_fail_ex+0x412/0x560 [ 134.520405][ T6729] _copy_from_iter+0x1d3/0x1670 [ 134.520438][ T6729] ? rcu_is_watching+0x15/0xb0 [ 134.520467][ T6729] ? __pfx__copy_from_iter+0x10/0x10 [ 134.520505][ T6729] ? netlink_sendmsg+0x650/0xb40 [ 134.520531][ T6729] ? skb_put+0x11b/0x210 [ 134.520563][ T6729] netlink_sendmsg+0x6c0/0xb40 [ 134.520612][ T6729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.520645][ T6729] ? aa_sock_msg_perm+0xf1/0x1b0 [ 134.520674][ T6729] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.520705][ T6729] ____sys_sendmsg+0x972/0x9f0 [ 134.520735][ T6729] ? __might_fault+0xaf/0x130 [ 134.520776][ T6729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.520816][ T6729] ? import_iovec+0x73/0xa0 [ 134.520849][ T6729] ___sys_sendmsg+0x2a5/0x360 [ 134.520877][ T6729] ? __lock_acquire+0x6b5/0x2cf0 [ 134.520914][ T6729] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.520992][ T6729] ? __fget_files+0x2a/0x420 [ 134.521019][ T6729] ? __fget_files+0x3a0/0x420 [ 134.521062][ T6729] __x64_sys_sendmsg+0x1bd/0x2a0 [ 134.521096][ T6729] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.521139][ T6729] ? __pfx_ksys_write+0x10/0x10 [ 134.521171][ T6729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.521195][ T6729] do_syscall_64+0x15f/0xf80 [ 134.521215][ T6729] ? trace_irq_disable+0x3b/0x140 [ 134.521242][ T6729] ? clear_bhb_loop+0x40/0x90 [ 134.521267][ T6729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.521288][ T6729] RIP: 0033:0x7f171fb9c819 [ 134.521307][ T6729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.521323][ T6729] RSP: 002b:00007f1720a57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.521344][ T6729] RAX: ffffffffffffffda RBX: 00007f171fe15fa0 RCX: 00007f171fb9c819 [ 134.521358][ T6729] RDX: 000000000800c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 134.521371][ T6729] RBP: 00007f1720a57090 R08: 0000000000000000 R09: 0000000000000000 [ 134.521382][ T6729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.521394][ T6729] R13: 00007f171fe16038 R14: 00007f171fe15fa0 R15: 00007fffa20a7698 [ 134.521431][ T6729] [ 135.120407][ T6740] netlink: 68 bytes leftover after parsing attributes in process `syz.3.227'. [ 135.246448][ T6744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.259969][ T6740] netlink: 'syz.3.227': attribute type 10 has an invalid length. [ 135.650244][ T6740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 135.688412][ T6740] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 136.544010][ T6766] set match dimension is over the limit! [ 136.672592][ T6775] netlink: 'syz.1.237': attribute type 2 has an invalid length. [ 136.697536][ T6775] netlink: 'syz.1.237': attribute type 2 has an invalid length. [ 136.841252][ T6783] netlink: 5204 bytes leftover after parsing attributes in process `syz.3.239'. [ 136.906187][ T6787] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.241'. [ 136.930700][ T6780] netlink: 'syz.0.236': attribute type 1 has an invalid length. [ 136.948756][ T6780] netlink: 96 bytes leftover after parsing attributes in process `syz.0.236'. [ 136.989194][ T6780] netlink: 'syz.0.236': attribute type 1 has an invalid length. [ 137.038275][ T6780] netlink: 'syz.0.236': attribute type 8 has an invalid length. [ 137.136190][ T6780] netlink: 606 bytes leftover after parsing attributes in process `syz.0.236'. [ 137.156082][ T6799] netlink: 'syz.3.244': attribute type 1 has an invalid length. [ 137.826880][ T6809] netlink: 'syz.3.245': attribute type 21 has an invalid length. [ 138.592126][ T6809] netlink: 132 bytes leftover after parsing attributes in process `syz.3.245'. [ 138.609229][ T6809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.245'. [ 138.716667][ T6817] netlink: 'syz.1.246': attribute type 10 has an invalid length. [ 138.820676][ T6817] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 138.826913][ T6813] netlink: 'syz.1.246': attribute type 10 has an invalid length. [ 138.891460][ T6817] team0: Port device netdevsim0 added [ 139.080737][ T6813] team0: Port device netdevsim0 removed [ 139.176650][ T6813] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.295868][ T6813] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 139.336944][ T6834] netlink: 60 bytes leftover after parsing attributes in process `syz.2.251'. [ 139.872291][ T6840] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.253'. [ 139.992846][ T6838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.077340][ T6843] netlink: 5204 bytes leftover after parsing attributes in process `syz.4.254'. [ 140.804084][ T6869] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.264'. [ 141.466548][ T6890] openvswitch: netlink: IP tunnel dst address not specified [ 141.492460][ T6891] openvswitch: netlink: IP tunnel dst address not specified [ 141.772434][ T6896] xt_policy: too many policy elements [ 142.507866][ T6919] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.276'. [ 144.097130][ T6956] netlink: 48 bytes leftover after parsing attributes in process `syz.2.283'. [ 144.106836][ T6949] delete_channel: no stack [ 144.307938][ T6956] netlink: 80 bytes leftover after parsing attributes in process `syz.2.283'. [ 144.319503][ T6949] can: request_module (can-proto-0) failed. [ 144.982389][ T6973] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.288'. [ 145.546290][ T6989] netlink: 104 bytes leftover after parsing attributes in process `syz.3.293'. [ 146.029787][ T6990] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.101057][ T6990] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.108491][ T6990] IPv6: NLM_F_CREATE should be set when creating new route [ 146.156989][ T6995] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.762759][ T7016] netlink: 272 bytes leftover after parsing attributes in process `syz.4.301'. [ 146.777260][ T7017] validate_nla: 1 callbacks suppressed [ 146.777280][ T7017] netlink: 'syz.2.299': attribute type 1 has an invalid length. [ 146.801215][ T7018] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.842599][ T7017] netlink: 96 bytes leftover after parsing attributes in process `syz.2.299'. [ 146.875420][ T7017] netlink: 'syz.2.299': attribute type 1 has an invalid length. [ 146.902365][ T7017] netlink: 'syz.2.299': attribute type 8 has an invalid length. [ 146.934282][ T7017] netlink: 606 bytes leftover after parsing attributes in process `syz.2.299'. [ 147.159597][ T7022] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.302'. [ 148.265714][ T7055] netlink: 'syz.4.312': attribute type 2 has an invalid length. [ 148.318446][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.312'. [ 148.513288][ T7058] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.314'. [ 148.674621][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'. [ 150.877031][ T7090] netlink: 'syz.1.322': attribute type 11 has an invalid length. [ 151.440448][ T7104] openvswitch: netlink: Message has -2 unknown bytes. [ 151.797546][ T7108] netlink: 'syz.2.328': attribute type 21 has an invalid length. [ 153.605474][ T7144] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.340'. [ 153.941476][ T7155] netlink: 96 bytes leftover after parsing attributes in process `syz.4.344'. [ 154.189141][ T7146] netlink: 'syz.3.342': attribute type 12 has an invalid length. [ 154.232742][ T7146] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.342'. [ 154.488362][ T7166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.345'. [ 155.942952][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.348'. [ 155.975886][ T7174] openvswitch: netlink: Flow actions attr not present in new flow. [ 155.996418][ T7183] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.349'. [ 156.128532][ T7187] netlink: 763 bytes leftover after parsing attributes in process `syz.1.350'. [ 156.505437][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 157.397188][ T7210] netlink: 'syz.4.356': attribute type 10 has an invalid length. [ 157.445162][ T7210] bridge0: port 3(team0) entered disabled state [ 157.509025][ T7210] team0: left allmulticast mode [ 157.535006][ T7210] team_slave_0: left allmulticast mode [ 157.543797][ T7210] team_slave_1: left allmulticast mode [ 157.575197][ T7210] team0: left promiscuous mode [ 157.594320][ T7210] team_slave_0: left promiscuous mode [ 157.617816][ T7210] team_slave_1: left promiscuous mode [ 157.647196][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 157.648876][ T7210] bridge0: port 3(team0) entered disabled state [ 157.678825][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 157.774139][ T7210] team0: Cannot enslave team device to itself [ 158.380818][ T7238] openvswitch: netlink: EtherType 0 is less than min 600 [ 158.612930][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.072431][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.230897][ T7244] netlink: 'syz.1.367': attribute type 29 has an invalid length. [ 159.450869][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.580776][ T7242] netlink: 'syz.1.367': attribute type 29 has an invalid length. [ 159.861828][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.884207][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.894998][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.905344][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.919639][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.930767][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 160.003362][ T7253] bpf: Bad value for 'mode' [ 160.361820][ T7265] __nla_validate_parse: 1 callbacks suppressed [ 160.361892][ T7265] netlink: 60 bytes leftover after parsing attributes in process `syz.3.373'. [ 160.405566][ T7270] netlink: 'syz.1.374': attribute type 2 has an invalid length. [ 160.438814][ T7270] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 160.446660][ T7270] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 160.465108][ T13] bridge_slave_1: left allmulticast mode [ 160.502150][ T13] bridge_slave_1: left promiscuous mode [ 160.511037][ T7271] netlink: 112 bytes leftover after parsing attributes in process `syz.3.373'. [ 160.540467][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.614573][ T13] bridge_slave_0: left allmulticast mode [ 160.640408][ T13] bridge_slave_0: left promiscuous mode [ 160.660513][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.914211][ T7280] netlink: 'syz.0.375': attribute type 10 has an invalid length. [ 161.804787][ T7297] netlink: 64 bytes leftover after parsing attributes in process `syz.3.377'. [ 161.840618][ T7300] netlink: 64 bytes leftover after parsing attributes in process `syz.3.377'. [ 161.989372][ T5833] Bluetooth: hci1: command tx timeout [ 162.217760][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.258678][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.280712][ T13] bond0 (unregistering): Released all slaves [ 162.393588][ T7280] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 162.455636][ T7280] team0: Port device netdevsim0 added [ 162.736401][ T5494] 8021q: adding VLAN 0 to HW filter on device eth1 [ 162.857490][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 163.104803][ T7336] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.385'. [ 163.291952][ T7340] netlink: 'syz.4.386': attribute type 1 has an invalid length. [ 163.418331][ T7342] netlink: 64 bytes leftover after parsing attributes in process `syz.4.386'. [ 164.069310][ T5833] Bluetooth: hci1: command tx timeout [ 166.149385][ T5833] Bluetooth: hci1: command tx timeout [ 166.543078][ T13] hsr_slave_0: left promiscuous mode [ 166.558007][ T13] hsr_slave_1: left promiscuous mode [ 166.578112][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.593167][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.604511][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.612387][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.628702][ T13] veth1_macvtap: left promiscuous mode [ 166.635825][ T13] veth0_macvtap: left promiscuous mode [ 166.642125][ T13] veth1_vlan: left promiscuous mode [ 166.647769][ T13] veth0_vlan: left promiscuous mode [ 166.900269][ T7380] openvswitch: netlink: Message has -2 unknown bytes. [ 167.004787][ T7382] netlink: 'syz.4.394': attribute type 13 has an invalid length. [ 167.012919][ T7382] netlink: 'syz.4.394': attribute type 27 has an invalid length. [ 167.130006][ T13] team0 (unregistering): Port device team_slave_1 removed [ 167.154286][ T13] team0 (unregistering): Port device team_slave_0 removed [ 167.335271][ T5494] 8021q: adding VLAN 0 to HW filter on device eth2 [ 167.672060][ T7256] chnl_net:caif_netlink_parms(): no params data found [ 167.704235][ T7392] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.397'. [ 167.912586][ T7396] netlink: 5720 bytes leftover after parsing attributes in process `syz.3.398'. [ 167.960041][ T7396] netlink: 5720 bytes leftover after parsing attributes in process `syz.3.398'. [ 168.094261][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.400'. [ 168.229171][ T5833] Bluetooth: hci1: command tx timeout [ 168.665463][ T7256] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.697126][ T7256] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.735822][ T7256] bridge_slave_0: entered allmulticast mode [ 168.761014][ T7256] bridge_slave_0: entered promiscuous mode [ 168.787208][ T7256] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.837268][ T7256] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.873078][ T7256] bridge_slave_1: entered allmulticast mode [ 168.914954][ T7256] bridge_slave_1: entered promiscuous mode [ 168.963928][ T7433] netlink: 'syz.3.406': attribute type 21 has an invalid length. [ 169.058424][ T7433] netlink: 132 bytes leftover after parsing attributes in process `syz.3.406'. [ 169.122245][ T7256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.199564][ T7256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.401849][ T7256] team0: Port device team_slave_0 added [ 169.441162][ T7256] team0: Port device team_slave_1 added [ 172.001581][ T7256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.026931][ T7256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.059910][ T7256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.167853][ T5494] 8021q: adding VLAN 0 to HW filter on device eth3 [ 172.240140][ T7256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.262817][ T7256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.367044][ T7256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.572173][ T7455] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.409'. [ 172.588186][ T7456] netlink: 'syz.1.410': attribute type 6 has an invalid length. [ 172.614585][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'. [ 172.775110][ T7460] nft_compat: unsupported protocol 5 [ 172.841589][ T7256] hsr_slave_0: entered promiscuous mode [ 172.872887][ T7256] hsr_slave_1: entered promiscuous mode [ 173.392132][ T7468] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.460918][ T7503] netlink: 'syz.3.418': attribute type 3 has an invalid length. [ 176.516080][ T7503] netlink: 132 bytes leftover after parsing attributes in process `syz.3.418'. [ 176.793678][ T7515] openvswitch: netlink: Flow actions attr not present in new flow. [ 178.206386][ T7534] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.423'. [ 178.328230][ T7538] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.424'. [ 178.475798][ T7542] netlink: 14 bytes leftover after parsing attributes in process `syz.4.425'. [ 178.512358][ T7541] netlink: 28 bytes leftover after parsing attributes in process `syz.4.425'. [ 178.776119][ T7256] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 178.820760][ T7256] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.846945][ T7256] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 178.881401][ T7256] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.902714][ T7256] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 178.948499][ T7256] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.993689][ T7256] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.045158][ T7256] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.222685][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 179.488308][ T7579] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 179.659287][ T7256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.726059][ T7256] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.774579][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.781955][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.864338][ T7590] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.436'. [ 179.881681][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.889174][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.505269][ T7256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.734542][ T7256] veth0_vlan: entered promiscuous mode [ 181.798976][ T7256] veth1_vlan: entered promiscuous mode [ 181.942338][ T7256] veth0_macvtap: entered promiscuous mode [ 181.992415][ T7643] netlink: 4100 bytes leftover after parsing attributes in process `syz.3.447'. [ 182.002204][ T7256] veth1_macvtap: entered promiscuous mode [ 182.027333][ T7646] netlink: 'syz.4.445': attribute type 21 has an invalid length. [ 182.053137][ T7643] netlink: 104 bytes leftover after parsing attributes in process `syz.3.447'. [ 182.087596][ T7646] netlink: 132 bytes leftover after parsing attributes in process `syz.4.445'. [ 182.113261][ T7648] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.448'. [ 182.276016][ T7256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.326439][ T7256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.382326][ T1114] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.421274][ T1114] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.000635][ T1114] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.018105][ T1114] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.168704][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.455'. [ 183.230630][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.455'. [ 183.462030][ T7699] netlink: 'syz.1.456': attribute type 10 has an invalid length. [ 183.605009][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 183.616361][ T7692] netlink: 10 bytes leftover after parsing attributes in process `syz.4.455'. [ 183.981227][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.008162][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.171145][ T5967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.210718][ T7709] netlink: 40 bytes leftover after parsing attributes in process `syz.3.461'. [ 184.232364][ T5967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.250096][ T7707] netlink: 4100 bytes leftover after parsing attributes in process `syz.0.460'. [ 186.892231][ T7756] netlink: 'syz.4.470': attribute type 6 has an invalid length. [ 187.706018][ T7793] netlink: 'syz.3.477': attribute type 7 has an invalid length. [ 188.016872][ T7793] netlink: 'syz.3.477': attribute type 4 has an invalid length. [ 188.025575][ T7793] __nla_validate_parse: 4 callbacks suppressed [ 188.025598][ T7793] netlink: 152 bytes leftover after parsing attributes in process `syz.3.477'. [ 188.117169][ T7793] .`: renamed from bond0 (while UP) [ 188.968254][ T7816] netlink: 'syz.2.484': attribute type 10 has an invalid length. [ 189.113299][ T7816] veth0_vlan: left promiscuous mode [ 189.121472][ T7816] veth0_vlan: entered promiscuous mode [ 189.287618][ T7816] team0: Device veth0_vlan failed to register rx_handler [ 189.618106][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 189.629411][ T7829] openvswitch: netlink: Flow actions attr not present in new flow. [ 190.373751][ T7838] netlink: 'syz.4.487': attribute type 29 has an invalid length. [ 190.425640][ T7823] netlink: 'syz.4.487': attribute type 29 has an invalid length. [ 190.601838][ T1114] tipc: Subscription rejected, illegal request [ 190.690926][ T7839] netlink: 'syz.0.491': attribute type 16 has an invalid length. [ 190.968412][ T7845] netlink: 4100 bytes leftover after parsing attributes in process `syz.1.492'. [ 191.451222][ T7839] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.461122][ T7839] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.557787][ T7830] infiniband !yz2: set active [ 192.569314][ T7830] infiniband !yz2: added veth0_to_batadv [ 192.595108][ T7830] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 192.606088][ T7830] infiniband !yz2: Couldn't open port 1 [ 192.631471][ T7830] smbdirect: ib_dev[!yz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 192.648438][ T7830] smbdirect: ib_dev[!yz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 192.690104][ T7830] smbdirect: ib_dev[!yz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 192.751278][ T7839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.808078][ T7839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.855795][ T7830] RDS/IB: !yz2: added [ 192.877352][ T7830] smc: adding ib device !yz2 with port count 1 [ 192.904470][ T7830] smc: ib device !yz2 port 1 has no pnetid [ 192.948219][ T7839] veth1_vlan: left allmulticast mode [ 193.196750][ T7874] netlink: 40 bytes leftover after parsing attributes in process `syz.2.499'. [ 193.243339][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.288120][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.316887][ T7874] netlink: 48 bytes leftover after parsing attributes in process `syz.2.499'. [ 193.429674][ T7892] openvswitch: netlink: Message has 4 unknown bytes. [ 193.440724][ T7881] netlink: 40 bytes leftover after parsing attributes in process `syz.2.499'. [ 193.465185][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.487691][ T7874] netlink: 40 bytes leftover after parsing attributes in process `syz.2.499'. [ 193.497568][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.411081][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.424404][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.233956][ T7905] netlink: 60 bytes leftover after parsing attributes in process `syz.4.505'. [ 195.266523][ T7903] netlink: 60 bytes leftover after parsing attributes in process `syz.4.505'. [ 198.456481][ T7945] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.514'. [ 199.295809][ T7949] : entered promiscuous mode [ 201.124412][ T7971] netlink: 3084 bytes leftover after parsing attributes in process `syz.2.522'. [ 201.152833][ T7971] netlink: 'syz.2.522': attribute type 1 has an invalid length. [ 201.184995][ T7971] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.522'. [ 203.849105][ T7989] netlink: 'syz.0.526': attribute type 29 has an invalid length. [ 203.874499][ T7986] netlink: 'syz.0.526': attribute type 29 has an invalid length. [ 204.336488][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'. [ 204.363211][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'. [ 204.394301][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'. [ 204.529357][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'. [ 205.476601][ T8015] netlink: 16348 bytes leftover after parsing attributes in process `syz.2.535'. [ 205.599150][ T8015] netlink: zone id is out of range [ 205.629589][ T8015] netlink: zone id is out of range [ 205.635850][ T8015] netlink: set zone limit has 8 unknown bytes [ 206.363348][ T8021] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.536'. [ 206.676796][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 206.692430][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 206.705232][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 206.733574][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 206.754708][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.285664][ T8027] netlink: 9 bytes leftover after parsing attributes in process `syz.4.537'. [ 207.420751][ T8028] netlink: 65023 bytes leftover after parsing attributes in process `syz.4.537'. [ 208.365139][ T8027] netlink: 9 bytes leftover after parsing attributes in process `syz.4.537'. [ 208.869654][ T5839] Bluetooth: hci5: command tx timeout [ 210.290291][ T8042] netlink: 'syz.0.544': attribute type 11 has an invalid length. [ 210.368584][ T8042] netlink: 168 bytes leftover after parsing attributes in process `syz.0.544'. [ 210.385740][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'. [ 210.454977][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'. [ 210.949963][ T5848] Bluetooth: hci5: command tx timeout [ 211.404140][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 211.832157][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 211.839295][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 211.845930][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 211.852290][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 212.425497][ T8047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.542'. [ 212.767118][ T8047] netlink: 'syz.4.542': attribute type 1 has an invalid length. [ 212.854689][ T8047] netlink: 2704 bytes leftover after parsing attributes in process `syz.4.542'. [ 213.029747][ T5149] Bluetooth: hci5: command tx timeout [ 214.854966][ T8072] netlink: 'syz.0.550': attribute type 29 has an invalid length. [ 215.006151][ T8069] netlink: 'syz.0.550': attribute type 29 has an invalid length. [ 215.111257][ T5149] Bluetooth: hci5: command tx timeout [ 215.263071][ T8065] netlink: 5204 bytes leftover after parsing attributes in process `syz.1.549'. [ 217.113039][ T8091] openvswitch: netlink: Flow actions attr not present in new flow. [ 218.931361][ T8104] netlink: 'syz.4.560': attribute type 21 has an invalid length. [ 219.784350][ T133] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.083836][ T8104] netlink: 132 bytes leftover after parsing attributes in process `syz.4.560'. [ 220.238779][ T8108] netlink: 104 bytes leftover after parsing attributes in process `syz.0.561'. [ 220.432094][ T133] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.501233][ T8117] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.564'. [ 220.715837][ T133] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.998831][ T133] .`: (slave netdevsim0): Releasing backup interface [ 221.051943][ T133] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.157123][ T8129] netlink: 'syz.4.565': attribute type 29 has an invalid length. [ 221.213208][ T8134] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.568'. [ 221.865401][ T8125] netlink: 'syz.4.565': attribute type 29 has an invalid length. [ 221.908273][ T8130] netlink: 'syz.4.565': attribute type 29 has an invalid length. [ 222.091127][ T8131] netlink: 132 bytes leftover after parsing attributes in process `syz.4.565'. [ 222.356795][ T8147] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.571'. [ 222.637920][ T8150] openvswitch: netlink: Flow actions attr not present in new flow. [ 222.650328][ T8022] chnl_net:caif_netlink_parms(): no params data found [ 223.277713][ T8154] netlink: 'syz.0.573': attribute type 21 has an invalid length. [ 225.121351][ T8154] netlink: 132 bytes leftover after parsing attributes in process `syz.0.573'. [ 225.331474][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 225.349616][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 225.451551][ T8022] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.469621][ T8022] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.498408][ T8022] bridge_slave_0: entered allmulticast mode [ 225.513417][ T8022] bridge_slave_0: entered promiscuous mode [ 225.577327][ T8168] netlink: 'syz.4.577': attribute type 49 has an invalid length. [ 225.604991][ T8022] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.642399][ T8022] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.651094][ T8174] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.579'. [ 225.661849][ T8022] bridge_slave_1: entered allmulticast mode [ 225.678405][ T8022] bridge_slave_1: entered promiscuous mode [ 225.764681][ T8168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.577'. [ 225.799102][ T8168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.577'. [ 226.037567][ T8186] netlink: 'syz.2.582': attribute type 7 has an invalid length. [ 226.052476][ T133] bridge_slave_1: left allmulticast mode [ 226.063445][ T133] bridge_slave_1: left promiscuous mode [ 226.079855][ T133] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.143197][ T133] bridge_slave_0: left allmulticast mode [ 226.186861][ T133] bridge_slave_0: left promiscuous mode [ 226.194721][ T133] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.351660][ T8201] netlink: 40 bytes leftover after parsing attributes in process `syz.1.586'. [ 226.575829][ T133] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.586612][ T133] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.596983][ T133] .` (unregistering): Released all slaves [ 226.613737][ T8022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.748942][ T8022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.207402][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'. [ 227.237612][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'. [ 227.356909][ T8022] team0: Port device team_slave_0 added [ 227.397950][ T8022] team0: Port device team_slave_1 added [ 227.976445][ T8227] ------------[ cut here ]------------ [ 227.982745][ T8227] !valid_signal(sig) [ 227.982765][ T8227] WARNING: kernel/signal.c:2174 at do_notify_parent+0xd18/0xe30, CPU#0: syz.0.593/8227 [ 227.996426][ T8227] Modules linked in: [ 228.000584][ T8227] CPU: 0 UID: 0 PID: 8227 Comm: syz.0.593 Not tainted syzkaller #0 PREEMPT(full) [ 228.009837][ T8227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 228.019954][ T8227] RIP: 0010:do_notify_parent+0xd18/0xe30 [ 228.025636][ T8227] Code: c6 05 0a 06 93 0e 01 48 c7 c7 20 36 cb 8b be a3 08 00 00 48 c7 c2 a0 37 cb 8b e8 c3 8c 17 00 e9 2e fa ff ff e8 79 3e 3b 00 90 <0f> 0b 90 45 31 e4 e9 1c ff ff ff e8 68 3e 3b 00 90 0f 0b 90 e9 db [ 228.045283][ T8227] RSP: 0018:ffffc90004b27c40 EFLAGS: 00010093 [ 228.051395][ T8227] RAX: ffffffff8189d697 RBX: dffffc0000000000 RCX: ffff888031350000 [ 228.059407][ T8227] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 228.067518][ T8227] RBP: ffffc90004b27d90 R08: 0000000000000003 R09: 0000000000000004 [ 228.075527][ T8227] R10: dffffc0000000000 R11: fffff52000964fa4 R12: ffff888026316590 [ 228.083540][ T8227] R13: ffff888031350000 R14: 0000000000000080 R15: 1ffff92000964f90 [ 228.091638][ T8227] FS: 0000000000000000(0000) GS:ffff88812522b000(0000) knlGS:0000000000000000 [ 228.100609][ T8227] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 228.107265][ T8227] CR2: 00007f8baa557930 CR3: 0000000032a7c000 CR4: 00000000003526f0 [ 228.115278][ T8227] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 228.123391][ T8227] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 228.131773][ T8227] Call Trace: [ 228.135104][ T8227] [ 228.138102][ T8227] ? perf_trace_preemptirq_template+0xb2/0x350 [ 228.144318][ T8227] ? __pfx_do_notify_parent+0x10/0x10 [ 228.149779][ T8227] ? do_raw_write_lock+0x11d/0x260 [ 228.154952][ T8227] ? do_exit+0x79d/0x22c0 [ 228.159335][ T8227] ? __pfx_do_raw_write_lock+0x10/0x10 [ 228.164854][ T8227] ? kill_orphaned_pgrp+0x170/0x610 [ 228.170127][ T8227] do_exit+0x13f1/0x22c0 [ 228.174457][ T8227] ? __pfx_do_exit+0x10/0x10 [ 228.179132][ T8227] ? rcu_is_watching+0x15/0xb0 [ 228.183981][ T8227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.190095][ T8227] __x64_sys_exit+0x40/0x40 [ 228.194746][ T8227] x64_sys_call+0x2231/0x2240 [ 228.199460][ T8227] do_syscall_64+0x15f/0xf80 [ 228.204092][ T8227] ? trace_irq_disable+0x3b/0x140 [ 228.209287][ T8227] ? clear_bhb_loop+0x40/0x90 [ 228.214059][ T8227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.220026][ T8227] RIP: 0033:0x7fea6a39c819 [ 228.224513][ T8227] Code: Unable to access opcode bytes at 0x7fea6a39c7ef. [ 228.231566][ T8227] RSP: 002b:00007fea6b1f2fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 228.240023][ T8227] RAX: ffffffffffffffda RBX: 00007fea6a615fa0 RCX: 00007fea6a39c819 [ 228.248066][ T8227] RDX: 00007fea6b1f39c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.256530][ T8227] RBP: 00007fea6a432c91 R08: 0000000000000000 R09: 0000000000000000 [ 228.264562][ T8227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.272608][ T8227] R13: 00007fea6a616038 R14: 00007fea6a615fa0 R15: 00007fff5a3cb738 [ 228.280700][ T8227] [ 228.283848][ T8227] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 228.291351][ T8227] CPU: 0 UID: 0 PID: 8227 Comm: syz.0.593 Not tainted syzkaller #0 PREEMPT(full) [ 228.300580][ T8227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 228.310800][ T8227] Call Trace: [ 228.314127][ T8227] [ 228.317131][ T8227] vpanic+0x56c/0xa60 [ 228.321198][ T8227] ? __pfx__printk+0x10/0x10 [ 228.325849][ T8227] ? __pfx_vpanic+0x10/0x10 [ 228.330401][ T8227] ? is_bpf_text_address+0x292/0x2b0 [ 228.335750][ T8227] ? is_bpf_text_address+0x26/0x2b0 [ 228.341036][ T8227] panic+0xc5/0xd0 [ 228.344812][ T8227] ? __pfx_panic+0x10/0x10 [ 228.349347][ T8227] __warn+0x315/0x4c0 [ 228.353377][ T8227] ? do_notify_parent+0xd18/0xe30 [ 228.358452][ T8227] ? do_notify_parent+0xd18/0xe30 [ 228.363536][ T8227] __report_bug+0x29a/0x540 [ 228.368131][ T8227] ? do_notify_parent+0xd18/0xe30 [ 228.373205][ T8227] ? __pfx___report_bug+0x10/0x10 [ 228.378372][ T8227] ? trace_call_bpf+0x7d0/0xb70 [ 228.383278][ T8227] ? trace_call_bpf+0xc2/0xb70 [ 228.388099][ T8227] ? __pfx_trace_call_bpf+0x10/0x10 [ 228.393406][ T8227] ? do_notify_parent+0xd18/0xe30 [ 228.398478][ T8227] report_bug+0x16a/0x220 [ 228.402856][ T8227] ? do_notify_parent+0xd18/0xe30 [ 228.407925][ T8227] ? do_notify_parent+0xd1a/0xe30 [ 228.413019][ T8227] handle_bug+0x9c/0x200 [ 228.417426][ T8227] exc_invalid_op+0x1a/0x50 [ 228.421991][ T8227] asm_exc_invalid_op+0x1a/0x20 [ 228.426903][ T8227] RIP: 0010:do_notify_parent+0xd18/0xe30 [ 228.432585][ T8227] Code: c6 05 0a 06 93 0e 01 48 c7 c7 20 36 cb 8b be a3 08 00 00 48 c7 c2 a0 37 cb 8b e8 c3 8c 17 00 e9 2e fa ff ff e8 79 3e 3b 00 90 <0f> 0b 90 45 31 e4 e9 1c ff ff ff e8 68 3e 3b 00 90 0f 0b 90 e9 db [ 228.452246][ T8227] RSP: 0018:ffffc90004b27c40 EFLAGS: 00010093 [ 228.458392][ T8227] RAX: ffffffff8189d697 RBX: dffffc0000000000 RCX: ffff888031350000 [ 228.466400][ T8227] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 228.474404][ T8227] RBP: ffffc90004b27d90 R08: 0000000000000003 R09: 0000000000000004 [ 228.482526][ T8227] R10: dffffc0000000000 R11: fffff52000964fa4 R12: ffff888026316590 [ 228.490549][ T8227] R13: ffff888031350000 R14: 0000000000000080 R15: 1ffff92000964f90 [ 228.498594][ T8227] ? do_notify_parent+0xd17/0xe30 [ 228.503743][ T8227] ? perf_trace_preemptirq_template+0xb2/0x350 [ 228.509962][ T8227] ? __pfx_do_notify_parent+0x10/0x10 [ 228.515487][ T8227] ? do_raw_write_lock+0x11d/0x260 [ 228.520646][ T8227] ? do_exit+0x79d/0x22c0 [ 228.525048][ T8227] ? __pfx_do_raw_write_lock+0x10/0x10 [ 228.530621][ T8227] ? kill_orphaned_pgrp+0x170/0x610 [ 228.535899][ T8227] do_exit+0x13f1/0x22c0 [ 228.540224][ T8227] ? __pfx_do_exit+0x10/0x10 [ 228.544868][ T8227] ? rcu_is_watching+0x15/0xb0 [ 228.549697][ T8227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.555894][ T8227] __x64_sys_exit+0x40/0x40 [ 228.560560][ T8227] x64_sys_call+0x2231/0x2240 [ 228.565365][ T8227] do_syscall_64+0x15f/0xf80 [ 228.570059][ T8227] ? trace_irq_disable+0x3b/0x140 [ 228.575129][ T8227] ? clear_bhb_loop+0x40/0x90 [ 228.579863][ T8227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.585800][ T8227] RIP: 0033:0x7fea6a39c819 [ 228.590254][ T8227] Code: Unable to access opcode bytes at 0x7fea6a39c7ef. [ 228.597606][ T8227] RSP: 002b:00007fea6b1f2fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 228.606066][ T8227] RAX: ffffffffffffffda RBX: 00007fea6a615fa0 RCX: 00007fea6a39c819 [ 228.614071][ T8227] RDX: 00007fea6b1f39c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.622076][ T8227] RBP: 00007fea6a432c91 R08: 0000000000000000 R09: 0000000000000000 [ 228.630096][ T8227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.638113][ T8227] R13: 00007fea6a616038 R14: 00007fea6a615fa0 R15: 00007fff5a3cb738 [ 228.646222][ T8227] [ 228.649456][ T8227] Kernel Offset: disabled [ 228.653831][ T8227] Rebooting in 86400 seconds..