last executing test programs: 7m45.910283429s ago: executing program 1 (id=294): r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1d, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x565}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0xa1}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9f}}}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x18, 0x0, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x4}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x21, 0x2, 0xa) r2 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x2d, 0x2a, 0xec, 0xfa, 0x0, 0xffffffffffffffff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x15086, 0x200, 0x101, 0x8, 0x7, 0xfffffffc, 0xd, 0x0, 0x1ff, 0x0, 0x931a}, 0xffffffffffffffff, 0x5, r0, 0x8) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xe4049, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc00}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0x2000000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x6, &(0x7f0000000000), 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) 7m45.60163506s ago: executing program 1 (id=298): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e0000"], 0xfe33) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000980)={&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000200)="70aa012fda4b07a435b085a73bf82cebf4a49c93b8393cf288207aabca09ccabb5b5554f", 0x24}, {&(0x7f0000000880)="be6bd4e663688a6dbba326bdd6495aed222434feec6deba314c3c9eba5f0cd5ffc3bb4919bb67b5b95fe280d28bade67d9367b25c56a20d0567bb873d254e3f751855d0cb999d4f68f61cd957546195571ab0a051ad7136e30a7debeef8979bd219331115efa157804d3af56884447c6dcfd2909f021887ae12ba6a7ee321f037aff0676fadef15b9907b30c0c0ca0714c9d241d18e69358df404681c425557e016a209e62f90459c845414b94fbbe2111b1b64daa37f2d23b9fe9199e00eab5497e9441e291df9f1272fc8a9aae59a22fb21479c2c7589a5828d8d03e619c5838", 0xe1}], 0x2}, 0x40000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) recvmsg$can_j1939(r5, &(0x7f0000000440)={&(0x7f0000000540)=@tipc=@name, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000007c0)=""/154, 0x9a}, 0x20) r6 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 7m45.205248529s ago: executing program 1 (id=304): perf_event_open(&(0x7f0000000000)={0xc9495724790b983a, 0x80, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000003, 0x198a9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd"], 0xfdef) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x18020, 0x2, 0x0, 0x8, 0x8001, 0x40}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffc, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0x0, 0x0}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x5}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x24}}, 0x40045) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001aa542b149ce246e6000500000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c00018008000100636d700020000280080001401100000408000240000000010c00038006000100407300000900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7m44.79369157s ago: executing program 1 (id=307): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82641, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x2, 0x0, 0x0, 0x9, 0x43fe, 0x7fffffff, 0xffdc, 0x0, 0x0, 0x0, 0x8800000008000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x41, 0xfffff024}, {0x6}]}) r1 = socket$kcm(0xa, 0x2, 0x3a) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000780)="80005b020eaa4d", 0x7}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000d00)=""/220, 0xdc}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x891c, &(0x7f0000000000)={'ip6gre0\x00', @random="02001800"}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r6) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x1f975, 0x4, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB="0200000000000003"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890b, &(0x7f0000000100)) 7m42.707823264s ago: executing program 1 (id=324): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x52) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x74800) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x3a84821, 0x0) 7m40.344454309s ago: executing program 2 (id=343): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfffffffffffffffe}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x810) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x9, &(0x7f0000002740), 0x4) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}, 0x103007, 0x0, 0x0, 0x2, 0x43fe, 0x7fffffff, 0x800, 0x0, 0x0, 0x0, 0x8000000000000000}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x85, &(0x7f0000000ac0), 0x90) 7m40.119028678s ago: executing program 2 (id=346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x301}, 0x14}}, 0x0) socket$kcm(0x15, 0x5, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x2}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x4}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @fwd={0x4}]}, {0x0, [0x2e, 0x30, 0x2e, 0x5f, 0x61, 0x61, 0x5f]}}, 0x0, 0x51, 0x0, 0x1}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000280)=@raw=[@generic={0xb, 0x5, 0x8, 0xc, 0x4}, @ldst={0x3, 0x2, 0x3, 0x5, 0x9, 0xfffffffffffffee0, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, @generic={0xf, 0x9, 0xc, 0x9, 0x24c07fc5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, &(0x7f00000003c0), 0x41000, 0x2, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xd, 0x30000000, 0x8}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f00000005c0)=[{0x0, 0x2, 0x2, 0x2}, {0x3, 0x1, 0xb, 0x8}, {0x2, 0x5, 0x7, 0x4}, {0x4, 0x1, 0x1, 0xb}, {0x4, 0x5, 0x1, 0x5}, {0x3, 0x2, 0x9, 0x6}, {0x5, 0x4, 0xb, 0x6}], 0x10, 0xfffffff8}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x438f}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5d31, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c0000000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000009060500000000000000000006000005000002078005a663000700"/44], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 7m40.019999605s ago: executing program 1 (id=347): r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@xdp={0x2c, 0xc, 0x0, 0x1d}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002500010125bd70b85235e50221e7ee000800030048"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x7dc7, 0x0, 0x1, 0xe44}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, &(0x7f0000000180)=""/199, &(0x7f0000000000), &(0x7f0000000280), 0x1}, 0x38) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)=r7}, 0x20) 7m39.850267893s ago: executing program 2 (id=349): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000500), 0x1}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x2, 0x3}, {0x3, 0x4}]}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x54, 0x0, 0x2, 0x1}, 0x28) close(r1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r3, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xfffffffffffffeed) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1a, 0x91b, 0x1, 0x81, 0x1110, r2, 0x7f, '\x00', r6, r4, 0x3, 0x1, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8927, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) 7m39.467110607s ago: executing program 2 (id=354): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0xd7, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1010115000600142603600e120800040000001101a80016000a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e43bf66f282ac027812cfbd3f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4", 0xd7}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x18000000000002a0, 0x1, 0x0, &(0x7f0000000580)="b9", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xac}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x8, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x82c, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="5c00000012006b906fdfe1ef704ad931c605876c1d0000007ea60864160af3650400120038002e000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 7m39.066412489s ago: executing program 2 (id=358): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x52) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x74800) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x3a84821, 0x0) 7m38.29927844s ago: executing program 2 (id=363): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x8000800) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(0x0, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000080)={0x2a, 0x0, @empty=0x1000000}, 0x5, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc01000000000000000000000000000009000000000000000800120000000200bb6b6e000000000006003200000000000000000000000000fe880000000000000000000000000001fc01000000000000000000000000000005000500000000000a00000000000000"], 0xa0}}, 0x0) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) 7m24.784622472s ago: executing program 32 (id=347): r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@xdp={0x2c, 0xc, 0x0, 0x1d}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002500010125bd70b85235e50221e7ee000800030048"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x7dc7, 0x0, 0x1, 0xe44}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, &(0x7f0000000180)=""/199, &(0x7f0000000000), &(0x7f0000000280), 0x1}, 0x38) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)=r7}, 0x20) 7m23.095584329s ago: executing program 33 (id=363): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x8000800) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(0x0, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000080)={0x2a, 0x0, @empty=0x1000000}, 0x5, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc01000000000000000000000000000009000000000000000800120000000200bb6b6e000000000006003200000000000000000000000000fe880000000000000000000000000001fc01000000000000000000000000000005000500000000000a00000000000000"], 0xa0}}, 0x0) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) 5m33.178374396s ago: executing program 3 (id=1141): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="300000002d00010000000000000000000800ea00", @ANYBLOB="9503fc14c11693f3fecf5151c0ec52993ad01aa75649758bc020c26e05a43ce5ebf446ec66e3274d4c0828064065d3d86bd1294a2ad3721061e60020840c4b1cfaa065cece673ab089e44776a2f414e607b295a8b0257ca887f9a8861c410d25daabdecb722e73cc058a488dc25ccd14ab9fa869246521cd17c202b7f3b9d955d030b0d4a6ad8acd43cbfdfd11a967ed5648fa25093b", @ANYBLOB="1000cd800b000100402a817b02c8d5cf1b054ddc644e892068dc7f96ac9f74040cd383020cb2bcd22d05fa0dcabdedceeb5eee975688eb189ab0d8b9a9c55aef7ea36bb25fea9512b4c4f9ca59d2926d9aede8cb1c86d8322f925f288c3161883a76da2d79d69a730b1683fb6367592fab960051c092e43300a7b3105db613f61d9755202e26569c4696a62026b8050f"], 0x30}], 0x1, 0x0, 0x0, 0x10000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0xb6df4c32c1d5c814, 0x4a}, 0x94) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{0x0, 0x2}], 0x1}, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x104002, 0x0, 0x0, 0x8, 0x8, 0x7fffffff, 0xd000, 0x0, 0x0, 0x0, 0x8000000000000400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0xb, 0x2, 0x0, 0x4, 0x0, 0x0, 0x80000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x9}, 0x0, 0x0, 0x7, 0x2, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x0, 0xffffffffffffdfff, r3, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000240)=ANY=[@ANYBLOB="9febd3010018000000000000001400000014000000070000000000000001000006040000000500000004000000006130305f2ede"], &(0x7f0000000f40)=""/4089, 0x33, 0xff9, 0x8}, 0x28) r8 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_attach_bpf(r8, 0x111, 0x87, &(0x7f0000000000), 0x4) close(r7) r9 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(r6, 0x0, 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x72, &(0x7f0000000000), 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRES8=r5, @ANYRES16], 0x15c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7b2b5c1968413d78, 0x0, 0x6}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x40}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x4000010) sendmsg$IPCTNL_MSG_CT_GET_DYING(r10, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x6, 0x1, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x4040804}, 0x64895) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x4, r12}, 0x10) 5m32.504936329s ago: executing program 3 (id=1150): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x9) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x4002, 0xa}, 0x0, 0x0, 0x0, 0x7, 0x7fff, 0x7fffffff, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x7}, 0x0, 0x94a8, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x410}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/143, 0xfff1}, {&(0x7f0000001780)=""/4105, 0x1009}, {&(0x7f0000000300)=""/109, 0x6d}, {&(0x7f0000001700)=""/82, 0x52}], 0x4}, 0x2000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x5, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x18c}}, 0x80) 5m30.672034801s ago: executing program 3 (id=1154): socket(0x840000000002, 0x3, 0xff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x17, 0x10}, 0xc) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000220053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed00790700"], 0xcfa4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000022000010240001801400018008000100e000000108000200e00000010c00028005000100000000"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x122}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) 5m30.107000062s ago: executing program 3 (id=1160): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000200000006"], 0x48) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10002) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x284, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) socket$kcm(0x23, 0x5, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@delrng={0x10, 0x14, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x85, 0x0, 0x0) r4 = getpid() r5 = perf_event_open(0x0, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x6f3ece73483f27dc) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9c0000000a0a030000000000000000000200000908000440000000007866726d000000003400028008000440000000000800044000000004080004400000004000000004080001400000000108000240000000060900020073797a3200000000080007400000003f0c000b40fffffffffffffff40900020073797a3100000000080003400000010100"/156], 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x24040800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="1c000000210081044e81f782db440000800000000015000000000000", 0x1c}], 0x1}, 0x0) 5m29.052914192s ago: executing program 3 (id=1168): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) socket$nl_route(0x10, 0x3, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mount$bpf(0x200000000000, 0x0, 0x0, 0x225451, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 5m28.2740097s ago: executing program 3 (id=1172): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x21, 0x0, 0x0, 0x4, 0x2, 0x7fffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf4a9, 0xa0000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000280)}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000009c0)}], 0x1}, 0x24000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r2) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) bpf$LINK_DETACH(0x22, &(0x7f00000002c0), 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x2a, 0x2, 0x400, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 5m13.139240117s ago: executing program 34 (id=1172): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x21, 0x0, 0x0, 0x4, 0x2, 0x7fffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf4a9, 0xa0000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000280)}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000009c0)}], 0x1}, 0x24000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r2) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) bpf$LINK_DETACH(0x22, &(0x7f00000002c0), 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x2a, 0x2, 0x400, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 3m1.746837526s ago: executing program 5 (id=2567): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x2d1b47cadf767bbd, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 3m1.049171295s ago: executing program 5 (id=2572): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x17000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 2m59.778666853s ago: executing program 5 (id=2579): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m57.462201566s ago: executing program 5 (id=2588): openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 2m57.191754581s ago: executing program 5 (id=2594): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0x830a}, 0x0, 0x2, 0xfffffffe, 0x0, 0x51, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0xc040, 0x401, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x40010}, r0, 0xffffffffffffffdf, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x200040c4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x17, 0x301, 0x70bd24, 0xfffffffc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) 2m56.902964039s ago: executing program 5 (id=2596): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848480000005e140602000006020e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1a}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x39, 0x0, 0x6}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 2m56.214876595s ago: executing program 35 (id=2596): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848480000005e140602000006020e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1a}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x39, 0x0, 0x6}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 5.994379492s ago: executing program 8 (id=4111): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0xfffffffc, 0x2, 0x7ffe, 0x7fffffff, 0xfffd}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @val=@netkit}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c094}, 0x40010) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtfilter={0x34, 0x2c, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x3, 0x3}, {0x9, 0x3}, {0x9, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0a00000004040000dd0000c94f8bb015f5cf5ef8b80fae661e06d20a768f3a8b6ec98b0e3b22add8169bc769d4ed2dd6dc45976b7b845cb42c77ceaa9b9062ca", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x807, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x200009, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x400, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10563b, 0x0, 0xfffffffe, 0x6, 0x10000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890b, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) r10 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890b, &(0x7f0000000000)) sendmsg$nl_route_sched(r8, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.782290645s ago: executing program 0 (id=4113): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1, 0x7}, 0x4002, 0x0, 0x0, 0x8, 0x43fc, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffbfffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0xd, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01000000000000000000000000000114000280bf"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x1b, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)=r3, 0xa1) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) 2.655347423s ago: executing program 8 (id=4116): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22140, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0xf05d, 0x3}, 0xa38, 0x1000000, 0x0, 0x9bec371b154e03e, 0x100, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 2.058571814s ago: executing program 0 (id=4119): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80106, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x5, 0x3fe, 0x7ffffffc, 0x404, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=@deltaction={0x48, 0x31, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040004}, 0x20040051) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x18, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1c, &(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000de9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x14c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x4}, {0x3, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xf, 0x1, 0x47f, 0x6, 0x1a, 0x1c, 0x6}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8000101}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x5}, 0x2}, 0x18, &(0x7f0000000280)={&(0x7f00000004c0)="015d1e8ad52784070a8dfd3de13b6d08c321f32fd95437c76c40a0f5fabf482910cb57879c4782bf4b06685e64e768e2ed1d2edd1448cf6edffbf01f8067efc9024635fb99c72d234a699d42c55384b951d852d2da312464712995c23357358cae6b1b4fe848295f19e89542043864b67997a0d3a0112ba44b5b0bceece189dcc67a5f96ee455d5e5dc1321aa176731ddd049016671c40d0fb73ee9c7c2aaa1e9c3efd55df73ba7daa8b588350ba0b72c477b8509ede43d68c38174f02e399fd9cbf5d90835c3f574d", 0xc9}, 0x1, 0x0, 0x0, 0x8840}, 0x880e199e2799cc70) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028060000280000000200000001"], 0x0, 0x42}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x5}, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0xd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$kcm(0xa, 0xd, 0x106) 1.938138845s ago: executing program 8 (id=4121): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0xfffffffc, 0x2, 0x7ffe, 0x7fffffff, 0xfffd}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @val=@netkit}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c094}, 0x40010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtfilter={0x34, 0x2c, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x3, 0x3}, {0x9, 0x3}, {0x9, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0a00000004040000dd0000c94f8bb015f5cf5ef8b80fae661e06d20a768f3a8b6ec98b0e3b22add8169bc769d4ed2dd6dc45976b7b845cb42c77ceaa9b9062ca", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x807, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x200009, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x400, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10563b, 0x0, 0xfffffffe, 0x6, 0x10000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) r9 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890b, &(0x7f0000000000)) sendmsg$nl_route_sched(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.899581287s ago: executing program 7 (id=4122): socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.840357289s ago: executing program 4 (id=4123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c001880080001400100000000000000000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffcf800080002400000000008000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) 1.339352919s ago: executing program 7 (id=4124): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xa5, 0x0, 0x0, 0xc4, 0x0, 0x8000000007, 0x2101, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x18808, 0x0, 0x0, 0x6, 0xe3f7, 0x800000, 0x200, 0x0, 0x4, 0x0, 0x200000041}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x5d, 0x7, 0x3, 0x6, 0x0, 0x8000000000000001, 0x20080, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000006c0), 0x8}, 0xa520, 0x7f, 0x7f, 0x3, 0x624, 0x0, 0x97ae, 0x0, 0x8, 0x0, 0x6}, r1, 0x1, r0, 0x8) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000780)) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2, 0x2}, 0x10) r5 = socket$kcm(0xa, 0x2, 0x0) close(r5) socket$kcm(0x2, 0x2, 0x73) 1.307219396s ago: executing program 0 (id=4125): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x1000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.300695694s ago: executing program 4 (id=4126): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xe, 0x9}, 0x118d2a, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x30}, 0x0) 1.288145945s ago: executing program 8 (id=4127): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1948}, 0x10020, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x18, 0x24, 0x107, 0xfffffffe, 0x25dfdbfc, {0xb, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x240080d1}, 0x8010) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x37, 0x107, 0xfffffff3, 0x25d7dbfe, {0x8, 0x7c}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) 1.198018132s ago: executing program 7 (id=4128): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="004000003a0091460cd934e3ea81e88802"], 0xfe33) 1.137292397s ago: executing program 0 (id=4129): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1, 0x7}, 0x4002, 0x0, 0x0, 0x8, 0x43fc, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffbfffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0xd, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01000000000000000000000000000114000280bf"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x1b, 0x0, 0x0) close(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)=r3, 0xa1) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) 1.047879374s ago: executing program 8 (id=4130): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x2001, 0x0, 0x0, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x1f4, 0x24, 0x0, &(0x7f0000000a80)="ff410800b083dcc1010b3efc88643acd3aaf0ae90021bd21762ae38f0000000000000053", 0x0, 0x2fe, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) 1.033860271s ago: executing program 6 (id=4131): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1, 0x7}, 0x4002, 0x0, 0x0, 0x8, 0x43fc, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffbfffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0xd, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01000000000000000000000000000114000280bf"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r3) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x1b, &(0x7f00000001c0), 0xa1) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 982.767542ms ago: executing program 0 (id=4132): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) socket$kcm(0x2, 0x3, 0x84) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x5, 0x0, 0x2010, r0, 0xfda, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) 951.465043ms ago: executing program 4 (id=4133): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000001008500000001000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe, 0x0, &(0x7f0000000880)=' \x00'/14, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 871.282108ms ago: executing program 7 (id=4134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1cf, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x11, 0x2, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') fstat(0xffffffffffffffff, 0x0) fstat(r2, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x922000000001, 0x106) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000001304000000000000000100000500110000000000000300000000000000000000000000000901"], 0x0, 0x4a, 0x0, 0x2}, 0x28) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x50, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000000) 866.041671ms ago: executing program 6 (id=4135): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80106, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x5, 0x3fe, 0x7ffffffc, 0x404, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=@deltaction={0x48, 0x31, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040004}, 0x20040051) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x18, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1c, &(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000de9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x14c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x4}, {0x3, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xf, 0x1, 0x47f, 0x6, 0x1a, 0x1c, 0x6}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8000101}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x5}, 0x2}, 0x18, &(0x7f0000000280)={&(0x7f00000004c0)="015d1e8ad52784070a8dfd3de13b6d08c321f32fd95437c76c40a0f5fabf482910cb57879c4782bf4b06685e64e768e2ed1d2edd1448cf6edffbf01f8067efc9024635fb99c72d234a699d42c55384b951d852d2da312464712995c23357358cae6b1b4fe848295f19e89542043864b67997a0d3a0112ba44b5b0bceece189dcc67a5f96ee455d5e5dc1321aa176731ddd049016671c40d0fb73ee9c7c2aaa1e9c3efd55df73ba7daa8b588350ba0b72c477b8509ede43d68c38174f02e399fd9cbf5d90835c3f574d", 0xc9}, 0x1, 0x0, 0x0, 0x8840}, 0x880e199e2799cc70) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028060000280000000200000001"], 0x0, 0x42}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x5}, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0xd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$kcm(0xa, 0xd, 0x106) 777.595657ms ago: executing program 0 (id=4136): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1b000000180059ee01872437727846f52d"], 0xfe33) 761.630589ms ago: executing program 4 (id=4137): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0xfffffffc, 0x2, 0x7ffe, 0x7fffffff, 0xfffd}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @val=@netkit}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c094}, 0x40010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtfilter={0x34, 0x2c, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x3, 0x3}, {0x9, 0x3}, {0x9, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0a00000004040000dd0000c94f8bb015f5cf5ef8b80fae661e06d20a768f3a8b6ec98b0e3b22add8169bc769d4ed2dd6dc45976b7b845cb42c77ceaa9b9062ca", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x807, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x200009, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x400, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10563b, 0x0, 0xfffffffe, 0x6, 0x10000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) r9 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890b, &(0x7f0000000000)) sendmsg$nl_route_sched(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 553.39096ms ago: executing program 6 (id=4138): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r3}, 0x38) 530.362678ms ago: executing program 7 (id=4139): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x4d18aa27, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x73fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7ffeffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x1, &(0x7f0000000200)=@raw=[@exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x18}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fef7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x1f, &(0x7f00000000c0), 0xd8) r3 = socket(0xa, 0x3, 0xff) sendmsg$unix(r3, &(0x7f0000000940)={&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x2000c884) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) 495.932832ms ago: executing program 8 (id=4140): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 311.938623ms ago: executing program 6 (id=4141): ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010104}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x62, 0xfd, 0x80000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}]}, 0x90}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 267.315997ms ago: executing program 4 (id=4142): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40010) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 197.319386ms ago: executing program 7 (id=4143): getpid() perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0xe) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000004c0)=@newtaction={0xd8, 0x30, 0x53b, 0x8000, 0x0, {}, [{0xc4, 0x1, [@m_simple={0xc0, 0x1, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x0, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x5, 0x2, 0x5fc, 0x10}}, @TCA_DEF_DATA={0xffffffe2, 0x3, '\x00\xbaQ\x1c\xd5^lh\xd9\xf8`\x8e\x12\xf1\x18w\xbfTH\xce\xc2.\x18?O}\xd4\xa5,\x14\x04\xf3G\xf9\xd5\xe9$pl\xf0\xdcf:\xc6\xbe\xfc(E\xba\"\x8f\xe0\f#7\xcd\x93\x8ds\x91\xb0\x02\x1dX\x9c\xe6\xfc%\x8dh\f.q\xef\x19\x15\xe06\x86\x90|*J>\xf8;5\x1a\\<\xf1\xbbS\x94_\x9c\xde\x00\xd0H\xab\xa1\xf8\x86\xf4\xfc\xfat'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7ff, 0x1, 0x2, 0x4, 0x10001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2980000, 0x7, 0x0, 0x70c, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x800, 0x8, 0x8, 0xc, 0xfffffffd}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xd8}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 118.158343ms ago: executing program 6 (id=4144): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x2002) r1 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x114, 0x1d, 0x0, 0xfea5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0b, &(0x7f0000000200)={'virt_wifi0\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r0, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1b, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000880), &(0x7f00000009c0), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xd, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x44050) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d697400"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) 3.888314ms ago: executing program 6 (id=4145): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1, 0x7}, 0x4002, 0x0, 0x0, 0x8, 0x43fc, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffbfffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0xd, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01000000000000000000000000000114000280bf"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r3) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x1b, &(0x7f00000001c0), 0xa1) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 0s ago: executing program 4 (id=4146): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x4, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) close(r3) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12) kernel console output (not intermixed with test programs): 3] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1347'. [ 290.970808][ T29] audit: type=1107 audit(1773150739.116:34): pid=10459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 290.996267][T10460] netlink: 'syz.0.1340': attribute type 11 has an invalid length. [ 291.602202][T10480] netlink: 'syz.6.1344': attribute type 10 has an invalid length. [ 291.616423][T10480] team0: Device veth0_vlan failed to register rx_handler [ 291.790107][T10484] IPv6: Can't replace route, no match found [ 292.987848][T10471] delete_channel: no stack [ 293.484012][T10495] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.1349'. [ 293.496100][T10495] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 295.254421][T10511] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 295.434177][ T29] audit: type=1107 audit(1773150743.576:35): pid=10514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ê7¤Ìj«COï­·•Á·måðA;i)E÷ùI ê±óžÔ_Xš]ÝF&™Õ,L¾sÁüx–]#ü…±FñÞàqsŽü r2^' [ 295.444483][T10521] netlink: 'syz.0.1356': attribute type 10 has an invalid length. [ 295.474456][T10520] openvswitch: netlink: IP tunnel dst address not specified [ 295.485369][T10520] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1358'. [ 295.506888][T10521] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1356'. [ 296.287202][T10535] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1363'. [ 296.319656][T10535] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1363'. [ 296.374462][T10535] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1363'. [ 296.389242][T10541] option changes via remount are deprecated (pid=10539 comm=syz.4.1364) [ 296.411007][T10541] sit0: entered allmulticast mode [ 296.536651][T10541] sit0: entered promiscuous mode [ 296.662460][T10555] syz2: rxe_newlink: already configured on bond_slave_1 [ 296.674044][T10555] netlink: 'syz.0.1370': attribute type 10 has an invalid length. [ 296.765544][T10547] lo: left promiscuous mode [ 296.776747][T10559] netlink: 'syz.6.1371': attribute type 10 has an invalid length. [ 296.808489][T10547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.849420][T10554] netlink: 'syz.5.1368': attribute type 46 has an invalid length. [ 297.005823][T10566] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1373'. [ 297.035899][T10564] ±ÿÿÿ: renamed from team_slave_1 (while UP) [ 297.047338][T10572] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1385'. [ 297.587485][T10578] netlink: 'syz.5.1376': attribute type 10 has an invalid length. [ 298.434726][T10589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1379'. [ 298.517026][T10594] netlink: 'syz.4.1379': attribute type 2 has an invalid length. [ 298.524806][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1379'. [ 298.597331][T10597] netlink: 596 bytes leftover after parsing attributes in process `syz.6.1382'. [ 298.668886][T10588] delete_channel: no stack [ 298.721528][T10604] netlink: 'syz.6.1382': attribute type 13 has an invalid length. [ 298.874468][T10607] xt_socket: unknown flags 0x24 [ 299.083873][T10614] netlink: 'syz.5.1387': attribute type 10 has an invalid length. [ 299.927463][T10614] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 299.948366][ T5822] dummy0 speed is unknown, defaulting to 1000 [ 299.954865][ T796] dummy0 speed is unknown, defaulting to 1000 [ 299.962368][ T24] dummy0 speed is unknown, defaulting to 1000 [ 299.999806][T10630] netlink: 'syz.6.1392': attribute type 10 has an invalid length. [ 300.005796][T10629] netlink: 'syz.0.1391': attribute type 2 has an invalid length. [ 300.024810][T10630] team0: Device veth0_vlan failed to register rx_handler [ 300.118135][T10633] netlink: 'syz.5.1393': attribute type 1 has an invalid length. [ 301.278228][T10660] __nla_validate_parse: 3 callbacks suppressed [ 301.278254][T10660] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1402'. [ 301.324778][T10663] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.1401'. [ 301.379468][T10663] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.1401'. [ 301.392380][T10658] gretap0: refused to change device tx_queue_len [ 301.411478][T10658] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 301.446542][ T5822] lo speed is unknown, defaulting to 1000 [ 301.458032][ T5822] syz1: Port: 1 Link DOWN [ 302.189560][T10665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.210856][T10665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.262855][T10665] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 302.436388][ T1349] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.463535][ T1349] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.520340][ T1349] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.540580][ T1349] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.603848][T10687] validate_nla: 3 callbacks suppressed [ 302.603883][T10687] netlink: 'syz.6.1411': attribute type 10 has an invalid length. [ 302.629561][T10687] netlink: 3531 bytes leftover after parsing attributes in process `syz.6.1411'. [ 302.857660][T10697] netlink: 'syz.6.1416': attribute type 10 has an invalid length. [ 302.900801][T10697] team0: Device veth0_vlan failed to register rx_handler [ 302.988625][T10695] netlink: 'syz.7.1415': attribute type 21 has an invalid length. [ 303.098819][T10695] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1415'. [ 303.138283][T10695] netlink: 'syz.7.1415': attribute type 1 has an invalid length. [ 303.330830][T10716] netlink: 'syz.7.1420': attribute type 2 has an invalid length. [ 303.493965][T10718] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1421'. [ 303.572243][T10721] netlink: 'syz.5.1421': attribute type 13 has an invalid length. [ 303.934421][T10735] netlink: 'syz.6.1424': attribute type 2 has an invalid length. [ 303.954602][T10735] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1424'. [ 304.809102][T10721] veth1_macvtap: left allmulticast mode [ 304.895386][T10729] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 304.915470][T10729] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 304.956308][T10729] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 305.111169][ T29] audit: type=1107 audit(1773150753.256:36): pid=10742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 305.321087][T10751] netlink: 'syz.4.1431': attribute type 10 has an invalid length. [ 306.355670][T10769] netlink: 'syz.0.1436': attribute type 10 has an invalid length. [ 306.414078][T10767] netlink: 'syz.4.1435': attribute type 10 has an invalid length. [ 306.440798][T10767] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1435'. [ 306.450508][T10767] .`: entered promiscuous mode [ 306.455787][T10767] bond_slave_0: entered promiscuous mode [ 306.467146][T10767] bond_slave_1: entered promiscuous mode [ 306.504763][T10767] dummy0: entered promiscuous mode [ 306.547513][T10767] 8021q: adding VLAN 0 to HW filter on device .` [ 306.562325][T10774] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 306.726244][T10778] : entered promiscuous mode [ 306.742756][T10779] : left promiscuous mode [ 306.812055][T10778] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.825750][T10778] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.841382][T10778] bridge0: entered allmulticast mode [ 306.899341][T10781] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1441'. [ 307.039840][ T29] audit: type=1107 audit(1773150755.186:37): pid=10786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 307.056775][T10777] delete_channel: no stack [ 307.229686][T10790] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1444'. [ 307.263044][T10797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1446'. [ 307.538138][T10803] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1448'. [ 307.613137][T10803] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 307.717292][T10806] validate_nla: 7 callbacks suppressed [ 307.717328][T10806] netlink: 'syz.0.1449': attribute type 10 has an invalid length. [ 307.989101][T10816] netlink: set zone limit has 4 unknown bytes [ 308.365312][T10824] mac80211_hwsim hwsim42 wlan1: entered allmulticast mode [ 308.405385][ T29] audit: type=1107 audit(1773150756.546:38): pid=10829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 308.434103][ T29] audit: type=1107 audit(1773150756.576:39): pid=10828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 308.512030][T10833] netlink: 'syz.0.1461': attribute type 10 has an invalid length. [ 308.752388][T10843] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1463'. [ 309.059393][T10850] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1465'. [ 309.118007][T10850] netlink: 'syz.7.1465': attribute type 1 has an invalid length. [ 309.241458][T10854] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1466'. [ 309.254618][T10854] netlink: 'syz.5.1466': attribute type 10 has an invalid length. [ 309.273208][T10854] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 309.438389][T10857] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.1467'. [ 309.690648][ T29] audit: type=1107 audit(1773150757.816:40): pid=10865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 309.828091][ T29] audit: type=1107 audit(1773150757.976:41): pid=10875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 310.262134][ T29] audit: type=1107 audit(1773150758.406:42): pid=10892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ê7¤Ìj«COï­·•Á·måðA;i)E÷ùI ê±óžÔ_Xš]ÝF&™Õ,L¾sÁüx–]#ü…±FñÞàqsŽü r2^' [ 310.268411][T10897] netlink: 'syz.4.1478': attribute type 10 has an invalid length. [ 310.310048][T10897] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1478'. [ 310.402434][T10896] netlink: 'syz.7.1479': attribute type 107 has an invalid length. [ 310.852499][T10897] batman_adv: batadv0: Removing interface: virt_wifi0 [ 311.086443][T10907] option changes via remount are deprecated (pid=10906 comm=syz.7.1481) [ 311.131038][T10899] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 311.167026][T10907] sit0: entered allmulticast mode [ 311.189495][T10907] sit0: entered promiscuous mode [ 311.515657][ T29] audit: type=1107 audit(1773150759.656:43): pid=10917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 311.822826][T10924] net veth1_virt_wifi €Â: renamed from virt_wifi0 [ 311.951640][T10927] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 312.043420][T10929] netlink: 'syz.5.1489': attribute type 2 has an invalid length. [ 312.383216][T10936] __nla_validate_parse: 2 callbacks suppressed [ 312.383268][T10936] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1491'. [ 312.450805][T10936] bond_slave_0: entered promiscuous mode [ 312.457248][T10936] bond_slave_1: entered promiscuous mode [ 312.885168][T10941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1493'. [ 313.073537][T10943] netlink: 'syz.7.1494': attribute type 6 has an invalid length. [ 313.122354][T10943] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1494'. [ 313.163116][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1494'. [ 313.252340][T10944] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.1494'. [ 315.191854][T10947] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1495'. [ 315.191994][T10950] netlink: 'syz.6.1496': attribute type 11 has an invalid length. [ 315.211252][ T29] audit: type=1107 audit(1773150763.336:44): pid=10945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 315.238459][T10947] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 315.340457][ T29] audit: type=1107 audit(1773150763.486:45): pid=10956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 315.397146][T10955] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1498'. [ 315.447974][T10955] netlink: 'syz.4.1498': attribute type 2 has an invalid length. [ 315.455923][T10955] netlink: 'syz.4.1498': attribute type 2 has an invalid length. [ 315.609087][T10966] netlink: 'syz.0.1501': attribute type 10 has an invalid length. [ 315.903603][T10968] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1502'. [ 316.176322][ T29] audit: type=1107 audit(1773150764.316:46): pid=10987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 316.265861][T10992] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1512'. [ 316.295169][T10992] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1512'. [ 316.804494][T11004] netlink: 'syz.6.1516': attribute type 10 has an invalid length. [ 317.343874][ T29] audit: type=1107 audit(1773150765.486:47): pid=11022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 317.357266][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.365172][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.440678][ T2229] block nbd0: Possible stuck request ffff888026f10000: control (read@0,4096B). Runtime 90 seconds [ 317.520393][T11024] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.1523'. [ 317.550546][T11024] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.1523'. [ 317.939619][T11034] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1528'. [ 318.339007][T11049] netlink: 'syz.7.1533': attribute type 10 has an invalid length. [ 318.352790][T11049] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1533'. [ 318.365453][T11049] bond0: entered promiscuous mode [ 318.398551][T11049] bond_slave_0: entered promiscuous mode [ 318.424408][T11049] bond_slave_1: entered promiscuous mode [ 318.439134][T11049] bridge0: port 3(bond0) entered blocking state [ 318.447220][T11049] bridge0: port 3(bond0) entered disabled state [ 318.454346][ T29] audit: type=1107 audit(1773150766.596:48): pid=11056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 318.454607][T11049] bond0: entered allmulticast mode [ 318.485024][T11049] bond_slave_0: entered allmulticast mode [ 318.493064][T11049] bond_slave_1: entered allmulticast mode [ 318.605000][T11063] netlink: 'syz.0.1539': attribute type 2 has an invalid length. [ 318.717534][T11069] netlink: 'syz.4.1542': attribute type 2 has an invalid length. [ 318.737849][T11069] netlink: 'syz.4.1542': attribute type 8 has an invalid length. [ 318.748966][T11069] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1542'. [ 318.819320][T11071] netlink: 'syz.5.1543': attribute type 21 has an invalid length. [ 318.828386][T11071] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1543'. [ 318.846703][T11071] netlink: 'syz.5.1543': attribute type 1 has an invalid length. [ 318.883798][T11075] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1544'. [ 318.894421][T11075] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 319.060473][T11087] netlink: 596 bytes leftover after parsing attributes in process `syz.7.1550'. [ 319.088569][T11089] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1551'. [ 319.112500][T11089] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1551'. [ 319.297925][T11093] netlink: 'syz.7.1550': attribute type 13 has an invalid length. [ 319.681762][T11100] netlink: 'syz.4.1554': attribute type 2 has an invalid length. [ 319.911584][ T29] audit: type=1107 audit(1773150768.046:49): pid=11102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 320.698202][T11120] netlink: 'syz.4.1561': attribute type 21 has an invalid length. [ 320.702302][T11093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.741261][T11093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.067092][T11120] netlink: 'syz.4.1561': attribute type 1 has an invalid length. [ 321.202461][T11123] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 321.485973][T11131] delete_channel: no stack [ 321.751594][T11148] net veth1_virt_wifi €Â: renamed from virt_wifi0 [ 322.849966][ T29] audit: type=1107 audit(1773150770.996:50): pid=11187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 323.462035][T11209] __nla_validate_parse: 5 callbacks suppressed [ 323.462068][T11209] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1598'. [ 323.791823][T11228] option changes via remount are deprecated (pid=11227 comm=syz.5.1605) [ 323.807144][T11226] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1601'. [ 323.954671][T11228] sit0: entered allmulticast mode [ 323.981750][T11228] sit0: entered promiscuous mode [ 324.108631][ T29] audit: type=1107 audit(1773150772.256:51): pid=11237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 325.306005][ T29] audit: type=1107 audit(1773150773.446:52): pid=11251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 325.361504][T11256] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1619'. [ 325.384232][T11260] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1617'. [ 325.551652][T11266] validate_nla: 2 callbacks suppressed [ 325.551672][T11266] netlink: 'syz.6.1622': attribute type 10 has an invalid length. [ 325.592801][T11266] team0: Device veth0_vlan failed to register rx_handler [ 325.607743][ T29] audit: type=1107 audit(1773150773.756:53): pid=11263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 326.094977][ T29] audit: type=1107 audit(1773150774.236:54): pid=11288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 326.455580][T11302] netlink: 'syz.5.1637': attribute type 2 has an invalid length. [ 326.506542][T11302] netlink: 'syz.5.1637': attribute type 8 has an invalid length. [ 326.520720][T11302] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1637'. [ 326.584007][T11306] netlink: 'syz.0.1640': attribute type 10 has an invalid length. [ 327.360034][T11315] netlink: 'syz.7.1643': attribute type 33 has an invalid length. [ 327.440497][T11315] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1643'. [ 327.736652][ T29] audit: type=1107 audit(1773150775.876:55): pid=11319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 328.441201][T11353] netlink: 'syz.6.1662': attribute type 10 has an invalid length. [ 328.474896][ T29] audit: type=1107 audit(1773150776.616:56): pid=11354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 328.501224][T11353] team0: Device veth0_vlan failed to register rx_handler [ 329.162513][T11382] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1674'. [ 329.227001][T11387] netlink: 'syz.6.1675': attribute type 10 has an invalid length. [ 329.355402][ T29] audit: type=1107 audit(1773150777.496:57): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 329.407223][T11399] netlink: 'syz.6.1681': attribute type 10 has an invalid length. [ 329.426390][T11399] team0: Device veth0_vlan failed to register rx_handler [ 329.516383][T11403] netlink: 'syz.0.1682': attribute type 10 has an invalid length. [ 329.537812][T11403] team0: Device veth1_macvtap failed to register rx_handler [ 329.649393][T11409] IPv6: NLM_F_CREATE should be specified when creating new route [ 329.835619][T11420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1689'. [ 329.867152][T11420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1689'. [ 329.998136][ T29] audit: type=1107 audit(1773150778.146:58): pid=11426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 330.086307][T11431] netlink: 'syz.6.1697': attribute type 10 has an invalid length. [ 330.113365][T11431] team0: Device veth0_vlan failed to register rx_handler [ 330.589565][T11456] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1709'. [ 330.658053][T11461] netlink: 'syz.0.1710': attribute type 19 has an invalid length. [ 330.704396][T11461] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1710'. [ 330.940579][T11478] netlink: 'syz.7.1718': attribute type 2 has an invalid length. [ 331.376191][T11499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1728'. [ 331.431498][T11502] netlink: 'syz.7.1730': attribute type 2 has an invalid length. [ 332.021665][T11534] netlink: 'syz.5.1744': attribute type 2 has an invalid length. [ 332.515735][T11550] netlink: 'syz.5.1749': attribute type 10 has an invalid length. [ 332.540063][T11550] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1749'. [ 332.551933][T11550] bond0: entered promiscuous mode [ 332.558810][T11550] bond_slave_0: entered promiscuous mode [ 332.566293][T11550] bond_slave_1: entered promiscuous mode [ 332.575962][T11550] dummy0: entered promiscuous mode [ 332.590666][T11550] bridge_slave_1: entered promiscuous mode [ 332.603973][T11550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.699731][T11560] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1753'. [ 332.717787][ T29] audit: type=1107 audit(1773150780.866:59): pid=11558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 333.119042][T11576] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1762'. [ 333.143336][T11576] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 333.412107][T11588] netlink: 'syz.5.1767': attribute type 29 has an invalid length. [ 333.441535][T11587] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1765'. [ 333.477134][T11588] netlink: 'syz.5.1767': attribute type 29 has an invalid length. [ 333.971561][T11608] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 334.316357][T11623] __nla_validate_parse: 3 callbacks suppressed [ 334.316381][T11623] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1781'. [ 335.007901][T11638] netlink: 'syz.7.1788': attribute type 1 has an invalid length. [ 335.030686][T11638] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1788'. [ 335.055686][T11638] netlink: 658 bytes leftover after parsing attributes in process `syz.7.1788'. [ 335.078025][T11638] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1788'. [ 335.414276][T11660] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1799'. [ 335.547146][T11667] netlink: 'syz.5.1801': attribute type 4 has an invalid length. [ 336.279036][T11688] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1811'. [ 336.289320][T11688] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 336.455793][T11696] netlink: 'syz.0.1815': attribute type 2 has an invalid length. [ 336.611867][T11704] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1819'. [ 336.684175][T11706] netlink: 126632 bytes leftover after parsing attributes in process `syz.5.1821'. [ 336.706080][T11706] netlink: 8192 bytes leftover after parsing attributes in process `syz.5.1821'. [ 336.774774][T11710] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1822'. [ 336.789129][T11710] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 336.833485][T11712] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 336.951722][ T29] audit: type=1107 audit(1773150785.076:60): pid=11718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 336.970983][T11720] netlink: 'syz.5.1826': attribute type 2 has an invalid length. [ 337.150420][T11725] netlink: 'syz.4.1829': attribute type 2 has an invalid length. [ 337.542622][T11744] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 337.656792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.743813][T11754] netlink: 'syz.5.1843': attribute type 2 has an invalid length. [ 337.774807][T11758] netlink: 'syz.6.1845': attribute type 10 has an invalid length. [ 337.791146][T11754] netlink: 'syz.5.1843': attribute type 2 has an invalid length. [ 337.800497][T11758] team0: Device veth0_vlan failed to register rx_handler [ 337.853125][T11756] netlink: 'syz.4.1844': attribute type 10 has an invalid length. [ 338.333507][T11780] netlink: 'syz.5.1854': attribute type 29 has an invalid length. [ 338.366926][T11778] netlink: 'syz.5.1854': attribute type 29 has an invalid length. [ 338.405244][T11787] netlink: 'syz.5.1854': attribute type 29 has an invalid length. [ 338.688072][T11797] dummy0: entered promiscuous mode [ 338.715196][T11797] dummy0: entered allmulticast mode [ 338.728707][T11797] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 339.778180][T11844] __nla_validate_parse: 7 callbacks suppressed [ 339.778203][T11844] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1880'. [ 339.807596][T11844] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1880'. [ 339.820381][T11844] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1880'. [ 339.968489][T11853] netlink: 89 bytes leftover after parsing attributes in process `syz.7.1884'. [ 340.100294][T11858] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1887'. [ 340.781828][T11883] lo speed is unknown, defaulting to 1000 [ 340.803298][T11883] dummy0 speed is unknown, defaulting to 1000 [ 341.213581][T11904] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.1906'. [ 341.239972][T11902] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1905'. [ 341.255634][T11902] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 341.466934][ T29] audit: type=1107 audit(1773150789.616:61): pid=11919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 341.935916][ T29] audit: type=1107 audit(1773150790.076:62): pid=11936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 341.952947][T11941] validate_nla: 9 callbacks suppressed [ 341.952968][T11941] netlink: 'syz.7.1922': attribute type 10 has an invalid length. [ 341.998277][T11941] veth0_vlan: left promiscuous mode [ 342.010309][T11941] veth0_vlan: entered promiscuous mode [ 342.078726][T11941] team0: Device veth0_vlan failed to register rx_handler [ 342.286407][T11951] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1923'. [ 342.296663][T11951] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 342.329954][ T29] audit: type=1107 audit(1773150790.476:63): pid=11947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 342.831944][T11970] netlink: 'syz.4.1933': attribute type 3 has an invalid length. [ 342.913016][T11977] netlink: 'syz.6.1937': attribute type 10 has an invalid length. [ 342.928192][T11977] team0: Device veth0_vlan failed to register rx_handler [ 342.998015][T11974] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1936'. [ 343.016170][T11974] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 343.323347][T11992] netlink: 544 bytes leftover after parsing attributes in process `syz.6.1943'. [ 343.839601][T12009] netlink: 'syz.0.1950': attribute type 1 has an invalid length. [ 343.890999][T12010] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 343.891665][T12009] block nbd0: NBD_DISCONNECT [ 343.927390][T12014] netlink: 'syz.6.1953': attribute type 10 has an invalid length. [ 343.942515][T12014] team0: Device veth0_vlan failed to register rx_handler [ 343.959708][T12009] block nbd0: Send disconnect failed -32 [ 343.965923][T12009] block nbd0: shutting down sockets [ 343.983503][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 343.994171][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 344.008515][ T8746] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.053769][ T8746] Buffer I/O error on dev nbd0, logical block 0, async page read [ 344.081161][ T8746] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.124734][ T8746] Buffer I/O error on dev nbd0, logical block 0, async page read [ 344.137267][ T8746] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.149569][ T8746] Buffer I/O error on dev nbd0, logical block 0, async page read [ 344.168289][ T8746] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.178750][ T8746] Buffer I/O error on dev nbd0, logical block 0, async page read [ 344.189094][ T8746] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.201647][ T8746] Buffer I/O error on dev nbd0, logical block 0, async page read [ 344.210453][ T8746] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.249508][ T8746] Buffer I/O error on dev nbd0, logical block 0, async page read [ 344.261720][T12026] netlink: 'syz.0.1958': attribute type 10 has an invalid length. [ 344.296583][ T8746] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.334518][ T8746] Buffer I/O error on dev nbd0, logical block 0, async page read [ 344.350016][ T8746] ldm_validate_partition_table(): Disk read failed. [ 344.366221][T12029] block nbd0: not configured, cannot reconfigure [ 344.383325][ T8746] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.426638][ T8746] Buffer I/O error on dev nbd0, logical block 0, async page read [ 344.445028][ T8746] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.455236][ T8746] Buffer I/O error on dev nbd0, logical block 0, async page read [ 344.468386][ T8746] Dev nbd0: unable to read RDB block 0 [ 344.474353][ T8746] nbd0: unable to read partition table [ 344.486705][ T8746] ldm_validate_partition_table(): Disk read failed. [ 344.495750][ T8746] Dev nbd0: unable to read RDB block 0 [ 344.503923][ T8746] nbd0: unable to read partition table [ 345.000909][T12048] netlink: 'syz.4.1969': attribute type 10 has an invalid length. [ 345.210463][T12060] netlink: 'syz.6.1974': attribute type 10 has an invalid length. [ 345.222173][T12060] team0: Device veth0_vlan failed to register rx_handler [ 345.291083][T12064] block nbd0: not configured, cannot reconfigure [ 345.537059][T12075] netlink: 'syz.4.1982': attribute type 4 has an invalid length. [ 345.590230][T12079] __nla_validate_parse: 2 callbacks suppressed [ 345.590249][T12079] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1984'. [ 345.626325][T12081] netlink: 'syz.7.1986': attribute type 10 has an invalid length. [ 345.634748][T12081] veth0_vlan: left promiscuous mode [ 345.665977][T12081] veth0_vlan: entered promiscuous mode [ 345.681226][T12081] team0: Device veth0_vlan failed to register rx_handler [ 346.231465][T12102] team0: Device veth0_vlan failed to register rx_handler [ 346.397322][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1997'. [ 346.655770][T12113] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1999'. [ 346.675501][T12113] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1999'. [ 346.884097][ T29] audit: type=1107 audit(1773150795.026:64): pid=12120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 347.053367][T12133] validate_nla: 3 callbacks suppressed [ 347.053387][T12133] netlink: 'syz.7.2009': attribute type 10 has an invalid length. [ 347.075187][T12133] veth0_vlan: left promiscuous mode [ 347.084682][T12133] veth0_vlan: entered promiscuous mode [ 347.098783][T12133] team0: Device veth0_vlan failed to register rx_handler [ 347.583985][T12159] netlink: 'syz.5.2022': attribute type 10 has an invalid length. [ 347.610377][ T29] audit: type=1107 audit(1773150795.756:65): pid=12155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 347.773362][ T29] audit: type=1107 audit(1773150795.916:66): pid=12160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 347.851846][T12167] IPv6: NLM_F_CREATE should be specified when creating new route [ 348.049259][T12174] netlink: 'syz.0.2029': attribute type 10 has an invalid length. [ 348.089307][T12172] netlink: 'syz.4.2028': attribute type 2 has an invalid length. [ 348.278905][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2030'. [ 348.342379][T12184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2033'. [ 348.938897][ T29] audit: type=1107 audit(1773150797.086:67): pid=12195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 349.450929][T12215] netlink: 'syz.0.2043': attribute type 2 has an invalid length. [ 349.770661][T12220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2047'. [ 350.007092][T12229] netlink: 'syz.4.2051': attribute type 8 has an invalid length. [ 350.358296][T12246] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2060'. [ 350.407371][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2061'. [ 350.599677][ T29] audit: type=1107 audit(1773150798.736:68): pid=12258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 350.662591][T12260] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2063'. [ 350.673778][T12254] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2063'. [ 350.805326][T12268] netlink: 'syz.4.2069': attribute type 29 has an invalid length. [ 350.828655][T12267] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2067'. [ 350.857464][T12267] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2067'. [ 350.880310][T12268] netlink: 'syz.4.2069': attribute type 29 has an invalid length. [ 350.927155][T12272] netlink: 'syz.4.2069': attribute type 29 has an invalid length. [ 350.960895][T12268] netlink: 'syz.4.2069': attribute type 29 has an invalid length. [ 351.074951][T12279] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2074'. [ 351.095814][T12279] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 351.371407][T12288] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2077'. [ 351.440889][ T29] audit: type=1107 audit(1773150799.586:69): pid=12296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 351.557497][T12304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2081'. [ 351.771275][T12314] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2087'. [ 351.820489][T12314] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 352.263794][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2099'. [ 352.399448][T12343] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2102'. [ 352.493224][T12348] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 353.127266][ T29] audit: type=1107 audit(1773150801.266:70): pid=12384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 353.314336][T12389] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 354.000517][ T5823] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11 [ 354.043864][ T29] audit: type=1107 audit(1773150802.186:71): pid=12415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 354.738022][ T29] audit: type=1107 audit(1773150802.876:72): pid=12456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 354.915054][T12463] validate_nla: 2 callbacks suppressed [ 354.915073][T12463] netlink: 'syz.5.2150': attribute type 10 has an invalid length. [ 355.001102][T12462] netlink: 'syz.7.2151': attribute type 2 has an invalid length. [ 355.396828][T12480] netlink: 'syz.0.2158': attribute type 10 has an invalid length. [ 355.680836][T12484] rdma_rxe: rxe_newlink: failed to add tunl0 [ 355.715615][T12486] netlink: 'syz.5.2160': attribute type 17 has an invalid length. [ 355.723789][T12486] netlink: 'syz.5.2160': attribute type 41 has an invalid length. [ 355.734873][T12486] __nla_validate_parse: 16 callbacks suppressed [ 355.734915][T12486] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2160'. [ 355.886408][ T29] audit: type=1107 audit(1773150804.026:73): pid=12489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 355.970167][T12493] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2163'. [ 356.031535][T12500] netlink: 'syz.4.2166': attribute type 10 has an invalid length. [ 356.364867][T12512] netlink: 'syz.5.2171': attribute type 10 has an invalid length. [ 356.592287][ T5823] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17 [ 356.729020][T12523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2175'. [ 356.930717][T12532] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2179'. [ 357.314176][T12548] netlink: 'syz.5.2186': attribute type 1 has an invalid length. [ 357.329977][T12551] netlink: 'syz.4.2188': attribute type 10 has an invalid length. [ 357.347215][T12548] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2186'. [ 357.474241][T12554] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2189'. [ 357.484168][T12554] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2189'. [ 357.776710][ T29] audit: type=1107 audit(1773150805.916:74): pid=12569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 358.273094][T12597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.329153][T12600] netlink: 'syz.5.2207': attribute type 10 has an invalid length. [ 358.466031][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2210'. [ 358.566965][ T29] audit: type=1107 audit(1773150806.686:75): pid=12603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 358.652916][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2210'. [ 358.664712][T12606] netlink: 33 bytes leftover after parsing attributes in process `syz.4.2210'. [ 358.674591][T12606] bridge_slave_0: entered allmulticast mode [ 359.143195][T12631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.327842][T12642] team0: Device veth0_vlan failed to register rx_handler [ 359.784592][T12652] IPv6: NLM_F_CREATE should be specified when creating new route [ 359.985689][T12664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.151708][T12675] validate_nla: 1 callbacks suppressed [ 360.151728][T12675] netlink: 'syz.5.2239': attribute type 10 has an invalid length. [ 360.633411][T12686] netlink: 'syz.6.2240': attribute type 21 has an invalid length. [ 360.679045][T12686] netlink: 'syz.6.2240': attribute type 5 has an invalid length. [ 360.802366][T12693] netlink: 'syz.4.2245': attribute type 10 has an invalid length. [ 360.922721][T12700] __nla_validate_parse: 6 callbacks suppressed [ 360.922777][T12700] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.2246'. [ 361.386335][T12716] netlink: 'syz.6.2252': attribute type 10 has an invalid length. [ 361.474824][T12716] team0: Device veth0_vlan failed to register rx_handler [ 361.760152][T12721] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2254'. [ 362.024863][T12729] netlink: 328 bytes leftover after parsing attributes in process `syz.0.2257'. [ 362.160716][T12735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2259'. [ 362.171187][T12740] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2262'. [ 362.265993][T12743] netlink: 'syz.5.2263': attribute type 10 has an invalid length. [ 362.503567][T12752] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2266'. [ 362.791881][T12763] netlink: 'syz.4.2270': attribute type 4 has an invalid length. [ 363.006892][T12774] netlink: 'syz.4.2276': attribute type 10 has an invalid length. [ 363.020222][T12774] .`: (slave dummy0): Releasing backup interface [ 363.038113][T12778] netlink: 'syz.6.2275': attribute type 10 has an invalid length. [ 363.051504][T12774] dummy0: left promiscuous mode [ 363.068810][T12779] netlink: 'syz.4.2276': attribute type 10 has an invalid length. [ 363.129492][T12774] team0: Port device dummy0 added [ 363.142641][T12778] .`: (slave 30): Releasing backup interface [ 363.252090][T12772] netlink: 10 bytes leftover after parsing attributes in process `syz.7.2274'. [ 363.346386][T12779] team0: Port device dummy0 removed [ 363.377141][T12779] dummy0: entered promiscuous mode [ 363.383695][T12779] .`: (slave dummy0): Enslaving as an active interface with an up link [ 363.479955][T12781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2277'. [ 363.617124][T12790] veth0_vlan: left promiscuous mode [ 363.627121][T12790] veth0_vlan: entered promiscuous mode [ 363.636283][T12790] team0: Device veth0_vlan failed to register rx_handler [ 364.175521][T12798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2283'. [ 364.414539][T12819] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2289'. [ 365.048668][T12842] veth0_vlan: left promiscuous mode [ 365.055768][T12842] veth0_vlan: entered promiscuous mode [ 365.068900][T12842] team0: Device veth0_vlan failed to register rx_handler [ 365.405111][ T29] audit: type=1107 audit(1773150813.546:76): pid=12847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 366.062021][T12866] syzkaller0: entered promiscuous mode [ 366.068090][T12866] syzkaller0: entered allmulticast mode [ 366.122151][T12872] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 366.283417][T12871] validate_nla: 5 callbacks suppressed [ 366.283443][T12871] netlink: 'syz.7.2309': attribute type 2 has an invalid length. [ 366.298973][T12871] netlink: 'syz.7.2309': attribute type 1 has an invalid length. [ 366.681681][T12877] __nla_validate_parse: 4 callbacks suppressed [ 366.681733][T12877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2310'. [ 368.941772][T12969] vcan0: entered allmulticast mode [ 369.023764][T12974] netlink: 'syz.7.2349': attribute type 10 has an invalid length. [ 369.039645][T12974] veth0_vlan: left promiscuous mode [ 369.046363][T12974] veth0_vlan: entered promiscuous mode [ 369.073222][T12974] team0: Device veth0_vlan failed to register rx_handler [ 369.123993][ T29] audit: type=1107 audit(1773150817.266:77): pid=12975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 369.752223][T12996] netlink: 'syz.0.2354': attribute type 2 has an invalid length. [ 370.480663][ T29] audit: type=1107 audit(1773150818.626:78): pid=13014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 370.746652][T13026] netlink: 'syz.6.2368': attribute type 10 has an invalid length. [ 370.793059][T13026] team0: Device veth0_vlan failed to register rx_handler [ 371.859131][T13043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2372'. [ 372.003079][ T29] audit: type=1107 audit(1773150820.146:79): pid=13052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 372.302750][T13068] netlink: 'syz.5.2384': attribute type 10 has an invalid length. [ 372.303707][T13063] netlink: 'syz.0.2382': attribute type 5 has an invalid length. [ 372.331742][T13066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.901748][T13082] syzkaller0: entered promiscuous mode [ 372.907691][T13082] syzkaller0: entered allmulticast mode [ 377.973230][T13131] netlink: 'syz.0.2405': attribute type 10 has an invalid length. [ 378.165388][T13133] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2406'. [ 378.631208][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.638391][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.938765][T13168] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2420'. [ 381.169509][T13172] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2422'. [ 381.263320][ T5823] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 382.430162][T13199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.785789][T13209] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2434'. [ 384.611801][T13230] netlink: 'syz.5.2441': attribute type 2 has an invalid length. [ 384.871021][T13243] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.2446'. [ 384.875407][T13238] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2443'. [ 385.101411][T13249] syzkaller0: entered promiscuous mode [ 385.107536][T13249] syzkaller0: entered allmulticast mode [ 386.359106][T13273] netlink: 'syz.6.2455': attribute type 2 has an invalid length. [ 388.508451][T13289] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2460'. [ 388.586224][T13288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2459'. [ 388.802554][T13298] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2464'. [ 388.838068][T13298] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 388.998103][T13303] netlink: 'syz.0.2466': attribute type 2 has an invalid length. [ 389.755945][T13317] openvswitch: netlink: IP tunnel dst address not specified [ 389.839156][T13321] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2472'. [ 389.858128][T13321] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 389.890017][T13323] netlink: 'syz.6.2473': attribute type 62 has an invalid length. [ 389.909365][T13325] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2474'. [ 390.099908][T13330] netlink: 'syz.4.2477': attribute type 10 has an invalid length. [ 390.209474][T13336] netlink: 'syz.0.2479': attribute type 2 has an invalid length. [ 390.447869][T13339] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2480'. [ 390.669886][T13344] delete_channel: no stack [ 391.143920][T13359] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2489'. [ 391.185016][T13360] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2488'. [ 391.217651][T13360] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 391.465875][T13372] netlink: 'syz.4.2494': attribute type 10 has an invalid length. [ 391.774541][T13374] netlink: 'syz.5.2495': attribute type 2 has an invalid length. [ 392.398333][T13388] syzkaller0: entered promiscuous mode [ 392.407208][T13388] syzkaller0: entered allmulticast mode [ 392.680076][T13394] netlink: 'syz.4.2501': attribute type 10 has an invalid length. [ 392.920554][T13400] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2504'. [ 394.941216][T13397] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2503'. [ 394.950750][T13397] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 395.006627][T13413] netlink: 'syz.4.2509': attribute type 10 has an invalid length. [ 395.103102][T13415] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2510'. [ 395.141666][T13415] netlink: 'syz.0.2510': attribute type 6 has an invalid length. [ 395.181530][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2510'. [ 395.306793][ T5823] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 396.062836][T13432] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2516'. [ 396.335211][T13446] netlink: 'syz.5.2520': attribute type 10 has an invalid length. [ 398.064181][T13443] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2521'. [ 398.073895][T13443] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 398.248144][T13457] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2525'. [ 398.573375][T13467] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2530'. [ 398.577855][T13469] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.2531'. [ 401.093834][T13488] netlink: 'syz.7.2536': attribute type 10 has an invalid length. [ 403.450821][T13509] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2542'. [ 404.771169][T13504] syzkaller0: entered promiscuous mode [ 404.776778][T13504] syzkaller0: entered allmulticast mode [ 405.000306][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2547'. [ 406.299579][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 407.180797][T13519] syzkaller0: entered promiscuous mode [ 407.186416][T13519] syzkaller0: entered allmulticast mode [ 407.371949][T13543] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2552'. [ 407.404161][T13546] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2553'. [ 407.441858][T13549] sock: sock_timestamping_bind_phc: sock not bind to device [ 407.673742][T13556] netlink: 'syz.5.2557': attribute type 10 has an invalid length. [ 410.939448][T13594] netlink: 'syz.6.2568': attribute type 1 has an invalid length. [ 410.947676][T13594] netlink: 'syz.6.2568': attribute type 4 has an invalid length. [ 410.955705][T13594] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2568'. [ 411.824996][T13612] netlink: 'syz.4.2575': attribute type 6 has an invalid length. [ 411.872023][T13612] netlink: 3936 bytes leftover after parsing attributes in process `syz.4.2575'. [ 411.921418][T13612] netlink: 'syz.4.2575': attribute type 1 has an invalid length. [ 411.957108][T13612] block nbd0: Unsupported socket: should be TCP or UNIX. [ 412.747320][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2591'. [ 412.855973][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2591'. [ 415.093008][ T5823] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 416.208831][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.254399][T13674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2601'. [ 416.272907][ T63] bond_slave_0: left promiscuous mode [ 416.314151][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 416.327078][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 416.335830][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 416.344100][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 416.348277][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.365006][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 416.375995][ T63] bond_slave_1: left promiscuous mode [ 416.401828][ T63] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 416.410492][ T63] dummy0: left promiscuous mode [ 416.419216][ T63] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 416.429239][ T63] bridge_slave_1: left promiscuous mode [ 416.439380][ T63] bond0 (unregistering): Released all slaves [ 416.459371][T11105] dummy0 speed is unknown, defaulting to 1000 [ 416.466916][T11105] syz0: Port: 1 Link DOWN [ 416.580018][T13665] dummy0 speed is unknown, defaulting to 1000 [ 416.592702][ T63] tipc: Left network mode [ 416.612657][T13675] dummy0 speed is unknown, defaulting to 1000 [ 416.786943][T13686] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2604'. [ 416.796259][T13686] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 418.396593][T13710] macsec0: left promiscuous mode [ 418.401873][T13710] macsec0: entered allmulticast mode [ 418.422651][T13710] veth1_macvtap: entered allmulticast mode [ 418.431501][T13710] macsec0: entered promiscuous mode [ 418.437185][T13710] veth1_macvtap: entered promiscuous mode [ 418.456568][ T5828] Bluetooth: hci2: command tx timeout [ 418.669061][T13718] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2616'. [ 418.693088][T13718] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 419.005704][T13724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2619'. [ 419.972132][ T63] hsr_slave_0: left promiscuous mode [ 420.537298][ T5828] Bluetooth: hci2: command tx timeout [ 422.616541][ T5828] Bluetooth: hci2: command tx timeout [ 422.955542][ T63] hsr_slave_1: left promiscuous mode [ 423.164835][ T63] team0 (unregistering): Port device team_slave_1 removed [ 423.181106][ T63] team0 (unregistering): Port device team_slave_0 removed [ 423.470607][T13675] chnl_net:caif_netlink_parms(): no params data found [ 423.576686][T13744] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2627'. [ 423.604631][T13744] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 423.729261][T13745] syzkaller0: entered promiscuous mode [ 423.735015][T13745] syzkaller0: entered allmulticast mode [ 423.742017][T13675] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.749636][T13675] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.758405][T13675] bridge_slave_0: entered allmulticast mode [ 423.767258][T13675] bridge_slave_0: entered promiscuous mode [ 423.777125][T13675] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.785351][T13675] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.793343][T13675] bridge_slave_1: entered allmulticast mode [ 423.801856][T13675] bridge_slave_1: entered promiscuous mode [ 424.327245][T13760] netlink: 'syz.7.2629': attribute type 10 has an invalid length. [ 424.705863][ T5828] Bluetooth: hci2: command tx timeout [ 426.032818][T13760] veth0_vlan: left promiscuous mode [ 426.040661][T13760] veth0_vlan: entered promiscuous mode [ 426.049956][T13760] team0: Device veth0_vlan failed to register rx_handler [ 426.065068][T13675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.092654][T13675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.249562][T13675] team0: Port device team_slave_0 added [ 426.265582][ T29] audit: type=1107 audit(1773150874.406:80): pid=13771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 426.268866][T13675] team0: Port device team_slave_1 added [ 426.360434][T13777] openvswitch: netlink: Message has 1 unknown bytes. [ 426.372112][T13777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.505894][T13675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.529441][T13675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.187500][T13675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.298583][T13675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.329546][T13675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.446701][T13675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.824422][T13675] hsr_slave_0: entered promiscuous mode [ 431.833230][T13675] hsr_slave_1: entered promiscuous mode [ 431.844719][T13675] debugfs: 'hsr0' already exists in 'hsr' [ 431.854387][T13675] Cannot create hsr debugfs directory [ 431.997573][T13812] syzkaller0: entered promiscuous mode [ 432.015892][T13812] syzkaller0: entered allmulticast mode [ 432.043669][T13815] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2652'. [ 432.054191][T13815] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 432.938331][ T5828] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 432.946002][ T5828] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 433.096381][ T5828] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 433.096422][ T5828] Bluetooth: hci0: unexpected event for opcode 0x3065 [ 434.248741][T13833] syzkaller0: entered promiscuous mode [ 434.254431][T13833] syzkaller0: entered allmulticast mode [ 434.433141][T13856] openvswitch: netlink: IP tunnel dst address not specified [ 435.955369][T13855] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2664'. [ 435.965039][T13855] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 436.068588][T13864] netlink: 'syz.6.2667': attribute type 10 has an invalid length. [ 436.121438][T13864] team0: Device veth0_vlan failed to register rx_handler [ 436.471806][T13675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.507633][T13884] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2671'. [ 436.556041][T13675] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.957113][ T1349] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.964479][ T1349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.040683][T13888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2673'. [ 437.085360][ T1349] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.092975][ T1349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.345016][T13675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 437.738905][T13904] netlink: 'syz.0.2678': attribute type 10 has an invalid length. [ 437.755805][T13904] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2678'. [ 437.814541][ T5828] Bluetooth: hci3: unexpected cc 0x1004 length: 12 > 11 [ 437.824313][ T5828] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 437.839132][T13907] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2679'. [ 437.852380][T13907] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 437.876373][T13675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.577931][T13675] veth0_vlan: entered promiscuous mode [ 438.683767][T13675] veth1_vlan: entered promiscuous mode [ 438.814930][T13675] veth0_macvtap: entered promiscuous mode [ 438.844098][T13675] veth1_macvtap: entered promiscuous mode [ 438.940840][T13675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.962508][T13675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.347532][ T1349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.365679][ T1349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.522183][T13951] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2693'. [ 439.538982][T13951] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 439.600005][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.614926][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.079108][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.096807][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.416099][T13974] netlink: 'syz.4.2700': attribute type 10 has an invalid length. [ 440.427218][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2699'. [ 440.436133][T13976] openvswitch: netlink: Key type 13084 is out of range max 32 [ 440.455223][T13974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2700'. [ 440.801978][ T29] audit: type=1107 audit(1773150888.946:81): pid=13981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 440.866262][T13986] netlink: 292 bytes leftover after parsing attributes in process `syz.6.2702'. [ 441.899488][ T5828] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 441.911208][ T5828] Bluetooth: hci3: Injecting HCI hardware error event [ 441.926356][ T5823] Bluetooth: hci3: hardware error 0x00 [ 443.040816][ T29] audit: type=1107 audit(1773150891.186:82): pid=14035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='‹©' [ 443.594374][T14055] netlink: 'syz.8.2728': attribute type 2 has an invalid length. [ 443.628416][T14055] netlink: 'syz.8.2728': attribute type 8 has an invalid length. [ 443.636181][T14055] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2728'. [ 443.863945][ T29] audit: type=1107 audit(1773150892.006:83): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 443.995150][ T5823] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 444.932361][T14097] netlink: 'syz.8.2744': attribute type 6 has an invalid length. [ 444.998006][T14097] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2744'. [ 445.005579][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2744'. [ 445.724944][ T29] audit: type=1107 audit(1773150893.866:84): pid=14107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 445.863841][ T29] audit: type=1107 audit(1773150894.006:85): pid=14112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 446.102981][T14136] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2751'. [ 447.497794][T14163] netdevsim netdevsim4: Direct firmware load for Ö failed with error -2 [ 447.511237][T14163] netdevsim netdevsim4: Falling back to sysfs fallback for: Ö [ 448.649792][T14181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2765'. [ 448.669963][T14181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2765'. [ 449.253731][T14193] netlink: 'syz.4.2769': attribute type 10 has an invalid length. [ 449.263539][T14193] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2769'. [ 449.409459][T14195] veth1_to_bond: entered allmulticast mode [ 450.194663][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2775'. [ 450.474582][T14230] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2781'. [ 450.668498][T14235] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 450.751214][T14241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2785'. [ 450.935025][T14246] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.943672][T14246] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.958062][T14246] bridge0: entered allmulticast mode [ 451.100372][T14250] bridge_slave_1: left allmulticast mode [ 451.106791][T14250] bridge_slave_1: left promiscuous mode [ 451.114497][T14250] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.345536][T14250] bridge_slave_0: left allmulticast mode [ 451.351776][T14250] bridge_slave_0: left promiscuous mode [ 451.375786][T14250] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.718636][T14270] netlink: 'syz.0.2795': attribute type 10 has an invalid length. [ 451.771577][T14268] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2794'. [ 452.210073][T14283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2797'. [ 452.739561][T14305] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2805'. [ 452.749034][T14305] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 452.760178][T14306] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2807'. [ 452.765764][ T29] audit: type=1107 audit(1773150900.866:86): pid=14299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 453.053373][T14312] nbd: must specify an index to disconnect [ 453.511648][T14327] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 453.673338][T14329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2814'. [ 453.722616][T14336] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 453.785028][T14338] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2819'. [ 453.796666][T14338] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 453.983958][T14344] netlink: 'syz.8.2820': attribute type 10 has an invalid length. [ 454.031391][ T29] audit: type=1107 audit(1773150902.176:87): pid=14346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 454.131123][T14351] netlink: 'syz.4.2823': attribute type 1 has an invalid length. [ 454.157444][T14351] netlink: 'syz.4.2823': attribute type 1 has an invalid length. [ 454.405256][T14359] netlink: 'syz.8.2826': attribute type 10 has an invalid length. [ 454.440990][T14363] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2827'. [ 454.492047][T14357] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2825'. [ 454.540912][T14359] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 454.767900][T14370] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2832'. [ 454.807840][T14370] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 454.842615][ T29] audit: type=1107 audit(1773150902.976:88): pid=14374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 454.857888][T14380] netlink: 'syz.0.2831': attribute type 1 has an invalid length. [ 454.893851][T14378] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2833'. [ 455.418958][T14399] delete_channel: no stack [ 455.511097][T14405] netlink: 'syz.6.2843': attribute type 10 has an invalid length. [ 455.530242][T14405] team0: Device veth0_vlan failed to register rx_handler [ 455.566431][T14403] netlink: 'syz.0.2844': attribute type 10 has an invalid length. [ 455.635715][ T29] audit: type=1107 audit(1773150903.766:89): pid=14409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 455.859720][T14414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2847'. [ 455.872251][T14414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2847'. [ 456.445673][T14441] netlink: 'syz.6.2859': attribute type 10 has an invalid length. [ 456.455136][ T29] audit: type=1107 audit(1773150904.586:90): pid=14440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 456.456994][ T5828] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 456.473761][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 456.585641][T14448] netlink: 'syz.4.2860': attribute type 10 has an invalid length. [ 456.943621][T14452] netlink: 'syz.6.2861': attribute type 10 has an invalid length. [ 456.969529][T14452] team0: Device veth0_vlan failed to register rx_handler [ 457.008659][T14453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.089573][T14453] netlink: 4356 bytes leftover after parsing attributes in process `syz.7.2863'. [ 457.146662][ T29] audit: type=1107 audit(1773150905.266:91): pid=14457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 457.422144][T14469] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2870'. [ 457.705726][ T29] audit: type=1107 audit(1773150905.846:92): pid=14477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 457.741967][T14476] netlink: 'syz.0.2871': attribute type 10 has an invalid length. [ 457.771626][ T29] audit: type=1107 audit(1773150905.916:93): pid=14479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 457.959089][ T29] audit: type=1107 audit(1773150906.106:94): pid=14488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 458.022718][T14494] netlink: 'syz.7.2880': attribute type 10 has an invalid length. [ 458.060868][T14494] veth0_vlan: left promiscuous mode [ 458.075913][T14494] veth0_vlan: entered promiscuous mode [ 458.085273][T14494] team0: Device veth0_vlan failed to register rx_handler [ 458.198953][T14503] netlink: 'syz.8.2882': attribute type 10 has an invalid length. [ 458.724525][ T29] audit: type=1107 audit(1773150906.866:95): pid=14518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 459.123552][ T29] audit: type=1107 audit(1773150907.266:96): pid=14528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 459.480509][T14536] netlink: 'syz.4.2895': attribute type 10 has an invalid length. [ 459.546042][T14539] netlink: 'syz.7.2896': attribute type 10 has an invalid length. [ 459.569960][T14539] veth0_vlan: left promiscuous mode [ 459.580246][T14539] veth0_vlan: entered promiscuous mode [ 459.594180][T14539] team0: Device veth0_vlan failed to register rx_handler [ 459.607510][T14542] netlink: 'syz.4.2898': attribute type 10 has an invalid length. [ 460.358758][T14568] __nla_validate_parse: 4 callbacks suppressed [ 460.358793][T14568] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2908'. [ 460.402901][T14568] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 460.443863][ T29] audit: type=1107 audit(1773150908.586:97): pid=14564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 461.119723][T14577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2912'. [ 461.153674][T14594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.251564][T14595] netlink: 4356 bytes leftover after parsing attributes in process `syz.8.2916'. [ 461.541167][ T29] audit: type=1107 audit(1773150909.686:98): pid=14604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 461.883766][T14619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2926'. [ 461.976041][T14623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.049018][T14623] netlink: 4356 bytes leftover after parsing attributes in process `syz.6.2928'. [ 462.408602][T14639] netlink: 'syz.7.2932': attribute type 2 has an invalid length. [ 462.417562][T14639] tipc: Started in network mode [ 462.422623][T14639] tipc: Node identity 1340008, cluster identity 4711 [ 462.430639][T14639] tipc: Node number set to 20185096 [ 462.593153][ T29] audit: type=1107 audit(1773150910.736:99): pid=14644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 462.840438][T14656] can: request_module (can-proto-0) failed. [ 462.996760][T14664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2943'. [ 463.543800][T14670] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2945'. [ 463.709543][T14685] netlink: 160 bytes leftover after parsing attributes in process `syz.7.2948'. [ 464.116541][ T29] audit: type=1107 audit(1773150912.256:100): pid=14688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 464.932206][T14699] netlink: 'syz.0.2955': attribute type 2 has an invalid length. [ 464.956002][T14699] netlink: 'syz.0.2955': attribute type 2 has an invalid length. [ 465.007196][T14699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2955'. [ 465.473492][T14705] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2956'. [ 467.381786][T14720] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2962'. [ 467.867814][T14731] netlink: 'syz.7.2965': attribute type 2 has an invalid length. [ 467.895776][ T29] audit: type=1107 audit(1773150916.037:101): pid=14733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 468.273306][T14742] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2968'. [ 468.307859][T14744] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2969'. [ 468.317418][T14744] bridge_slave_1: default FDB implementation only supports local addresses [ 468.390695][T14746] netlink: 'syz.7.2970': attribute type 10 has an invalid length. [ 468.423169][T14749] netlink: 'syz.8.2971': attribute type 10 has an invalid length. [ 468.457135][T14753] netlink: 'syz.7.2970': attribute type 10 has an invalid length. [ 468.465865][T14749] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2971'. [ 468.500310][T14746] team0: Port device wlan0 added [ 468.513622][T14749] dummy0: entered promiscuous mode [ 468.525588][T14749] dummy0: entered allmulticast mode [ 468.588040][T14749] bond0: (slave dummy0): Releasing backup interface [ 468.660853][T14749] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 469.613559][T14753] team0: Port device wlan0 removed [ 469.635103][T14753] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 469.642815][T14753] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 469.677002][T14753] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 469.693979][T14762] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2973'. [ 469.708532][T14762] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 470.048642][T14771] delete_channel: no stack [ 470.231062][T14774] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2976'. [ 470.688548][T14796] netlink: 'syz.7.2986': attribute type 10 has an invalid length. [ 470.824462][T14801] netlink: 'syz.4.2990': attribute type 10 has an invalid length. [ 470.850113][T14796] bond0: (slave wlan0): Releasing backup interface [ 470.904364][T14796] mac80211_hwsim hwsim41 wlan0: left promiscuous mode [ 470.964298][T14796] mac80211_hwsim hwsim41 wlan0: left allmulticast mode [ 471.051351][T14796] batman_adv: batadv0: Adding interface: wlan0 [ 471.067060][T14796] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.125806][T14796] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 471.626291][T14819] netlink: 'syz.7.2994': attribute type 2 has an invalid length. [ 472.236230][T14830] lo: entered promiscuous mode [ 472.517901][T14843] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3004'. [ 472.534197][T14841] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3003'. [ 472.539422][T14845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3005'. [ 472.567658][T14838] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3002'. [ 472.636867][T14843] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.669703][T14843] bond_slave_0: left promiscuous mode [ 472.683815][T14843] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.701295][T14843] bond_slave_1: left promiscuous mode [ 472.726216][T14843] .` (unregistering): (slave dummy0): Releasing backup interface [ 472.752821][T14843] dummy0: left promiscuous mode [ 472.774431][T14843] .` (unregistering): Released all slaves [ 474.037958][T14881] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3015'. [ 474.413653][T14886] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3017'. [ 474.447956][T14886] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 474.539435][T14888] hsr0: mtu greater than device maximum [ 474.795219][T14894] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 475.505356][T14916] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3028'. [ 475.659448][T14920] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3031'. [ 475.694012][T14922] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3032'. [ 475.798028][T14926] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3033'. [ 475.815578][T14926] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 476.520509][T14956] nbd: couldn't find a device at index 49663 [ 476.531620][T14956] bpf: Bad value for 'gid' [ 476.913004][T14973] siw: device registration error -23 [ 476.957866][T14973] netlink: 'syz.8.3050': attribute type 10 has an invalid length. [ 477.027484][T14973] dummy0: left promiscuous mode [ 477.033195][T14973] dummy0: left allmulticast mode [ 477.151641][T14980] netlink: 'syz.6.3049': attribute type 1 has an invalid length. [ 477.275022][T14973] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 477.465311][T14985] openvswitch: netlink: Message has 716 unknown bytes. [ 477.876901][T14999] __nla_validate_parse: 3 callbacks suppressed [ 477.876920][T14999] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3055'. [ 477.935171][T15001] netlink: 'syz.7.3059': attribute type 2 has an invalid length. [ 477.946747][T15001] netlink: 'syz.7.3059': attribute type 8 has an invalid length. [ 477.959256][T15001] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3059'. [ 478.243791][T15002] dummy0 speed is unknown, defaulting to 1000 [ 478.256429][T15002] dummy0 speed is unknown, defaulting to 1000 [ 478.290574][T15002] dummy0 speed is unknown, defaulting to 1000 [ 478.300034][T15006] lo: entered promiscuous mode [ 478.384858][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3063'. [ 478.720998][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3065'. [ 478.746376][T15002] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 478.755018][T15024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3064'. [ 478.776984][T15002] dummy0 speed is unknown, defaulting to 1000 [ 478.787218][T15002] dummy0 speed is unknown, defaulting to 1000 [ 478.795200][T15002] dummy0 speed is unknown, defaulting to 1000 [ 478.808930][T15002] dummy0 speed is unknown, defaulting to 1000 [ 478.830363][T15002] dummy0 speed is unknown, defaulting to 1000 [ 479.037089][ T29] audit: type=1107 audit(1773150927.177:102): pid=15029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 479.128104][T15033] netlink: 'syz.0.3070': attribute type 40 has an invalid length. [ 479.734376][T15039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.960443][T15051] netlink: 'syz.6.3077': attribute type 10 has an invalid length. [ 480.266129][T15057] netlink: 'syz.8.3079': attribute type 39 has an invalid length. [ 480.640048][T15064] sctp: [Deprecated]: syz.4.3078 (pid 15064) Use of int in maxseg socket option. [ 480.640048][T15064] Use struct sctp_assoc_value instead [ 480.964058][T15070] netlink: 'syz.6.3080': attribute type 2 has an invalid length. [ 481.021110][T15069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3081'. [ 481.141274][T15074] netlink: 'syz.7.3082': attribute type 2 has an invalid length. [ 481.181306][T15074] : entered promiscuous mode [ 481.191112][T15074] netlink: 'syz.7.3082': attribute type 2 has an invalid length. [ 481.199755][T15074] : left promiscuous mode [ 481.364548][T15087] syz.6.3085 (15087) used obsolete PPPIOCDETACH ioctl [ 481.428038][T15085] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 481.477597][T15089] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 481.569610][T15091] siw: device registration error -23 [ 482.381164][T15126] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3098'. [ 482.744175][T15138] netlink: 'syz.6.3106': attribute type 10 has an invalid length. [ 482.797202][T15145] netlink: 'syz.6.3106': attribute type 10 has an invalid length. [ 482.802196][T15138] mac80211_hwsim hwsim19 wlan0: left promiscuous mode [ 482.843300][ T29] audit: type=1107 audit(1773150930.967:103): pid=15143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 482.901124][T15138] team0: Port device wlan0 added [ 482.980533][T15145] team0: Port device wlan0 removed [ 482.989002][T15145] wlan0: mtu less than device minimum [ 482.995628][T15145] .`: (slave wlan0): Error -22 calling dev_set_mtu [ 483.096945][ T29] audit: type=1107 audit(1773150931.247:104): pid=15151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 483.357559][T15162] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3115'. [ 484.267059][ T29] audit: type=1107 audit(1773150932.407:105): pid=15179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 485.942162][T15185] netlink: 'syz.6.3122': attribute type 10 has an invalid length. [ 486.041578][ T29] audit: type=1107 audit(1773150934.187:106): pid=15190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 486.362329][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3125'. [ 486.428562][T15209] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3132'. [ 486.643290][ T29] audit: type=1107 audit(1773150934.777:107): pid=15213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 486.925064][T15216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3136'. [ 487.086874][T15233] netlink: 'syz.7.3139': attribute type 10 has an invalid length. [ 487.119588][ T29] audit: type=1107 audit(1773150935.247:108): pid=15229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 487.134587][T15234] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3138'. [ 487.602556][ T29] audit: type=1107 audit(1773150935.737:109): pid=15248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 487.625324][T15253] netlink: 'syz.8.3147': attribute type 10 has an invalid length. [ 487.823066][T15253] team0: Port device macvlan0 added [ 487.861778][T15258] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3149'. [ 487.920254][ T29] audit: type=1107 audit(1773150936.067:110): pid=15261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 487.948113][T15264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3153'. [ 488.064503][T15268] netlink: 'syz.8.3154': attribute type 10 has an invalid length. [ 488.231864][T15277] netlink: 'syz.0.3159': attribute type 8 has an invalid length. [ 488.243670][T15270] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3156'. [ 488.910255][ T29] audit: type=1107 audit(1773150937.057:111): pid=15296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 489.796834][T15308] netlink: 'syz.0.3169': attribute type 39 has an invalid length. [ 489.810320][T15308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3169'. [ 489.823265][T15305] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3168'. [ 489.860873][T15310] netlink: 'syz.7.3170': attribute type 10 has an invalid length. [ 489.944688][T15308] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 489.952573][T15308] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 489.988152][T15308] veth0_to_bridge: entered allmulticast mode [ 490.012327][T15308] veth0_to_bridge: entered promiscuous mode [ 490.067535][T15308] Ÿë: port 2(veth0_to_team) entered blocking state [ 490.081097][T15308] Ÿë: port 2(veth0_to_team) entered disabled state [ 490.123906][T15308] veth0_to_team: entered allmulticast mode [ 490.168805][T15308] veth0_to_team: entered promiscuous mode [ 490.454118][T15327] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3177'. [ 490.938887][T15348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3186'. [ 491.435527][T15365] netlink: 'syz.7.3193': attribute type 39 has an invalid length. [ 491.919126][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3194'. [ 491.955498][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3194'. [ 492.261399][T15383] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3201'. [ 492.405967][T15394] netlink: 'syz.0.3206': attribute type 10 has an invalid length. [ 492.461247][T15394] team0: Port device  added [ 492.461312][T15397] netlink: 'syz.0.3206': attribute type 10 has an invalid length. [ 492.493423][T15397] team0: Port device  removed [ 492.505411][T15397] netdevsim netdevsim0 : entered promiscuous mode [ 492.513014][T15397] bond0: (slave ): Enslaving as an active interface with an up link [ 492.677507][T15402] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3209'. [ 493.227790][T15430] netlink: 'syz.0.3221': attribute type 3 has an invalid length. [ 493.250850][T15426] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3228'. [ 493.260351][T15426] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 493.294385][T15434] netlink: 'syz.6.3222': attribute type 2 has an invalid length. [ 493.304849][T15434] netlink: 'syz.6.3222': attribute type 8 has an invalid length. [ 493.314048][T15434] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3222'. [ 493.577824][T15443] netlink: 'syz.6.3227': attribute type 10 has an invalid length. [ 493.747641][T15454] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 494.213615][T15485] netlink: 'syz.8.3246': attribute type 10 has an invalid length. [ 494.362837][T15475] syzkaller0: entered promiscuous mode [ 494.372096][T15475] syzkaller0: entered allmulticast mode [ 495.296654][T15516] netlink: 'syz.6.3258': attribute type 2 has an invalid length. [ 496.487558][T15526] netlink: 'syz.6.3261': attribute type 10 has an invalid length. [ 496.878821][T15496] __nla_validate_parse: 4 callbacks suppressed [ 496.878839][T15496] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3249'. [ 496.895575][T15496] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 497.090797][T15533] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3264'. [ 497.105507][T15531] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3263'. [ 497.122764][T15531] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 497.394751][T15551] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3272'. [ 497.423622][T15551] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 497.524558][T15554] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3273'. [ 497.684649][T15566] netlink: 'syz.6.3277': attribute type 10 has an invalid length. [ 497.738898][T15568] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3280'. [ 497.750514][T15568] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 498.083771][T15586] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3286'. [ 498.166987][T15586] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 498.316797][T15595] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3290'. [ 498.562987][T15605] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3294'. [ 498.587070][T15605] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 498.654525][T15610] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3295'. [ 498.828286][T15620] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 498.957422][T15626] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 499.071805][T15632] netlink: 'syz.4.3308': attribute type 39 has an invalid length. [ 499.215028][T15641] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 499.232048][T15641] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 499.239875][T15641] veth0_to_bridge: entered allmulticast mode [ 499.249965][T15641] veth0_to_bridge: entered promiscuous mode [ 499.271084][T15636] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 499.333588][T15632] Ÿë: port 2(veth0_to_team) entered blocking state [ 499.383109][T15632] Ÿë: port 2(veth0_to_team) entered disabled state [ 499.401545][T15632] veth0_to_team: entered allmulticast mode [ 499.438545][T15632] veth0_to_team: entered promiscuous mode [ 499.476429][T15648] netlink: 'syz.8.3312': attribute type 10 has an invalid length. [ 499.500799][T15653] C: renamed from team_slave_0 (while UP) [ 499.514549][T15653] netlink: 'syz.0.3315': attribute type 8 has an invalid length. [ 499.523891][T15653] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 500.177413][T15685] netlink: 'syz.0.3330': attribute type 4 has an invalid length. [ 501.500454][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.507263][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.734868][T15709] __nla_validate_parse: 11 callbacks suppressed [ 502.734889][T15709] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3336'. [ 502.844380][T15711] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3337'. [ 503.354963][T15733] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3346'. [ 503.368399][T15733] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 503.984612][T15760] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3352'. [ 504.304582][T15780] netlink: 'syz.0.3359': attribute type 10 has an invalid length. [ 504.621631][T15793] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3367'. [ 504.651119][T15793] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 504.658581][T15797] netlink: 'syz.4.3369': attribute type 66 has an invalid length. [ 504.703573][T15800] netlink: 'syz.0.3370': attribute type 10 has an invalid length. [ 505.413224][T15817] netlink: 'syz.4.3386': attribute type 10 has an invalid length. [ 505.445741][T15819] netlink: 'syz.6.3376': attribute type 10 has an invalid length. [ 506.329706][T15829] netlink: 'syz.7.3380': attribute type 39 has an invalid length. [ 506.371765][T15828] netlink: 'syz.8.3378': attribute type 1 has an invalid length. [ 506.394372][T15828] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3378'. [ 506.405346][T15828] netlink: 658 bytes leftover after parsing attributes in process `syz.8.3378'. [ 506.457143][T15828] netlink: 1 bytes leftover after parsing attributes in process `syz.8.3378'. [ 506.708912][T15842] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3385'. [ 506.756211][T15842] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 506.988534][T15847] netlink: 'syz.4.3388': attribute type 1 has an invalid length. [ 507.074323][T15851] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3389'. [ 507.356939][ T29] audit: type=1107 audit(1773150955.497:112): pid=15859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 507.370294][T15862] netlink: 'syz.8.3393': attribute type 10 has an invalid length. [ 508.157787][T15891] netlink: 'syz.6.3405': attribute type 5 has an invalid length. [ 508.235217][T15889] __nla_validate_parse: 1 callbacks suppressed [ 508.235237][T15889] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.3404'. [ 508.695471][T15905] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3410'. [ 508.711117][T15905] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 509.672950][T15928] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3420'. [ 509.716757][T15928] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3420'. [ 509.757536][T15928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 510.670755][T15965] netlink: 10 bytes leftover after parsing attributes in process `syz.8.3435'. [ 511.427353][T16001] netlink: set zone limit has 4 unknown bytes [ 511.699526][T16009] syzkaller0: entered promiscuous mode [ 511.705141][T16009] syzkaller0: entered allmulticast mode [ 512.582411][T16038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3463'. [ 512.881617][T16046] validate_nla: 1 callbacks suppressed [ 512.881657][T16046] netlink: 'syz.0.3466': attribute type 10 has an invalid length. [ 514.230062][T16060] netlink: 'syz.7.3470': attribute type 3 has an invalid length. [ 514.251833][T16060] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3470'. [ 515.505890][ T29] audit: type=1107 audit(1773150963.647:113): pid=16096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 516.383145][T16029] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3461'. [ 516.573200][T16105] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3475'. [ 516.768663][T16104] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3477'. [ 516.814889][T16114] netlink: 'syz.4.3480': attribute type 10 has an invalid length. [ 517.309748][ T5823] Bluetooth: hci0: Dropping invalid advertising data [ 517.316878][ T5823] Bluetooth: hci0: unknown advertising packet type: 0xdc [ 517.316906][ T5823] Bluetooth: hci0: Malformed LE Event: 0x02 [ 517.516865][T16147] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3493'. [ 517.540575][T16147] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 517.762331][T16153] netlink: 'syz.6.3495': attribute type 10 has an invalid length. [ 518.024595][T16162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3499'. [ 518.453929][T16190] netlink: 'syz.7.3508': attribute type 10 has an invalid length. [ 518.528560][T16188] netlink: 'syz.4.3507': attribute type 4 has an invalid length. [ 518.694933][T16196] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3510'. [ 518.757661][T16196] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 520.352151][T16246] netlink: 'syz.8.3521': attribute type 10 has an invalid length. [ 520.391176][T16249] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3522'. [ 520.439229][T16248] sch_tbf: peakrate 188 is lower than or equals to rate 7012629537550284465 ! [ 521.604700][T16289] netlink: 'syz.4.3535': attribute type 9 has an invalid length. [ 521.630229][T16289] netlink: 'syz.4.3535': attribute type 11 has an invalid length. [ 521.647726][T16289] netlink: 'syz.4.3535': attribute type 12 has an invalid length. [ 521.695851][T16289] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.3535'. [ 521.727470][T16289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3535'. [ 521.780241][T16293] netlink: 'syz.7.3538': attribute type 10 has an invalid length. [ 521.988530][ T5823] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 522.439395][T16297] syzkaller0: entered promiscuous mode [ 522.452848][T16297] syzkaller0: entered allmulticast mode [ 522.482859][T16311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3545'. [ 523.265445][T16325] netlink: 'syz.7.3551': attribute type 10 has an invalid length. [ 526.144626][T16366] netlink: 'syz.0.3566': attribute type 10 has an invalid length. [ 526.160486][T16368] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3567'. [ 526.324716][T16372] netlink: 'syz.4.3569': attribute type 39 has an invalid length. [ 526.352626][ T5823] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 526.352962][ T5823] Bluetooth: hci1: connection err: -111 [ 527.307007][T16392] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3576'. [ 527.327940][T16392] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3576'. [ 527.356697][T16392] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3576'. [ 527.511549][T16392] : port 1(macsec0) entered blocking state [ 527.517821][T16392] : port 1(macsec0) entered disabled state [ 527.524171][T16392] macsec0: entered allmulticast mode [ 527.532022][T16392] macsec0: entered promiscuous mode [ 527.790465][T16401] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3579'. [ 527.804556][T16401] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 527.853483][T16405] netlink: 'syz.7.3580': attribute type 10 has an invalid length. [ 528.370525][T16410] syzkaller0: entered promiscuous mode [ 528.376382][T16410] syzkaller0: entered allmulticast mode [ 528.422555][T16421] netlink: 830 bytes leftover after parsing attributes in process `syz.7.3587'. [ 528.472204][T16421] netlink: 1047 bytes leftover after parsing attributes in process `syz.7.3587'. [ 528.485828][T16421] bridge_slave_1: default FDB implementation only supports local addresses [ 528.534743][T16425] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3588'. [ 528.598824][T16427] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3589'. [ 530.754590][T16449] netlink: 'syz.6.3597': attribute type 10 has an invalid length. [ 531.516857][T16442] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3595'. [ 531.526269][T16442] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 531.758524][T16454] syzkaller0: entered promiscuous mode [ 531.780132][T16454] syzkaller0: entered allmulticast mode [ 531.794149][T16456] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3600'. [ 533.592783][T16485] netlink: 'syz.4.3610': attribute type 10 has an invalid length. [ 534.862159][T16493] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3611'. [ 534.882020][T16493] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 534.898998][T16488] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3612'. [ 535.470307][T16511] openvswitch: netlink: Tunnel attr 163 out of range max 16 [ 536.542732][T16528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3626'. [ 536.569318][T16532] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3628'. [ 536.601096][T16532] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 538.415114][T16566] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3641'. [ 538.509786][T16570] netlink: 212912 bytes leftover after parsing attributes in process `syz.7.3643'. [ 538.680156][T16572] netlink: 'syz.7.3644': attribute type 10 has an invalid length. [ 538.846956][T16576] netlink: 'syz.4.3645': attribute type 10 has an invalid length. [ 539.421544][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 542.984392][T16572] veth0_vlan: left promiscuous mode [ 542.992393][T16572] veth0_vlan: entered promiscuous mode [ 543.000570][T16572] team0: Device veth0_vlan failed to register rx_handler [ 543.127642][T16593] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3651'. [ 543.479209][T16609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.123605][T16623] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3664'. [ 544.146769][T16623] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 544.248889][T16625] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3663'. [ 544.375017][T16630] netlink: 'syz.8.3665': attribute type 10 has an invalid length. [ 544.468881][T16630] veth0_vlan: left promiscuous mode [ 544.508633][T16630] veth0_vlan: entered promiscuous mode [ 544.535684][T16630] team0: Device veth0_vlan failed to register rx_handler [ 544.634252][T16641] netlink: 'syz.6.3666': attribute type 10 has an invalid length. [ 545.032293][T16644] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3670'. [ 545.457633][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3676'. [ 546.292211][T16678] netlink: 'syz.0.3682': attribute type 10 has an invalid length. [ 546.348570][T16680] netlink: 'syz.6.3683': attribute type 10 has an invalid length. [ 546.379521][T16680] team0: Device veth0_vlan failed to register rx_handler [ 546.399351][T16684] netlink: 'syz.4.3685': attribute type 6 has an invalid length. [ 546.430826][T16684] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3685'. [ 546.442456][T16686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3685'. [ 546.807983][T16694] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3689'. [ 546.836643][T16694] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3689'. [ 547.222899][T16712] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3696'. [ 547.383086][T16718] netlink: 'syz.0.3699': attribute type 10 has an invalid length. [ 547.527111][T16720] netlink: 'syz.7.3700': attribute type 1 has an invalid length. [ 548.297364][T16738] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 548.615859][T16749] syzkaller0: entered promiscuous mode [ 548.642284][T16749] syzkaller0: entered allmulticast mode [ 548.678956][T16753] netlink: 'syz.8.3712': attribute type 10 has an invalid length. [ 548.687698][T16753] veth0_vlan: left promiscuous mode [ 548.695045][T16753] veth0_vlan: entered promiscuous mode [ 548.760409][T16757] netlink: 'syz.6.3714': attribute type 10 has an invalid length. [ 548.769403][T16753] team0: Device veth0_vlan failed to register rx_handler [ 548.880990][T16757] team0: Device veth0_vlan failed to register rx_handler [ 549.237302][T16769] __nla_validate_parse: 2 callbacks suppressed [ 549.237324][T16769] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3717'. [ 550.438450][T16778] netlink: 'syz.6.3719': attribute type 21 has an invalid length. [ 550.456780][T16778] IPv6: NLM_F_CREATE should be specified when creating new route [ 550.475135][T16778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 550.483182][T16778] IPv6: NLM_F_CREATE should be set when creating new route [ 550.490773][T16778] IPv6: NLM_F_CREATE should be set when creating new route [ 550.498370][T16778] IPv6: NLM_F_CREATE should be set when creating new route [ 550.568000][T16780] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3721'. [ 550.589376][T16780] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3721'. [ 552.866528][T16775] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3719'. [ 552.875695][T16775] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3719'. [ 552.893798][T16775] netlink: 'syz.6.3719': attribute type 6 has an invalid length. [ 553.139970][T16786] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3725'. [ 553.390381][T16798] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3728'. [ 553.619354][T16804] netlink: 'syz.6.3729': attribute type 10 has an invalid length. [ 553.639945][T16805] netlink: 822 bytes leftover after parsing attributes in process `syz.0.3730'. [ 553.676115][T16807] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3731'. [ 553.700693][T16804] team0: Device veth0_vlan failed to register rx_handler [ 553.797905][T16810] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3732'. [ 554.100071][T16825] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 554.228640][T16834] netlink: 'syz.7.3740': attribute type 2 has an invalid length. [ 554.340106][T16828] __nla_validate_parse: 1 callbacks suppressed [ 554.340138][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3739'. [ 554.633197][T16848] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3747'. [ 554.689581][T16848] openvswitch: netlink: Invalid VLAN frame [ 554.696055][ T29] audit: type=1107 audit(1773151002.827:114): pid=16847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 554.828599][T16858] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3750'. [ 554.914109][T16864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.019823][T16864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.088099][T16864] batman_adv: batadv0: Removing interface: netdevsim0 [ 555.283983][T16874] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3755'. [ 555.286928][T16863] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3752'. [ 555.379657][T16863] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 555.575653][T16884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3761'. [ 555.799468][T16896] siw: device registration error -23 [ 555.838427][T16895] netlink: 'syz.7.3766': attribute type 1 has an invalid length. [ 556.300279][T16907] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3770'. [ 556.713740][T16920] sctp: [Deprecated]: syz.8.3776 (pid 16920) Use of struct sctp_assoc_value in delayed_ack socket option. [ 556.713740][T16920] Use struct sctp_sack_info instead [ 556.836834][ T29] audit: type=1107 audit(1773151004.857:115): pid=16919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 556.973472][T16927] netlink: 'syz.4.3779': attribute type 10 has an invalid length. [ 556.989909][T16927] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 557.074944][T16925] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3778'. [ 557.315910][T16944] netlink: 'syz.8.3783': attribute type 13 has an invalid length. [ 557.402778][T16945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3786'. [ 557.494075][T16944] gretap0: refused to change device tx_queue_len [ 557.527395][T16944] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 557.550668][T16946] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3787'. [ 557.911212][T16959] delete_channel: no stack [ 558.169817][T16978] netlink: 'syz.4.3796': attribute type 4 has an invalid length. [ 558.342651][T16984] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 558.351827][T16984] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 558.432873][T16988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.724440][T16999] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 558.856498][T16998] netlink: 'syz.7.3805': attribute type 1 has an invalid length. [ 559.181650][T17018] openvswitch: netlink: Message has 4 unknown bytes. [ 559.374517][T17031] __nla_validate_parse: 6 callbacks suppressed [ 559.374552][T17031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3820'. [ 559.393986][T17031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3820'. [ 559.403528][T17031] netlink: 'syz.4.3820': attribute type 6 has an invalid length. [ 559.516871][T17031] netlink: 'syz.4.3820': attribute type 21 has an invalid length. [ 559.525112][T17031] IPv6: NLM_F_CREATE should be specified when creating new route [ 559.583239][T17031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 559.591083][T17031] IPv6: NLM_F_CREATE should be set when creating new route [ 559.598728][T17031] IPv6: NLM_F_CREATE should be set when creating new route [ 559.606216][T17031] IPv6: NLM_F_CREATE should be set when creating new route [ 559.712919][T17046] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3826'. [ 559.824043][T17053] netlink: 'syz.4.3829': attribute type 12 has an invalid length. [ 559.832191][T17053] netlink: 'syz.4.3829': attribute type 4 has an invalid length. [ 560.076601][T17063] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3833'. [ 560.474410][T17092] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3843'. [ 560.537817][T17095] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3844'. [ 560.547655][T17095] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 560.950945][T17125] netlink: 'syz.8.3860': attribute type 21 has an invalid length. [ 561.070393][T17129] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3862'. [ 561.096583][T17129] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 561.327738][T17147] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3869'. [ 561.403320][T17146] netlink: 'syz.8.3868': attribute type 10 has an invalid length. [ 561.429467][T17146] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3868'. [ 561.525217][T17151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3871'. [ 561.739958][T17161] netlink: 'syz.6.3874': attribute type 30 has an invalid length. [ 562.941483][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.949032][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.467721][T17146] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 563.656030][T17172] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 563.761076][T17179] netlink: 'syz.7.3878': attribute type 3 has an invalid length. [ 564.179512][T17194] sctp: [Deprecated]: syz.6.3887 (pid 17194) Use of int in maxseg socket option. [ 564.179512][T17194] Use struct sctp_assoc_value instead [ 564.448505][T17203] __nla_validate_parse: 1 callbacks suppressed [ 564.448540][T17203] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3891'. [ 564.526308][T17213] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3897'. [ 564.653094][T17216] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3896'. [ 564.668126][T17216] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 565.336792][T17252] netlink: 'syz.6.3912': attribute type 10 has an invalid length. [ 565.829614][T17258] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3916'. [ 565.859235][T17258] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 565.895350][T17260] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3917'. [ 565.981145][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 566.008898][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 566.023822][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 566.039624][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 566.051889][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 566.436372][T17268] dummy0 speed is unknown, defaulting to 1000 [ 566.805846][T17268] chnl_net:caif_netlink_parms(): no params data found [ 566.937547][T17268] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.945111][T17268] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.953473][T17268] bridge_slave_0: entered allmulticast mode [ 566.962862][T17268] bridge_slave_0: entered promiscuous mode [ 566.974132][T17268] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.981933][T17268] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.989809][T17268] bridge_slave_1: entered allmulticast mode [ 567.003801][T17268] bridge_slave_1: entered promiscuous mode [ 567.046943][T17268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.060994][T17268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.191012][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3928'. [ 567.210236][T17268] team0: Port device team_slave_0 added [ 567.216226][T17303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3928'. [ 567.227264][T17303] netlink: 33 bytes leftover after parsing attributes in process `syz.4.3928'. [ 567.237905][T17303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3928'. [ 567.286933][T17303] netlink: 33 bytes leftover after parsing attributes in process `syz.4.3928'. [ 567.331889][T17268] team0: Port device team_slave_1 added [ 567.402690][T17314] netlink: 'syz.7.3932': attribute type 2 has an invalid length. [ 567.445238][T17268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.452892][T17268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.526061][T17268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.564835][T17268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.583981][T17268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.622745][T17268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.643853][T17319] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 567.669047][T17321] netlink: 'syz.4.3935': attribute type 3 has an invalid length. [ 567.724549][T17268] hsr_slave_0: entered promiscuous mode [ 567.732927][T17268] hsr_slave_1: entered promiscuous mode [ 567.748984][T17268] debugfs: 'hsr0' already exists in 'hsr' [ 567.755189][T17268] Cannot create hsr debugfs directory [ 567.940771][T17334] netlink: 'syz.6.3940': attribute type 4 has an invalid length. [ 568.265382][ T5823] Bluetooth: hci2: command tx timeout [ 568.694813][T17350] sctp: [Deprecated]: syz.0.3943 (pid 17350) Use of int in maxseg socket option. [ 568.694813][T17350] Use struct sctp_assoc_value instead [ 568.744856][T17268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.884973][T17268] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.972516][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.979791][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.002134][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.009579][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.413814][T17268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.642069][T17385] __nla_validate_parse: 2 callbacks suppressed [ 569.642090][T17385] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3956'. [ 569.688549][T17385] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3956'. [ 569.767304][T17385] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3956'. [ 569.819762][T17385] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3956'. [ 569.997988][T17268] veth0_vlan: entered promiscuous mode [ 570.024000][T17268] veth1_vlan: entered promiscuous mode [ 570.126109][T17268] veth0_macvtap: entered promiscuous mode [ 570.153164][T17268] veth1_macvtap: entered promiscuous mode [ 570.199974][T17268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.234099][T17268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.298130][ T5823] Bluetooth: hci2: command tx timeout [ 570.482217][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.503259][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.515535][T17409] openvswitch: netlink: Tunnel attr 163 out of range max 16 [ 570.689048][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.702717][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.983809][T17426] netlink: 'syz.7.3972': attribute type 29 has an invalid length. [ 571.008626][T17426] netlink: 'syz.7.3972': attribute type 29 has an invalid length. [ 571.020935][T17426] netlink: 500 bytes leftover after parsing attributes in process `syz.7.3972'. [ 571.074214][T17423] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3970'. [ 571.178482][T17431] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3975'. [ 571.326950][T17431] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3975'. [ 571.341895][T17434] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3975'. [ 571.499849][T17446] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3981'. [ 571.857240][T17459] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 571.872803][T17459] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode [ 571.997701][T17467] netlink: 'syz.7.3991': attribute type 17 has an invalid length. [ 572.382729][ T5823] Bluetooth: hci2: command tx timeout [ 573.353153][T17523] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 573.373508][T17524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.467714][ T5823] Bluetooth: hci2: command tx timeout [ 576.438273][T17549] __nla_validate_parse: 9 callbacks suppressed [ 576.438306][T17549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4025'. [ 576.956676][T17574] netlink: 'syz.6.4035': attribute type 6 has an invalid length. [ 577.006601][T17574] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4035'. [ 577.452862][T17587] option changes via remount are deprecated (pid=17584 comm=syz.7.4041) [ 577.693819][T17591] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4043'. [ 578.539479][T17620] netlink: 'syz.8.4052': attribute type 10 has an invalid length. [ 578.595940][T17620] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 578.614105][T17622] netlink: 'syz.6.4053': attribute type 29 has an invalid length. [ 578.633935][T17622] netlink: 'syz.6.4053': attribute type 29 has an invalid length. [ 578.651642][T17622] netlink: 500 bytes leftover after parsing attributes in process `syz.6.4053'. [ 578.670227][T17622] unsupported nla_type 58 [ 579.009345][T17644] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4063'. [ 579.445613][ T5823] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 579.445647][ T5823] Bluetooth: unknown link type 8 [ 579.462214][ T5823] Bluetooth: hci0: connection err: -111 [ 579.481680][T17661] netlink: 'syz.4.4070': attribute type 10 has an invalid length. [ 579.863846][T17681] netlink: 'syz.0.4078': attribute type 10 has an invalid length. [ 580.075038][T17690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4079'. [ 580.131080][T17688] netlink: 'syz.8.4080': attribute type 10 has an invalid length. [ 580.170032][T17695] netlink: 'syz.0.4083': attribute type 10 has an invalid length. [ 580.851672][T17708] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4088'. [ 580.937963][T17706] syzkaller0: entered promiscuous mode [ 580.959599][T17706] syzkaller0: entered allmulticast mode [ 580.966279][T17715] netlink: 'syz.0.4090': attribute type 1 has an invalid length. [ 581.519059][T17722] netlink: 'syz.7.4093': attribute type 10 has an invalid length. [ 584.758942][T17722] veth0_vlan: left promiscuous mode [ 584.765256][T17722] veth0_vlan: entered promiscuous mode [ 584.773335][T17722] team0: Device veth0_vlan failed to register rx_handler [ 584.962782][T17738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4098'. [ 585.634652][T17754] netlink: 'syz.0.4100': attribute type 10 has an invalid length. [ 586.223003][T17761] netlink: 168 bytes leftover after parsing attributes in process `syz.7.4107'. [ 586.252764][T17761] netlink: 'syz.7.4107': attribute type 6 has an invalid length. [ 586.279884][T17761] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4107'. [ 589.943818][ T86] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.966188][ T86] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.040035][ T86] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 590.080075][ T86] bond0 (unregistering): Released all slaves [ 590.210228][T17787] netlink: 'syz.4.4118': attribute type 10 has an invalid length. [ 590.235239][T17787] team0: Device vxcan1 is of different type [ 590.346415][T17794] netlink: 'syz.8.4121': attribute type 10 has an invalid length. [ 590.370995][T17795] netlink: 'syz.0.4119': attribute type 10 has an invalid length. [ 590.420131][T17794] veth0_vlan: left promiscuous mode [ 590.429914][T17794] veth0_vlan: entered promiscuous mode [ 590.494435][T17794] team0: Device veth0_vlan failed to register rx_handler [ 590.509879][T17802] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4123'. [ 590.574382][T17802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4123'. [ 590.589868][T17802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4123'. [ 591.528686][T17827] netlink: 'syz.6.4135': attribute type 10 has an invalid length. [ 591.589385][T17834] netlink: 'syz.4.4137': attribute type 10 has an invalid length. [ 591.635150][ T86] hsr_slave_0: left promiscuous mode [ 591.844556][ T86] hsr_slave_1: left promiscuous mode [ 591.865819][ T86] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.877253][ T86] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.899355][ T86] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.907522][ T86] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.949339][ T86] veth1_macvtap: left promiscuous mode [ 591.966868][ T86] veth0_macvtap: left promiscuous mode [ 591.983432][ T86] veth1_vlan: left promiscuous mode [ 592.088851][ T5823] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 592.454223][ T5823] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 592.481441][ T5828] ================================================================== [ 592.496824][ T5828] BUG: KASAN: slab-use-after-free in hci_conn_drop+0x34/0x2a0 [ 592.504508][ T5828] Write of size 4 at addr ffff88801aba8010 by task kworker/u9:3/5828 [ 592.512703][ T5828] [ 592.515124][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 592.515157][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 592.515170][ T5828] Workqueue: hci4 hci_cmd_sync_work [ 592.515272][ T5828] Call Trace: [ 592.515289][ T5828] [ 592.515306][ T5828] dump_stack_lvl+0xe8/0x150 [ 592.515435][ T5828] print_report+0xba/0x230 [ 592.515474][ T5828] ? hci_conn_drop+0x34/0x2a0 [ 592.515520][ T5828] kasan_report+0x117/0x150 [ 592.515585][ T5828] ? hci_conn_drop+0x34/0x2a0 [ 592.515634][ T5828] kasan_check_range+0x264/0x2c0 [ 592.515680][ T5828] hci_conn_drop+0x34/0x2a0 [ 592.515701][ T5828] ? __pfx_le_read_features_complete+0x10/0x10 [ 592.515738][ T5828] hci_cmd_sync_work+0x262/0x400 [ 592.515783][ T5828] ? process_scheduled_works+0xa25/0x1830 [ 592.515841][ T5828] process_scheduled_works+0xb02/0x1830 [ 592.515956][ T5828] ? __pfx_process_scheduled_works+0x10/0x10 [ 592.516006][ T5828] ? assign_work+0x3d5/0x5e0 [ 592.516054][ T5828] worker_thread+0xa50/0xfc0 [ 592.516166][ T5828] kthread+0x388/0x470 [ 592.516203][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 592.516225][ T5828] ? __pfx_kthread+0x10/0x10 [ 592.516254][ T5828] ret_from_fork+0x51e/0xb90 [ 592.516301][ T5828] ? __pfx_ret_from_fork+0x10/0x10 [ 592.516326][ T5828] ? __switch_to+0xc7d/0x1450 [ 592.516383][ T5828] ? __pfx_kthread+0x10/0x10 [ 592.516411][ T5828] ret_from_fork_asm+0x1a/0x30 [ 592.516486][ T5828] [ 592.516527][ T5828] [ 592.663056][ T5828] Allocated by task 5823: [ 592.667462][ T5828] kasan_save_track+0x3e/0x80 [ 592.672167][ T5828] __kasan_kmalloc+0x93/0xb0 [ 592.676951][ T5828] __kmalloc_cache_noprof+0x31c/0x660 [ 592.682318][ T5828] __hci_conn_add+0x3c4/0x1e00 [ 592.687325][ T5828] le_conn_complete_evt+0x706/0x1430 [ 592.692651][ T5828] hci_le_conn_complete_evt+0x187/0x470 [ 592.698204][ T5828] hci_event_packet+0x7af/0x12c0 [ 592.703229][ T5828] hci_rx_work+0x3ee/0x1030 [ 592.707836][ T5828] process_scheduled_works+0xb02/0x1830 [ 592.713405][ T5828] worker_thread+0xa50/0xfc0 [ 592.718023][ T5828] kthread+0x388/0x470 [ 592.722099][ T5828] ret_from_fork+0x51e/0xb90 [ 592.726698][ T5828] ret_from_fork_asm+0x1a/0x30 [ 592.731462][ T5828] [ 592.733777][ T5828] Freed by task 5823: [ 592.737748][ T5828] kasan_save_track+0x3e/0x80 [ 592.742436][ T5828] kasan_save_free_info+0x46/0x50 [ 592.747465][ T5828] __kasan_slab_free+0x5c/0x80 [ 592.752243][ T5828] kfree+0x1c1/0x630 [ 592.756220][ T5828] device_release+0x9e/0x1d0 [ 592.761126][ T5828] kobject_put+0x228/0x560 [ 592.765737][ T5828] hci_conn_del+0xc36/0x1230 [ 592.770442][ T5828] hci_disconn_complete_evt+0x64e/0x950 [ 592.776102][ T5828] hci_event_packet+0x805/0x12c0 [ 592.781231][ T5828] hci_rx_work+0x3ee/0x1030 [ 592.785744][ T5828] process_scheduled_works+0xb02/0x1830 [ 592.791295][ T5828] worker_thread+0xa50/0xfc0 [ 592.795885][ T5828] kthread+0x388/0x470 [ 592.799946][ T5828] ret_from_fork+0x51e/0xb90 [ 592.804534][ T5828] ret_from_fork_asm+0x1a/0x30 [ 592.809300][ T5828] [ 592.811621][ T5828] The buggy address belongs to the object at ffff88801aba8000 [ 592.811621][ T5828] which belongs to the cache kmalloc-8k of size 8192 [ 592.825839][ T5828] The buggy address is located 16 bytes inside of [ 592.825839][ T5828] freed 8192-byte region [ffff88801aba8000, ffff88801abaa000) [ 592.839725][ T5828] [ 592.842053][ T5828] The buggy address belongs to the physical page: [ 592.848532][ T5828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1aba8 [ 592.857311][ T5828] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 592.865854][ T5828] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 592.873414][ T5828] page_type: f5(slab) [ 592.877418][ T5828] raw: 00fff00000000040 ffff88813fea9280 dead000000000100 dead000000000122 [ 592.886119][ T5828] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 592.894749][ T5828] head: 00fff00000000040 ffff88813fea9280 dead000000000100 dead000000000122 [ 592.903522][ T5828] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 592.912296][ T5828] head: 00fff00000000003 ffffea00006aea01 00000000ffffffff 00000000ffffffff [ 592.920972][ T5828] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 592.929639][ T5828] page dumped because: kasan: bad access detected [ 592.936061][ T5828] page_owner tracks the page as allocated [ 592.941775][ T5828] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3563879920, free_ts 0 [ 592.961925][ T5828] post_alloc_hook+0x231/0x280 [ 592.966731][ T5828] get_page_from_freelist+0x24dc/0x2580 [ 592.972300][ T5828] __alloc_frozen_pages_noprof+0x18d/0x380 [ 592.978372][ T5828] allocate_slab+0x77/0x660 [ 592.982883][ T5828] refill_objects+0x331/0x3c0 [ 592.987680][ T5828] __pcs_replace_empty_main+0x2f9/0x5e0 [ 592.993318][ T5828] __kmalloc_noprof+0x474/0x760 [ 592.998165][ T5828] dibs_dev_add+0xa3/0x520 [ 593.002738][ T5828] dibs_loopback_init+0x165/0x210 [ 593.007774][ T5828] dibs_init+0x25/0x50 [ 593.011991][ T5828] do_one_initcall+0x250/0x8d0 [ 593.016788][ T5828] do_initcall_level+0x104/0x190 [ 593.021790][ T5828] do_initcalls+0x59/0xa0 [ 593.026116][ T5828] kernel_init_freeable+0x2a6/0x3e0 [ 593.031317][ T5828] kernel_init+0x1d/0x1d0 [ 593.035862][ T5828] ret_from_fork+0x51e/0xb90 [ 593.040460][ T5828] page_owner free stack trace missing [ 593.045906][ T5828] [ 593.048225][ T5828] Memory state around the buggy address: [ 593.053913][ T5828] ffff88801aba7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 593.062083][ T5828] ffff88801aba7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 593.070164][ T5828] >ffff88801aba8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 593.078404][ T5828] ^ [ 593.082988][ T5828] ffff88801aba8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 593.091148][ T5828] ffff88801aba8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 593.099305][ T5828] ================================================================== [ 593.110596][ T5828] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 593.117920][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 593.127390][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 593.137548][ T5828] Workqueue: hci4 hci_cmd_sync_work [ 593.142792][ T5828] Call Trace: [ 593.146070][ T5828] [ 593.149215][ T5828] vpanic+0x56c/0xa60 [ 593.153296][ T5828] ? __pfx_vpanic+0x10/0x10 [ 593.157891][ T5828] panic+0xc5/0xd0 [ 593.161613][ T5828] ? __pfx_panic+0x10/0x10 [ 593.166196][ T5828] ? preempt_schedule_thunk+0x16/0x30 [ 593.171777][ T5828] ? preempt_schedule_thunk+0x16/0x30 [ 593.177431][ T5828] ? hci_conn_drop+0x34/0x2a0 [ 593.182131][ T5828] check_panic_on_warn+0x89/0xb0 [ 593.187068][ T5828] ? hci_conn_drop+0x34/0x2a0 [ 593.191735][ T5828] end_report+0x73/0x180 [ 593.195979][ T5828] ? hci_conn_drop+0x34/0x2a0 [ 593.200658][ T5828] kasan_report+0x128/0x150 [ 593.205157][ T5828] ? hci_conn_drop+0x34/0x2a0 [ 593.209828][ T5828] kasan_check_range+0x264/0x2c0 [ 593.214858][ T5828] hci_conn_drop+0x34/0x2a0 [ 593.219354][ T5828] ? __pfx_le_read_features_complete+0x10/0x10 [ 593.225509][ T5828] hci_cmd_sync_work+0x262/0x400 [ 593.230451][ T5828] ? process_scheduled_works+0xa25/0x1830 [ 593.236898][ T5828] process_scheduled_works+0xb02/0x1830 [ 593.242781][ T5828] ? __pfx_process_scheduled_works+0x10/0x10 [ 593.249199][ T5828] ? assign_work+0x3d5/0x5e0 [ 593.253800][ T5828] worker_thread+0xa50/0xfc0 [ 593.258750][ T5828] kthread+0x388/0x470 [ 593.263041][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 593.268343][ T5828] ? __pfx_kthread+0x10/0x10 [ 593.273018][ T5828] ret_from_fork+0x51e/0xb90 [ 593.278095][ T5828] ? __pfx_ret_from_fork+0x10/0x10 [ 593.283296][ T5828] ? __switch_to+0xc7d/0x1450 [ 593.287976][ T5828] ? __pfx_kthread+0x10/0x10 [ 593.292557][ T5828] ret_from_fork_asm+0x1a/0x30 [ 593.297505][ T5828] [ 593.300808][ T5828] Kernel Offset: disabled [ 593.305206][ T5828] Rebooting in 86400 seconds..