last executing test programs: 13m17.569760204s ago: executing program 32 (id=991): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041000000850000000f00000095"], 0xfffffffffffffffc, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%-010d \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000380)="0dae08a8d75fccf2dd631871fd18e2ff1498331dd3c6a54e76f196e621a986b056ef6f284f5cc21b88bcd18ad5f6fbb188d192ddc3575633652cebb0dd512a5180bede", &(0x7f0000000400)=""/140}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x27, 0xe, 0x0, &(0x7f0000000b00)="f8ad48a9cfb10bb2d305bdb462ad", 0x0, 0xfff, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m51.45680908s ago: executing program 0 (id=3308): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x0, @perf_bp={0x0, 0x8}, 0x100800, 0x0, 0x0, 0x3, 0x3fe, 0x3, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2010, 0x2, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$kcm(0x29, 0x7, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x502, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) 7m50.886776333s ago: executing program 0 (id=3312): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94) close(0x3) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) close(r4) recvmsg$unix(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000), 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000045) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r6, 0x11}, 0xa) r7 = socket$kcm(0x15, 0x5, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x118, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8}}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000000080)=@rc={0xa, @none}, 0x80, 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x72900d47d9e4e356}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0xa4, 0x2, 0x2, 0x101, 0x0, 0x0, {0x7}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc8aafc5d180ccd4a}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000240)=""/153}, 0x90) 7m49.897546772s ago: executing program 0 (id=3319): socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, 0x0, 0x80) write$cgroup_subtree(r0, &(0x7f0000003200)={[{0x2d, 'cpuacct'}, {0x2b, 'io'}]}, 0xd) socket$isdn(0x22, 0x3, 0x24) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x6c}, {0x6}]}) 7m49.280017133s ago: executing program 0 (id=3322): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x0, @perf_bp={0x0, 0x8}, 0x100800, 0x0, 0x0, 0x3, 0x3fe, 0x3, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2010, 0x2, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$kcm(0x29, 0x7, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x502, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) 7m49.013315222s ago: executing program 0 (id=3324): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2050061, &(0x7f0000000bc0)={[], [{@obj_type={'obj_type', 0x3d, '//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'}}]}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xb4}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x30}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408, 0xca, 0x0, 0x2, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000001100)=ANY=[@ANYRES8=r4, @ANYRES32=r2], 0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', r1, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)='%-5lx \x00'}, 0x20) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x2, 0xe90a, 0x33, 0x2000000, 0x3b0b, 0xffffffffffffffff, 0x5, '\x00', r1, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) 7m48.63983031s ago: executing program 0 (id=3328): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r1}) socket$kcm(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001880)}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8b}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 7m38.447117073s ago: executing program 35 (id=3295): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11cfa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x14, 0x5, 0x5, &(0x7f0000000300)) r0 = gettid() perf_event_open(0x0, r0, 0xfffffbffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, 0x38, 0x825, 0x70b92d, 0x25dfdbfb, {0x17}}, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x40010) close(0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000007811, 0x9}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x88, 0x30, 0x1, 0x2, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0xffffffffffffffff, 0xff, 0xfffffffb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3, 0xffffff00, 0x7}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) 7m33.589367842s ago: executing program 36 (id=3328): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r1}) socket$kcm(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001880)}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8b}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 5m32.73994986s ago: executing program 4 (id=4257): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000500"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000198500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m31.486833911s ago: executing program 4 (id=4264): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x48, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x8000000, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000000000000071120b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x27) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000001000"/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 5m31.128335395s ago: executing program 4 (id=4269): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x0, 0xb, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_COMPAT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x880) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="cd6487de6b", 0x5}], 0x1}, 0x40084) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f00000007c0), &(0x7f0000000640)=r4}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x210, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x14, 0x36, 0x107, 0xfffffffe, 0x25dfdbfe, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r5, 0x0, &(0x7f0000000400)=""/154}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x14, 0x19, 0x1, 0x70bd29, 0x0, {0x1d, 0xd601, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x804) r7 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)=ANY=[], 0x7}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)="00446916ab", 0x5}], 0x1, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x38}, 0x0) 5m30.936711967s ago: executing program 4 (id=4271): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="02", 0x1}, {0x0, 0x500}], 0x2}, 0x400c090) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x80, 0x7fd, 0x8000, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0x7}]}, @struct={0x2}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000002200)=""/4110, 0x3d, 0x100e, 0x1}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0xc}}}, 0x24}}, 0x4000010) r5 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r5, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x20040000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000085000000a50000009500000000008000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x31, &(0x7f0000000000), 0xff7b) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r6, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$sock(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)="026de902cae7f5401ddaa74ac7f9572fe38b87a2705ee75d8e0588f4c04bf0ebffd9208e6a88fb04bc59056b06b214214d9246aff64b49627da6fe837998c88d9377dcb32c4bf4931e1a4dcfc273bc265d71bb9955682f123a2fc9e8933da71b0006a535e46b36e856b6a1fbe196652078b8202af719ae35d702d8131ff33572e28d9983c11233d581016e84141c9ee1929594d959ecb4993162f31f702610712285fd266154fefa425cfc815dea0542840c5c966c20190a30a82e9e98d0969bb7b36600473c80cac1016b0e6b45067cabb5a89fc97e148f821a8b3735baaff98713a1ee5b5bc79f54255de73567", 0xee}, {&(0x7f0000000080)="147efe1db272a35a879b5d0d496bb8f135df7febafed7e40e34c227bd8d7cf25ff7e5d114a2c34ec83bfb494c334247d484c1aad36d5609aa2d49e44f50cf6b810586120169b82ad680430f11526fdf7f62dd0cf25fe68a62d17b62fd82ae190a388a9b99d99d12b59b8c171661fbe07108cf29cd0", 0x75}, {&(0x7f0000000300)="c04af5fb13a7b63b5563c3d94f97221a2e781e4b928cecc3efc6682c58283602a1141ab1bd85baa05721eef166d32229c459fa9a7519d8d0d159e21c95f538eafc5ff5e4c5b9cb0f8e798db2e5ab5b6b0603e5d05bb22c7097f964d03fe61bce8188803e1d07153fb7ac3312f5977de436dfcaa1dfce5b86e84297cb5e2ff4df5e61fd978c7a7d3344692197949ba514c322a3c334f18d8e1b2888fb463fb93607d2438c9382d2704f71cf80", 0xac}, {&(0x7f00000003c0)="0bd5b8fa41c252", 0x7}, {&(0x7f0000000400)="2778343abb40ff19e6b5e14ecbdbd338b8640022dae17a71f61dfd25133fa7a4597023ed3ec70cd731dff18fc079d76796ff31f6a27398e182770a4bc62c4e7aa55391aeddb7acd2a37fbac896024a8fb3fc51832df20634b50b40ecfea7905ce3cd4bd554547c1f9a7ed15fb4da7f0a9fbcb375baa6dc00248eb2794b19327d0b4e39e5f9f23d7793", 0x89}], 0x5, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xd}}, @timestamping={{0x14, 0x1, 0x25, 0x42}}], 0x78}, 0x40) 5m30.391098068s ago: executing program 4 (id=4279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0xf09, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x2400c880) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000002100090002000000ffdbdf25020000000c0003"], 0x20}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x9, [@float={0x8, 0x0, 0x0, 0x10, 0x4}, @var={0x5, 0x0, 0x0, 0xe, 0x1, 0x1}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x0, 0x2e, 0xc}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x2}, @enum={0x5, 0x4, 0x0, 0x6, 0x4, [{0x3, 0x728}, {0x6}, {0x8, 0x81}, {0xb, 0x3000000}]}, @func={0x3, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x30, 0x2e, 0x30, 0x5f, 0x30, 0x5f, 0x2e]}}, &(0x7f00000022c0)=""/4096, 0x91, 0x1000, 0x0, 0x9}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e00000007000000070000000300000000020400", @ANYRES32=0x1, @ANYBLOB="0700000000000000000000000000000000000000b6eede876ea64eede671c6776d7f69d90693df63a4c50c162e12da0b8b66009d2c53e85d88d3d0b2875f1e973d27a8b3429646672c42f36f5e91caf5214372bbeab54ab1832ab975feb8126f7cb67f6de3b3838131e3f192966d0f0c3224cfa2203cb9e01905ddccc242cbc2e92e8a96feffe1208ab03c611bd73d0e290da65c3a27921a3b08d897", @ANYRES32=r3, @ANYRES32, @ANYBLOB="8100000001000000040000000500"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000000240), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x4c, 0x0, 0x7, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000180001032400002b69124db134"], 0x14}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff0000000071101f0000000000e5000500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 5m29.711641872s ago: executing program 4 (id=4283): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x6992, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="10000000000000"], 0x10}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$xdp(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x2c, 0x1, 0x0, 0x27}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="6cd8a4bb88169e7eb34b03531fbe683fd40fcc12a02b943dc49874f6ddaf093401eb38b07afa8ca5d440a577417815cc628bc89296e3db1c75307a9fa511097886bf63a74768df2c54cdfc1f6868b2f83aced81de5878a792f429df7ec1862d497a06a2f66a7358cd021f91069eb8ae3f700a3f402d9ec7e2f7402b65fc15dfbfa1a6443ea1f68df1fb8503fea61f6ddf6838fdf71cf1cdd243a02284fb41889b8b7d41836df313f638c9eda25d3764f24ed0e7bb24ea82916e2f4362b9a6af3355f73d03bb139377abbf8", 0xcb}], 0x1, 0x0, 0x0, 0x20000000}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "00000503000000000000f1ffffff00"}}}]}, 0x48}}, 0x4000010) socket$kcm(0x11, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 5m14.412913439s ago: executing program 37 (id=4283): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x6992, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="10000000000000"], 0x10}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$xdp(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x2c, 0x1, 0x0, 0x27}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="6cd8a4bb88169e7eb34b03531fbe683fd40fcc12a02b943dc49874f6ddaf093401eb38b07afa8ca5d440a577417815cc628bc89296e3db1c75307a9fa511097886bf63a74768df2c54cdfc1f6868b2f83aced81de5878a792f429df7ec1862d497a06a2f66a7358cd021f91069eb8ae3f700a3f402d9ec7e2f7402b65fc15dfbfa1a6443ea1f68df1fb8503fea61f6ddf6838fdf71cf1cdd243a02284fb41889b8b7d41836df313f638c9eda25d3764f24ed0e7bb24ea82916e2f4362b9a6af3355f73d03bb139377abbf8", 0xcb}], 0x1, 0x0, 0x0, 0x20000000}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "00000503000000000000f1ffffff00"}}}]}, 0x48}}, 0x4000010) socket$kcm(0x11, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2m42.779113117s ago: executing program 3 (id=5336): socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d7010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2b626c69696f202d64657669636573202b726c296d698246"], 0x18) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc12082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x4, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x800) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x30, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}, @nested={0x4, 0x37}]}, 0x30}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d7010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2b626c69696f202d64657669636573202b726c296d698246"], 0x18) (async) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc12082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) (async) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x4, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x30, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}, @nested={0x4, 0x37}]}, 0x30}], 0x1}, 0x0) (async) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0xfdef) (async) 2m42.468553197s ago: executing program 3 (id=5339): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x49, 0x1, 0x71, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1, 0x8}, 0x42, 0x0, 0x0, 0x8, 0x43fe, 0x9, 0x0, 0x0, 0x20000, 0x0, 0x8800000000000080}, 0x0, 0x10, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x8000) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x50, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x400000, 0x4}, 0x80, 0x0}, 0x20040010) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100180000ca0de7076a0ac3f5d97a620000000c000007000000020000000000004c0200f67c70d6a50000000000000000007cc95bdfe9c3fc94577dbcbe516a0a62be5a2d7074267172071f196f037d887887862de816cebcdb6e6f290ad624b4743aabe54eb78ae891b8f00adc55f03670fb70fa502033386ffdcb3ac890d867a176ce37eccea00fdf5bcbe46863acd29b6227b18e603a3602fb4a64ef06d252f44b4ddbf10c87f7e1966e9b9979ec808e6263e84cb80f10f4553cab1dde1769fe9e15126c17927b4a62bf6af0d46a844933dacd925599578ae1527796000000"], 0x0, 0x2b}, 0x28) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8918, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) r4 = socket$kcm(0x10, 0xc, 0x4) syz_clone(0x0, 0x0, 0x1c, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3b5ca, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef9}, 0x0, 0x0, 0x98, 0x4, 0x4e56, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0xffffffffffffffff, 0xfffffffffffffffb, r2, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x0, 0x94565, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfea, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$TCPDIAG_GETSOCK(r6, 0x0, 0x4000844) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m41.805804256s ago: executing program 3 (id=5346): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) (async) r3 = getpid() r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.swap.events\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r5, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0xad, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r5}, 0x8) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', r6, @fallback=0x99c88ff99ee07992, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x1, 0x8}, 0xc) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x7d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x1c}}, 0x804) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r10, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) 2m41.202025547s ago: executing program 3 (id=5353): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) 2m40.653105025s ago: executing program 3 (id=5355): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600800a0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x40000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1\xfeN\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xa4\x05\x00\x00\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cn[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16z\xa1\x85m\x1b\x19a\x10\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) getpid() r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20010, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x1946}, 0xa0, 0x0, 0x0, 0x8, 0x0, 0xfccc}, 0x0, 0xf7ffffffffffffff, r3, 0x3) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x18b) mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x200020, 0x0) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110aa000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 2m33.830051683s ago: executing program 3 (id=5402): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x4, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x8001) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x24, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x9d}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x4, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x8001) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x24, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x9d}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async) 2m18.520788924s ago: executing program 38 (id=5402): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x4, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x8001) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x24, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x9d}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x4, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x8001) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x24, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x9d}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async) 1m53.175381054s ago: executing program 6 (id=5645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/196, 0xc4}, {&(0x7f0000000580)=""/73, 0x49}], 0x2}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000050) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040080) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@ptr={0xc, 0x0, 0x0, 0x2, 0x5}, @func={0x7, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x80, 0x5f, 0x61, 0x61]}}, &(0x7f0000000880)=""/115, 0x36, 0x73, 0x0, 0x55}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x16, 0x10, &(0x7f00000009c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x0, 0x2, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000a40)='syzkaller\x00', 0x5, 0x83, &(0x7f0000000a80)=""/131, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000b80)={0x2, 0x7, 0x2, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r3], &(0x7f0000000c00)=[{0x5, 0x2, 0x0, 0x6}, {0x5, 0x1, 0xf, 0x2}, {0x3, 0x4, 0x0, 0xb}, {0x1, 0x3, 0x2, 0x7}, {0x5, 0x3, 0x10, 0x6}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x17, &(0x7f0000000680)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @alu={0x4, 0x0, 0x8, 0x7, 0x0, 0x100, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x86e, 0x0, 0x0, 0x0, 0xec}, @generic={0x0, 0x6, 0xa, 0x6, 0xc633}, @map_val={0x18, 0xb}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0xf8, 0x3, 0xd, 0xd, 0x6}], &(0x7f0000000740)='syzkaller\x00', 0x4, 0x92, &(0x7f0000000780)=""/146, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, r5, 0x8, &(0x7f0000000940)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x6, 0xa12, 0x7}, 0x10, 0x0, r6, 0x7, &(0x7f0000000d40)=[0xffffffffffffffff], &(0x7f0000000d80)=[{0x4, 0x1, 0x2, 0x5}, {0x1, 0x1, 0xd, 0x4}, {0x4, 0x4, 0x6, 0xa}, {0x2, 0x3, 0x7}, {0x2, 0x2, 0x8, 0x1}, {0x4, 0x4, 0x10, 0x7}, {0x0, 0x2, 0x0, 0x5}], 0x10, 0x9}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x78c8}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xd8e, 0x6, 0x5, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1m52.19241611s ago: executing program 6 (id=5651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000200000000001800fffffffffffffff30000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 1m51.752645351s ago: executing program 6 (id=5654): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x10140) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) (async, rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000540)=""/138, 0x8a, 0x0, &(0x7f0000000600)=""/164, 0xa4}}, 0x10) (rerun: 32) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000bcb1e9070000000000000023495e7a3c954e0cf386dda56c951864fc2bbaea44f82cbc589325e962141399aef8241377f48adad8", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="01000000050000000500"/28], 0x50) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) (async, rerun: 32) r10 = getpid() (rerun: 32) sendmsg$unix(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)="007f", 0x2}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, 0xee01}}}], 0x20, 0x14}, 0x20004011) (async) write$cgroup_pid(r9, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x42}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0xf1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, r5, 0x8, &(0x7f00000004c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x10, 0x7fff, 0x5fa}, 0x10, r6, r7, 0x0, &(0x7f0000000b80)=[r8, r9], 0x0, 0x10, 0x400}, 0x94) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000010000100000000000000000008000000", @ANYRES32=r11, @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYRES32=r1, @ANYBLOB], 0x2c}], 0x1}, 0x20000000) 1m51.407795085s ago: executing program 6 (id=5657): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)="d5", 0x101d0}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000040900010073797a30000000000900030073797a3200000000ac000000060a010400000000000000000100000008000b400000000084000480340001800b00010065787468647200002400028008000140000000030800034000000000080004400000002205000200070000004c000180090001006d617371000000003c0002800800014000000001080002400000000c0800014000000000030003405b6cf5f40800014000000020080003400000000908000240000000100900010073797a30"], 0x120}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="852000000500010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001800000004000000000000000f00000085000000cc000000"], &(0x7f0000000040)='GPL\x00', 0x80, 0xb6, &(0x7f0000000300)=""/182, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000180)=[{0x2, 0x3, 0x5, 0x8}, {0x4, 0x202, 0xd, 0x8}, {0x0, 0x5}], 0x10, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x8, 0x80, 0x7, 0xdc, 0x0, 0x2, 0x40002, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000780), 0x19}, 0x1904, 0x9, 0x6, 0x2, 0xfffffffffdf7bbfe, 0x0, 0x5, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000}]}]}], {0x14}}, 0xc0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020642500000000002020207b1af8ff00000000bfa1010000000100070100e200ffffffb782000008000000b703000834120000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="000000000beeff000000e1834200cc5e3d9b0000e93884b87ee256da48520bb00b39d547cd3fd1e7c33dbd07260f05ca1e4e2208da32d8e3523c55e0c477b57240344ec46bed29542a98dfd5c632101c44d1e725e25d02e8f90f2858bd09b7d6", @ANYRES32, @ANYRESDEC=r8, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x140c, 0x0, 0x0, 0x0, 0xfc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r9, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r6, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="38000000061401002bbd7000fbdbdf2508ffe400000001000a00010002000000080001dad8df535f068b7c6bf8a80d92010075c5f7aa0e1ca9dc54d3f9c2383289768236adaf49ee91abb802df528902280c8b5e158826a5581b000000f2bc15bd039e562cf7f71e3ba471311445791729db9be99135adc13a15f1698ff5a7bd3de8e3903f2ad2b88138ff06674f58a361b50275e53a7100"/181], 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) perf_event_open$cgroup(&(0x7f0000000240)={0x4, 0x80, 0xc, 0x2, 0xd, 0xd7, 0x0, 0x7fffffff, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xf, 0x2, @perf_config_ext={0x400, 0x1}, 0x420, 0x4, 0x1, 0x7, 0x0, 0x10001, 0x0, 0x0, 0xc36, 0x0, 0x5}, r7, 0xc, 0xffffffffffffffff, 0xa) 1m51.032030173s ago: executing program 6 (id=5660): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600800a0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x40000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1\xfeN\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xa4\x05\x00\x00\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cn[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16z\xa1\x85m\x1b\x19a\x10\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) getpid() r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20010, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x1946}, 0xa0, 0x0, 0x0, 0x8, 0x0, 0xfccc}, 0x0, 0xf7ffffffffffffff, r2, 0x3) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x18b) mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x200020, 0x0) 1m50.726666233s ago: executing program 6 (id=5663): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x2d}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x4) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000240)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r5}) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x88, 0x68, &(0x7f0000000080), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x72, &(0x7f0000000000), 0xc) r9 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r9, 0x29, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa0}, [@ldst={0x5, 0x0, 0x0, 0x0, 0x0, 0x102}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r11, @ANYBLOB, @ANYRES32=r10, @ANYBLOB], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) socket$packet(0x11, 0x2, 0x300) 1m34.737461101s ago: executing program 39 (id=5663): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x2d}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x4) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000240)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r5}) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x88, 0x68, &(0x7f0000000080), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x72, &(0x7f0000000000), 0xc) r9 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r9, 0x29, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa0}, [@ldst={0x5, 0x0, 0x0, 0x0, 0x0, 0x102}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r11, @ANYBLOB, @ANYRES32=r10, @ANYBLOB], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) socket$packet(0x11, 0x2, 0x300) 49.517763433s ago: executing program 9 (id=5969): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94) close(0x3) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) close(r4) recvmsg$unix(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000), 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES16, @ANYRES8], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000045) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r6, 0x11}, 0xa) r7 = socket$kcm(0x15, 0x5, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x118, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8}}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000000080)=@rc={0xa, @none}, 0x80, 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x72900d47d9e4e356}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc8aafc5d180ccd4a}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000240)=""/153}, 0x90) 48.38266046s ago: executing program 9 (id=5988): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, 0x0, 0x44810) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_config_ext={0x2, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x4000, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008080) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x80) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa040, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x325) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000040), 0x4) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000deff0000000000003fff0800120002000200000000000000000030002b000303"], 0xa0}}, 0x0) 46.901353972s ago: executing program 9 (id=5996): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c0000003c0001030abd7000fcffffff0d000000080003001cf5"], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a300000000058000000060a0104000000000000000001000000300004802c0001800b000100736f636b657400001c0002800800024000000001080001400000000808000300000000b708000b40000000000900010073797a30"], 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) close(r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) 46.495206108s ago: executing program 9 (id=5999): r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xc, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x25, 0x0, 0x8) sendmsg(r2, &(0x7f0000000400)={&(0x7f0000000d80)=@can, 0x80, &(0x7f0000000d00)=[{&(0x7f00000008c0)="7047f91aaadce2cb19e467ed6a6bdfa35339eab38e5c561711e4d8d5e26873de83033d287aef9d11fba820be08bf8d2b4ac5a8266d584223513d7c54e3c48c079096ebad789159eda11eca516734e14ad922e5ef67c790149f419e2a44eb54b7e83550bb71f88eaf9fc99f05833dc1b27cf9fade73fa49468486b513f0fc155636c1f13c5c2308b3f5320c841b4f277a1f4e6e408df628b439c5abc0bb6a5f65efe49e30032f0223c216e1e5e98b5fabf4f397cad76eb28ac346716f9568d76d6e38d99ab43efd4ed7b26ff18cd4c1a6b488b562bd4272448873580f09e69d72637b77", 0xe3}, {&(0x7f0000000040)="ff3e67aa56bb2341814ff577c5fef8ef7bacd1ead6796893d29691c5f0dc143ac9f923ec4792ccda039d5a15a67e84edd991da173c3cc4da1b0aae", 0x3b}, {&(0x7f00000006c0)="6395a8742800ca2953f427b140b093df868e6364bf05d3204d22cf7e826b5876a84d514bb0988c7b2d933df1719be81c1a58f77b8944aadccd9ebfab6355b2f1e6703586d86380be6d63c6646d2d94f7d9efabe589e5480a5d2618206d3078990e6d64cda1624c", 0x67}, {&(0x7f0000000a80)="27439a4794ea112f14d8f90f6b010af8f290ca3c4e9e86df6eb29b4f968886a73f309494cd4a6b4387d177de1957b815855818370cced54911d309b817867252311cccf66998e1a040e2bc9210d9796fee29e577601474e8bcb5d9f0a1d6c1077a6ed57a58ec58a860980404b9cef5f2f8c5b84e33537b467429bd7a1d2c60d476a3732d4d8d4a56f66238b0d7771650fa34bdfdaa367193c5cf68e584e6dfc2ac173e9a5fd356bed4a0c59aadd263eeb450fb3981ed272c00ae83618e18acff2a2109f0fe7b71cece2ce70e", 0xcc}, {&(0x7f00000007c0)="5da084fc910d4262683e9cb2637960c5974d0a127adbe755b9f4381497f770bfe522fbfc691de1dcbbbb751d6ded7bcd267b435a44dbb9e4ad73c3d484982f5af428a60bdbecb3b5786927d5ca2a35d656931f9351d167344252a0807220401c4ac116a5e6aafbd83cf5daeb2c8cfe3a0f4a9910febff4c16f2b2b7fc920ecc88251ab41279c7211ec90c762f30c0015d09b3e8a5129df6d7f031ffc24eb85f020adfe08b31045978a8b015521e60056be80e598e6d49d2b67e0850782e5d62e0992699cb96f0361df", 0xc9}, {&(0x7f0000000bc0)="b4f1532aeaa5dc4df190e69bffe6e1afb989085e1c1d592e504c29d96fb428171b6fe807c26522e254286deb5552ec029c4c5c864066d1caf9e773dc47b6fb2c3351d795ab9d780ebc209f3d0a3bdcd48aceec95e695730d6f960a56e32f44f1fb9b082585e61100aa3077e418f02e8fa1d483518bb4aef68741b88527a3f6e23d876bcd0cf83880f1bd6a76dc1bf2fda11bd7535271b9c88d41d820218a4264c3c0a83f637925de732a54fe0a59c061cfe79e98", 0xb4}, {&(0x7f0000000c80)}], 0x7, 0x0, 0xa0}, 0x40) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800"/15, @ANYRESDEC, @ANYRES64=r3, @ANYRESDEC=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x6, 0xf}}}, 0x24}}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r6, @sk_msg}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8922, &(0x7f0000000080)) openat$cgroup_devices(r3, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) r9 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r9, 0x88, 0xa, 0x0, 0x0) sendmsg$sock(r9, &(0x7f0000000b80)={&(0x7f0000000380)=@ethernet={0x1}, 0x80, 0x0}, 0x40040) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) 46.115719144s ago: executing program 9 (id=6006): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600800a0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x40000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1\xfeN\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xa4\x05\x00\x00\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cn[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16z\xa1\x85m\x1b\x19a\x10\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) getpid() r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20010, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x1946}, 0xa0, 0x0, 0x0, 0x8, 0x0, 0xfccc}, 0x0, 0xf7ffffffffffffff, r2, 0x3) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x18b) mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x200020, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110aa000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 45.718974266s ago: executing program 2 (id=6011): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r0, 0x33, 0x1, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x48000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r5 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r5, 0x0, 0x3, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r7 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000400)=r6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r8, 0x1, 0x21, &(0x7f00000000c0), 0x4) 45.493676835s ago: executing program 9 (id=6015): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x25, 0x101, 0xf0bd25, 0xfefffffb, {0x8}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x4000a00) 45.263272965s ago: executing program 2 (id=6016): syz_clone(0x41208000, &(0x7f0000000180)="22fcded525a6805d49ee23680b4b49bf82b5d4251c9262b1e9baf6fd24cf191fd743b5092bf513c90b34a67d12526f09fa6c8ca931056d97a8d2f843bd6aa8075576077b98f90731d4e26da658309abdbdc31a85e1e492c1611071c3ddf0745826c922a5d52113d2691b6e9cb33fc8ce03063a1838a5bbc0bd9c77201e86392b5fcd77c430b9ee31c4d5ae71687e8cbd5e6af4a416bd984d5eec71107fcc9e687005ec19feebd584f44ad2483f4c3442208f51566cb49068317691993ffa0ee7e10b28adf51f5d27c4da55a4a610b71867a5e52c5109793ae0fc2bc73d19b5df", 0xe0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)="ad497f7ec01e633d08ec2d791867fd1ded99306730f02b7b78e46521be8a7773bcaa8dd037647aac6f67e33816ac46d3") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x80000001, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000)=r4, 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000160007010200000000000000017c000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x1b, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x80, 0x7, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000, 0x7}, 0x1904, 0x9, 0x6, 0x0, 0xfffffffffdf7bbfe, 0x0, 0x5, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x4000000000e, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="188000003f00070100000000fddbdf25047cad0004003780"], 0x18}, 0x1, 0x0, 0x0, 0xc880}, 0x0) 44.256573369s ago: executing program 2 (id=6024): socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x1ba28, 0x0, 0x0, 0x2, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@del={0xe0, 0x11, 0x1, 0x70bd29, 0x25dfdbfb, {{'seqiv(aegis128l-aesni)\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x4011}, 0x44880) 43.015386167s ago: executing program 2 (id=6028): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xd8, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x40, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8dc, 0x0, @perf_config_ext={0x6, 0x200000000005}, 0x11a0a2, 0x5, 0x5, 0x1, 0x7, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x200000000000000, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x13, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x2000000830d}, 0x100, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000002000000000f0ffff00"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x66, 0xec, 0x1, 0x0, 0x0, 0x0, 0x480000000000000e, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x1, 0x98, 0x0, 0xb8, 0xf7fff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000000)=@rc={0x1f, @any, 0x8b}, 0x80, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000027c0000040042800c00018006120612"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) socket$kcm(0x25, 0x0, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000500)="75597459f6eb96b64735cd70655d44301235bea119aa733a4d1bf224cb2416c5cdaa57778987d8c9d172f50289657f78386a6d21a7b9ed20c987719959e0b1310945c8f6d90f073618dfe0a06fa6613e18add14ae7cdc92e7da4d5d7eb8aad62fb0bbb145e60a504d77da9", 0x6b}, {&(0x7f0000000300)="bf20d2e556d4b775aafb4a9db705d72f63ddf8d50a2383d42408d43d990fcd5500ab3e062e6ac4330959071e70b5759b95c8d9c663a6", 0x36}, {&(0x7f0000000580)="cf87cf11d728301fe97a0ffadad3ba50b0b86843a9c7bf6b2dba2d9b6d484d2f4173766947738cf97edfe1436eb3613dfaeb8e453151a3f176b2470ec3aed9ef7216e59562b11637e2ae810f50455d522d454bc6f4c8a2cc2cfcf52719231783804991600fb43b7946208d50d1fa36917800b8f14782f1a43482f051c978cf45a960b6f1f87b2eca1a0f9868e84a3aeecff8d514c6f8a4e431b6b58157e403c3c42224edd89c5d736e", 0xa9}, {&(0x7f0000000700)="91eaf9752db1a501347c644e31b073c728885e698ce5fecb0557a80ccb0ddc3ca780c90c4da10a85790b59597668abe3d0d8a8293cffb0776dc7b44c0837214f6d7545181b8ff17476cd867b3cc5f0bdd1621cd02cf0de89f99b504efdb3a81cef3acbbca721cdc51e7b32326acbb77600c6a2bf295bce907e21e42c66686ad4ddc2ea79549eb1321123edf83257a9eba6c1f33c43c3f0a6878aad84b2fac2", 0x9f}, {&(0x7f00000007c0)="5975a74be0b068b60641a22f6b99360c22e7bf692ac0eadc0d27b8c227549c6403c5f899e994b672f1128490017328ea22b1b14f646181aac8e2cc525f87da7f047a8884692b900487add83726487adade94b545649b67549fb2d0b01f4dccbb8551450d407beb0c252469b3569ee4718be57112df62be70a06bc24eb998db26b7dc69a1e51de37517ac83a9da12fbf3f642d536a97d951c09fa06a171699b46550824eafc8249d899b5a702d43fb31d4d18f89f23ea7726f32e7dc7d3ca2ba31f33438993ef407e83aa7db1729fa0e6ad8dc2b2fa485f68ddb433fb1d885827cfc404a00d7c0d634b8e6e6a8ae316a4dae6", 0xf2}], 0x6}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x24}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) recvmsg(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f00000009c0)=""/94, 0x5e}, 0x23) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000007050000000100000a0c000240000000000000ffff000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040081) 42.909793136s ago: executing program 8 (id=6030): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000024000701feffffff03dbdfd74839d16aa74c92000004000180000704e0d1d73717b5590000faa0cda2f815afa346b5196d460f1cfe85631a05dbb17ec9e07c26c3c87794ab3a3cb8"], 0x18}, 0x1, 0x0, 0x0, 0x240080d1}, 0x8010) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000c1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 42.322995329s ago: executing program 2 (id=6033): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600800a0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x40000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1\xfeN\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xa4\x05\x00\x00\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cn[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16z\xa1\x85m\x1b\x19a\x10\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) getpid() r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20010, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x1946}, 0xa0, 0x0, 0x0, 0x8, 0x0, 0xfccc}, 0x0, 0xf7ffffffffffffff, r3, 0x3) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x200020, 0x0) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110aa000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 39.055272717s ago: executing program 8 (id=6036): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x80000001}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}}, 0x20000000) 39.051651385s ago: executing program 2 (id=6037): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x401}, 0x8) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00'}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x1100) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r2, 0x1, 0x27, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="9110450000000000950088fe000000003e0a914aea3d46981a7ea4193f9d2713daa83fa0e82b1b69592ada35f23eabe02f50bbd77d74a5f3983df4bbf0e18903caca2f"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x60, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) socket$kcm(0x2b, 0x1, 0x0) 38.567066585s ago: executing program 8 (id=6040): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x50, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fbf2000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000110850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000440)="8df6c11e491ff141d038fb8a765f916aba671b5610dbe97c9a986725fa7fc4d2cd9eb12b3aef2f9f49dd73f5d1e53375072e5bb726d6c02a2c68f4c98cb1c2a6cffd70f60a988e0d5d1d2bae44d29210cdd81ab5e397a49e3fb35016a33011497d978edb4e9bb14a338cd78ef20024d020ee17174b30f33ef0c09d5ebc071d9eff44908583fbe41a482e851c61595d62ef4e6e333658bf396de9424bdaa317", 0x9f}], 0x1, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x50}, 0x4008004) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000200)=@newsa={0x140, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in6=@mcast1, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@loopback, 0x20, 0x6c}, @in6=@mcast2, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0xffffffff, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@extra_flags={0x8, 0x18, 0x8}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) socketpair(0x23, 0x2, 0x1, &(0x7f0000000040)) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r11) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 37.156501848s ago: executing program 8 (id=6045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000060900010073797a30000000003c000000090a010400160000000000000700000308000a40000000000900020073797a31000000000900010073797a30000000000800054000000021640000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000003800038034000080040001802c0007800b00010074617267657400001c000280080002400000000a04000300090001"], 0xe8}}, 0x0) 36.814028881s ago: executing program 8 (id=6047): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600800a0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x40000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1\xfeN\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xa4\x05\x00\x00\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cn[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16z\xa1\x85m\x1b\x19a\x10\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) getpid() r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20010, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x1946}, 0xa0, 0x0, 0x0, 0x8, 0x0, 0xfccc}, 0x0, 0xf7ffffffffffffff, r3, 0x3) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x200020, 0x0) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110aa000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 35.719886988s ago: executing program 8 (id=6051): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in6=@mcast1, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@loopback, 0x20, 0x6c}, @in6=@mcast2, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0xffffffff, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) socketpair(0x23, 0x2, 0x1, &(0x7f0000000040)) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r5) (async) close(r5) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0xd, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40000000100001, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40000000100001, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xa}, 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xa}, 0x50) close(0x3) (async) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) close(r5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b702000000090001db120a001001000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f2ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd3d400ac1949839f92232e7684f2305d906ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c832ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a2e8c2f369545d761d74"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2, &(0x7f000000cf3d)=""/195}, 0x23) 33.161831641s ago: executing program 1 (id=6054): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x2, 0x5, 0x84) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4, @perf_bp={0x0, 0xa}, 0xc203, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0xfffe, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600eeff850000002d000000850000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r8}, 0xc) (async) recvmsg$unix(r6, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0) (async, rerun: 64) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) (async) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x10, 0x701, 0x2, 0x0, {0xa}}, 0x14}}, 0x0) (async) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r9}, 0x8) (async, rerun: 32) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x3250) (async, rerun: 32) r10 = socket$kcm(0x29, 0x6, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10010000000000000f00000001000080dd3efdb82609be69258ccaed43babab021057037f82dd75bb5e896643baa82988e058ba9eba8bc7d1c58ddc58a738431456f29b19466b2d8a78c03bf492effb89d48ea8c1dcacb19de033a6592615d10ca1124d4559ba4b854c8045bf65a03e6517f6fdb75e940d7e937ba011350bd9e9a8767f536a96a44738e88e027516d89ea636c295426bfa395a21c85ad45d01269953e050e19158bfc44dae3a1b28089e343781052beaa8ebb48c346f326097e29d86af440e566db7f99fb29bfacf72fa394c0f1a70b576fd0832959e98e09c8550b1f8ef7490e5a7bc294385d55e48ab064dbe52539ee3f6d1d9c34f68e3ca5d5aa234f8a74a6bd1990691b8b08d56f960000000000000088000000000000001701000008000000ba148c907065d285ed523085a44ad71ce9cef46b807217482491ce76b42f6e84bf3932d185ddf21a26bea3d2f3b728d6f01b529f3e36ec1d8dc3469b39501ed1476255af6bf9725982cdcf722ca671ecd4e698cb35b53089ca2fdd4ab16ecfa06254eea328bcaa220b3cc0f76288a23a521fdf00000000006000000000000000000000007d0f00003c10ea0f27567c8723acd7ec1fe92aabdc9f71bdee8f9ed872b8006842e14dcff2b73ee5139f1663a94624df4bf6d1339fee602393f2ec43782b00"/512], 0x1f8}, 0x24008080) 32.953426103s ago: executing program 1 (id=6055): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000e3ffffffffff0900000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c0005800c0001007061796c6f6464001c000280080004400000005608000340000000b908000240000000040900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000e80)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x4001040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) recvmsg(r2, 0x0, 0x80) r3 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r3, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00"], 0xfe33) recvmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x142) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r1}, 0x18) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffffaa, 0x0, 0x0, 0x0, 0x7}, 0x142) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r5 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x113, 0x3, 0x0, 0x0) 32.528643517s ago: executing program 1 (id=6056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)={r0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9e, 0x5c, 0x8, 0x5c, 0x0}}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7}, 0x80, 0x0}, 0x24000059) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r7}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) 31.842506189s ago: executing program 1 (id=6057): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xd8, 0x9, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x40, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8dc, 0x0, @perf_bp={&(0x7f0000000100)}, 0x11a0a2, 0x5, 0x5, 0x1, 0x7, 0xfffffff3, 0x8002, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x200000000000000, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x2000000830d}, 0x100, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000002000000000f0ffff00"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc, 0x4, @perf_bp={0x0, 0x1}, 0x1, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000000000000028000000280000000200000000000000000000030000020000000200000000000000010000000000000104"], 0x0, 0x42}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000700)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x7, 0x8, 0x42, 0x0, 0x3ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x2, 0x800, 0x2, 0xc, 0x1, 0x2, 0x0, 0xc05, 0x0, 0x4e9c}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000027c0000040042800c00018006120612"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) socket$kcm(0x25, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000500)="75597459f6eb96b64735cd70655d44301235bea119aa733a4d1bf224cb2416c5cdaa57778987d8c9d172f50289657f78386a6d21a7b9ed20c987719959e0b1310945c8f6d90f073618dfe0a06fa6613e18add14ae7cdc92e7da4d5d7eb8aad62fb0bbb145e60a504d77da9", 0x6b}, {&(0x7f0000000300)="bf20d2e556d4b775aafb4a9db705d72f63ddf8d50a2383d42408d43d990fcd5500ab3e062e6ac4330959071e70b5759b95c8d9c663a6", 0x36}, {&(0x7f0000000580)="cf87cf11d728301fe97a0ffadad3ba50b0b86843a9c7bf6b2dba2d9b6d484d2f4173766947738cf97edfe1436eb3613dfaeb8e453151a3f176b2470ec3aed9ef7216e59562b11637e2ae810f50455d522d454bc6f4c8a2cc2cfcf52719231783804991600fb43b7946208d50d1fa36917800b8f14782f1a43482f051c978cf45a960b6f1f87b2eca1a0f9868e84a3aeecff8d514c6f8a4e431b6b58157e403c3c42224edd89c5d736e", 0xa9}], 0x4}, 0x41) 30.027951001s ago: executing program 40 (id=6015): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x25, 0x101, 0xf0bd25, 0xfefffffb, {0x8}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x4000a00) 28.395809636s ago: executing program 1 (id=6061): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600800a0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x40000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1\xfeN\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xa4\x05\x00\x00\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cn[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16z\xa1\x85m\x1b\x19a\x10\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) getpid() r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20010, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x1946}, 0xa0, 0x0, 0x0, 0x8, 0x0, 0xfccc}, 0x0, 0xf7ffffffffffffff, r3, 0x3) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x200020, 0x0) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110aa000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 27.45427273s ago: executing program 1 (id=6064): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0xfffffffd, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) fstat(r0, &(0x7f0000001500)) 25.351876499s ago: executing program 5 (id=6067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)={r0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9e, 0x5c, 0x8, 0x5c, 0x0}}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000004000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7}, 0x80, 0x0}, 0x24000059) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r7}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) 24.691654592s ago: executing program 5 (id=6068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'veth1_to_bond\x00', @random="d28f00488d1f"}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)=0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xb6df, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x54, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xffff, '\x00', r3, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0xc, [@union={0xd, 0x1, 0x0, 0x5, 0x0, 0x1ff, [{0xe, 0x1, 0x8}]}, @volatile={0x3, 0x0, 0x0, 0x9, 0x3}, @typedef={0xc, 0x0, 0x0, 0x8, 0x1}, @func={0x4, 0x0, 0x0, 0xc, 0x3}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x24, 0x2}]}, {0x0, [0x2e, 0x2e, 0x61, 0x5f, 0x30, 0x30, 0x2e, 0x30, 0x61, 0x30]}}, &(0x7f0000000640), 0x70, 0x0, 0x1, 0x8}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x7, &(0x7f0000000500)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f0000000540)='syzkaller\x00', 0x214f, 0x37, &(0x7f0000000580)=""/55, 0x41000, 0x20, '\x00', r3, 0x0, r5, 0x8, &(0x7f00000006c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x7, 0xddd, 0xff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x1f) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x1412, 0x8, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x30}}, 0x40000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r6, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000940)=[0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfc, &(0x7f00000009c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r6, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0], 0x0, 0x56, &(0x7f0000000d00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0xc6, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) r10 = socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f0000001080)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)=@newtclass={0xc8, 0x28, 0x300, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x3, 0xfff3}, {0xffff, 0x8}, {0x9, 0xffe0}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xfff3}}, @TCA_ATM_FD={0x8, 0x1, r7}]}}, @c_atm={{0x8}, {0x68, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x8, 0xfff3}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0x1}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x7, 0xa}}, @TCA_ATM_HDR={0x22, 0x3, "2f5f65fdebbca35943158446a30c092fdca1e4e8d23dbe8550ace5f9f384"}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_FD={0x8, 0x1, r7}, @TCA_ATM_HDR={0x10, 0x3, "312a83eeb49f2c517f57e5d4"}, @TCA_ATM_FD={0x8, 0x1, r10}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x40048c1) close(r2) r11 = syz_clone(0x4c008500, &(0x7f00000010c0)="6ae9b65c06e14db96e5b3b11cef0bc93ff05be4878423807181e86bcd66df5a69ada30ff3d80d388d544b0e38f6f44bc6b5d4bba3264742a2573d4644dcbea0d2beb69bd5d069ff8e48e4e66d063ba4212ff192d3574a8b975d9f7d0", 0x5c, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="08e14c65126b1c6a9c76dae1d3d6c0948777bf1cc9c5420a26946a9d1a03959d7151db7c0bd9377f5ad6cba75fda2da4a04e057566ad85062e05df16e48df16eef230ef8eb4703f9fe78be5dbfbc1e1d14345ef6bc6e7e727f64bfb66098ddf3b4a28cf47804037ac3dbadff9c5e6d2d5eaa62e4c6cafd6c6e910b775ea8e2b520ed9f90cca693001934ee3d39d4449d1f4a0ec34a7da6b07b61a372a146960b3a81ce3216575017b77f26c2eb763bb64b8d00b8e86975d0fa9be1dbb30805947b6f7c962286f0899683dcb453807fba52b530d1d1b1182e26feab3e") syz_open_procfs$namespace(r11, &(0x7f00000012c0)='ns/pid\x00') ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001440)={r2, &(0x7f0000001300)="d349eacb4055c1d3698cac9919f9fc727cefd8c75e58509c385aa919d4a41512b66671fe64515fa2041187129a8d01df2dab60846b7d0d1b606a21cd5420fab48fa0470f82be626ac8ecfabef81c30347af4cf1f645db33b36444074c89ee267191147d29229158a8a6a5d47a6335f20baa536bccd5bd17a91e865e74a718e446cd3e57f7119c2d833ec81a1cc81d28ab57ddcc37d7abdece496c4a462013df88e1980f582e50e9abafe040e54ea5f5d0bed841ca2b4f45cb9987718a9f1d6", &(0x7f00000013c0)=""/95}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001480)={0xffffffffffffffff, r3, 0x25, 0x2, @void}, 0x10) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f00000014c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0x3, 0x7a}, {0x9, 0x7ff}, {0x4, 0xfffffffc}, {0xc, 0x7}, {0x3, 0xd5ae}, {0xe, 0x7}, {0x4, 0x80}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x61, 0x61, 0x30]}}, &(0x7f0000001540)=""/122, 0x64, 0x7a, 0x0, 0x80000001}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001600)={0x1b, 0x0, 0x0, 0x8, 0x0, r4, 0xd4, '\x00', r3, r12, 0x2, 0x2}, 0x50) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r13, &(0x7f0000001980)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001940)={&(0x7f00000016c0)={0x264, 0x7, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x6f, 0x7, 0x1, 0x0, "10a67f07130e88b5997c165d0e2b7a1b1edf8e81b1282f79d683af6af0942be2640295696a66d854164200d9eb648adaa2a32a971d17434446fdf9a8dd427b6119d2c13ce7b44edd7e107806afbbc67c13aa37fcc4d8f68d6c7a8762e64f4d79bcda9eb01079ec8a366657"}, @NFTA_RULE_EXPRESSIONS={0x134, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x60, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x40, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x67, 0x7, 0x1, 0x0, "9d59b0cf5e2bbf6278a80ea7c43ce2117b207cdd002ba4cdd00db15800a45c2c4c46331cc78f223081b971357503335af5eadc453cc6819ef95ff763e357278e4e9f71cdd837b45bf413a24dde4d70f418737162ae65c9695b63c820b10dceb4694633"}]}, 0x264}, 0x1, 0x0, 0x0, 0x4004}, 0x400080c) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001a00)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a80)={{r4, 0xffffffffffffffff}, &(0x7f00000019c0), &(0x7f0000001a40)=r14}, 0x20) r16 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001dc0)={0x6, 0x4, &(0x7f0000001bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@exit]}, &(0x7f0000001c00)='GPL\x00', 0x80000001, 0x40, &(0x7f0000001c40)=""/64, 0x40f00, 0x5, '\x00', r9, 0x25, r12, 0x8, &(0x7f0000001c80)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001cc0)={0x3, 0xe, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001d00)=[r14, r4, r2, r4, r14], &(0x7f0000001d40)=[{0x5, 0x5, 0x3, 0x8}, {0x4, 0x3, 0x2, 0x2}, {0x5, 0x4, 0xf, 0x8}, {0x4, 0x5, 0x9, 0x7}, {0x3, 0x5, 0x0, 0x3}, {0x1, 0x2, 0xa}, {0x3, 0x5, 0x1, 0x7}, {0x0, 0x1, 0xe, 0x9}], 0x10, 0xfffffffc}, 0x94) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001e80)={0xffffffffffffffff, 0x7982}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0xe, 0xc, &(0x7f0000001ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000001b40)='syzkaller\x00', 0x7fff, 0x0, 0x0, 0x0, 0x4, '\x00', r3, @sk_skb=0x26, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001b80)={0x5, 0x6, 0x7f, 0x6}, 0x10, r8, r16, 0x0, &(0x7f0000001ec0)=[r15, r2, r15, r17, 0xffffffffffffffff], 0x0, 0x10, 0xfffffff6}, 0x94) 23.052550973s ago: executing program 41 (id=6037): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x401}, 0x8) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00'}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x1100) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r2, 0x1, 0x27, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="9110450000000000950088fe000000003e0a914aea3d46981a7ea4193f9d2713daa83fa0e82b1b69592ada35f23eabe02f50bbd77d74a5f3983df4bbf0e18903caca2f"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x60, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) socket$kcm(0x2b, 0x1, 0x0) 20.565380556s ago: executing program 42 (id=6051): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in6=@mcast1, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@loopback, 0x20, 0x6c}, @in6=@mcast2, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0xffffffff, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) socketpair(0x23, 0x2, 0x1, &(0x7f0000000040)) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r5) (async) close(r5) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0xd, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40000000100001, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40000000100001, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xa}, 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xa}, 0x50) close(0x3) (async) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) close(r5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b702000000090001db120a001001000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f2ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd3d400ac1949839f92232e7684f2305d906ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c832ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a2e8c2f369545d761d74"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2, &(0x7f000000cf3d)=""/195}, 0x23) 16.926264748s ago: executing program 5 (id=6071): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x16482, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000003f000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.742379354s ago: executing program 5 (id=6072): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x200830d}, 0x4, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/28], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) close(0xffffffffffffffff) 16.552196845s ago: executing program 5 (id=6073): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600800a0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x40000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1\xfeN\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xa4\x05\x00\x00\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cn[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16z\xa1\x85m\x1b\x19a\x10\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) getpid() r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20010, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x1946}, 0xa0, 0x0, 0x0, 0x8, 0x0, 0xfccc}, 0x0, 0xf7ffffffffffffff, r3, 0x3) socket$kcm(0x2b, 0x1, 0x0) mkdir(0x0, 0x18b) mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x200020, 0x0) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110aa000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 15.521320242s ago: executing program 5 (id=6074): r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000000840), 0x3}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7ffeffff}, r0, 0xefffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4d31, 0x40080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0xeaff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000fffffffffffffffe", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@getqdisc={0x40, 0x26, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x10, 0xffe0}, {0x3, 0xffe0}, {0xc, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x800c851}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)="d79c42c42293555880313939266ad5d28f722a391de1d9c76e328410d1c782810e37f436ea9c5101a859604c8305fb5349c1ad926be477e551128426d83975e748a4891656e82f74663586592caeaca7be7ea75a05fceb941f01f181ffa12d298bf3c08d44808207", 0x68}, 0x1, 0x0, 0x0, 0x95}, 0x24000000) r10 = syz_open_procfs$namespace(r0, &(0x7f00000006c0)='ns/pid\x00') sendmsg$netlink(r7, &(0x7f0000000740)={&(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)=[{&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x74}], 0x1, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [r7, r8, r10]}}], 0x20, 0x40000}, 0x0) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r11, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3fb, 0x4, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}}, 0xd) sendmsg$sock(r9, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001000)='z', 0x101d0}], 0x1}, 0x0) 11.476415647s ago: executing program 43 (id=6064): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0xfffffffd, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) fstat(r0, &(0x7f0000001500)) 6.656763511s ago: executing program 7 (id=6077): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}, [@jmp={0x5, 0x1, 0xa, 0xb, 0x3, 0x8, 0xfffffffffffffffc}]}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x50, &(0x7f0000000100), 0x48) 5.420696025s ago: executing program 7 (id=6078): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r2, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x4}, 0x50) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x491}, 0x20000800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x62, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x6, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x8001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004001}, 0x20000000) r7 = syz_clone(0x420c0e00, &(0x7f00000005c0)="330949bfc3faee0a7f17722dc917b0a5e1503c2f295c0ea4e33dd46694c3ffad1079b8b51b38b74990d95a7acc0d983d8fce0f3d82b9bee2f62e8d42c97f2840764fd6abd8f2b0ee498e744e04b96a4fe6beef473e4d718e84ebb5d3d5e79a7b34a77a69b506c7", 0x67, &(0x7f0000000380), &(0x7f0000000640), &(0x7f0000000680)="96f147456dfb05c4154ab7dbac0e2640df7ea964c5226892a02f4c8910a4ecb397073a25db97b0f0f3ac9ff0ec591617c2c5ff3e327d0bc2f73e7d45e4bc3182904f912276c418d1a1d273a3224189c1e4d59bb5adffcaa2ada0147e2c663a89742b3689e34f580530994739cb4f5cf86715282fda45f0ea2e88d3f000537db825547cf174e64cbedbf73dcd45f13fe0c5c657a23f1418a75153355a0581dfdd0d678cc11c99440a845b49ceca9822cbe3ed9d870b4a2d21f48cc1dae9958d75bdc6efafa28846b6af260631f07f176e5e9b0891ee099b") r8 = getpid() sendmsg$nl_generic(r2, &(0x7f0000000940)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000009c0)={0x510, 0x23, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@nested={0x8, 0x148, 0x0, 0x1, [@nested={0x4, 0xf7}]}, @nested={0x353, 0xa0, 0x0, 0x1, [@generic="22e48b1d32a4c73672660094a0dcc93d39f6766184fd21626f6e5d3638c8b2879274b810762e97901368b1c3dcc77bcfcec0c4ba0cdaaa4cffecdabe7310d57c4d09629fa64cf7b58e18a82e2b9780c7c2d2e0c99a7cd65ec669c200a148a6de53489edaede9781d300d986dac383b0adcc41ca02a7985aca24bfc9408390f20e2e551a6e1e788c081479ddcf080598833aaeda408604848be468dba15bfa5df440281b644bc896452183bb0f32d324c77dd70271211ad37eed4bb72dbe4c0c2230f009074d9675cf54ee7e777843dc5a7d0bbb714b6d428e7a4abe89283b83b72e9365fed88f1523454f7", @generic="a8b4e795776a2d214c814c11", @nested={0x103, 0x23, 0x0, 0x1, [@generic="d30506f7565a0e56e83a681c6f6f97adf0b179a852232dd06e859ae2916f0bb05f3a6852e5ee71c0db9a4592f63b6f2c2d15aded16952a25816de1c56f500232bb95da0d49ab75d4a7407c7a9c3d6b1fbc3650dbb48ec6a5ec667be98d160ae463d2cdf55e1a90441016fd1ff38f44f91365670c3b3c4c9ef11a47318fff77601d19f520a974c13ec5cf1a38d383e9e133b0156fa0c3c2ed734bcc6525f014b2be925cc35d9c66899deda558581034892125e597e34488b08015c5", @typed={0x8, 0x41, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xc1, 0x0, 0x0, @pid=r8}, @nested={0x29, 0x3a, 0x0, 0x1, [@generic="8fe427afb5bbf9858b1380c36356ecdf4d60a5e47141e6dc6040269c5295051147", @nested={0x4, 0x8e}]}, @typed={0x8, 0x1f, 0x0, 0x0, @fd=r5}]}, @typed={0x8, 0x63, 0x0, 0x0, @pid=r7}, @nested={0xb2, 0x152, 0x0, 0x1, [@generic="92aed9650a25f36ff1781fe5bfa72c9b1494d5a522600095c57489208accd7f7c3dc8304a77f9a4d0ee872cb273d31633200cd2476786b0672a7767b5783b052f3f46dfef0b735b1f05c980773b238141db85f0d76d04b9370347b0fa8cff2627aad365a2953a4c07a8100f83d344fe17e2cf22c02541de02277b6a1e82cef796fcbe4c21504baf33958493007f0ca2213e4460d36945ce600f35455c01593a4e5528540a0021d07db7ab31514fd"]}, @nested={0x98, 0x29, 0x0, 0x1, [@nested={0x45, 0x137, 0x0, 0x1, [@generic="6b1725501f84e2efb9b6cfa861d01e03c2af52ff53c7fa0904b95f461ceb48d66c04a7d6c463ce9f5548552a10c7f15f75eedd43ffb3dd5a1c37040627b98c5ee0"]}, @nested={0x4c, 0x1a, 0x0, 0x1, [@generic="a7e0c774f870753fcdfd15d67cb14514b90ef0463e1cdb43b79d457d5dbf1474b22ffa87773a57ba99fe0cfe7792c360e5a5991b20948c10", @nested={0x4, 0xb5}, @nested={0x4, 0x34}, @generic="cac00f309d6f74de"]}]}]}, @typed={0x8, 0x12c, 0x0, 0x0, @pid=r8}, @typed={0x14, 0xe6, 0x0, 0x0, @ipv6=@remote}, @generic="8c21a19a14387810bd7ddd89180e019267b3c23208057c1fd9270e0710d23cd5e3b679cb5c75e2243f7c4f89fdd72beea71b094dcdcf6646267b997f981b73fc82b21e3b0055265cfa4401994c9fe3b7573730cb04ac2f65ecf929945eb102fd1c2abe8647a0a2f14ec17403d247eb4c7dcb4ec578fabeb1571dcee8d547674ce240ca6ce43f65c932096eff90fd2b19beba325e554a382300a486ce2f4c853a7f5487846d2d6c8344b5a36cbfbd8a0bb15d812540ec9429a7c3c229a5b752cfaf", @generic="1df01d89bef184422a859ffd32df16d3edefb6265684dcc1789310134a477406550353b6be273639903f7f125308c453", @generic="f23efdc8aa8f00cbf9392f2e9f8c39eb8dc32db3abc7c36d9b79d6b27bf58e0586a9fb0dab985691bb5149aaf0bf4bcffc47199d5dddbbab2f86d200073faa7a9c8f8f620e794415785f35a0f403a1a54de1a2af40f902d17ac4ee89b42c489b9357000916e3047b90c67e781049ae11f588548ccac4ab3a12a108dd568e82c57e88feb167b07238d7a694e3108b7739"]}, 0x353}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004053) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$kcm(0x25, 0x1, 0x0) sendmsg$inet(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x800) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70200001c000000b7030000000000008500000005000000bca900000000000035090100180000009500000000000000b702000004000000632af8ff00000000b50900001a000000c3aaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffa40900000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000018000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x5, 0x0, r10, 0x9c, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r11, r12}, 0xc) 4.46917282s ago: executing program 7 (id=6079): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x7, [@int={0xd, 0x0, 0x0, 0x1, 0x0, 0x49, 0x0, 0x3d, 0x3}, @enum64={0x8, 0x7, 0x0, 0x13, 0x1, 0x9, [{0x6, 0x3, 0x10000}, {0x1, 0x1, 0x3}, {0xd, 0x3, 0xc}, {0xc, 0x3ff, 0x5}, {0x6, 0x7, 0x10000}, {0x6, 0x1, 0xfffffffd}, {0x5, 0x2, 0x101}]}, @restrict={0xd, 0x0, 0x0, 0xb, 0x1}, @enum={0x2, 0x2, 0x0, 0x6, 0x4, [{0x7, 0xc}, {0xf, 0x10000}]}, @volatile={0xe, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x30, 0x61, 0x5f, 0x0]}}, &(0x7f0000000a80)=""/146, 0xc3, 0x92}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r2, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1e, 0x12, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6a0, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @generic={0xfc, 0x6, 0x8, 0xb, 0x18b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x5, 0x1000, &(0x7f0000001040)=""/4096, 0x40f00, 0xc, '\x00', r0, @sk_lookup, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x2, 0xb, 0xb, 0xe}, 0x10, r3, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000bc0)=[{0x3, 0x4, 0x1}, {0x2, 0x1, 0x8, 0x2}, {0x3, 0x4, 0xc, 0x7}, {0x1, 0x2, 0x4, 0x6}, {0x5, 0x4, 0xf, 0x1}, {0x0, 0x2, 0x3, 0x9}], 0x10, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x13) close(0x3) socket$nl_rdma(0x10, 0x3, 0x14) r4 = getpid() r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x40}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040005000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff000000000000000033"], 0x254}}, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x5, &(0x7f0000000040)=r9, 0x4) 4.297113721s ago: executing program 7 (id=6080): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x200830d}, 0x4, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/28], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000008000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000301e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) close(0xffffffffffffffff) 4.204176659s ago: executing program 7 (id=6081): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600800a0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x40000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1\xfeN\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xa4\x05\x00\x00\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cn[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16z\xa1\x85m\x1b\x19a\x10\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) getpid() r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20010, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x1946}, 0xa0, 0x0, 0x0, 0x8, 0x0, 0xfccc}, 0x0, 0xf7ffffffffffffff, r3, 0x3) socket$kcm(0x2b, 0x1, 0x0) mkdir(0x0, 0x18b) mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x200020, 0x0) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110aa000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 3.288095156s ago: executing program 7 (id=6082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)={r0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9e, 0x5c, 0x8, 0x5c, 0x0}}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000030000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7}, 0x80, 0x0}, 0x24000059) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r7}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) 0s ago: executing program 44 (id=6074): r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000000840), 0x3}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7ffeffff}, r0, 0xefffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4d31, 0x40080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0xeaff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000fffffffffffffffe", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@getqdisc={0x40, 0x26, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x10, 0xffe0}, {0x3, 0xffe0}, {0xc, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x800c851}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)="d79c42c42293555880313939266ad5d28f722a391de1d9c76e328410d1c782810e37f436ea9c5101a859604c8305fb5349c1ad926be477e551128426d83975e748a4891656e82f74663586592caeaca7be7ea75a05fceb941f01f181ffa12d298bf3c08d44808207", 0x68}, 0x1, 0x0, 0x0, 0x95}, 0x24000000) r10 = syz_open_procfs$namespace(r0, &(0x7f00000006c0)='ns/pid\x00') sendmsg$netlink(r7, &(0x7f0000000740)={&(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)=[{&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x74}], 0x1, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [r7, r8, r10]}}], 0x20, 0x40000}, 0x0) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r11, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3fb, 0x4, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}}, 0xd) sendmsg$sock(r9, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001000)='z', 0x101d0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 164 bytes leftover after parsing attributes in process `syz.9.4486'. [ 749.102553][T21003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.250298][T21478] netlink: 'syz.9.4486': attribute type 10 has an invalid length. [ 749.512398][T21478] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 749.645958][T21497] netlink: 'syz.8.4490': attribute type 21 has an invalid length. [ 749.660630][T21497] netlink: 128 bytes leftover after parsing attributes in process `syz.8.4490'. [ 749.710307][T21497] netlink: 'syz.8.4490': attribute type 4 has an invalid length. [ 749.912681][T21103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.060103][T21103] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.195448][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.202737][ T6048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.293016][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.300496][ T6048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.609437][T21003] veth0_vlan: entered promiscuous mode [ 750.643890][T21003] veth1_vlan: entered promiscuous mode [ 750.750764][T21003] veth0_macvtap: entered promiscuous mode [ 750.792450][T21003] veth1_macvtap: entered promiscuous mode [ 750.964286][T21003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.410838][T21003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.421733][T21541] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4498'. [ 751.462978][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.479008][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.526826][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.566442][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.615184][T21103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.645198][T21548] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 751.887467][ T8273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.915773][ T8273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.999668][T21103] veth0_vlan: entered promiscuous mode [ 752.070795][ T8278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.075344][T21103] veth1_vlan: entered promiscuous mode [ 752.111888][ T8278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.248067][T21103] veth0_macvtap: entered promiscuous mode [ 752.286838][T21103] veth1_macvtap: entered promiscuous mode [ 752.346177][T21103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.397871][T21103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.439675][ T8278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.486537][ T8278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.550783][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.566679][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.632381][ T8278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.659623][ T8278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.954284][ T30] audit: type=1107 audit(1769575484.142:5): pid=21584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 753.000129][ T8278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.047134][ T8278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.697038][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.704974][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.805569][T21615] xt_HMARK: spi-set and port-set can't be combined [ 755.954618][T21656] FAULT_INJECTION: forcing a failure. [ 755.954618][T21656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.076748][T21656] CPU: 1 UID: 0 PID: 21656 Comm: syz.6.4523 Not tainted syzkaller #0 PREEMPT(full) [ 756.076778][T21656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 756.076793][T21656] Call Trace: [ 756.076805][T21656] [ 756.076817][T21656] dump_stack_lvl+0xe8/0x150 [ 756.076866][T21656] should_fail_ex+0x412/0x560 [ 756.076925][T21656] _copy_from_user+0x2d/0xb0 [ 756.076970][T21656] __sys_bpf+0x229/0x920 [ 756.077012][T21656] ? __pfx___sys_bpf+0x10/0x10 [ 756.077118][T21656] ? do_syscall_64+0x9f/0xf80 [ 756.077152][T21656] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 756.077183][T21656] ? __pfx_ksys_write+0x10/0x10 [ 756.077248][T21656] __x64_sys_bpf+0x7c/0x90 [ 756.077285][T21656] do_syscall_64+0xe2/0xf80 [ 756.077305][T21656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.077321][T21656] ? trace_irq_disable+0x37/0x100 [ 756.077337][T21656] ? clear_bhb_loop+0x60/0xb0 [ 756.077370][T21656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.077388][T21656] RIP: 0033:0x7fa7a679aeb9 [ 756.077408][T21656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.077423][T21656] RSP: 002b:00007fa7a7662028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 756.077441][T21656] RAX: ffffffffffffffda RBX: 00007fa7a6a16180 RCX: 00007fa7a679aeb9 [ 756.077453][T21656] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 756.077464][T21656] RBP: 00007fa7a7662090 R08: 0000000000000000 R09: 0000000000000000 [ 756.077474][T21656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.077484][T21656] R13: 00007fa7a6a16218 R14: 00007fa7a6a16180 R15: 00007ffc05456d28 [ 756.077572][T21656] [ 757.712750][T21697] openvswitch: netlink: Multiple metadata blocks provided [ 757.745607][T21697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4535'. [ 760.238812][T21767] netlink: 'syz.3.4548': attribute type 10 has an invalid length. [ 760.620345][T21766] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4550'. [ 760.870592][T21789] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4551'. [ 761.525075][T21800] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4554'. [ 761.543098][T21800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4554'. [ 761.552668][T21800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4554'. [ 762.078225][T21812] netlink: 'syz.9.4558': attribute type 10 has an invalid length. [ 762.086161][T21812] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4558'. [ 762.197730][T21812] ipvlan1: entered promiscuous mode [ 762.227046][T21812] ipvlan1: entered allmulticast mode [ 762.257072][T21812] veth0_vlan: entered allmulticast mode [ 762.367437][T21812] bridge0: port 4(ipvlan1) entered blocking state [ 762.390740][T21812] bridge0: port 4(ipvlan1) entered disabled state [ 762.507250][T21812] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 763.611977][T21843] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4566'. [ 763.740694][T21848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4567'. [ 764.110847][T21861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4571'. [ 764.198892][T21861] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 765.461275][T21885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4577'. [ 765.646568][T21893] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4578'. [ 765.681036][T21893] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 766.195744][T21908] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.4582'. [ 766.236825][T21891] delete_channel: no stack [ 766.274692][T21908] netlink: Conntrack attr has 4 unknown bytes [ 766.386526][T21914] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4580'. [ 767.090937][T21931] FAULT_INJECTION: forcing a failure. [ 767.090937][T21931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.247693][T21931] CPU: 0 UID: 0 PID: 21931 Comm: syz.6.4589 Not tainted syzkaller #0 PREEMPT(full) [ 767.247726][T21931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 767.247739][T21931] Call Trace: [ 767.247748][T21931] [ 767.247758][T21931] dump_stack_lvl+0xe8/0x150 [ 767.247792][T21931] should_fail_ex+0x412/0x560 [ 767.247827][T21931] _copy_to_user+0x31/0xb0 [ 767.247864][T21931] simple_read_from_buffer+0xe1/0x170 [ 767.247903][T21931] proc_fail_nth_read+0x1bb/0x230 [ 767.247941][T21931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 767.247977][T21931] ? rw_verify_area+0x2a6/0x4d0 [ 767.248008][T21931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 767.248042][T21931] vfs_read+0x20c/0xa70 [ 767.248070][T21931] ? fdget_pos+0x246/0x320 [ 767.248100][T21931] ? __pfx___mutex_lock+0x10/0x10 [ 767.248125][T21931] ? __pfx_vfs_read+0x10/0x10 [ 767.248159][T21931] ? __fget_files+0x2a/0x420 [ 767.248189][T21931] ? __fget_files+0x3a0/0x420 [ 767.248211][T21931] ? __fget_files+0x2a/0x420 [ 767.248247][T21931] ksys_read+0x150/0x270 [ 767.248282][T21931] ? __pfx_ksys_read+0x10/0x10 [ 767.248311][T21931] ? __pfx_sock_ioctl+0x10/0x10 [ 767.248358][T21931] do_syscall_64+0xe2/0xf80 [ 767.248381][T21931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.248403][T21931] ? clear_bhb_loop+0x60/0xb0 [ 767.248429][T21931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.248450][T21931] RIP: 0033:0x7fa7a675b78e [ 767.248469][T21931] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 767.248488][T21931] RSP: 002b:00007fa7a76a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 767.248512][T21931] RAX: ffffffffffffffda RBX: 00007fa7a76a46c0 RCX: 00007fa7a675b78e [ 767.248527][T21931] RDX: 000000000000000f RSI: 00007fa7a76a40a0 RDI: 0000000000000007 [ 767.248539][T21931] RBP: 00007fa7a76a4090 R08: 0000000000000000 R09: 0000000000000000 [ 767.248552][T21931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.248564][T21931] R13: 00007fa7a6a16038 R14: 00007fa7a6a15fa0 R15: 00007ffc05456d28 [ 767.248605][T21931] [ 767.947880][T21947] netlink: 'syz.6.4592': attribute type 10 has an invalid length. [ 768.031163][T21947] geneve0: entered promiscuous mode [ 768.309044][T21947] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 768.935515][T21971] netlink: 'syz.6.4597': attribute type 8 has an invalid length. [ 769.579379][T21999] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4605'. [ 770.180586][T22022] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4612'. [ 770.242293][T22025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 770.640646][T22044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4615'. [ 770.686434][T22044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4615'. [ 770.695390][T22044] netlink: 'syz.1.4615': attribute type 6 has an invalid length. [ 770.962964][T22048] netlink: 'syz.3.4617': attribute type 1 has an invalid length. [ 771.058679][T16084] Bluetooth: hci5: ACL packet for unknown connection handle 768 [ 771.094053][T22048] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4617'. [ 771.137468][T22051] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4618'. [ 771.150893][T22048] netlink: 658 bytes leftover after parsing attributes in process `syz.3.4617'. [ 771.191014][T22048] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4617'. [ 771.401033][T22066] netlink: 'syz.6.4621': attribute type 2 has an invalid length. [ 771.433592][T22066] netlink: 'syz.6.4621': attribute type 8 has an invalid length. [ 771.456564][T22066] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4621'. [ 771.740444][T22077] openvswitch: netlink: IPv4 tunnel dst address is zero [ 772.355124][T22089] blkio.reset_stats is deprecated [ 773.260815][T22110] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4632'. [ 774.034395][T22144] netlink: 'syz.6.4642': attribute type 21 has an invalid length. [ 774.083208][T22144] IPv6: NLM_F_CREATE should be specified when creating new route [ 775.076726][T22186] __nla_validate_parse: 2 callbacks suppressed [ 775.076749][T22186] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.4654'. [ 775.984891][T22217] netlink: 'syz.9.4658': attribute type 1 has an invalid length. [ 776.016509][T22217] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4658'. [ 779.733110][T22284] netlink: 'syz.9.4671': attribute type 14 has an invalid length. [ 780.214674][T22295] netlink: 'syz.1.4674': attribute type 10 has an invalid length. [ 780.245198][T22295] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4674'. [ 780.293715][T22295] batman_adv: batadv0: Adding interface: vlan1 [ 780.319455][T22295] batman_adv: batadv0: The MTU of interface vlan1 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.375043][T22295] batman_adv: batadv0: Interface activated: vlan1 [ 780.762382][T22319] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4683'. [ 781.256276][T22328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4685'. [ 781.507216][T22330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4686'. [ 782.348696][T22346] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4691'. [ 783.912536][T22337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.920920][T22337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.939011][T22337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.946646][T22337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.032892][T22346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.053120][T22346] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 784.062565][T22346] bridge0: port 3(macsec0) entered disabled state [ 784.069267][T22346] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.076592][T22346] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.087427][T22346] bond0 (unregistering): Released all slaves [ 784.281293][T22360] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4696'. [ 784.317606][T22366] netlink: 'syz.1.4697': attribute type 1 has an invalid length. [ 784.373962][T22366] netlink: 'syz.1.4697': attribute type 2 has an invalid length. [ 784.957814][T22385] netlink: 'syz.3.4700': attribute type 8 has an invalid length. [ 785.109784][T22389] netlink: 'syz.9.4702': attribute type 39 has an invalid length. [ 785.200621][T22389] bond0: (slave syz_tun): Releasing backup interface [ 785.412549][T22406] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4707'. [ 785.763382][T22418] netlink: 'syz.9.4712': attribute type 3 has an invalid length. [ 785.775698][T22418] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4712'. [ 785.838201][T22420] netlink: 'syz.3.4713': attribute type 1 has an invalid length. [ 785.855484][T22420] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4713'. [ 786.109174][T22421] netlink: 184 bytes leftover after parsing attributes in process `syz.9.4712'. [ 787.720823][T22441] netlink: 'syz.3.4719': attribute type 4 has an invalid length. [ 787.729419][T22441] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4719'. [ 787.750536][T22441] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4719'. [ 788.285282][T22443] tc_dump_action: action bad kind [ 788.355384][T22446] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4721'. [ 788.476804][T22450] netlink: 80 bytes leftover after parsing attributes in process `syz.9.4723'. [ 788.501333][T22450] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 788.544678][T22454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4724'. [ 788.570648][T22454] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 788.728581][T22465] netlink: 956 bytes leftover after parsing attributes in process `syz.1.4730'. [ 788.920316][T22463] netlink: 'syz.8.4729': attribute type 8 has an invalid length. [ 790.262178][T22509] openvswitch: netlink: Message has 716 unknown bytes. [ 791.792245][T22487] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 791.812023][T22498] __nla_validate_parse: 1 callbacks suppressed [ 791.812043][T22498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4740'. [ 792.205155][T22533] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4749'. [ 792.754866][T22556] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 792.768762][T22556] dvmrp1: ignored: set checksum disabled [ 793.192427][T22562] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.4757'. [ 793.533033][T22580] netlink: 'syz.8.4760': attribute type 10 has an invalid length. [ 793.544956][T22580] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4760'. [ 793.568126][T22580] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 796.578749][T22605] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4766'. [ 796.596728][T22605] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4766'. [ 796.791882][T22614] FAULT_INJECTION: forcing a failure. [ 796.791882][T22614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.824027][T22614] CPU: 1 UID: 0 PID: 22614 Comm: syz.3.4768 Not tainted syzkaller #0 PREEMPT(full) [ 796.824057][T22614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 796.824070][T22614] Call Trace: [ 796.824078][T22614] [ 796.824087][T22614] dump_stack_lvl+0xe8/0x150 [ 796.824118][T22614] should_fail_ex+0x412/0x560 [ 796.824148][T22614] _copy_to_user+0x31/0xb0 [ 796.824182][T22614] simple_read_from_buffer+0xe1/0x170 [ 796.824209][T22614] proc_fail_nth_read+0x1bb/0x230 [ 796.824241][T22614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 796.824272][T22614] ? rw_verify_area+0x2a6/0x4d0 [ 796.824300][T22614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 796.824331][T22614] vfs_read+0x20c/0xa70 [ 796.824358][T22614] ? fdget_pos+0x246/0x320 [ 796.824410][T22614] ? __pfx___mutex_lock+0x10/0x10 [ 796.824434][T22614] ? __pfx_vfs_read+0x10/0x10 [ 796.824465][T22614] ? __fget_files+0x2a/0x420 [ 796.824500][T22614] ? __fget_files+0x3a0/0x420 [ 796.824520][T22614] ? __fget_files+0x2a/0x420 [ 796.824552][T22614] ksys_read+0x150/0x270 [ 796.824583][T22614] ? __pfx_ksys_read+0x10/0x10 [ 796.824624][T22614] do_syscall_64+0xe2/0xf80 [ 796.824645][T22614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.824663][T22614] ? trace_irq_disable+0x37/0x100 [ 796.824684][T22614] ? clear_bhb_loop+0x60/0xb0 [ 796.824708][T22614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.824728][T22614] RIP: 0033:0x7f002bf5b78e [ 796.824747][T22614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 796.824765][T22614] RSP: 002b:00007f002ce34fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 796.824786][T22614] RAX: ffffffffffffffda RBX: 00007f002ce356c0 RCX: 00007f002bf5b78e [ 796.824802][T22614] RDX: 000000000000000f RSI: 00007f002ce350a0 RDI: 0000000000000005 [ 796.824814][T22614] RBP: 00007f002ce35090 R08: 0000000000000000 R09: 0000000000000000 [ 796.824826][T22614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.824837][T22614] R13: 00007f002c216038 R14: 00007f002c215fa0 R15: 00007ffdcebf4758 [ 796.824870][T22614] [ 797.184837][T22622] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4772'. [ 797.281347][T22627] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4772'. [ 797.541798][T22639] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4776'. [ 797.829516][T22652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4780'. [ 798.099963][T22658] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4781'. [ 798.202960][T22660] netlink: 'syz.1.4782': attribute type 21 has an invalid length. [ 798.211455][T22660] IPv6: NLM_F_CREATE should be specified when creating new route [ 798.642206][T22668] FAULT_INJECTION: forcing a failure. [ 798.642206][T22668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.657557][T22668] CPU: 1 UID: 0 PID: 22668 Comm: syz.3.4784 Not tainted syzkaller #0 PREEMPT(full) [ 798.657587][T22668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 798.657600][T22668] Call Trace: [ 798.657608][T22668] [ 798.657617][T22668] dump_stack_lvl+0xe8/0x150 [ 798.657650][T22668] should_fail_ex+0x412/0x560 [ 798.657680][T22668] _copy_from_user+0x2d/0xb0 [ 798.657713][T22668] ___sys_sendmsg+0x1c6/0x360 [ 798.657739][T22668] ? __lock_acquire+0x6b5/0x2cf0 [ 798.657773][T22668] ? __pfx____sys_sendmsg+0x10/0x10 [ 798.657837][T22668] ? __fget_files+0x2a/0x420 [ 798.657859][T22668] ? __fget_files+0x3a0/0x420 [ 798.657892][T22668] __x64_sys_sendmsg+0x1bd/0x2a0 [ 798.657923][T22668] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 798.657961][T22668] ? __pfx_ksys_write+0x10/0x10 [ 798.658003][T22668] do_syscall_64+0xe2/0xf80 [ 798.658025][T22668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.658045][T22668] ? trace_irq_disable+0x37/0x100 [ 798.658064][T22668] ? clear_bhb_loop+0x60/0xb0 [ 798.658088][T22668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.658107][T22668] RIP: 0033:0x7f002bf9aeb9 [ 798.658126][T22668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.658144][T22668] RSP: 002b:00007f002ce35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.658166][T22668] RAX: ffffffffffffffda RBX: 00007f002c215fa0 RCX: 00007f002bf9aeb9 [ 798.658180][T22668] RDX: 0000000000000040 RSI: 0000200000000300 RDI: 0000000000000003 [ 798.658193][T22668] RBP: 00007f002ce35090 R08: 0000000000000000 R09: 0000000000000000 [ 798.658205][T22668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.658217][T22668] R13: 00007f002c216038 R14: 00007f002c215fa0 R15: 00007ffdcebf4758 [ 798.658249][T22668] [ 799.097501][T22681] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4789'. [ 799.118032][T22682] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4787'. [ 799.188666][T22682] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4787'. [ 799.318925][T22682] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4787'. [ 800.874020][T22698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4792'. [ 800.998290][T22699] netlink: 'syz.1.4791': attribute type 10 has an invalid length. [ 801.125965][T22699] macvlan1: entered allmulticast mode [ 801.157558][T22699] veth1_vlan: entered allmulticast mode [ 801.199856][T22699] team0: Port device macvlan1 added [ 801.586623][T22697] macsec0: entered allmulticast mode [ 801.664407][T22697] veth1_macvtap: entered allmulticast mode [ 801.686580][T22697] macsec0: entered promiscuous mode [ 802.349888][T22737] netlink: 'syz.1.4799': attribute type 1 has an invalid length. [ 802.817181][T22745] lo speed is unknown, defaulting to 1000 [ 802.825484][T22745] lo speed is unknown, defaulting to 1000 [ 802.835905][T22745] lo speed is unknown, defaulting to 1000 [ 802.881849][T22745] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 803.158282][T22762] __nla_validate_parse: 1 callbacks suppressed [ 803.158334][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4805'. [ 803.176543][T22745] lo speed is unknown, defaulting to 1000 [ 803.188502][T22745] lo speed is unknown, defaulting to 1000 [ 805.398678][T22745] lo speed is unknown, defaulting to 1000 [ 805.410636][T22745] lo speed is unknown, defaulting to 1000 [ 805.448986][T22745] lo speed is unknown, defaulting to 1000 [ 805.507992][T22769] lo speed is unknown, defaulting to 1000 [ 805.583980][T22778] openvswitch: netlink: Missing key (keys=40, expected=100) [ 805.687671][T22778] lo speed is unknown, defaulting to 1000 [ 805.802170][T22784] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4811'. [ 805.859129][T22788] netlink: 'syz.8.4811': attribute type 10 has an invalid length. [ 805.937490][T22789] netlink: 'syz.8.4811': attribute type 10 has an invalid length. [ 806.010896][T22788] team0: Port device dummy0 added [ 806.112320][T22789] team0: Port device dummy0 removed [ 806.138894][T22789] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 806.407034][T22792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4812'. [ 807.339467][T22799] : port 1(erspan0) entered blocking state [ 807.345694][T22799] : port 1(erspan0) entered disabled state [ 807.352080][T22799] erspan0: entered allmulticast mode [ 807.362683][T22799] erspan0: entered promiscuous mode [ 808.533180][T22835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4824'. [ 810.029039][T22846] netlink: 'syz.6.4825': attribute type 2 has an invalid length. [ 810.973029][T22853] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4830'. [ 812.081141][T22862] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4833'. [ 813.317388][T22851] netlink: 763 bytes leftover after parsing attributes in process `syz.1.4828'. [ 813.496163][T22874] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4838'. [ 813.522963][T22876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4837'. [ 813.544723][T22876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4837'. [ 813.595064][T22879] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4839'. [ 813.865821][T22879] sit0: entered promiscuous mode [ 813.980553][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.990677][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.240727][T22893] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4843'. [ 814.883945][T22905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4846'. [ 814.962738][T22900] lo speed is unknown, defaulting to 1000 [ 816.940823][T22944] netlink: 'syz.6.4857': attribute type 21 has an invalid length. [ 816.952004][T22944] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4857'. [ 817.086131][T22948] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4858'. [ 817.283280][T22950] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4857'. [ 818.441136][T22912] lo speed is unknown, defaulting to 1000 [ 819.370127][T22971] netlink: 480 bytes leftover after parsing attributes in process `syz.9.4863'. [ 819.614264][T22971] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4863'. [ 819.761424][T22974] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 819.775924][T22974] dvmrp1: ignored: set checksum disabled [ 820.103924][T16084] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 820.172686][T22996] lo speed is unknown, defaulting to 1000 [ 820.266991][T23005] netlink: 'syz.9.4869': attribute type 8 has an invalid length. [ 821.747655][T23033] netlink: 124 bytes leftover after parsing attributes in process `syz.8.4880'. [ 821.886180][T23037] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 821.892742][T23037] dvmrp1: ignored: set checksum disabled [ 821.988310][T16084] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 822.231418][T23061] netlink: 'syz.3.4889': attribute type 21 has an invalid length. [ 822.241326][T23061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4889'. [ 822.319113][T23055] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4887'. [ 822.329021][T23055] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4887'. [ 823.708175][T23097] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4898'. [ 824.999396][T23145] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4912'. [ 826.274943][T23166] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4919'. [ 826.364898][T16084] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 826.418660][T23167] €: port 1(team0) entered blocking state [ 826.424648][T23167] €: port 1(team0) entered disabled state [ 826.487163][T23167] team0: entered allmulticast mode [ 826.510995][T23167] team_slave_0: entered allmulticast mode [ 826.532082][T23167] team_slave_1: entered allmulticast mode [ 826.564709][T23167] team0: entered promiscuous mode [ 826.571487][T23167] team_slave_0: entered promiscuous mode [ 826.577957][T23167] team_slave_1: entered promiscuous mode [ 827.036555][T23189] netlink: 'syz.6.4925': attribute type 21 has an invalid length. [ 828.440203][T16084] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 828.502144][T23221] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4935'. [ 828.812625][T23231] lo speed is unknown, defaulting to 1000 [ 830.578258][T23245] netlink: 7 bytes leftover after parsing attributes in process `syz.8.4940'. [ 830.752299][T23245] netlink: 7 bytes leftover after parsing attributes in process `syz.8.4940'. [ 831.152920][T23270] netlink: 'syz.9.4949': attribute type 10 has an invalid length. [ 831.181402][T16084] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 831.442217][T23280] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4953'. [ 831.861631][T23308] netlink: 'syz.6.4961': attribute type 10 has an invalid length. [ 831.884455][T23308] bridge0: port 3(macsec0) entered blocking state [ 831.891658][T23308] bridge0: port 3(macsec0) entered disabled state [ 831.898964][T23308] macsec0: entered allmulticast mode [ 831.904313][T23308] veth1_macvtap: entered allmulticast mode [ 831.914115][T23308] macsec0: entered promiscuous mode [ 831.920812][T23308] bridge0: port 3(macsec0) entered blocking state [ 831.927463][T23308] bridge0: port 3(macsec0) entered forwarding state [ 832.257126][T16084] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 832.844704][T23319] lo speed is unknown, defaulting to 1000 [ 832.909479][T23321] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4965'. [ 832.952349][T23326] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4966'. [ 833.042609][T23321] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4965'. [ 833.527542][T23327] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4968'. [ 833.780143][T23346] netlink: 'syz.1.4971': attribute type 12 has an invalid length. [ 833.788431][T23344] netlink: 'syz.1.4971': attribute type 12 has an invalid length. [ 833.797606][T23346] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4971'. [ 833.808112][T23344] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4971'. [ 833.945515][T23344] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4971'. [ 834.123009][T23354] netlink: 'syz.8.4974': attribute type 10 has an invalid length. [ 834.136061][T23354] macsec0: left promiscuous mode [ 834.142361][T23354] macsec0: left allmulticast mode [ 834.179189][T23354] veth1_macvtap: left allmulticast mode [ 834.242354][T23354] bridge0: port 3(macsec0) entered blocking state [ 834.281249][T23354] bridge0: port 3(macsec0) entered disabled state [ 834.294965][T23354] macsec0: entered allmulticast mode [ 834.300594][T23354] veth1_macvtap: entered allmulticast mode [ 834.340932][T23354] macsec0: entered promiscuous mode [ 835.513795][T23391] delete_channel: no stack [ 835.523271][T23391] delete_channel: no stack [ 837.048596][T23431] netlink: 'syz.8.4989': attribute type 18 has an invalid length. [ 837.200546][T23434] netlink: 'syz.6.4990': attribute type 3 has an invalid length. [ 837.209001][T23434] __nla_validate_parse: 4 callbacks suppressed [ 837.209020][T23434] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4990'. [ 839.562832][T23484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.618057][T23487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 840.127982][T23512] netlink: 'syz.3.5011': attribute type 2 has an invalid length. [ 840.885204][T23533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5017'. [ 841.172433][T23518] netlink: set zone limit has 4 unknown bytes [ 841.803627][T23547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.861734][T23547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.159540][T23559] netlink: 'syz.1.5026': attribute type 10 has an invalid length. [ 842.391043][T23560] netlink: 'syz.1.5026': attribute type 10 has an invalid length. [ 842.470763][T18105] lo speed is unknown, defaulting to 1000 [ 842.480479][T18105] syz1: Port: 1 Link DOWN [ 843.830262][T23591] netlink: zone id is out of range [ 843.868708][T23591] netlink: zone id is out of range [ 843.875071][T23591] netlink: zone id is out of range [ 843.917348][T23591] netlink: set zone limit has 8 unknown bytes [ 844.028018][T23593] net veth1_virt_wifi €Â: renamed from virt_wifi0 [ 845.339116][T23621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5047'. [ 845.403025][T23621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5047'. [ 846.013069][T23630] netlink: 'syz.8.5048': attribute type 1 has an invalid length. [ 846.337277][T23641] netlink: 'syz.6.5052': attribute type 10 has an invalid length. [ 846.554132][T23641] team0: Device ipvlan1 failed to register rx_handler [ 846.704450][T23650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5055'. [ 847.171901][T23653] wlan0 speed is unknown, defaulting to 1000 [ 847.221349][T23653] wlan0 speed is unknown, defaulting to 1000 [ 847.249674][T23653] wlan0 speed is unknown, defaulting to 1000 [ 848.158898][T23653] infiniband syz0: set down [ 848.167366][T23653] infiniband syz0: added wlan0 [ 848.203503][ T984] wlan0 speed is unknown, defaulting to 1000 [ 848.264344][T23653] RDS/IB: syz0: added [ 848.268898][T23653] smc: adding ib device syz0 with port count 1 [ 848.275260][T23653] smc: ib device syz0 port 1 has no pnetid [ 848.281619][ T984] wlan0 speed is unknown, defaulting to 1000 [ 848.310473][T23653] wlan0 speed is unknown, defaulting to 1000 [ 848.860648][T23688] åÑ: renamed from bond_slave_0 (while UP) [ 849.114739][T23692] delete_channel: no stack [ 850.893345][T23708] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5070'. [ 850.911159][T23653] wlan0 speed is unknown, defaulting to 1000 [ 850.917466][T23715] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 850.922982][T23715] dvmrp1: ignored: set checksum disabled [ 851.369635][T23653] wlan0 speed is unknown, defaulting to 1000 [ 851.383719][T23727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5076'. [ 851.613536][T23737] lo speed is unknown, defaulting to 1000 [ 851.734032][T23653] wlan0 speed is unknown, defaulting to 1000 [ 851.899990][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 851.962567][T23752] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 851.971455][T23752] dvmrp1: ignored: set checksum disabled [ 852.056217][T23737] wlan0 speed is unknown, defaulting to 1000 [ 852.173532][T23756] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5087'. [ 852.389130][T23653] wlan0 speed is unknown, defaulting to 1000 [ 853.488654][T23792] C: renamed from team_slave_0 (while UP) [ 853.497512][T23792] netlink: 'syz.3.5100': attribute type 8 has an invalid length. [ 853.506110][T23792] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 853.565864][T23794] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 853.586458][T23794] dvmrp1: ignored: set checksum disabled [ 853.778055][T23803] netlink: 1 bytes leftover after parsing attributes in process `syz.8.5106'. [ 853.914523][T23814] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5107'. [ 853.969081][T23804] netlink: 'syz.1.5104': attribute type 46 has an invalid length. [ 853.981995][T23804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5104'. [ 854.199146][T16084] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 854.638920][T23835] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5115'. [ 854.657876][T23835] netlink: 'syz.9.5115': attribute type 10 has an invalid length. [ 855.048559][T23840] netlink: 'syz.6.5117': attribute type 2 has an invalid length. [ 855.100286][T23847] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5120'. [ 855.299339][T23849] netlink: 'syz.3.5121': attribute type 10 has an invalid length. [ 855.371209][T23849] netlink: zone id is out of range [ 855.389268][T23849] netlink: zone id is out of range [ 855.394552][T23849] netlink: zone id is out of range [ 855.416033][T23849] netlink: zone id is out of range [ 855.438362][T23849] netlink: zone id is out of range [ 855.451563][T23849] netlink: zone id is out of range [ 855.480292][T23849] netlink: zone id is out of range [ 855.485698][T23849] netlink: zone id is out of range [ 855.491563][T23849] netlink: zone id is out of range [ 855.685647][ T5842] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 857.017242][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 857.745886][T23878] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 857.764071][T23878] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 857.775716][T23878] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 858.074977][T16084] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 858.521035][T23934] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.5151'. [ 859.144674][T16084] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 861.984057][T23968] FAULT_INJECTION: forcing a failure. [ 861.984057][T23968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 862.002640][T23967] netlink: 284 bytes leftover after parsing attributes in process `syz.6.5162'. [ 862.017509][T23968] CPU: 1 UID: 0 PID: 23968 Comm: syz.9.5160 Not tainted syzkaller #0 PREEMPT(full) [ 862.017537][T23968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 862.017551][T23968] Call Trace: [ 862.017559][T23968] [ 862.017568][T23968] dump_stack_lvl+0xe8/0x150 [ 862.017601][T23968] should_fail_ex+0x412/0x560 [ 862.017632][T23968] _copy_from_iter+0x1d3/0x1670 [ 862.017666][T23968] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 862.017701][T23968] ? __pfx__copy_from_iter+0x10/0x10 [ 862.017730][T23968] ? __build_skb_around+0x22d/0x3c0 [ 862.017758][T23968] ? __alloc_skb+0x193/0x390 [ 862.017781][T23968] ? netlink_sendmsg+0x650/0xb40 [ 862.017801][T23968] ? skb_put+0x11b/0x210 [ 862.017830][T23968] netlink_sendmsg+0x6c0/0xb40 [ 862.017862][T23968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 862.017888][T23968] ? aa_sock_msg_perm+0xf1/0x1b0 [ 862.017916][T23968] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 862.017940][T23968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 862.017973][T23968] ____sys_sendmsg+0xa68/0xad0 [ 862.018008][T23968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 862.018043][T23968] ? import_iovec+0x73/0xa0 [ 862.018076][T23968] ___sys_sendmsg+0x2a5/0x360 [ 862.018100][T23968] ? __lock_acquire+0x6b5/0x2cf0 [ 862.018131][T23968] ? __pfx____sys_sendmsg+0x10/0x10 [ 862.018201][T23968] ? __fget_files+0x2a/0x420 [ 862.018221][T23968] ? __fget_files+0x3a0/0x420 [ 862.018254][T23968] __x64_sys_sendmsg+0x1bd/0x2a0 [ 862.018283][T23968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 862.018320][T23968] ? __pfx_ksys_write+0x10/0x10 [ 862.018360][T23968] do_syscall_64+0xe2/0xf80 [ 862.018381][T23968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.018401][T23968] ? clear_bhb_loop+0x60/0xb0 [ 862.018424][T23968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.018444][T23968] RIP: 0033:0x7f0300f9aeb9 [ 862.018463][T23968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.018480][T23968] RSP: 002b:00007f0301ea3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 862.018502][T23968] RAX: ffffffffffffffda RBX: 00007f0301216090 RCX: 00007f0300f9aeb9 [ 862.018516][T23968] RDX: 0000000000000810 RSI: 0000200000000000 RDI: 0000000000000008 [ 862.018528][T23968] RBP: 00007f0301ea3090 R08: 0000000000000000 R09: 0000000000000000 [ 862.018540][T23968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.018551][T23968] R13: 00007f0301216128 R14: 00007f0301216090 R15: 00007ffc495ee398 [ 862.018584][T23968] [ 862.278140][T23967] netlink: 284 bytes leftover after parsing attributes in process `syz.6.5162'. [ 862.489254][T23978] netlink: 'syz.3.5167': attribute type 29 has an invalid length. [ 863.088059][T23989] netlink: 'syz.9.5169': attribute type 4 has an invalid length. [ 863.116503][T23989] netlink: 152 bytes leftover after parsing attributes in process `syz.9.5169'. [ 863.147699][T23989] net_ratelimit: 10 callbacks suppressed [ 863.147720][T23989] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 863.558096][T23988] delete_channel: no stack [ 864.000672][T24010] FAULT_INJECTION: forcing a failure. [ 864.000672][T24010] name failslab, interval 1, probability 0, space 0, times 0 [ 864.042556][T24010] CPU: 1 UID: 0 PID: 24010 Comm: syz.6.5174 Not tainted syzkaller #0 PREEMPT(full) [ 864.042586][T24010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 864.042599][T24010] Call Trace: [ 864.042607][T24010] [ 864.042616][T24010] dump_stack_lvl+0xe8/0x150 [ 864.042648][T24010] should_fail_ex+0x412/0x560 [ 864.042678][T24010] should_failslab+0xa8/0x100 [ 864.042704][T24010] __kmalloc_noprof+0xde/0x7e0 [ 864.042724][T24010] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 864.042760][T24010] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 864.042796][T24010] genl_family_rcv_msg_doit+0xd9/0x330 [ 864.042822][T24010] ? irqentry_exit+0x59c/0x620 [ 864.042849][T24010] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 864.042886][T24010] ? apparmor_capable+0x137/0x1a0 [ 864.042918][T24010] ? bpf_lsm_capable+0x9/0x20 [ 864.042945][T24010] ? security_capable+0x7e/0x2c0 [ 864.042976][T24010] genl_rcv_msg+0x61c/0x7a0 [ 864.043020][T24010] ? __pfx_genl_rcv_msg+0x10/0x10 [ 864.043047][T24010] ? __pfx_seg6_genl_get_tunsrc+0x10/0x10 [ 864.043085][T24010] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 864.043118][T24010] netlink_rcv_skb+0x232/0x4b0 [ 864.043141][T24010] ? __pfx_genl_rcv_msg+0x10/0x10 [ 864.043170][T24010] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 864.043189][T24010] ? genl_rcv+0x19/0x40 [ 864.043234][T24010] ? down_read+0x272/0x2e0 [ 864.043257][T24010] ? genl_rcv+0xd/0x40 [ 864.043285][T24010] genl_rcv+0x28/0x40 [ 864.043310][T24010] netlink_unicast+0x80f/0x9b0 [ 864.043352][T24010] ? __pfx_netlink_unicast+0x10/0x10 [ 864.043385][T24010] ? netlink_sendmsg+0x650/0xb40 [ 864.043405][T24010] ? skb_put+0x11b/0x210 [ 864.043436][T24010] netlink_sendmsg+0x813/0xb40 [ 864.043469][T24010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.043495][T24010] ? aa_sock_msg_perm+0xf1/0x1b0 [ 864.043523][T24010] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 864.043547][T24010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.043568][T24010] ____sys_sendmsg+0xa68/0xad0 [ 864.043596][T24010] ? __might_fault+0xaf/0x130 [ 864.043633][T24010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 864.043672][T24010] ? import_iovec+0x73/0xa0 [ 864.043708][T24010] ___sys_sendmsg+0x2a5/0x360 [ 864.043734][T24010] ? __lock_acquire+0x6b5/0x2cf0 [ 864.043768][T24010] ? __pfx____sys_sendmsg+0x10/0x10 [ 864.043835][T24010] ? __fget_files+0x2a/0x420 [ 864.043857][T24010] ? __fget_files+0x3a0/0x420 [ 864.043891][T24010] __x64_sys_sendmsg+0x1bd/0x2a0 [ 864.043916][T24010] ? perf_trace_run_bpf_submit+0x100/0x170 [ 864.043939][T24010] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 864.043979][T24010] ? __pfx_ksys_write+0x10/0x10 [ 864.044029][T24010] do_syscall_64+0xe2/0xf80 [ 864.044051][T24010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.044071][T24010] ? clear_bhb_loop+0x60/0xb0 [ 864.044095][T24010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.044114][T24010] RIP: 0033:0x7fa7a679aeb9 [ 864.044132][T24010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.044149][T24010] RSP: 002b:00007fa7a76a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.044170][T24010] RAX: ffffffffffffffda RBX: 00007fa7a6a15fa0 RCX: 00007fa7a679aeb9 [ 864.044184][T24010] RDX: 0000000000000810 RSI: 0000200000000000 RDI: 0000000000000008 [ 864.044197][T24010] RBP: 00007fa7a76a4090 R08: 0000000000000000 R09: 0000000000000000 [ 864.044209][T24010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.044221][T24010] R13: 00007fa7a6a16038 R14: 00007fa7a6a15fa0 R15: 00007ffc05456d28 [ 864.044254][T24010] [ 864.407730][T24019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5175'. [ 864.535279][T24026] netlink: 272 bytes leftover after parsing attributes in process `syz.9.5179'. [ 864.614255][T24033] netlink: 'syz.1.5182': attribute type 1 has an invalid length. [ 864.627718][T24033] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5182'. [ 867.865353][T24104] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5205'. [ 868.344266][T24113] netlink: 'syz.1.5208': attribute type 10 has an invalid length. [ 868.551099][T24124] netlink: 260 bytes leftover after parsing attributes in process `syz.6.5211'. [ 868.569139][T24126] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5213'. [ 868.616726][T24124] netlink: 260 bytes leftover after parsing attributes in process `syz.6.5211'. [ 868.665459][T24126] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 868.687984][T24131] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5211'. [ 869.983138][T24163] netlink: 'syz.8.5225': attribute type 10 has an invalid length. [ 870.054122][T24163] lo speed is unknown, defaulting to 1000 [ 870.127076][T24163] wlan0 speed is unknown, defaulting to 1000 [ 870.345394][T24175] netlink: 'syz.6.5231': attribute type 21 has an invalid length. [ 870.353884][T24175] netlink: 'syz.6.5231': attribute type 6 has an invalid length. [ 870.563017][T24181] netlink: 'syz.3.5233': attribute type 21 has an invalid length. [ 870.616820][T24181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5233'. [ 872.747217][T24213] delete_channel: no stack [ 874.311265][T24237] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 874.426589][T24237] dvmrp1: ignored: set checksum disabled [ 874.441368][T24241] netlink: 'syz.8.5254': attribute type 1 has an invalid length. [ 874.460575][T24241] netlink: 'syz.8.5254': attribute type 2 has an invalid length. [ 874.482430][T24241] netlink: 16146 bytes leftover after parsing attributes in process `syz.8.5254'. [ 875.368136][T24260] netlink: 'syz.8.5261': attribute type 10 has an invalid length. [ 875.422693][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.429140][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.981737][T24305] netlink: 'syz.1.5275': attribute type 10 has an invalid length. [ 878.460180][T24335] netlink: 'syz.1.5284': attribute type 2 has an invalid length. [ 878.468619][T24335] netlink: 'syz.1.5284': attribute type 1 has an invalid length. [ 878.481525][T24335] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5284'. [ 878.614910][T24337] netlink: 'syz.9.5285': attribute type 1 has an invalid length. [ 878.679401][T24341] netlink: 'syz.6.5287': attribute type 10 has an invalid length. [ 879.124634][T24368] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5296'. [ 879.143128][T24369] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5296'. [ 879.795084][T24389] lo speed is unknown, defaulting to 1000 [ 879.819576][T24389] wlan0 speed is unknown, defaulting to 1000 [ 880.057471][T24398] m1Ie5n: entered promiscuous mode [ 880.894441][T24418] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5309'. [ 881.195056][T24432] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5314'. [ 881.216007][T24432] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 881.434721][T24442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5317'. [ 881.464584][T24442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5317'. [ 882.456223][T24438] delete_channel: no stack [ 882.516907][T24443] delete_channel: no stack [ 882.772725][T24458] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.5323'. [ 882.974429][T24470] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5325'. [ 883.032731][T24471] netlink: 'syz.1.5327': attribute type 10 has an invalid length. [ 883.053872][T24471] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5327'. [ 883.074568][T24471] dummy0: entered promiscuous mode [ 883.080662][T24471] bridge0: port 4(dummy0) entered blocking state [ 883.088551][T24471] bridge0: port 4(dummy0) entered disabled state [ 883.095228][T24471] dummy0: entered allmulticast mode [ 883.583187][T24484] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 883.601017][T24484] syzkaller0: linktype set to 32 [ 883.791001][T24492] __nla_validate_parse: 1 callbacks suppressed [ 883.791027][T24492] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5332'. [ 883.827898][T24492] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 883.926963][T24497] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5331'. [ 884.146555][T24507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5336'. [ 884.205602][T24507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5336'. [ 884.227532][T24507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 884.234789][T24504] delete_channel: no stack [ 884.717411][T24517] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5339'. [ 884.743702][T24517] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5339'. [ 884.839306][T24527] netlink: 100 bytes leftover after parsing attributes in process `syz.8.5342'. [ 884.919886][T24532] netlink: 10420 bytes leftover after parsing attributes in process `syz.9.5344'. [ 885.136888][T24547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5347'. [ 886.818652][T24587] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5357'. [ 886.975211][T24589] netlink: zone id is out of range [ 886.995153][T24589] netlink: zone id is out of range [ 887.000788][T24589] netlink: zone id is out of range [ 887.006041][T24589] netlink: zone id is out of range [ 887.011628][T24589] netlink: zone id is out of range [ 887.037514][T24589] netlink: zone id is out of range [ 887.042836][T24589] netlink: zone id is out of range [ 887.087604][T24589] netlink: zone id is out of range [ 887.093100][T24589] netlink: zone id is out of range [ 887.128788][T24589] netlink: zone id is out of range [ 887.447601][T24601] netlink: 'syz.9.5360': attribute type 10 has an invalid length. [ 887.560742][T24601] team0: left allmulticast mode [ 887.715923][T24601] team_slave_0: left allmulticast mode [ 887.755510][T24601] team_slave_1: left allmulticast mode [ 887.806470][T24601] team0: left promiscuous mode [ 887.811350][T24601] team_slave_0: left promiscuous mode [ 887.928506][T24601] team_slave_1: left promiscuous mode [ 887.935294][T24601] €: port 1(team0) entered disabled state [ 888.260918][T24601] batman_adv: batadv0: Adding interface: team0 [ 888.423730][T24601] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.512827][T24601] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 889.062116][T24619] __nla_validate_parse: 6 callbacks suppressed [ 889.062167][T24619] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5366'. [ 889.119188][T24619] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5366'. [ 889.550996][T24629] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5370'. [ 889.746134][T24633] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5372'. [ 889.876858][T24637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5374'. [ 890.302655][T24652] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.5378'. [ 890.317371][T24652] netlink: 'syz.1.5378': attribute type 39 has an invalid length. [ 890.692744][T24668] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5383'. [ 890.743067][T24669] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5382'. [ 890.906690][T24675] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5385'. [ 891.902383][T24701] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5391'. [ 892.140316][T24707] netlink: 'syz.8.5394': attribute type 21 has an invalid length. [ 892.148485][T24707] IPv6: NLM_F_CREATE should be specified when creating new route [ 892.369061][T24705] delete_channel: no stack [ 893.115988][ T30] audit: type=1107 audit(1769575624.272:6): pid=24726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 894.612628][T24760] netlink: 'syz.9.5415': attribute type 2 has an invalid length. [ 894.620664][T24760] netlink: 'syz.9.5415': attribute type 8 has an invalid length. [ 894.630382][T24760] __nla_validate_parse: 5 callbacks suppressed [ 894.630401][T24760] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5415'. [ 894.748594][T24767] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5418'. [ 894.989253][T24775] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5421'. [ 895.638777][T24797] netlink: 'syz.9.5429': attribute type 2 has an invalid length. [ 895.646727][T24797] netlink: 'syz.9.5429': attribute type 8 has an invalid length. [ 895.654630][T24797] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5429'. [ 896.336792][T24814] net_ratelimit: 8 callbacks suppressed [ 896.336812][T24814] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 896.703135][T24824] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5437'. [ 896.764787][T24823] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 896.772103][T24823] dvmrp1: ignored: set checksum disabled [ 897.020899][T24837] netlink: 'syz.6.5442': attribute type 2 has an invalid length. [ 897.028884][T24837] netlink: 'syz.6.5442': attribute type 8 has an invalid length. [ 897.047140][T24837] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5442'. [ 897.513112][T24853] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5447'. [ 897.900274][T24866] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5452'. [ 898.193862][T24875] netlink: 'syz.1.5455': attribute type 2 has an invalid length. [ 898.202313][T24875] netlink: 'syz.1.5455': attribute type 8 has an invalid length. [ 898.226755][T24875] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5455'. [ 898.676422][T24885] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5458'. [ 899.913487][T24906] __nla_validate_parse: 2 callbacks suppressed [ 899.913510][T24906] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5465'. [ 900.100313][T24911] netlink: 822 bytes leftover after parsing attributes in process `syz.9.5467'. [ 900.143716][T24906] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 900.165598][T24906] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 900.175163][T24906] veth0_to_bridge: entered allmulticast mode [ 900.191213][T24906] veth0_to_bridge: entered promiscuous mode [ 900.235669][T24913] netlink: 'syz.6.5468': attribute type 2 has an invalid length. [ 900.253844][T24913] netlink: 'syz.6.5468': attribute type 8 has an invalid length. [ 900.270177][T24913] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5468'. [ 900.963177][T24928] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5472'. [ 901.191503][T24934] netlink: 'syz.1.5474': attribute type 89 has an invalid length. [ 901.207702][T24934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5474'. [ 901.452596][T24937] lo speed is unknown, defaulting to 1000 [ 901.477254][T24937] wlan0 speed is unknown, defaulting to 1000 [ 901.882906][T24949] netlink: 'syz.6.5480': attribute type 2 has an invalid length. [ 901.905471][T24949] netlink: 'syz.6.5480': attribute type 8 has an invalid length. [ 901.916984][T24949] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5480'. [ 902.092457][T24957] netlink: 'syz.8.5482': attribute type 1 has an invalid length. [ 902.194325][T24957] netlink: 'syz.8.5482': attribute type 3 has an invalid length. [ 902.255981][T24957] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5482'. [ 902.361194][T24965] netlink: 'syz.8.5482': attribute type 39 has an invalid length. [ 905.170631][T24999] netlink: 'syz.8.5493': attribute type 2 has an invalid length. [ 905.185363][T24999] netlink: 'syz.8.5493': attribute type 8 has an invalid length. [ 905.202398][T24999] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5493'. [ 906.077798][T25011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 906.488952][T25023] netlink: 'syz.9.5500': attribute type 29 has an invalid length. [ 906.718049][T25033] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5502'. [ 908.001820][T25061] lo speed is unknown, defaulting to 1000 [ 908.059597][T25061] wlan0 speed is unknown, defaulting to 1000 [ 909.314078][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 909.324733][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 909.337734][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 909.349593][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 909.357515][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 909.523133][T25088] lo speed is unknown, defaulting to 1000 [ 909.557635][T25098] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5518'. [ 911.101019][T25130] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5525'. [ 911.136496][T25132] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5526'. [ 911.275259][T25134] bridge0: port 5(team0) entered blocking state [ 911.290667][T25134] bridge0: port 5(team0) entered disabled state [ 911.309317][T25134] team0: entered allmulticast mode [ 911.330650][T25134] team_slave_0: entered allmulticast mode [ 911.364177][T25134] team_slave_1: entered allmulticast mode [ 911.393851][T25134] geneve1: entered allmulticast mode [ 911.437289][ T5842] Bluetooth: hci3: command tx timeout [ 911.445241][T25134] team0: entered promiscuous mode [ 911.517930][T25134] team_slave_0: entered promiscuous mode [ 911.554143][T25134] team_slave_1: entered promiscuous mode [ 911.587203][T25134] geneve1: entered promiscuous mode [ 911.592910][T25134] macvlan1: entered promiscuous mode [ 912.134754][T25145] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5530'. [ 912.627977][T25151] netlink: 'syz.1.5533': attribute type 1 has an invalid length. [ 913.489757][T25156] bridge_slave_0 (unregistering): left allmulticast mode [ 913.496780][ T5842] Bluetooth: hci3: command tx timeout [ 913.499757][T25156] bridge_slave_0 (unregistering): left promiscuous mode [ 913.511643][T25156] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.989278][T25169] netlink: 'syz.9.5539': attribute type 1 has an invalid length. [ 914.040973][T25088] wlan0 speed is unknown, defaulting to 1000 [ 914.519950][T25178] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5542'. [ 914.738180][T25185] netlink: 14 bytes leftover after parsing attributes in process `syz.9.5544'. [ 915.145116][T25193] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5547'. [ 915.578556][ T5842] Bluetooth: hci3: command tx timeout [ 916.712218][T25216] tap0: tun_chr_ioctl cmd 1074025675 [ 916.720100][T25216] tap0: persist enabled [ 916.838319][T25211] tap0: tun_chr_ioctl cmd 1074025675 [ 916.843701][T25211] tap0: persist enabled [ 917.047097][T25227] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5556'. [ 917.136158][T25088] chnl_net:caif_netlink_parms(): no params data found [ 917.665625][ T5842] Bluetooth: hci3: command tx timeout [ 918.424503][T25088] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.431975][T25088] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.439434][T25088] bridge_slave_0: entered allmulticast mode [ 918.447763][T25088] bridge_slave_0: entered promiscuous mode [ 918.457311][T25088] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.464622][T25088] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.474578][T25088] bridge_slave_1: entered allmulticast mode [ 918.483605][T25088] bridge_slave_1: entered promiscuous mode [ 918.557616][T25088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.585263][T25088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.675363][T25088] team0: Port device team_slave_0 added [ 918.701179][T25088] team0: Port device team_slave_1 added [ 918.738286][T25266] lo: entered promiscuous mode [ 918.759462][ T5912] lo speed is unknown, defaulting to 1000 [ 918.764159][T25088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.772698][T25088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.792799][ T5912] syz1: Port: 1 Link ACTIVE [ 918.800260][T25088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.830435][T25088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.841407][T25088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.868034][T25088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.975777][T25269] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5568'. [ 919.012144][T25088] hsr_slave_0: entered promiscuous mode [ 919.032032][T25088] hsr_slave_1: entered promiscuous mode [ 919.070106][T25271] netlink: 'syz.1.5569': attribute type 13 has an invalid length. [ 919.080344][T25271] netlink: 14589 bytes leftover after parsing attributes in process `syz.1.5569'. [ 920.299815][T25308] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 920.433758][T25308] netlink: 'syz.8.5579': attribute type 2 has an invalid length. [ 920.455893][T25308] netlink: 'syz.8.5579': attribute type 2 has an invalid length. [ 920.479406][T25308] netlink: 'syz.8.5579': attribute type 1 has an invalid length. [ 920.493303][T25308] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5579'. [ 921.192471][T25088] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 921.924444][T25088] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 922.016129][T25088] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 922.262000][T25088] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 924.061305][T25088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.122607][T25088] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.155533][T23427] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.162900][T23427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.268691][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.275934][ T6021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.054670][T25088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.161011][T25088] veth0_vlan: entered promiscuous mode [ 925.192388][T25088] veth1_vlan: entered promiscuous mode [ 925.299758][T25088] veth0_macvtap: entered promiscuous mode [ 925.333856][T25088] veth1_macvtap: entered promiscuous mode [ 925.397664][T25088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 925.442378][T25088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 925.469349][T25432] netlink: 80 bytes leftover after parsing attributes in process `syz.8.5598'. [ 925.548097][ T8278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.587509][ T6021] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.618480][ T6021] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.663591][ T6021] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.700535][T25445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 926.217384][ T8277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.225276][ T8277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.259610][T25465] xt_HMARK: spi-set and port-set can't be combined [ 926.536990][T25478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5605'. [ 926.725691][T25470] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5606'. [ 926.917936][ T8278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.946488][ T8278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.591467][T25508] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5615'. [ 927.622488][T16084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 927.632475][T16084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 927.645750][T16084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 927.657676][T16084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 927.665850][T16084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 927.770834][T25507] lo speed is unknown, defaulting to 1000 [ 927.808907][T25507] wlan0 speed is unknown, defaulting to 1000 [ 928.020904][T25516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5617'. [ 928.306871][T23427] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.531383][T25526] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5619'. [ 928.728683][T23427] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.775589][T25536] : entered promiscuous mode [ 928.988136][T23427] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.165028][T25553] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5624'. [ 929.308942][T25552] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5623'. [ 929.736452][ T5842] Bluetooth: hci2: command tx timeout [ 929.793879][T23427] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.662619][T23427] team0: left allmulticast mode [ 930.684361][T23427] team_slave_0: left allmulticast mode [ 930.710639][T23427] team_slave_1: left allmulticast mode [ 930.737312][T23427] geneve1: left allmulticast mode [ 930.746782][T23427] team0: left promiscuous mode [ 930.757467][T23427] team_slave_0: left promiscuous mode [ 930.770899][T23427] team_slave_1: left promiscuous mode [ 930.807765][T23427] geneve1: left promiscuous mode [ 930.813024][T23427] macvlan1: left promiscuous mode [ 930.844741][T23427] bridge0: port 5(team0) entered disabled state [ 930.899942][T23427] dummy0: left allmulticast mode [ 930.905175][T23427] bridge0: port 4(dummy0) entered disabled state [ 931.804074][T23427] macsec0: left allmulticast mode [ 931.819590][T23427] veth1_macvtap: left allmulticast mode [ 931.826684][ T5842] Bluetooth: hci2: command tx timeout [ 931.851740][T23427] macsec0: left promiscuous mode [ 931.886830][T23427] bridge0: port 3(macsec0) entered disabled state [ 931.987731][T23427] bridge_slave_1: left allmulticast mode [ 931.993511][T23427] bridge_slave_1: left promiscuous mode [ 932.004092][T23427] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.037938][T23427] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.087235][T23427] veth0_to_bridge: left allmulticast mode [ 932.093049][T23427] veth0_to_bridge: left promiscuous mode [ 932.109707][T23427] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 932.358753][T25623] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5638'. [ 933.049273][T23427] team0: Port device geneve1 removed [ 933.335494][T25646] netlink: 'syz.8.5642': attribute type 10 has an invalid length. [ 933.506632][T25646] team0: Device ipvlan1 failed to register rx_handler [ 933.643367][T25507] chnl_net:caif_netlink_parms(): no params data found [ 933.896505][ T5842] Bluetooth: hci2: command tx timeout [ 934.572521][T25507] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.588149][T25507] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.636770][T25507] bridge_slave_0: entered allmulticast mode [ 934.661345][T25507] bridge_slave_0: entered promiscuous mode [ 934.690774][T25507] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.885943][T25507] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.924450][T25507] bridge_slave_1: entered allmulticast mode [ 934.962177][T25507] bridge_slave_1: entered promiscuous mode [ 934.969810][T25678] delete_channel: no stack [ 935.333053][T25507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.382658][T25507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.542813][T25707] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.5657'. [ 935.573561][T25707] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5657'. [ 935.767391][T25507] team0: Port device team_slave_0 added [ 935.812515][T23427] hsr_slave_0: left promiscuous mode [ 935.840302][T23427] hsr_slave_1: left promiscuous mode [ 935.857190][T23427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 935.864642][T23427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 935.938909][T23427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 935.952319][T23427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 935.976471][ T5842] Bluetooth: hci2: command tx timeout [ 935.983369][T23427] batman_adv: batadv0: Interface deactivated: vlan1 [ 935.996112][T23427] batman_adv: batadv0: Removing interface: vlan1 [ 936.071415][T23427] veth1_macvtap: left promiscuous mode [ 936.086548][T23427] veth0_macvtap: left promiscuous mode [ 936.092233][T23427] veth1_vlan: left allmulticast mode [ 936.115818][T23427] veth1_vlan: left promiscuous mode [ 936.134032][T23427] veth0_vlan: left promiscuous mode [ 936.171361][T25729] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5662'. [ 936.196907][T25729] netlink: 100 bytes leftover after parsing attributes in process `syz.9.5662'. [ 936.868188][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.874560][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.036057][T23427] team0 (unregistering): Port device macvlan1 removed [ 938.098393][T23427] team0 (unregistering): Port device team_slave_1 removed [ 938.218846][T23427] team0 (unregistering): Port device team_slave_0 removed [ 938.837750][T25507] team0: Port device team_slave_1 added [ 938.905956][T25726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 938.969173][T25727] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 938.990051][T25727] syzkaller0: Linktype set failed because interface is up [ 939.186133][T18105] lo speed is unknown, defaulting to 1000 [ 939.204240][T18105] infiniband syz1: ib_query_port failed (-19) [ 939.249044][T23424] syzkaller0: tun_net_xmit 76 [ 939.254462][T23424] syzkaller0: tun_net_xmit 48 [ 939.276896][T18105] syzkaller0: tun_net_xmit 76 [ 939.310003][T25764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5667'. [ 939.340287][T25507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.348567][T25507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.379750][T25507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.412529][T25764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5667'. [ 939.467869][T25765] netlink: 'syz.2.5667': attribute type 29 has an invalid length. [ 939.484478][T25507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.496630][ T5896] syzkaller0: tun_net_xmit 76 [ 939.528881][T25507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.578619][T25507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.792728][T25767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5668'. [ 943.264200][T25507] hsr_slave_0: entered promiscuous mode [ 943.291223][T25507] hsr_slave_1: entered promiscuous mode [ 943.311624][T25507] debugfs: 'hsr0' already exists in 'hsr' [ 943.326732][T25507] Cannot create hsr debugfs directory [ 943.912836][T25797] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 943.937050][T25797] dvmrp1: ignored: set checksum disabled [ 944.675374][T25812] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 944.692249][T25812] dvmrp1: linktype set to 805 [ 945.179338][T25836] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5683'. [ 945.211420][T25836] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 945.389493][T25507] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 945.468704][T25507] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 945.482726][T25507] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 945.526999][T25507] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 945.772613][T25845] delete_channel: no stack [ 945.963572][T25507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.072516][T25507] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.152896][T23424] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.160191][T23424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.201814][T23424] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.209118][T23424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.051765][T25893] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5692'. [ 947.094567][T25507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 947.218917][T25507] veth0_vlan: entered promiscuous mode [ 947.269517][T25507] veth1_vlan: entered promiscuous mode [ 947.390162][T25507] veth0_macvtap: entered promiscuous mode [ 947.419084][T25507] veth1_macvtap: entered promiscuous mode [ 947.557506][T25507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.593960][T25507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.626403][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.655673][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.684679][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.694713][T25896] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5694'. [ 947.714086][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.938744][T25902] cgroup2: Unknown parameter 'gid' [ 947.982479][T25902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 948.007268][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.027591][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.148758][T23424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.169465][T23424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.488743][T25916] netlink: 'syz.1.5612': attribute type 32 has an invalid length. [ 948.916018][T25933] netlink: 'syz.2.5704': attribute type 3 has an invalid length. [ 949.752418][T25946] tc_dump_action: action bad kind [ 950.389747][T25964] netlink: 'syz.8.5713': attribute type 3 has an invalid length. [ 950.424596][T25964] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5713'. [ 950.557125][T25970] netlink: 'syz.2.5714': attribute type 21 has an invalid length. [ 950.588176][T25970] netlink: 984 bytes leftover after parsing attributes in process `syz.2.5714'. [ 952.437068][T16084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 952.447640][T16084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 952.457349][T16084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 952.466103][T16084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 952.474306][T16084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 952.654886][T26016] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5724'. [ 952.699511][T26007] wlan0 speed is unknown, defaulting to 1000 [ 952.868323][ T6021] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.906922][T26033] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5728'. [ 953.090796][T26034] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5729'. [ 953.173852][T26034] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 953.222656][ T6021] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.246461][T26038] netlink: 'syz.9.5730': attribute type 2 has an invalid length. [ 953.254265][T26038] netlink: 'syz.9.5730': attribute type 8 has an invalid length. [ 953.264816][T26038] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5730'. [ 953.450065][T26032] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 953.683567][ T6021] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.984921][ T6021] netdevsim netdevsim6  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.536804][T16084] Bluetooth: hci0: command tx timeout [ 954.552088][T26059] netlink: 'syz.9.5734': attribute type 13 has an invalid length. [ 954.746349][T26073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5739'. [ 954.848953][T26068] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 954.859511][T26075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5739'. [ 954.870813][T26068] syzkaller0: entered promiscuous mode [ 954.887066][T26068] syzkaller0: entered allmulticast mode [ 955.159552][T26086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5742'. [ 955.179616][ T6021] macsec0: left allmulticast mode [ 955.184886][ T6021] veth1_macvtap: left allmulticast mode [ 955.199369][ T6021] macsec0: left promiscuous mode [ 955.204827][ T6021] bridge0: port 3(macsec0) entered disabled state [ 955.232243][ T6021] bridge_slave_1: left allmulticast mode [ 955.238229][ T6021] bridge_slave_1: left promiscuous mode [ 955.244053][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.278140][T26084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5742'. [ 955.291080][T26088] netlink: 'syz.8.5743': attribute type 2 has an invalid length. [ 955.298939][T26088] netlink: 'syz.8.5743': attribute type 8 has an invalid length. [ 955.328163][ T6021] bridge_slave_0: left allmulticast mode [ 955.344079][ T6021] bridge_slave_0: left promiscuous mode [ 955.393334][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.464681][T26098] netlink: 'syz.2.5746': attribute type 2 has an invalid length. [ 955.482869][T26098] __nla_validate_parse: 1 callbacks suppressed [ 955.482889][T26098] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5746'. [ 955.997747][ T6021] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 956.211842][ T6021] bond0 (unregistering): (slave 5åÑ): Releasing backup interface [ 956.252061][ T6021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.265301][ T6021] bond0 (unregistering): Released all slaves [ 956.313521][T26097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5746'. [ 956.443206][T26007] chnl_net:caif_netlink_parms(): no params data found [ 956.619119][T16084] Bluetooth: hci0: command tx timeout [ 957.203392][T26131] netlink: 'syz.2.5756': attribute type 10 has an invalid length. [ 957.252023][T26131] bridge0: port 3(macsec0) entered blocking state [ 957.269556][T26131] bridge0: port 3(macsec0) entered disabled state [ 957.278202][T26131] macsec0: entered allmulticast mode [ 957.283726][T26131] veth1_macvtap: entered allmulticast mode [ 957.293667][T26131] macsec0: entered promiscuous mode [ 957.301404][T26131] bridge0: port 3(macsec0) entered blocking state [ 957.308067][T26131] bridge0: port 3(macsec0) entered forwarding state [ 957.326466][T26007] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.333661][T26007] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.358343][T26007] bridge_slave_0: entered allmulticast mode [ 957.368585][T26007] bridge_slave_0: entered promiscuous mode [ 957.383011][T26007] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.390935][T26007] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.401116][T26007] bridge_slave_1: entered allmulticast mode [ 957.410315][T26007] bridge_slave_1: entered promiscuous mode [ 957.510373][T26007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.520538][T26138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5759'. [ 957.573834][T26007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.788152][T26007] team0: Port device team_slave_0 added [ 957.823586][T26150] netlink: 'syz.8.5762': attribute type 11 has an invalid length. [ 957.850093][T26007] team0: Port device team_slave_1 added [ 957.971408][T26151] netlink: 'syz.1.5761': attribute type 2 has an invalid length. [ 958.023923][T26151] netlink: 'syz.1.5761': attribute type 8 has an invalid length. [ 958.060130][T26151] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5761'. [ 958.181323][ T6021] hsr_slave_0: left promiscuous mode [ 958.205650][ T6021] hsr_slave_1: left promiscuous mode [ 958.324270][ T6021] veth1_macvtap: left promiscuous mode [ 958.330021][ T6021] veth0_macvtap: left promiscuous mode [ 958.337174][ T6021] veth1_vlan: left promiscuous mode [ 958.342853][ T6021] veth0_vlan: left promiscuous mode [ 958.697458][T16084] Bluetooth: hci0: command tx timeout [ 958.754946][T26181] netlink: 'syz.2.5768': attribute type 10 has an invalid length. [ 959.369999][ T6021] team0 (unregistering): Port device team_slave_1 removed [ 959.426211][ T6021] team0 (unregistering): Port device team_slave_0 removed [ 959.889852][T26007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.898724][T26007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.926993][T26007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.946709][T26185] netlink: 4456 bytes leftover after parsing attributes in process `syz.8.5769'. [ 959.981228][T26007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.007058][T26007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.059439][T26007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.229873][T26007] hsr_slave_0: entered promiscuous mode [ 960.247380][T26007] hsr_slave_1: entered promiscuous mode [ 960.253998][T26007] debugfs: 'hsr0' already exists in 'hsr' [ 960.272549][T26007] Cannot create hsr debugfs directory [ 960.777192][T16084] Bluetooth: hci0: command tx timeout [ 961.357009][T16084] Bluetooth: hci2: ISO packet for unknown connection handle 23 [ 964.020053][T26237] netlink: 'syz.8.5780': attribute type 10 has an invalid length. [ 964.374405][T26241] sch_tbf: peakrate 188 is lower than or equals to rate 7012629537550284465 ! [ 964.395775][T26253] netlink: 'syz.1.5782': attribute type 2 has an invalid length. [ 964.404126][T26253] netlink: 'syz.1.5782': attribute type 8 has an invalid length. [ 964.419192][T26253] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5782'. [ 964.442677][T26252] netlink: 'syz.2.5783': attribute type 22 has an invalid length. [ 964.742376][T26231] delete_channel: no stack [ 964.902784][T26269] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5786'. [ 965.052500][T26273] netlink: 'syz.8.5786': attribute type 1 has an invalid length. [ 965.107306][T26269] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5786'. [ 965.467855][T26288] netlink: 'syz.8.5790': attribute type 10 has an invalid length. [ 965.495629][T26290] delete_channel: no stack [ 965.530869][T26290] delete_channel: no stack [ 965.561015][T26007] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 965.632703][T26007] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 965.660492][T26294] delete_channel: no stack [ 965.663221][T26297] netlink: 'syz.8.5793': attribute type 13 has an invalid length. [ 965.677711][T26007] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 965.684960][T26297] netlink: 'syz.8.5793': attribute type 58 has an invalid length. [ 965.702579][T26294] delete_channel: no stack [ 965.703884][T26297] netlink: 152 bytes leftover after parsing attributes in process `syz.8.5793'. [ 965.730882][T26007] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 965.925878][T26313] netlink: 'syz.8.5794': attribute type 2 has an invalid length. [ 965.934268][T26313] netlink: 'syz.8.5794': attribute type 8 has an invalid length. [ 965.967047][T26313] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5794'. [ 966.032827][T26007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.122547][T26007] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.158588][T26323] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5798'. [ 966.182594][T23419] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.189834][T23419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.283138][T23427] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.290424][T23427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.575072][T26332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5801'. [ 967.307313][T26007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.532101][T26371] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5810'. [ 967.732633][T26378] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 967.759210][T26378] dvmrp1: ignored: set checksum disabled [ 967.873507][T26388] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5813'. [ 968.121173][T26007] veth0_vlan: entered promiscuous mode [ 968.146082][T26007] veth1_vlan: entered promiscuous mode [ 968.166173][T26397] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5815'. [ 968.240896][T26007] veth0_macvtap: entered promiscuous mode [ 968.258641][T26007] veth1_macvtap: entered promiscuous mode [ 968.304001][T26007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 968.428187][T26007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 968.510465][T23424] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.555794][T23424] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.634756][T23424] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.705798][T23424] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.964500][ T6021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.990292][ T6021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.106729][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.114632][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.118826][T26423] pimreg: tun_chr_ioctl cmd 1074025675 [ 969.127971][T26423] pimreg: persist disabled [ 969.195784][T26426] validate_nla: 4 callbacks suppressed [ 969.195804][T26426] netlink: 'syz.8.5822': attribute type 2 has an invalid length. [ 969.218377][T26426] netlink: 'syz.8.5822': attribute type 8 has an invalid length. [ 970.464601][T26451] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 970.486404][T26451] dvmrp1: ignored: set checksum disabled [ 970.523337][T26460] __nla_validate_parse: 2 callbacks suppressed [ 970.523361][T26460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5828'. [ 970.794000][T26468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5831'. [ 970.896478][T26468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5831'. [ 970.954904][T26470] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5831'. [ 971.634793][T26499] netlink: 'syz.2.5835': attribute type 2 has an invalid length. [ 971.656714][T26499] netlink: 'syz.2.5835': attribute type 8 has an invalid length. [ 971.721337][T26499] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5835'. [ 972.421069][T26523] netlink: 'syz.5.5844': attribute type 11 has an invalid length. [ 972.503911][T26523] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.5844'. [ 972.639465][T26528] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 972.645041][T26528] dvmrp1: ignored: set checksum disabled [ 972.758117][T26525] netlink: 'syz.9.5845': attribute type 2 has an invalid length. [ 973.113619][T26525] : entered promiscuous mode [ 973.333108][T26542] openvswitch: netlink: Actions may not be safe on all matching packets [ 973.365584][T26543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5846'. [ 973.472646][T26539] netlink: 16026 bytes leftover after parsing attributes in process `syz.2.5846'. [ 973.551953][T26543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5846'. [ 973.555045][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.851844][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.991419][T26556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5851'. [ 974.123698][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.564309][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.576399][T26577] netlink: 'syz.5.5856': attribute type 2 has an invalid length. [ 974.584196][T26577] netlink: 'syz.5.5856': attribute type 8 has an invalid length. [ 975.217077][ T30] audit: type=1107 audit(1769575706.402:7): pid=26601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 975.277483][T26596] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 975.283214][T26596] dvmrp1: ignored: set checksum disabled [ 975.327785][ T13] bridge_slave_1: left allmulticast mode [ 975.351390][ T13] bridge_slave_1: left promiscuous mode [ 975.371020][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.469494][ T13] bridge_slave_0: left allmulticast mode [ 975.475356][ T13] bridge_slave_0: left promiscuous mode [ 975.487763][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.992970][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 977.018980][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 977.043775][ T13] bond0 (unregistering): Released all slaves [ 977.154284][ T13] m1Ie5n: left promiscuous mode [ 977.389933][T26666] netlink: 'syz.5.5871': attribute type 10 has an invalid length. [ 977.545078][T26672] __nla_validate_parse: 2 callbacks suppressed [ 977.545105][T26672] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5874'. [ 977.628204][T26672] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 977.653404][T26666] team0: Port device geneve1 added [ 977.955300][T26686] netlink: 180 bytes leftover after parsing attributes in process `syz.8.5876'. [ 978.448060][T26685] delete_channel: no stack [ 978.950711][T26698] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5880'. [ 979.163428][T26698] netlink: 'syz.5.5880': attribute type 21 has an invalid length. [ 979.426975][T26698] IPv6: NLM_F_CREATE should be specified when creating new route [ 979.461709][T26698] netlink: 'syz.5.5880': attribute type 1 has an invalid length. [ 980.139841][T26703] netlink: 'syz.8.5876': attribute type 21 has an invalid length. [ 980.174856][T26709] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 980.742641][T26720] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5884'. [ 980.891275][T26703] netlink: 'syz.8.5876': attribute type 2 has an invalid length. [ 981.194852][T26734] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5888'. [ 982.072646][ T13] hsr_slave_0: left promiscuous mode [ 982.111376][ T13] hsr_slave_1: left promiscuous mode [ 982.152952][T26752] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5894'. [ 982.211353][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.257353][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.328668][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.336151][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.555087][ T13] veth1_macvtap: left promiscuous mode [ 982.593323][ T13] veth0_macvtap: left promiscuous mode [ 982.610544][ T13] veth1_vlan: left promiscuous mode [ 982.629715][ T13] veth0_vlan: left promiscuous mode [ 982.967274][T26764] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5896'. [ 983.644492][T26777] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5898'. [ 983.886512][T16084] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 984.402671][T26794] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.5902'. [ 985.462027][T26816] netlink: 'syz.5.5905': attribute type 21 has an invalid length. [ 985.606746][T26825] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5907'. [ 986.117553][ T13] team0 (unregistering): Port device team_slave_1 removed [ 986.258762][ T13] team0 (unregistering): Port device C removed [ 987.132026][T26816] netlink: 'syz.5.5905': attribute type 1 has an invalid length. [ 987.265252][T26820] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.708833][T26820] bridge_slave_0 (unregistering): left allmulticast mode [ 987.717546][T26820] bridge_slave_0 (unregistering): left promiscuous mode [ 987.724806][T26820] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.350205][T16084] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 988.557093][T26875] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5918'. [ 988.923825][T26893] openvswitch: netlink: Flow actions attr not present in new flow. [ 989.011357][T26896] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5923'. [ 993.115573][T26998] macsec0: left allmulticast mode [ 993.166463][T26998] veth1_macvtap: left allmulticast mode [ 993.172136][T26998] macsec0: left promiscuous mode [ 993.200171][T26998] bridge0: port 3(macsec0) entered disabled state [ 993.268850][T27008] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5933'. [ 993.325141][T26998] bridge_slave_1: left allmulticast mode [ 993.336911][T26998] bridge_slave_1: left promiscuous mode [ 993.344027][T26998] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.490837][T26998] bond0: (slave bridge0): Releasing backup interface [ 993.875777][T27031] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5936'. [ 994.535885][T27045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5940'. [ 994.667930][T27055] tc_dump_action: action bad kind [ 994.933848][T27066] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5947'. [ 995.884797][T27104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5954'. [ 996.304450][T27123] siw: device registration error -23 [ 996.503428][T27129] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5958'. [ 997.263816][T27159] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.5966'. [ 997.306393][T27159] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 997.379261][T27162] netlink: 45 bytes leftover after parsing attributes in process `syz.2.5970'. [ 997.767468][T27173] netlink: 'syz.5.5973': attribute type 10 has an invalid length. [ 997.793238][T27175] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5975'. [ 997.823249][T27173] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.851117][T27173] bridge_slave_1: left allmulticast mode [ 997.863085][T27173] bridge_slave_1: left promiscuous mode [ 997.872179][T27173] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.918985][T27173] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 998.066622][T27186] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5978'. [ 998.303252][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.309710][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.506048][T27215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5987'. [ 1000.071803][T27241] netlink: 'syz.8.5993': attribute type 10 has an invalid length. [ 1000.198115][T27241] team0: Device veth1_macvtap failed to register rx_handler [ 1000.373126][T27257] netlink: 'syz.2.5998': attribute type 8 has an invalid length. [ 1000.390080][T27257] __nla_validate_parse: 1 callbacks suppressed [ 1000.390104][T27257] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5998'. [ 1000.458383][T27263] netlink: 'syz.9.5999': attribute type 2 has an invalid length. [ 1000.473050][T27263] netlink: 'syz.9.5999': attribute type 8 has an invalid length. [ 1000.482171][T27263] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5999'. [ 1000.891905][T16084] Bluetooth: hci2: ACL packet for unknown connection handle 3840 [ 1000.898346][T27282] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6008'. [ 1000.986530][T27282] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6008'. [ 1001.014639][T27282] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6008'. [ 1001.136645][T27296] netlink: 'syz.1.6010': attribute type 2 has an invalid length. [ 1001.144842][T27296] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6010'. [ 1001.157582][T27296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6010'. [ 1001.168309][T27296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6010'. [ 1001.179240][T27296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6010'. [ 1001.740813][T27309] wlan0 speed is unknown, defaulting to 1000 [ 1002.506358][T16084] Bluetooth: hci0: ACL packet for unknown connection handle 1536 [ 1007.603032][T16084] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1008.473716][T27414] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.6039'. [ 1009.584953][T27431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6043'. [ 1009.668824][T27438] tap0: tun_chr_ioctl cmd 1074025680 [ 1009.726370][T27435] tap0: tun_chr_ioctl cmd 1074025677 [ 1009.746549][T27435] tap0: linktype set to 6 [ 1010.393077][T16084] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1011.999520][T27451] infiniband : set down [ 1012.005155][T27451] infiniband : added ipvlan0 [ 1012.026643][T27451] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1012.049287][T27451] infiniband : Couldn't open port 1 [ 1012.206824][T27451] RDS/IB: : added [ 1012.210684][T27451] smc: adding ib device  with port count 1 [ 1012.249080][T27451] smc: ib device  port 1 has no pnetid [ 1013.315789][T27500] netlink: 'syz.1.6053': attribute type 13 has an invalid length. [ 1013.344385][T27500] macvtap0: entered promiscuous mode [ 1013.375483][T27500] macvtap0: refused to change device tx_queue_len [ 1013.943296][T27513] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6055'. [ 1013.998438][T27513] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6055'. [ 1017.426707][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1017.455026][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1017.463861][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1017.476494][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1017.666663][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1017.910780][T27537] wlan0 speed is unknown, defaulting to 1000 [ 1018.587088][T27550] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6062'. [ 1019.532170][T27537] chnl_net:caif_netlink_parms(): no params data found [ 1019.600510][ T8277] erspan0: left allmulticast mode [ 1019.605631][ T8277] erspan0: left promiscuous mode [ 1019.614323][ T8277] : port 1(erspan0) entered disabled state [ 1019.816407][ T5842] Bluetooth: hci4: command tx timeout [ 1020.711375][ T8277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.738876][ T8277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.768861][ T8277] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1020.789576][ T8277] bond0 (unregistering): Released all slaves [ 1020.938087][ T8277] : left promiscuous mode [ 1021.069891][ T8277] : left promiscuous mode [ 1021.163696][T27570] netlink: 'syz.5.6066': attribute type 16 has an invalid length. [ 1021.171778][T27570] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6066'. [ 1021.496900][T27537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.506499][T27537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.513805][T27537] bridge_slave_0: entered allmulticast mode [ 1021.562955][T27537] bridge_slave_0: entered promiscuous mode [ 1021.682574][T27537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.695615][T27537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.705800][T27537] bridge_slave_1: entered allmulticast mode [ 1021.758387][T27537] bridge_slave_1: entered promiscuous mode [ 1021.903244][ T5842] Bluetooth: hci4: command tx timeout [ 1021.981047][T27537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.078901][T27537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.353452][T27537] team0: Port device team_slave_0 added [ 1022.397510][T27587] wlan0 speed is unknown, defaulting to 1000 [ 1022.448158][T27537] team0: Port device team_slave_1 added [ 1022.658206][T27537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.665223][T27537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1022.698656][T27537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.711925][T27537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.748063][T27537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1022.783031][T27537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.951832][T27537] hsr_slave_0: entered promiscuous mode [ 1022.969770][T27537] hsr_slave_1: entered promiscuous mode [ 1022.977221][T27537] debugfs: 'hsr0' already exists in 'hsr' [ 1022.988169][T27537] Cannot create hsr debugfs directory [ 1023.976816][ T5842] Bluetooth: hci4: command tx timeout [ 1024.272214][T16084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1024.293359][T16084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1024.303044][T16084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1024.311657][T16084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1024.322309][T16084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1024.844154][T27609] wlan0 speed is unknown, defaulting to 1000 [ 1025.353669][T27537] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1025.373780][T27537] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1025.427481][T27537] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1025.457835][T27537] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1025.606822][ T8277] hsr_slave_0: left promiscuous mode [ 1025.615543][ T8277] hsr_slave_1: left promiscuous mode [ 1025.637250][ T8277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.662441][ T8277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.677355][ T8277] batman_adv: batadv0: Removing interface: team0 [ 1026.060016][ T5842] Bluetooth: hci4: command tx timeout [ 1026.379613][ T5842] Bluetooth: hci1: command tx timeout [ 1026.503543][T16084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1026.528059][T16084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1026.547988][T16084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1026.558400][T16084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1026.577308][T16084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1027.143994][ T8277] team0 (unregistering): Port device team_slave_1 removed [ 1027.211680][ T8277] team0 (unregistering): Port device team_slave_0 removed [ 1028.008103][T27644] wlan0 speed is unknown, defaulting to 1000 [ 1028.145403][T27537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.223914][T27537] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.289356][ T6021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.296604][ T6021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.354664][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.361919][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.460521][ T5842] Bluetooth: hci1: command tx timeout [ 1028.616353][ T5842] Bluetooth: hci3: command tx timeout [ 1028.621756][T27537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1029.461962][T27537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.907252][T27609] chnl_net:caif_netlink_parms(): no params data found [ 1030.077275][ T8277] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.353953][ T8277] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.546391][ T5842] Bluetooth: hci1: command tx timeout [ 1030.563154][ T8277] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.702152][ T5842] Bluetooth: hci3: command tx timeout [ 1030.723194][ T8277] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.758639][T27609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.766073][T27609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.774041][T27609] bridge_slave_0: entered allmulticast mode [ 1030.784682][T27609] bridge_slave_0: entered promiscuous mode [ 1030.859501][T27609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.876485][T27609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.891567][T27609] bridge_slave_1: entered allmulticast mode [ 1030.914094][T27609] bridge_slave_1: entered promiscuous mode [ 1031.013717][T27609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.039431][T27609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.305196][T27609] team0: Port device team_slave_0 added [ 1031.314201][T27609] team0: Port device team_slave_1 added [ 1031.331353][T27537] veth0_vlan: entered promiscuous mode [ 1031.369358][T27644] chnl_net:caif_netlink_parms(): no params data found [ 1031.604646][T27609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.626342][T27609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1031.696505][T27609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.738501][T27609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.756320][T27609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1031.797671][T27609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.844445][T27537] veth1_vlan: entered promiscuous mode [ 1031.861426][ T8277] macsec0: left allmulticast mode [ 1031.867793][ T8277] veth1_macvtap: left allmulticast mode [ 1031.873402][ T8277] macsec0: left promiscuous mode [ 1031.887432][ T8277] bridge0: port 3(macsec0) entered disabled state [ 1031.937557][ T8277] bridge_slave_1: left allmulticast mode [ 1031.943293][ T8277] bridge_slave_1: left promiscuous mode [ 1031.967144][ T8277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.007301][ T8277] bridge_slave_0: left allmulticast mode [ 1032.013058][ T8277] bridge_slave_0: left promiscuous mode [ 1032.018936][ T8277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.058124][ T8277] macsec0: left allmulticast mode [ 1032.063319][ T8277] veth1_macvtap: left allmulticast mode [ 1032.082638][ T8277] macsec0: left promiscuous mode [ 1032.095295][ T8277] bridge0: port 3(macsec0) entered disabled state [ 1032.130498][ T8277] bridge_slave_1: left allmulticast mode [ 1032.146332][ T8277] bridge_slave_1: left promiscuous mode [ 1032.153118][ T8277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.220166][ T8277] bridge_slave_0: left allmulticast mode [ 1032.225894][ T8277] bridge_slave_0: left promiscuous mode [ 1032.251515][ T8277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.619246][ T5842] Bluetooth: hci1: command tx timeout [ 1032.776597][ T5842] Bluetooth: hci3: command tx timeout [ 1033.259682][ T8277] team0: Port device geneve1 removed [ 1033.559797][ T8277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1033.589339][ T8277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1033.620128][ T8277] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1033.631769][ T8277] bond0 (unregistering): Released all slaves [ 1034.190451][ T8277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1034.216829][ T8277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.238128][ T8277] bond0 (unregistering): Released all slaves [ 1034.671139][T27609] hsr_slave_0: entered promiscuous mode [ 1034.685610][T27609] hsr_slave_1: entered promiscuous mode [ 1034.694365][T27609] debugfs: 'hsr0' already exists in 'hsr' [ 1034.714032][T27609] Cannot create hsr debugfs directory [ 1034.810966][T27644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.820052][T27644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.829934][T27644] bridge_slave_0: entered allmulticast mode [ 1034.858329][ T5842] Bluetooth: hci3: command tx timeout [ 1034.877094][T27644] bridge_slave_0: entered promiscuous mode [ 1034.953768][T27644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.988244][T27644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.995545][T27644] bridge_slave_1: entered allmulticast mode [ 1035.037870][T27644] bridge_slave_1: entered promiscuous mode [ 1035.166999][T23419] smc: removing ib device syz0 [ 1035.277567][T27644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.365998][T27644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1035.724524][T16084] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1035.734307][T16084] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1035.743488][T16084] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1035.762212][T16084] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1035.769989][T16084] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1035.847854][T27644] team0: Port device team_slave_0 added [ 1035.854225][T27537] veth0_macvtap: entered promiscuous mode [ 1035.930648][T27644] team0: Port device team_slave_1 added [ 1036.450289][T27537] veth1_macvtap: entered promiscuous mode [ 1036.470525][T27644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1036.489510][T27644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.541636][T27644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.707579][T27644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1036.714592][T27644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.816275][T27644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.864451][T27537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.905389][T27537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.335961][ T8273] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.354649][ T8273] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.381794][ T8273] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.481900][T27644] hsr_slave_0: entered promiscuous mode [ 1037.493318][T27644] hsr_slave_1: entered promiscuous mode [ 1037.502393][T27644] debugfs: 'hsr0' already exists in 'hsr' [ 1037.509910][T27644] Cannot create hsr debugfs directory [ 1037.515523][ T8273] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.896340][ T5842] Bluetooth: hci5: command tx timeout [ 1038.359393][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.374227][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.689462][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.708115][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.992463][T27609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1039.077915][T27833] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not syz1 [ 1039.173897][T27609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1039.619864][T27609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1039.684800][T27609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1039.859355][T27841] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6076'. [ 1039.926954][T27781] chnl_net:caif_netlink_parms(): no params data found [ 1039.995412][ T5842] Bluetooth: hci5: command tx timeout [ 1041.644097][ T8277] hsr_slave_0: left promiscuous mode [ 1041.650927][ T8277] hsr_slave_1: left promiscuous mode [ 1041.664696][ T8277] hsr_slave_0: left promiscuous mode [ 1041.671943][ T8277] hsr_slave_1: left promiscuous mode [ 1041.687636][ T8277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1041.695102][ T8277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1041.703897][ T8277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1041.712212][ T8277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1041.738282][ T8277] veth1_macvtap: left promiscuous mode [ 1041.743895][ T8277] veth0_macvtap: left promiscuous mode [ 1041.751315][ T8277] veth1_vlan: left promiscuous mode [ 1041.757067][ T8277] veth0_vlan: left promiscuous mode [ 1042.061186][ T5842] Bluetooth: hci5: command tx timeout [ 1042.380044][T27877] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6079'. [ 1042.730378][ T8277] team0 (unregistering): Port device team_slave_1 removed [ 1042.801583][ T8277] team0 (unregistering): Port device team_slave_0 removed [ 1044.136935][ T5842] Bluetooth: hci5: command tx timeout [ 1044.240250][ T8277] team0 (unregistering): Port device team_slave_1 removed [ 1044.344964][ T8277] team0 (unregistering): Port device team_slave_0 removed [ 1045.195637][T27781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.203184][T27781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.219508][T27781] bridge_slave_0: entered allmulticast mode [ 1045.240519][T27781] bridge_slave_0: entered promiscuous mode [ 1045.266548][T27781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.273733][T27781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.291306][T27781] bridge_slave_1: entered allmulticast mode [ 1045.311453][T27781] bridge_slave_1: entered promiscuous mode [ 1045.433213][T27781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.466990][T27781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.604885][T27781] team0: Port device team_slave_0 added [ 1045.617925][T27644] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1045.654891][T27781] team0: Port device team_slave_1 added [ 1045.725194][T27644] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1045.799092][T27781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.806106][T27781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.886704][T27781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.946355][T27644] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1045.982525][T27781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1045.996337][T27781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1046.057421][T27781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.087861][T27644] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1046.339200][T27781] hsr_slave_0: entered promiscuous mode [ 1046.345979][T27781] hsr_slave_1: entered promiscuous mode [ 1046.571442][T27609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1046.759669][T27609] 8021q: adding VLAN 0 to HW filter on device team0 [ 1046.912616][ T8278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.919852][ T8278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.002748][ T8278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.009994][ T8278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1047.127033][T16084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1047.138907][T16084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1047.147459][T16084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1047.155574][T16084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1047.163849][T16084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1047.295948][T27644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.846004][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.925988][T27644] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.067946][ T8277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.075228][ T8277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.100506][ T8277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.107737][ T8277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.170228][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.246126][T27609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.338528][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.452582][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.787444][T27609] veth0_vlan: entered promiscuous mode [ 1048.814815][T27609] veth1_vlan: entered promiscuous mode [ 1048.846174][T27781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1048.885631][T27781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1048.916151][T27781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1048.929217][T27781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1049.259121][T16084] Bluetooth: hci2: command tx timeout [ 1049.415495][ T12] team0: Port device geneve1 removed [ 1049.542112][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1049.553888][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1049.571952][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1049.583674][ T12] bond0 (unregistering): Released all slaves [ 1049.710542][T27644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.805329][T27609] veth0_macvtap: entered promiscuous mode [ 1049.909581][T27609] veth1_macvtap: entered promiscuous mode [ 1050.125252][T27609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.179513][T27781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.224575][T27609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.287472][ T8278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.298297][ T8278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.409105][T27781] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.416133][ T8278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.425197][ T8278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.478439][ T12] hsr_slave_0: left promiscuous mode [ 1050.485874][ T12] hsr_slave_1: left promiscuous mode [ 1050.498904][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.508740][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.518368][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1050.525799][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1050.546563][ T12] veth1_macvtap: left promiscuous mode [ 1050.552179][ T12] veth0_macvtap: left promiscuous mode [ 1050.560973][ T12] veth1_vlan: left promiscuous mode [ 1050.566435][ T12] veth0_vlan: left promiscuous mode [ 1050.802986][T23424] smc: removing ib device  [ 1051.315831][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1051.337424][T16084] Bluetooth: hci2: command tx timeout [ 1051.397776][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1052.009331][T27905] chnl_net:caif_netlink_parms(): no params data found [ 1052.037857][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.045120][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.073935][T26717] ================================================================== [ 1052.082057][T26717] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 1052.090882][T26717] Read of size 8 at addr ffff88807a3902e8 by task kworker/0:1/26717 [ 1052.098902][T26717] [ 1052.101278][T26717] CPU: 0 UID: 0 PID: 26717 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 1052.101304][T26717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1052.101318][T26717] Workqueue: events smc_ib_port_event_work [ 1052.101355][T26717] Call Trace: [ 1052.101363][T26717] [ 1052.101372][T26717] dump_stack_lvl+0xe8/0x150 [ 1052.101399][T26717] print_report+0xba/0x230 [ 1052.101419][T26717] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1052.101444][T26717] kasan_report+0x117/0x150 [ 1052.101467][T26717] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1052.101497][T26717] __ethtool_get_link_ksettings+0x5e/0x170 [ 1052.101532][T26717] ib_get_eth_speed+0x180/0x7f0 [ 1052.101559][T26717] ? rxe_query_port+0x7e/0x3d0 [ 1052.101582][T26717] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1052.101614][T26717] ? do_raw_spin_unlock+0xf5/0x210 [ 1052.101643][T26717] rxe_query_port+0x93/0x3d0 [ 1052.101668][T26717] ib_query_port+0x170/0x830 [ 1052.101705][T26717] smc_ib_port_event_work+0x15a/0x940 [ 1052.101743][T26717] ? process_scheduled_works+0xa0f/0x17a0 [ 1052.101774][T26717] ? process_scheduled_works+0xa0f/0x17a0 [ 1052.101805][T26717] process_scheduled_works+0xaec/0x17a0 [ 1052.101850][T26717] ? __pfx_process_scheduled_works+0x10/0x10 [ 1052.101880][T26717] ? do_raw_spin_lock+0x12b/0x2f0 [ 1052.101904][T26717] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1052.101927][T26717] ? schedule+0x90/0x360 [ 1052.101950][T26717] worker_thread+0xda6/0x1360 [ 1052.101989][T26717] ? __kthread_parkme+0x19c/0x1f0 [ 1052.102013][T26717] kthread+0x726/0x8b0 [ 1052.102037][T26717] ? __pfx_worker_thread+0x10/0x10 [ 1052.102068][T26717] ? __pfx_kthread+0x10/0x10 [ 1052.102093][T26717] ? _raw_spin_unlock_irq+0x23/0x50 [ 1052.102124][T26717] ? __pfx_kthread+0x10/0x10 [ 1052.102147][T26717] ret_from_fork+0x51b/0xa40 [ 1052.102180][T26717] ? __pfx_ret_from_fork+0x10/0x10 [ 1052.102210][T26717] ? __switch_to+0xc82/0x1410 [ 1052.102239][T26717] ? __pfx_kthread+0x10/0x10 [ 1052.102262][T26717] ret_from_fork_asm+0x1a/0x30 [ 1052.102299][T26717] [ 1052.102307][T26717] [ 1052.299842][T26717] Allocated by task 26007: [ 1052.304292][T26717] kasan_save_track+0x3e/0x80 [ 1052.309024][T26717] __kasan_kmalloc+0x93/0xb0 [ 1052.313631][T26717] __kvmalloc_node_noprof+0x59a/0x8d0 [ 1052.319018][T26717] alloc_netdev_mqs+0xa6/0x11b0 [ 1052.323898][T26717] rtnl_create_link+0x31f/0xd70 [ 1052.328772][T26717] rtnl_newlink_create+0x277/0xb70 [ 1052.333914][T26717] rtnl_newlink+0x1666/0x1be0 [ 1052.338634][T26717] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1052.343598][T26717] netlink_rcv_skb+0x232/0x4b0 [ 1052.348374][T26717] netlink_unicast+0x80f/0x9b0 [ 1052.353158][T26717] netlink_sendmsg+0x813/0xb40 [ 1052.357933][T26717] __sys_sendto+0x709/0x7a0 [ 1052.362469][T26717] __x64_sys_sendto+0xde/0x100 [ 1052.367255][T26717] do_syscall_64+0xe2/0xf80 [ 1052.371801][T26717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.377711][T26717] [ 1052.380052][T26717] Freed by task 12: [ 1052.383860][T26717] kasan_save_track+0x3e/0x80 [ 1052.388549][T26717] kasan_save_free_info+0x46/0x50 [ 1052.393590][T26717] __kasan_slab_free+0x5c/0x80 [ 1052.398368][T26717] kfree+0x1be/0x650 [ 1052.402290][T26717] device_release+0x9e/0x1d0 [ 1052.406897][T26717] kobject_put+0x228/0x560 [ 1052.411329][T26717] netdev_run_todo+0xc75/0xde0 [ 1052.416131][T26717] default_device_exit_batch+0x986/0xa00 [ 1052.421778][T26717] ops_undo_list+0x52b/0x940 [ 1052.426393][T26717] cleanup_net+0x4df/0x7b0 [ 1052.430829][T26717] process_scheduled_works+0xaec/0x17a0 [ 1052.436438][T26717] worker_thread+0xda6/0x1360 [ 1052.441155][T26717] kthread+0x726/0x8b0 [ 1052.445246][T26717] ret_from_fork+0x51b/0xa40 [ 1052.449852][T26717] ret_from_fork_asm+0x1a/0x30 [ 1052.454638][T26717] [ 1052.456981][T26717] The buggy address belongs to the object at ffff88807a390000 [ 1052.456981][T26717] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1052.471315][T26717] The buggy address is located 744 bytes inside of [ 1052.471315][T26717] freed 4096-byte region [ffff88807a390000, ffff88807a391000) [ 1052.485233][T26717] [ 1052.487581][T26717] The buggy address belongs to the physical page: [ 1052.494024][T26717] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a390 [ 1052.502793][T26717] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1052.511307][T26717] memcg:ffff888032b44981 [ 1052.515573][T26717] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1052.523572][T26717] page_type: f5(slab) [ 1052.527571][T26717] raw: 00fff00000000040 ffff88813fe30500 0000000000000000 dead000000000001 [ 1052.536170][T26717] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888032b44981 [ 1052.544781][T26717] head: 00fff00000000040 ffff88813fe30500 0000000000000000 dead000000000001 [ 1052.553475][T26717] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888032b44981 [ 1052.562178][T26717] head: 00fff00000000003 ffffea0001e8e401 00000000ffffffff 00000000ffffffff [ 1052.570869][T26717] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1052.579568][T26717] page dumped because: kasan: bad access detected [ 1052.586009][T26717] page_owner tracks the page as allocated [ 1052.591733][T26717] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6279, tgid 6279 (syz-executor), ts 113595060485, free_ts 113575600868 [ 1052.613286][T26717] post_alloc_hook+0x228/0x280 [ 1052.618077][T26717] get_page_from_freelist+0x24dc/0x2580 [ 1052.623641][T26717] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1052.629470][T26717] alloc_pages_mpol+0x232/0x4a0 [ 1052.634342][T26717] allocate_slab+0x86/0x3a0 [ 1052.638865][T26717] ___slab_alloc+0xd82/0x1760 [ 1052.643559][T26717] __slab_alloc+0x65/0x100 [ 1052.647989][T26717] __kmalloc_node_track_caller_noprof+0x5b7/0x7f0 [ 1052.654418][T26717] kmemdup_noprof+0x2b/0x70 [ 1052.658941][T26717] __addrconf_sysctl_register+0xa7/0x4d0 [ 1052.664585][T26717] addrconf_sysctl_register+0x168/0x1c0 [ 1052.670147][T26717] ipv6_add_dev+0xd26/0x13a0 [ 1052.674754][T26717] addrconf_notify+0x771/0x1050 [ 1052.679623][T26717] notifier_call_chain+0x19d/0x3a0 [ 1052.684750][T26717] register_netdevice+0x171a/0x1cd0 [ 1052.689967][T26717] veth_newlink+0x67b/0xb70 [ 1052.694492][T26717] page last free pid 6279 tgid 6279 stack trace: [ 1052.700833][T26717] __free_frozen_pages+0xbf8/0xd70 [ 1052.705971][T26717] __put_partials+0x146/0x170 [ 1052.710682][T26717] __slab_free+0x294/0x320 [ 1052.715125][T26717] qlist_free_all+0x97/0x100 [ 1052.719745][T26717] kasan_quarantine_reduce+0x148/0x160 [ 1052.725232][T26717] __kasan_slab_alloc+0x22/0x80 [ 1052.730104][T26717] __kvmalloc_node_noprof+0x548/0x8d0 [ 1052.735525][T26717] alloc_netdev_mqs+0x8a6/0x11b0 [ 1052.740503][T26717] rtnl_create_link+0x31f/0xd70 [ 1052.745410][T26717] rtnl_newlink_create+0x277/0xb70 [ 1052.750556][T26717] rtnl_newlink+0x1666/0x1be0 [ 1052.755260][T26717] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1052.760220][T26717] netlink_rcv_skb+0x232/0x4b0 [ 1052.765002][T26717] netlink_unicast+0x80f/0x9b0 [ 1052.769790][T26717] netlink_sendmsg+0x813/0xb40 [ 1052.774570][T26717] __sys_sendto+0x709/0x7a0 [ 1052.779095][T26717] [ 1052.781443][T26717] Memory state around the buggy address: [ 1052.787094][T26717] ffff88807a390180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1052.795184][T26717] ffff88807a390200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1052.803254][T26717] >ffff88807a390280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1052.811341][T26717] ^ [ 1052.818809][T26717] ffff88807a390300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1052.826903][T26717] ffff88807a390380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1052.834984][T26717] ================================================================== [ 1053.190931][T26717] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1053.198191][T26717] CPU: 0 UID: 0 PID: 26717 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 1053.207688][T26717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1053.217777][T26717] Workqueue: events smc_ib_port_event_work [ 1053.223648][T26717] Call Trace: [ 1053.226933][T26717] [ 1053.229865][T26717] vpanic+0x1e0/0x670 [ 1053.233882][T26717] panic+0xc5/0xd0 [ 1053.237609][T26717] ? __pfx_panic+0x10/0x10 [ 1053.242046][T26717] ? preempt_schedule_thunk+0x16/0x30 [ 1053.247452][T26717] ? preempt_schedule_thunk+0x16/0x30 [ 1053.252859][T26717] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1053.258859][T26717] check_panic_on_warn+0x89/0xb0 [ 1053.263803][T26717] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1053.269802][T26717] end_report+0x6f/0x140 [ 1053.274049][T26717] kasan_report+0x128/0x150 [ 1053.278554][T26717] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1053.284561][T26717] __ethtool_get_link_ksettings+0x5e/0x170 [ 1053.290462][T26717] ib_get_eth_speed+0x180/0x7f0 [ 1053.295324][T26717] ? rxe_query_port+0x7e/0x3d0 [ 1053.300093][T26717] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1053.305516][T26717] ? do_raw_spin_unlock+0xf5/0x210 [ 1053.310649][T26717] rxe_query_port+0x93/0x3d0 [ 1053.315262][T26717] ib_query_port+0x170/0x830 [ 1053.319876][T26717] smc_ib_port_event_work+0x15a/0x940 [ 1053.325281][T26717] ? process_scheduled_works+0xa0f/0x17a0 [ 1053.331024][T26717] ? process_scheduled_works+0xa0f/0x17a0 [ 1053.336834][T26717] process_scheduled_works+0xaec/0x17a0 [ 1053.342436][T26717] ? __pfx_process_scheduled_works+0x10/0x10 [ 1053.348445][T26717] ? do_raw_spin_lock+0x12b/0x2f0 [ 1053.353492][T26717] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1053.358914][T26717] ? schedule+0x90/0x360 [ 1053.363177][T26717] worker_thread+0xda6/0x1360 [ 1053.367887][T26717] ? __kthread_parkme+0x19c/0x1f0 [ 1053.372948][T26717] kthread+0x726/0x8b0 [ 1053.377031][T26717] ? __pfx_worker_thread+0x10/0x10 [ 1053.382180][T26717] ? __pfx_kthread+0x10/0x10 [ 1053.386804][T26717] ? _raw_spin_unlock_irq+0x23/0x50 [ 1053.392042][T26717] ? __pfx_kthread+0x10/0x10 [ 1053.396745][T26717] ret_from_fork+0x51b/0xa40 [ 1053.401367][T26717] ? __pfx_ret_from_fork+0x10/0x10 [ 1053.406512][T26717] ? __switch_to+0xc82/0x1410 [ 1053.411213][T26717] ? __pfx_kthread+0x10/0x10 [ 1053.415836][T26717] ret_from_fork_asm+0x1a/0x30 [ 1053.420629][T26717] [ 1053.424322][T26717] Kernel Offset: disabled [ 1053.428693][T26717] Rebooting in 86400 seconds..