last executing test programs: 24m3.033421383s ago: executing program 32 (id=282): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0xfc, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, @perf_config_ext={0x8, 0x1}, 0x4cd, 0xca, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xa7, 0x1000000000200}, 0x114105, 0x4, 0x0, 0x1, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610444000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b4000000000000007917b0000000000025000000000000009500740000000000df90ee720c440d8e2a96d3605e608186458e9d3f11ff6e887d338ad1d5c4127a2e88a985f79aa5d56d57bc7e1e0317e25a15fb626bd640c9146445cfd5df2d4ce904988de114f167121f573288c68850ab68ffe943d7f91e2215e4d2d282eec1406fcbdc1b0f79004179f84a4242b4ae580905a4720e"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x61}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10090, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x800, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/uts\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8=r1], 0x12) 19m3.05947722s ago: executing program 33 (id=2191): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000004000000000c0000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x21) 18m59.856378588s ago: executing program 34 (id=2270): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000027e964fcae9fd37c3150d811756a0009ff03bd7800fddbdf251000000018e18eaca1d1e7"], 0x28}}, 0x4000080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000001b46000000850000001800000085000000050000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket$kcm(0x2, 0x0, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x15, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex=r3, 0x16, 0x1, 0x4, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x3c3a80, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000340)) socket$netlink(0x10, 0x3, 0x0) 17m45.681052553s ago: executing program 35 (id=2614): socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xd}, 0x114244, 0x0, 0xafe8, 0x0, 0x7fff, 0x148}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x5, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x44) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000002c0)={'dvmrp0\x00', 0x400}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r6, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x24004000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x512c6a4a, 0x830d}, 0x0, 0x8, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r7}, 0x0, &(0x7f0000000240)='%pI4 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000240007012ebd7000fb"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8000) setsockopt$sock_attach_bpf(r6, 0x6, 0x2, &(0x7f0000000000), 0x4) close(r5) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x17, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0}, 0x388b) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000001c0)={0xa, 0x4e21, 0x4, @private1, 0xfffff286}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000540)="d6de000f331089c927af6c3af654339d2eba8c661289e20628a077cd4f14fcc6bd1de9dc971f4b94b62dbcea12f8663a4289f68342e23565170479547304706b6e757f22b5c98e0987920dfe0608b6ae8b5a6af609b556baf8c30e713d25848f2f3b56d8b641a841cd66348bf10f03b325a28a29f5a76c68", 0x78}, {&(0x7f00000005c0)="5ebbc00d7085574fa395f16313a9edcb1c264740e1c669650c841891a335c596029bae80723d0b016fc3df37b0f7fa2e5c1cae4295a2cd80074be2", 0x3b}, {0x0}, {0x0}], 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x90}, 0x11) sendmsg$IPSET_CMD_DEL(r5, 0x0, 0x0) 16m11.466234667s ago: executing program 36 (id=3163): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_bp={0x0, 0x9}, 0xc02, 0x1, 0x0, 0x8, 0x43fa, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60804, 0x4, @perf_config_ext={0x5, 0x830d}, 0x0, 0xa57b, 0xfffffffe, 0x6, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4105) socket$kcm(0x2, 0x922000000001, 0x106) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0xa, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0x7}, 0x188a, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) 11m46.187421543s ago: executing program 37 (id=4922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 8m46.272413566s ago: executing program 38 (id=6221): close(0xffffffffffffffff) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x40) close(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8c000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0xfffffffffffffffd, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x9, 0x7}, 0x4, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x40) perf_event_open(&(0x7f00000003c0)={0x1, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x7ff, 0xfffffffe, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f1ff90000000000000000218010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xee, &(0x7f0000000100)=""/238}, 0x94) 8m5.569545804s ago: executing program 39 (id=6479): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x1000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x15, 0x0, 0x1, 0x80000000}, {0x28}, {0x6, 0x0, 0x0, 0x4000}]}) syz_open_procfs$namespace(r2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x10000}, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18300000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="00000000000000000000512288fb", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m3.007550027s ago: executing program 1 (id=6824): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071114400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x480010, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 7m2.74702882s ago: executing program 1 (id=6827): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000090000000000000200000a20000000000a050000000000000000050100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000014080002400000000208000b40000000000900010073797a300000000014000000020a0101000000000000000001"], 0xe8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 7m2.314535265s ago: executing program 1 (id=6832): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="020f0000110000000000030000000000030005000000000002004e23e00000010000000000000000080012000300010000001000000000000600000097000000feffffff0000000000000000000000000000000000000000fc0200000000000000000000000000ff030006000000000002004e23e00000020000000000000000010018"], 0x88}}, 0x0) 7m2.085871925s ago: executing program 1 (id=6835): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x20008, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa44, 0x4}, 0x401, 0x0, 0x0, 0x0, 0x200, 0xfffffffc, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5d31, 0xa8000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x3) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000c00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000a00)='ns/user\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc00a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x2}, 0x105e39, 0x0, 0x0, 0x6, 0x9, 0xfffffffe, 0x101, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x4, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0xa, &(0x7f0000000100), 0xffcd) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x3, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1412, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x20}}, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10000}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 7m0.588165345s ago: executing program 1 (id=6844): r0 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xd, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x4880, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x8915, 0x0, 0xc, 0x1, 0x3fe, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x14, 0xff, 0x0, 0x0, 0x5d33, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x4309, 0xd7, 0x9, 0x6, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xfe, 0x41, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, @perf_config_ext={0x8, 0x100000000}, 0x814, 0x0, 0x0, 0x2, 0x7, 0x0, 0xc}, 0x0, 0x1, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='\x00') r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(r3) mkdirat$cgroup(r2, 0x0, 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000003a000900e0ff070004000000010000000c00ec000241000000000013"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 6m59.903398125s ago: executing program 1 (id=6850): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000000f00)="9eb8a2c0e241fb0402ac67d48d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad3a3db73f406c4aec4ba5a715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c53e7017cf0fe0275d2d6f9531b12f12e29b903ffd774272360efe35269a1835d8f3e07382952f4fd47c9025f538c0bf576243026ed3d16af515d4e31055e765380602c4b42cb4", 0xe7}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de", 0x33}, {&(0x7f00000003c0)="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", 0x123}, {0x0}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote, 0x2000000}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x13, 0x0, 0x0, 0x900}, 0x0) 6m59.419181767s ago: executing program 40 (id=6850): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000000f00)="9eb8a2c0e241fb0402ac67d48d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad3a3db73f406c4aec4ba5a715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c53e7017cf0fe0275d2d6f9531b12f12e29b903ffd774272360efe35269a1835d8f3e07382952f4fd47c9025f538c0bf576243026ed3d16af515d4e31055e765380602c4b42cb4", 0xe7}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de", 0x33}, {&(0x7f00000003c0)="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", 0x123}, {0x0}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote, 0x2000000}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x13, 0x0, 0x0, 0x900}, 0x0) 6m18.562276745s ago: executing program 8 (id=7089): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$kcm(0x2, 0x7, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e33, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000680), 0x58}], 0x1}, 0x4008014) recvmsg$kcm(r0, &(0x7f0000002c40)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000640)="a1", 0x1}], 0x1}, 0x80) recvmsg$kcm(r0, &(0x7f0000001080)={&(0x7f00000008c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000940)=""/129, 0x81}, {0x0}, {0x0}], 0x3}, 0x40010062) socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="850000e7060000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x4008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x7fffffff, 0xb}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x1e, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={0x0}}, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0xd}], 0x10}, 0xfc40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYRES64=r1, @ANYRES64=0x0], 0x20) 6m18.022537724s ago: executing program 8 (id=7095): close(0xffffffffffffffff) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x40) close(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8c000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0xfffffffffffffffd, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x9, 0x7}, 0x4, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x40) perf_event_open(&(0x7f00000003c0)={0x1, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x7ff, 0xfffffffe, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f10000070000000000000218010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xee, &(0x7f0000000100)=""/238}, 0x94) 6m16.980947374s ago: executing program 8 (id=7106): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x402, 0xc262, 0xfffffffe, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0xc}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0x26, 0x101, 0x70bd2b, 0xfffffffc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x40409d6}, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0xfffffffffffffffd, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x1}, 0x91400, 0xca, 0xfffffffd, 0x5, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r6], 0x9a) 6m16.500964287s ago: executing program 8 (id=7108): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x14, 0x4, 0x4, 0x8, 0x1014}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, r1, 0x0, 0x4, &(0x7f0000000100)=')%])'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f00000002c0)=r3) close(r4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0x20000004) bpf$MAP_CREATE(0x0, 0x0, 0x50) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="241b000707060101000000000000000002000009080006400000000105000100076518f32a24d81f60618e1d3160b3e599c4e01f700f31c92c4f89ebf8e29ce2a3bc46ea63f83522cf03fdab9e0de2afe3b00707dc8630f2859bdc48bf151856a71a96081368a9f70c809040bba49de199c5275c4fa1d6ce503273834251e165c6887e0ec97208f209a05e55666dafee3c18f252fe752a07a10e62fd8d927f7d68c48517"], 0x24}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETLINK(r9, 0x400454cd, 0x336) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r7, 0x77, 0x0, 0x5d85, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 6m15.96939785s ago: executing program 8 (id=7112): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001680)=@generic={0x0, 0x27, 0x10}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92y.c_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}^\x00\x00'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) mount$bpf(0x200000000000, 0x0, 0x0, 0x8b7848, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x40) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002740)={&(0x7f0000000380)="d50a3d33bb20fa4631a003a872a02fdcc483c19071a9f2678930ed4c475a45f18d907081e3546d3e85ed02f39f071a0b0a58c7eadbf89c6c58f1a71313595161db54afc3f8fa4b2c546853fc9b76559dc0459cbc4dd551a128ca2a1523063751e4c569f046b8e99dcfcdf28ad1e735eee077dff07254258b42191718066b3785214ec3cd97e935dd709d60a992f51fba103a23a491e94c40b1b45f42663c732a54a6bb09b577048c671c5ccd416c908009810f00cebf217c8345", &(0x7f00000016c0)=""/4086, 0x0, 0x0, 0x9, r0, 0x4}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c050}, 0x90) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x4}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2000}}]}}, 0x0, 0x5a, 0x0, 0x3}, 0x28) 6m15.536475728s ago: executing program 8 (id=7114): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100000000000000000000000000000000000000000000000000000000000008", @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) 6m0.003813807s ago: executing program 41 (id=7114): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100000000000000000000000000000000000000000000000000000000000008", @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) 5m38.070857238s ago: executing program 5 (id=7313): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup, 0x24, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x30, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x1e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd08, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x34, 0x6, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000960300000000000000000000850000000f00d4460ce958b5ec9200008c00000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/248, 0xf8}, 0x21) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, r4, 0x2, 0x3, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0xffffffffffffff6e, 0x0, 0x0, 0x9f}, 0x28) r5 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x6002, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x12, &(0x7f0000000500), 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x20048844) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x9}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32], 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) bpf$LINK_DETACH(0x22, &(0x7f00000002c0), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340), 0x4) recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)}, 0x20000000) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x1a4, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x0, 0x1f87107f04b23ea9}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in=@multicast2, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x8001, 0x10000000000, 0x9}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x68, 0x2, {{'cbc(twofish)\x00'}, 0x100, "1a000b000000366a6a849a739045002400000000e80000d5ca7bcd2e04006000"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x1a4}}, 0x0) 5m36.826604428s ago: executing program 5 (id=7321): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0xff, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x11080, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r1, 0x8, r0, 0x9) 5m34.324056881s ago: executing program 5 (id=7334): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0xc}, 0x100800, 0x0, 0x0, 0x8, 0x3fe, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0xfffffff2, 0x9, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5m33.980696234s ago: executing program 5 (id=7338): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) (rerun: 64) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x398d0ce, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000041000701feff30fffe0700ff017c0000040042800c00018006000600800a00000c00028004001480"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8001000010000100feffffff00010000fe88000000000000000000003f504069674381548038e762d0010fdc00000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/312], 0x180}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a310000000005000100070000002c0007"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x1beea, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000d0000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000120000850000007100000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0bd547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280100001700010025bd700000000000fe8000000000000000000000000000aa0000000033000000ffffffff00000000000000060000000000000000000000000000000000000000fe8800000000000000000000000000014e210000000000000a0000000d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fe80"], 0x128}}, 0x8801) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000d, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x76, 0x9}, 0x15cfa, 0x44, 0x98, 0x0, 0x90, 0xfffff274, 0xfff8, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) (async) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x124, 0x0, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x800}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x101}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6e}]}, @NFACCT_QUOTA={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4000951}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x200}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3f53}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xa}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}]}, 0x124}, 0x1, 0x0, 0x0, 0x91}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x20480, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x482, 0x81, 0x7ff, 0x0, 0xfffffffffffffffc, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x0) 5m33.110853023s ago: executing program 5 (id=7340): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x3, 0x1, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f8680000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc) 5m32.058950166s ago: executing program 5 (id=7345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x7}, 0x0, 0x0, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8b1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x65094, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xe}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x40, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x5c, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100ff83001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 5m30.78223819s ago: executing program 42 (id=7345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x7}, 0x0, 0x0, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8b1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x65094, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xe}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x40, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x5c, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100ff83001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 2m53.297597265s ago: executing program 6 (id=8374): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000006feffffb702000008000000b70300000000000085000000ce02010095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m53.063492356s ago: executing program 6 (id=8376): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="000000fffffff300b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000018000000b7040000001c0000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 2m52.928619137s ago: executing program 6 (id=8378): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80820}, 0xc0) socket$kcm(0x11, 0x2, 0x0) getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{}, &(0x7f00000000c0), &(0x7f0000001300)=r0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x100810, 0x0, 0x100, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x9000000, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000100)=r1, 0x120) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}, 0x80, 0x0}, 0x844) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) 2m52.577709522s ago: executing program 6 (id=8382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x1000, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x44, 0x9, "09f00c00000088"}]}}}], 0x20}, 0x20002880) (async) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x1000, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x44, 0x9, "09f00c00000088"}]}}}], 0x20}, 0x20002880) openat$cgroup_int(r1, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) (async) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x27) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.freeze\x00', 0x26e1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x28d20e727b85fa3, 0xc, &(0x7f0000000640)=@framed={{0x18, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa70a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback=0x26, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x30, 0x1401, 0x200, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c001}, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x194a}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x194a}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000340)='\"-[\x00<\xb6(\xd66\\v\xed\xc7') mkdir(&(0x7f0000000480)='./cgroup/../file0\x00', 0x80) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0) recvmsg(r4, &(0x7f0000002580)={&(0x7f00000005c0)=@rc={0x1f, @none}, 0x80, &(0x7f00000024c0), 0x0, &(0x7f0000002540)=""/30, 0x1e}, 0x10040) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x9, 0xbf1, 0x2, 0x5000, 0xffffffffffffffff, 0x3, '\x00', 0x0, r4, 0x0, 0x5, 0x2, 0xa}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x5}, 0x100066, 0x2, 0xdffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x5}, 0x100066, 0x2, 0xdffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, 0x33, 0x107, 0xfffffffc, 0x0, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0xc000) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, 0x33, 0x107, 0xfffffffc, 0x0, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0xc000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) 2m52.107146372s ago: executing program 6 (id=8386): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x4, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x2000000000000000, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7ff, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011cfd0000000000000000000008000000", @ANYRES64=r1], 0x48}, 0x0) 2m50.502842177s ago: executing program 6 (id=8391): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="020f0000110000000000000000000000030005000000000002004e23e00000010000000000000020080012000300010000001000000000000600000097000000feffffff0000000000000000000000000000000000000000fc0200000000000000000000000000ff030006000000000002004e23e00000020000000000000000010018"], 0x88}}, 0x0) 2m50.05744196s ago: executing program 43 (id=8391): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="020f0000110000000000000000000000030005000000000002004e23e00000010000000000000020080012000300010000001000000000000600000097000000feffffff0000000000000000000000000000000000000000fc0200000000000000000000000000ff030006000000000002004e23e00000020000000000000000010018"], 0x88}}, 0x0) 1m26.060715466s ago: executing program 7 (id=8878): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r0}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x89ec, 0xfffffffffffffffb}, 0x10fc1d, 0x3, 0x4, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x3, 0x101) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x300) 1m25.063117752s ago: executing program 7 (id=8881): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1404, 0x8, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x9, 0x7}, 0x4, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x6, 0x4}, 0x1, 0x4, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800001000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000000f060103000000000000000002000003050001"], 0x44}, 0x1, 0x0, 0x0, 0x95}, 0x24040080) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x45c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xb, 0x0, 0x2f, 0x8, 0x81, 0xb7}, {0xa8, 0x2, 0xc3, 0x7, 0x9, 0x3}, 0x8, 0x80000000, 0x10ce}}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x4, 0x8, 0x6, 0x8, 0x201, 0x800084d, 0xb3a, 0x9, 0xe0dc, 0x92, 0xffffffff, 0x6, 0x0, 0x7, 0x0, 0x94, 0x9, 0x7, 0x10, 0x8, 0x818f, 0x4, 0x8, 0x34, 0x6, 0x3, 0xfff7ff0e, 0x6905, 0xc, 0x8, 0x8b, 0x40, 0x0, 0x3, 0x4, 0x7, 0x6, 0x1000, 0x6, 0x0, 0xf, 0x8001, 0x9, 0xa, 0x4, 0x1acf992, 0x65, 0xbac, 0xc0, 0x80, 0x2cf9, 0x4, 0x49, 0x10, 0x8, 0x4, 0x4, 0x101, 0xffffffb0, 0x8, 0x862e, 0x5, 0x9, 0x1fe, 0x80000001, 0x4, 0x0, 0x190, 0x7fff, 0x6, 0x6000, 0x8000, 0x24, 0x5, 0x5, 0x65, 0xfffffff7, 0x8000, 0x2, 0x1, 0x5, 0xbb, 0x8, 0x10, 0xdfc0, 0xd, 0x8, 0x0, 0x8000, 0xd3d, 0x6, 0xfffffffd, 0x400, 0x8, 0xe9f, 0xada3, 0x9, 0x8, 0x8000, 0x9, 0x6, 0x401, 0x5, 0x0, 0xffffffff, 0x8000, 0x4, 0x1000, 0xac3, 0x800, 0x0, 0x5, 0xfffffff8, 0x0, 0x5, 0x8, 0x3, 0x9, 0x400, 0xfffffff6, 0x56f, 0x6df, 0x4935a2c4, 0x2, 0x5, 0xba03, 0xffff, 0xb06, 0x0, 0x6, 0x81, 0x1, 0x2, 0x9, 0xf814, 0x0, 0x3, 0x9, 0x10004, 0x94b4, 0x6, 0x80000001, 0x8000, 0x6, 0x9, 0x4, 0x3, 0xa, 0xf, 0x2, 0xfffffffa, 0xff, 0x90000000, 0x2, 0x4, 0x7, 0x8000, 0x2, 0x0, 0x6, 0x6, 0x9, 0xfff, 0x86, 0x10001, 0x4, 0x8, 0x3, 0x2eaf, 0xffff, 0x8, 0x40000006, 0x7, 0x404, 0x5, 0x1000, 0x99, 0x7fff, 0x0, 0x9, 0x1ff, 0x7, 0x2206e57f, 0x3, 0x778, 0x9, 0x3552, 0x4, 0x1, 0xde00, 0xffff, 0x80, 0x10, 0x3, 0xeb12, 0x7, 0x4, 0x200, 0xffffffff, 0x56f, 0x8, 0x7, 0x0, 0x3, 0x3, 0x101, 0x80000000, 0x5, 0x30, 0x451a, 0x7, 0x1, 0x0, 0xfffffffd, 0xfffffffb, 0x3, 0x7, 0x46, 0xfffff060, 0x5, 0x7, 0xb, 0x3, 0x9, 0x1, 0x7ffe, 0x3, 0x7ffffc01, 0x5b07707f, 0x7, 0x2, 0x3, 0x3, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x8000, 0x80000000, 0x3, 0x7, 0x7ffc, 0x52, 0x0, 0x3, 0x9, 0x0, 0x9, 0x5, 0x2, 0x6, 0x9, 0x1, 0x2]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 1m24.076048508s ago: executing program 7 (id=8886): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000008c0)=""/195, 0xc3}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xf}, 0xa2a, 0x0, 0x0, 0x3, 0x9, 0x800000, 0xfffe, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efe, 0x4, 0x0, 0x0, 0x2, 0xffffffa1, 0xfffc, 0x0, 0x0, 0x0, 0x6}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0xe2b, 0x70bd2a, 0x0, {0x0, 0x0, 0x12, r10, {0x0, 0x3}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x20, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x20000141}, @TCA_TBF_PRATE64={0xc, 0x5, 0x84eae1006895906f}, @TCA_TBF_BURST={0x8, 0x6, 0xfffffffa}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004003}, 0x8080) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r11) r12 = socket(0x10, 0x3, 0x9) sendmsg$nl_generic(r12, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000800)=ANY=[@ANYBLOB="c3380027bd70f0fadbdf"], 0x14}, 0x1, 0x0, 0x0, 0xf6f0ed828f7b79fb}, 0x4000080) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r13, 0x58, &(0x7f0000000180)}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000f8ffffff000000810000000085000000bc08000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r10, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcb4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r14, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) recvmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) recvmsg$unix(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000040)=""/127, 0x7f}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="ff", 0x1}], 0x1}, 0x400c000) 1m22.598679688s ago: executing program 7 (id=8894): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x11efa, 0x4, 0x98, 0x0, 0x7, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x4}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@jmp={0x5, 0x1, 0xb, 0x9, 0x9, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0}, 0x28) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x6002, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x1a4, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x0, 0x20}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in=@multicast2, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x8001, 0x10000000000, 0x9}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x68, 0x2, {{'cbc(twofish)\x00'}, 0x100, "1a000b000000366a6a849a739045002400000000e80000d5ca7bcd2e04006000"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x1a4}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0x1}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8924, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xd}, 0x114905, 0x4, 0x0, 0x7, 0x0, 0x8, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffd}, 0x102, 0x3, 0x6, 0x9, 0x2, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x26e1, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m20.859789658s ago: executing program 7 (id=8902): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xf, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010700000000000000000a00000006000100", @ANYRES32=r2, @ANYBLOB="57e25ecebab2a988c4500a02b18a5db6be75e0dc1d6f7ab625cf42a0740d0700000000000000f3deca5acf222973c20e9e5bd419a068"], 0x24}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x10088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0xdde, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) fstat(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10000, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80100, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x1d, 0x2, 0x6) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b40)}, 0x0) r10 = getpid() r11 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$netlink(r8, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="1000fedbdf21461e0a00000300000000000000aa28"], 0x10}], 0x1, &(0x7f0000002d80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="004bc489d7d5fd956ca80000002c000000000000", @ANYRES32=r6, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r9, @ANYRES32, @ANYRES32=r11, @ANYRES32=r9, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000010000000000000000100000001000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x20000810}, 0x40) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x140402, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB=',mode=00000000000000000000001,mode=00000000000000000000007,mode=00000000000000000000001,ui', @ANYRESHEX=r12, @ANYBLOB="2c6f626a5f726f6c653dbe2c646673636f6e746578743d73797374656d5f752c726f2c66756e633d504f4c4943595f434845434b2c7569643d00"/72, @ANYRESDEC]) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) mkdir(&(0x7f0000000500)='./file0\x00', 0xa8ee5bc7992e8ca4) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) 1m20.414107376s ago: executing program 7 (id=8905): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d0c}, 0xffffffffffffffff, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x10, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x2000000001, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x10000, 0xc}, 0x0, 0x1, 0x0, 0x8, 0x3fe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1e, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x5}, 0x100066, 0x2, 0xdffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0xc, 0x0, 0x0) sendmsg$inet(r7, &(0x7f00000017c0)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001700)="1c0000005e007f029e3b479bc33bf284bb9f726d8e47c8de23301cab", 0x1c}], 0x1}, 0x0) 1m5.109239171s ago: executing program 44 (id=8905): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d0c}, 0xffffffffffffffff, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x10, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x2000000001, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x10000, 0xc}, 0x0, 0x1, 0x0, 0x8, 0x3fe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1e, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x5}, 0x100066, 0x2, 0xdffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0xc, 0x0, 0x0) sendmsg$inet(r7, &(0x7f00000017c0)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001700)="1c0000005e007f029e3b479bc33bf284bb9f726d8e47c8de23301cab", 0x1c}], 0x1}, 0x0) 5.302933796s ago: executing program 2 (id=9211): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030106000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5.081098171s ago: executing program 2 (id=9213): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x80487436, 0xffffffffffffffff) (fail_nth: 3) 4.264662337s ago: executing program 9 (id=9217): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x2}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0xdde, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8001, 0x3db}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x30}}, 0x2004c080) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@getqdisc={0x34, 0x26, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffff}, {0x1f, 0x4}, {0xd, 0x10}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00038008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r4, &(0x7f0000000280)="90a00d19d940b12e6e9c0917dfd01f1986d4489b85547f54a285494b485d3de303ae5d816f261aa7135a12e830f76fdc7e46d32a44e87f7c2d1d25c922646adb997530e348bece42929cb835b6a9f9a99c6f48e06ea042c8e06bb45581d2a7f64f76fa999654422cdeeff401a2760b568c085c1dbb05159e55d178d07342580e2a", &(0x7f00000003c0)=""/59}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x75, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x0, 0x0, &(0x7f0000000400), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f0000007600004a4a03538c62000000000027"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 4.162851433s ago: executing program 2 (id=9218): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@alu={0x7, 0x0, 0x3, 0x5, 0x6, 0xffffffffffffffc0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc8, &(0x7f00000000c0)=""/200, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x200}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300)=r0, 0x4) (async) r1 = socket$unix(0x1, 0x1, 0x0) (async) r2 = gettid() (async) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000000700)={&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000600)=[{&(0x7f00000003c0)="4f11984a1e6ed283b44714874dbd3f4ecfaaea0952", 0x15}, {&(0x7f0000000400)="9bc97902ed866b8288e64d531551373699880e1ef8196b39ddd038be64faf7f9346340431f54caecc736d94c9957c82f54471aaa", 0x34}, {&(0x7f0000000440)="b9c80b13b6ffd3440c3362c168ba8e329a82e8bcae656877d1b6cbeeacb8a0f98e82e29ef8313769a9f56371ccb45626b089b7dd5b4c97bf57c3b585a3c099e63f72fe25d6313e3e52c77d32e0a10592c2b8a5f31acc2170c8a33ba2cfd34d98563637cd667bb2dd9755c02cb56e6b8999ecac20768be2c0fffe5a9923d9aed6622405ffeb50813daa03c0588344b57ca08bbd78759766ffa9b6e4e7ba5df1bfafa13f23923da9bc1de202908059fb60d7792149addbf5ba94c3", 0xba}, {&(0x7f0000000500)="4cc137a6ca667075ba0caa99f36fbcf5a11b243fd30c37e201dee46fcec64f836ac5702120ba810bb854cae98ce56c35b35d3ff67f00e81a705b27b92896176d3f78d013f542e519324516fc7243e3e95f09c1303fe519986456aa596f8bf2a5f85210aad343b1c8d302150d9fb9a9b418be87933c9fe1938d6494cbbdf4f99ee2344d87203a35fedc40fc458fd03c2f5719dde914b46a3e5d78e820a86de716a40595e534b9d5941f267e357c69e6ad953e1f1c92d2b0d11d13a1ea88e6e85a8947757888862257145ef800f26c365bda", 0xd1}], 0x4, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, 0xffffffffffffffff}}}], 0x20, 0x20000010}, 0x4040008) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0xd, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @alu={0x7, 0x1, 0xd, 0x5, 0x3, 0x18, 0xffffffffffffffff}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x2, 0x0, 0x5, 0xfffffffffffffff0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f00000007c0)='syzkaller\x00', 0x10001, 0x19, &(0x7f0000000800)=""/25, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0xb, 0x101, 0x7}, 0x10, 0xb14e, 0xffffffffffffffff, 0x3, &(0x7f00000008c0)=[0x1, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, r5, 0x1], &(0x7f0000000900)=[{0x1, 0x3, 0xd, 0xc}, {0x1, 0x3, 0x2, 0x6}, {0x3, 0x5, 0xa, 0x9}], 0x10, 0x6}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@ifindex=0x0, 0x9, 0xba64326c643e92ca, 0x401, &(0x7f0000000a00)=[0x0], 0x1, 0x0, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)={@ifindex=r10, r6, 0x27, 0x0, 0x0, @void, @value=r0, @void, @void, r8}, 0x20) fstat(r6, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000002440)={&(0x7f0000000c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000000cc0)="b227e92fe7880f8c4276fcda8a684b90948cd3c8feda31fe331354939153fea683811084ec45184bc560b14c844f5e3a5f26cdf01cf1a07bc12f1576fb96da2bd65731b954b61b8e61de83da6757c9a7ecc5e8e57be191cb10896a860686745bf2a7d51e50031a91f07b65ef5750e17a037abefa477e1fd31a3940fefad507a3c230c73d1b1b3ca37b8ded73783b81854cc2f5daf1cf24275d6a8c6e0bd2e96cce5f692e4d1b9b1fe4e5a4e4a69cbedd37e3695fa23a7905531e3c797ac8414a021edd36553c32c9", 0xc8}, {&(0x7f0000000dc0)="f346d24676c13a45c54becb1563a867f9f2651dca4658279c3608b42f214f413bf34ba621e3ca6f00696a979e2789e9edd7275996d18360a01dbd0bba49bb18358f961d455fdb291fece3618dc2e41a6c7bc94ef0826e2868664af8a28fd637936018026b46239f9207be106780763854bbc98e356f8b23b0def0aeffeb2aafe33ae451385ac1f912489c1dcffb88b97ce1256", 0x93}, {&(0x7f0000000e80)="cc6939cf039b1b9981c3a926b40a02004138401551297c7f002b5fa79ada25e896ae440044fc73e4260bcaf7499dc7b27f65efcbb7892f429ab778d08707cfd1b621a67adb1c95c9d0a44f53c0d098face5d1d4a140166776b7aa72ab7ce5d9971e3e5cbef065831ef314869c5b323a30e914a2ffbd8b9c0a325bf4362b73b3c543d29514afa2ccd9fd20e6dc8061a2ac4c9e43b", 0x94}, {&(0x7f0000000f40)='\tl', 0x2}, {&(0x7f0000000f80)="49270301d11684e1446cbdf403ad5fac32319461bfac1acfcf873d16f7313c93367478ecec5cb02c2c0b3be770226a1f03314283b12a1e1b36aec14137c8def5b06b3ffaee2ba1878bb4b0ee796be842a39497f724ed66f1f48ed290a26962700b0ec5ac954f79ad984d1f75b56622375de6945a68946713", 0x78}, {&(0x7f0000001000)="2eed1455fc255b8e8310c625862d9cefdd304dafae06d53a4cb587cb36a0bfbea2f99d0760d274731fe438baa5e745ea0ec6751fcf992ef395b99c9c870ba72c1f3356aad6c71bc33fcfecad2165a6f2e1dc5ad1f70b31d2d7586c2b63ebc3209171ee2c1e706976536b4cad666b9f5446ad179dfbc5e803fe312e2ef9767158965a0ddde15634d47a94f217ffd61234e7ad503ec437265ee76a30b9be5a4abfdc317d2728ee7d34b33ff601570299d750aaeb780fdaad35b332b2a89dde8346c1660f49bcfca797c4fd758aa95d", 0xce}, {&(0x7f0000001100)="55f6fd9957cfa8e5eaf4c24a016e2c4f8c56dd5edb10acce0225c836ad98298414fb62c445600b783e941dafc5757c611c7d23b626660d77e0eef9169d290032a82416d522dabdc77d3141068ca6a452637c0948925ccded87c276d5259f7269a12d4b4c74582093b109c17b82e6fe76a5958775cf68c3c0fef36ba0232740aee3dd7c5ee0c91b04781001ff4be225f30c3c026cd2311968869d6c6f605ea7479d3be575bc381bf5b85a1764f09be2effe26e7250394", 0xb6}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f00000021c0)="23a918d7157262920cbd8d5c4dfa2df7f967ade68b71a0b192bde21fb4cbe415106df5427a4582e62b12f9afad0ff1aa5f39b6d43229b77bc569e67a0a64d387e51714335f3862f69c2f22ca7579ccd64017292e3f60d571c6ae4c0cacb07e9a66137fa4698ab9df901c1fdfccc6867fe35c17a9b447ea89c67ce7775e05dad6811c70f9b0e34e23149788a5b8b5d33de999b691b60e4190cd31713b7dfd4dc54a76dbe8516008363713e3dcbd676e7862794ca829c5484bbf8018ab9fad63ba1ccb12b93144ac5e9319efa82a9c09f3c98935df8564ec6ce3ea2d9983ef1b996a832e464404182fbecd4d1e738cddddb914", 0xf2}], 0x9, &(0x7f0000002400)=[@cred={{0x1c, 0x1, 0x2, {r2, r11, r4}}}], 0x20, 0x11}, 0x20000010) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000002480), 0x2000, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000024c0)={'syz_tun\x00', 0x20}) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000002500)={'hsr0\x00', @random="330f5c3a3b17"}) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000002540), 0x80, 0x0) ioctl$TUNGETVNETLE(r13, 0x800454dd, &(0x7f0000002580)) (async) ioctl$TUNSETDEBUG(r12, 0x400454c9, &(0x7f00000025c0)=0x400) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000002600)=@bloom_filter={0x1e, 0x0, 0x4, 0x5, 0x8002, 0x1, 0x6, '\x00', r7, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0x8}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002700)={{0x1, 0xffffffffffffffff}, &(0x7f0000002680), &(0x7f00000026c0)='%+9llu \x00'}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002c00)={r6, 0xe0, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000002980)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000029c0)=[0x0], 0x0, 0xd0, &(0x7f0000002a00)=[{}, {}], 0x10, 0x10, &(0x7f0000002a40), &(0x7f0000002a80), 0x8, 0xad, 0x8, 0x8, &(0x7f0000002ac0)}}, 0x10) r17 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d80)={&(0x7f0000002c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@ptr={0xb}]}, {0x0, [0x61]}}, &(0x7f0000002c80)=""/233, 0x27, 0xe9, 0x1, 0x4}, 0x28) r18 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002e00)={r9, 0x7, 0x10}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002e40)={0x1, 0xffffffffffffffff}, 0x4) (async) r20 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002e80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', r7, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002fc0)={0x13, 0x15, &(0x7f0000002740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r14}}, @map_fd={0x18, 0x1, 0x1, 0x0, r15}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x1, 0x3, 0x2, 0xa, 0x10}], &(0x7f0000002800)='GPL\x00', 0x3, 0xf8, &(0x7f0000002840)=""/248, 0x41100, 0x10, '\x00', r16, @fallback=0x2a, r17, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002dc0)={0x2, 0xe, 0x3, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000002f00)=[0xffffffffffffffff, r18, r19, r12, r20, 0x1], &(0x7f0000002f40)=[{0x0, 0x3, 0x7, 0x1}, {0x0, 0x4, 0xc, 0x6}, {0x0, 0x4, 0x1, 0x7}, {0x5, 0x2, 0x10}, {0x2, 0x2, 0xe}, {0x2, 0x1, 0x7, 0x3}, {0x4, 0x4, 0xb, 0x3}, {0x3, 0x2, 0x3, 0x9}], 0x10, 0x101}, 0x94) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000003180)={r19, &(0x7f0000003080)="e36009d59cf5da4166171b32ac45bd01e83fed5592ce117a73eadceb0f306666c92746595b829e41ea2baa902ac2baecdf5da31567f2162beb0f910e38e0bf23335acedb80c7c626068fb55576e445457c0e91f5610b2a888a4cb6c137e2bbe79e053b5e35fce3ba1cc13e8e5c915ff4139f6163bf708ab47705c19c8bc5c0a7dd4222394a47bc30c957df2aed973b0371d59dc67210e60180a264d28df3f959e4d3009764413fa0175361b15095fd172069cbf2e8e5e2efb90243", &(0x7f0000003140)}, 0x20) (async) perf_event_open(&(0x7f0000003200)={0x3, 0x80, 0x4, 0x4, 0xc, 0x7, 0x0, 0x9, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f00000031c0)}, 0x8000, 0x1, 0x0, 0x2, 0xfffffffffffffffc, 0x4, 0x3, 0x0, 0x4, 0x0, 0xa}, r2, 0x10, r20, 0x1) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000003280)={'gretap0\x00', 0x1}) 3.766792148s ago: executing program 2 (id=9221): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000002000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) 3.379727818s ago: executing program 2 (id=9225): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x5}, 0x114945, 0x4, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000007000000000000700000095000000"], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) 3.208013102s ago: executing program 0 (id=9227): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x2c, 0x34, 0x9, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x2}]}, 0x2c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000007c00000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) 3.155418287s ago: executing program 9 (id=9228): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[], 0x38}}, 0x20010000) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[], 0x38}}, 0x20010000) (async) 2.92534633s ago: executing program 0 (id=9230): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20881, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x100, 0x0, 0x0, 0x3, 0x3fe}, 0x0, 0x1, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x114020, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfe33) socket$kcm(0x10, 0x3, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005d40cb2592f6fc77f2029c75e2f9095fd87ec6f61ffcd7a41840c620b86787b94ccac3ad1227b9f48e2964c73b3a282d121678324e3680c7f8455990f2743715295f58a8bdd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x8, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x2}, {0x9, 0xa}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8011) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002400010026bd7000fcdadf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socket$kcm(0x29, 0x2, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r4], 0xfe33) close(0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file0\x00', 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080100000c00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\'8\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 2.900002377s ago: executing program 2 (id=9231): getpid() r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfffffe7d) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000004040)={&(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42}}}, 0x80, 0x0}, 0x4000000) close(r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x8004745a, 0xffffffffffffffff) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x14, &(0x7f0000000440), 0x3d) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '@'}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) sendmsg$inet(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000600)="b7ff", 0x2}], 0x1}, 0x20008050) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) close(r6) sendmsg$inet(r3, &(0x7f0000000e80)={&(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000d80)}, 0x81) setsockopt$sock_attach_bpf(r3, 0x84, 0x10, &(0x7f0000000000), 0xc) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0) 2.84440227s ago: executing program 9 (id=9232): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffc01, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004"], 0xf0}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x800) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0xbb1e, 0x0}, 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x15, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='syzkaller\x00', 0x830, 0x0, 0x0, 0x41100, 0x6d, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000700)=[r0, r0, r0, r0, r0, r0], &(0x7f0000000740)=[{0x1, 0x5, 0x4, 0xb}, {0x2, 0x4, 0x6, 0x4}, {0x1, 0x2, 0x9, 0xa}], 0x10, 0x41}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="23000000d5dc000000e1000000ff000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r8, &(0x7f0000000580), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x17, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x46}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x1, 0xa, 0x1, 0x0, 0x6, 0xfffffffffffffffc}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x10, 0x0, &(0x7f0000000440), 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x3, 0x10, 0x8000, 0x1}, 0x10, r6, r7, 0x0, &(0x7f0000000840)=[r0, r0, r8, r0, r0, r0, r0], 0x0, 0x10, 0x5}, 0x94) 2.338966945s ago: executing program 4 (id=9235): socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x402, 0xc262, 0xfffffffe, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0xc}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0xfffffffffffffffd, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x1}, 0x91400, 0xca, 0xfffffffd, 0x5, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYBLOB, @ANYRES8=r0], 0x9a) 2.117632497s ago: executing program 0 (id=9236): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x11c266, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x8) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="6802000000050104000000000000000007"], 0x268}, 0x1, 0x0, 0x0, 0x64000001}, 0x24008000) r3 = socket$inet6(0xa, 0x1, 0x6) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x30}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x35}, 0x94) socketpair(0x1f, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000020118000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="45f7e5db1991046a455409300dfb", 0x0, 0x7406, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.890665224s ago: executing program 4 (id=9237): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000002a40)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) 1.73281033s ago: executing program 9 (id=9238): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000010000000000000000000000711848000000000f95"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x21600, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.727150258s ago: executing program 3 (id=9239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x7}, 0x0, 0x0, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8b1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x65094, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xe}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x40, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000affd9060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 1.597071738s ago: executing program 9 (id=9240): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x4018, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000b80)=[{&(0x7f00000003c0)="3816388c617fbe4d1931183fdb3368741c3937f0641c211231c805d75a1e34d6dfac22018d57823e317384efabb08af240", 0x31}, {&(0x7f00000009c0)="038032387c8a0c5eef8a5713d9caeef1dcfe0f0a3010a5587828c819bc14c7f2666b583c955e07d202d4cd6a4cd371c8fff81f149b706fa1e2a395dc4f959cc2e33ab005ca50937f833f5b76023827d6205e2405dbb3c457bf0590a2aa9f0e8dc47362337263c930af410f71e6c5162fb4ddf91c9f584fbb7f5a109eb08b13f28fd4822103c9f55ac8b7f51a2fb9423679e63e61146180581da1dbc8ff32af7716e206cbec37f3b5d13894dc3e97c2c7b1d52c24b497825ec3420dc53105f6c57f5a8d6821d5e5883d5f2ec0f1fa6187f22e3c45440440b17f3103ab1965b8ad4529600c2d019abfc822cf67dc7638", 0xef}, {&(0x7f0000000b00)="2212dac4f2051145e6e60f95716b0175a5b90950e23edb1633678a9740a8af672763f7c93bcc3e6531f8e716b076f1258a52c19199e6563f882968ce14405ec8fdb6d18cda56c9f71528442931f3e28b15ab640a48", 0x55}], 0x3, &(0x7f0000002200)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}], 0x70, 0x4}, 0x0) r4 = syz_clone(0x40000000, &(0x7f0000000c80)="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", 0xfb, &(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)="a0093bffa60f4911ccba197ecaf3b5fe693935b71b1cf63d70a167a8829c04e46b851c5e6ea0f272e4864a7678036bad26f007ae7e6fddcb76b7e33896600a0eeb9cf3a9aa493f1142632a09f258a80ae7ffeda126a036033de4b7f78614d9d0dd8fc935dd6d2e340ed2372199b1661c8c924c57add13b8063ea256bef81748499439ffa") fstat(r2, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f00000010c0)={&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000300)="7be78c891d9a53f3cee4ff7bf5efa868d68e62699a42bf64c0bb9af59a511be579b67ac1efce25fcf1e1815873784f7a1760a1447e6038", 0x37}, {&(0x7f0000000380)="fea63550b6b630511e859e211482ee50905eefef33c15918cc6a932a6bb21402ebd635079301bb1c20615a5966b8880a1c2be832f97d3955b9efec93d2208779df82237678afc56a463fb12ea406725940681a04dd6abc2e1712c4", 0x5b}, {&(0x7f0000000640)="837cb4254db1047d26b5b887bffe5811dd29ad27f0a6aa1b64e6b2f9eee68cb3ec01336651355926b38c8510c1c78fc8f42a2072f714c9a72bbee0125e4e3a91393f10968377b6e34b95a6ccf574aed1f9612e4194fb8a6762302bdfb195a471672b082a6002161224616cdd282c7666fe6a166ab8550471c748646852c2e4e7399a037b025b21d97d8a5262b517df367af3d48639da610c103c9641ad2b97069e0ef53127fce45421e63fa708bf59e29779861c22c113340158dd3cf9cd7c90c02ba0", 0xc3}, {&(0x7f0000000780)="6ea3541d955a6f9d50d0fec9f71fd731789664b44d224c53ceb0b5ec9de45d8cf14910ba69616992b82d6d43c713b205e7c68a9c9e6d9952e6a233e1b49f97ed7b5a1e505b9adf7466664f2824615671f6f08c94cb3e601392c2f95407b1f4add11a1c22d84569266d19750757757048b5f98bc58b5d0f3ec393ceffbbcdd12bf28f22876a0031b2e712aafddf1b02384ef3a0f2b9a58fbe72a73279b9de8f8227a5d05774a883c6704851e449d3cc304e3f295bbd6d5e7aaffe0938c614e5614e8c0b7780975aba5f352aad29d849150be2efcab8dc9031afcb990acf3ab144e30d87d1df76034c28262fb1ce63ed388494", 0xf2}, {&(0x7f0000000880)="0cec664814b8db064d011cf88e1b8ee2fad74dc04b75bfa796d36f5b4531b7862f9d2e01108b99bf9170f216f24cde763df1714fc09137", 0x37}, {&(0x7f0000000940)="ac0609aab2ffe7c2a2248c886ceafc6369bc1817a9223d8eaed4d4f2c340a38ecaaed573eabbefc44a267b683bff5a68e972b20cadf62597c7cc1bcd1580efe4ed2b0b70d512c4d93b46f49255897aebe9f77a63d1043c8bb44535ed0f", 0x5d}, {&(0x7f0000000a00)="af96afbd399a2eea99766a8f5f222dcd07b574a8597979a4e8cf50d0e0a0a985399e8c8c8351628e0f795d4a844b9b08265601cbae6b7e34ed42a3282aabbe28ae08794aec89dfe6954c99753b44ad50fff956779697ae513f02a82cc84b63353cac453db2b0900ca8bd905138dc2f65034ba8f675ae603963cd477fcf45bfa3058dbfd780f634bdbb35fae5783ba9f1f449d8cf83193c467c647b045f1ff86cd2ff262ee31f23688978eecf86686c0c410128efe95907a71b84bb060f880cbe779ebe70f5e61c0a0b3f950093a80696fd", 0xd1}, {&(0x7f0000000b00)="08452a8c151a2545605ad78be17fd6675ad04279667782076afadd7cd5373bc5d9377b579169b3375a683c80d3af8217023e9e8f71567917a1aeffc24d09b40019d379a35000c593b4c1799fc3f742097397d98c37abc8a5d79294575754baaf64c8ba89fb28ef64a1fabbe3bd1fe2c7560c7bbdf88111a3e3f77de91b3e2b01b4ecbb92cda8f797555646e59ef29948303c266cc4e63521e6a7dbe65de27c9db25a33567df10f749a0ba860b4437504b4e30cdae861d78046e32b20f1929937581751ef1df05fa80f5185bffdd739a3885faa6df548fe86d39ad13d4fdf87f70d59237091afa7a09eea56a490d60af827f646", 0xf3}], 0x8, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r7, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x78}, 0x8001) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r9}, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000410001000000080004000000010000000400cb80140001801000108008000f0005000000040010800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002800a00010071756f74610000001c0003000000000000006e8f58c2052fade1bc2c62cdeb7521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r12, 0xffffffffffffff84, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfe, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xa, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0x77, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r12, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.166073465s ago: executing program 3 (id=9241): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x5, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x100000002}, 0x8100, 0xc8, 0x8, 0x0, 0xfffffffffffffffe, 0x341, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007b00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000001100000000ac1414aa200088be"], 0xcfa4) 1.125914754s ago: executing program 0 (id=9242): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7c, 0x6a, 0xa, 0xff00}, [@call={0x26}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xa, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (async, rerun: 64) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x76, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x2802, 0xc8, 0x6, 0x0, 0x0, 0xc, 0x0, 0x0, 0xb, 0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) (async, rerun: 64) recvmsg$unix(0xffffffffffffffff, 0x0, 0x8020) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async, rerun: 32) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) (async, rerun: 32) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, 0x7, 0x6, 0x801, 0x0, 0xffffff7f, {0x5, 0x0, 0xec0}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) (async) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00002707c62232e1964ab390001900000227bd70000000000020010000000000000000000000000000000000000000000000fffeff0a010100000000050000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ae00000000000000ff0f000000000000ffffffffffffffff0004000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d43c0000000a000000000000000000000000000000000000000000000001030000490000000000000000000200"], 0xfc}}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x10, 0x0, "d788"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}]}, 0x60}, 0x1, 0x7}, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) (rerun: 32) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41) 1.035979484s ago: executing program 4 (id=9243): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x4, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x2000000000000000, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7ff, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000200000000000008000000", @ANYRES64=r1], 0x48}, 0x0) 922.855413ms ago: executing program 3 (id=9244): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\twrr'], 0x68) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'bridge0\x00', @random="84a96e41a7c5"}) 920.750987ms ago: executing program 0 (id=9245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r1, @ANYRES8=r2, @ANYRES16=r1, @ANYRES8=0x0], 0x8) sendmsg$netlink(r5, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=ANY=[], 0x50}], 0x1, 0x0, 0x0, 0x4044000}, 0x8880) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180), 0x4) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x891c, &(0x7f0000000040)={'geneve1\x00', @random="02001800"}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0xd, 0x7, 0x2, 0x0, 0x0, 0x6, 0x4c, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x2c0, 0x2, 0x2, 0x5, 0x6, 0x3, 0xaead, 0x0, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 841.819123ms ago: executing program 4 (id=9246): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20881, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x100, 0x0, 0x0, 0x3, 0x3fe}, 0x0, 0x1, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x114020, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfe33) socket$kcm(0x10, 0x3, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005d40cb2592f6fc77f2029c75e2f9095fd87ec6f61ffcd7a41840c620b86787b94ccac3ad1227b9f48e2964c73b3a282d121678324e3680c7f8455990f2743715295f58a8bdd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x8, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x2}, {0x9, 0xa}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8011) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002400010026bd7000fcdadf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socket$kcm(0x29, 0x2, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r4], 0xfe33) close(0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file0\x00', 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080100000c00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\'8\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 777.513934ms ago: executing program 3 (id=9247): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x402, 0xc262, 0xfffffffe, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0xc}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0xfffffffffffffffd, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x1}, 0x91400, 0xca, 0xfffffffd, 0x5, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB, @ANYRES8=r2], 0x9a) 642.514629ms ago: executing program 4 (id=9248): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x50) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000140)=@isdn={0x22, 0x10, 0x6, 0x6b, 0xe}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000700)="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", 0xfe}, {&(0x7f0000000800)="8d4b9936ba952b3c7a19fcd954fe00008e179120d43b41baa5f3079820ece085a1b3fb6571222c11afa340ad1c4287f5f984706255935310ecb3e69f158ba022c5b31c377cd162f383d4f7cb1e95170aa59db37178b78e606f6081f59f958e8e73513958d02204d92646c9520c8a88d9689cf7abe2bbc944f07208c5f6e58ea40363267ea898c505d3c6122ae7ad2c6cc2959f3b2827333bbbe7f66ac20f28625d835bf7cf7e5b3440691f0235d373a0f13595e30cdad60cf39becd5c499f697c4a6935136b18bd32e78ec32800290fe99b78b055ea49e3f754475d14390711f563ef8fe1767be6ceb2ba27a", 0xec}, {&(0x7f0000000900)="0d4e5a7916297aef0af63516bc5bcbc1bc45b5d9a4ece39266384a87deccd5cd493fbadced7ce06a50c1304dc1bb38097fe15d66e71543d82ee5a0f0eb1b0839bd6e5f7419e75c7354ce819ac80f4b8c156b0d0ecb33fdaed0b76c81db53c1874d0fb3ee56c73c6efd057735f3121da3c7e531a3125d9a8fb538be8fc3b41dc485ced6aedee920800239553733491261157a99e97e764671e2e2cd6130788434493ebe72e7800d5a527a2ee30accabe44e3367ec134339455b16d5a07b159980880e0a4c90cd8d61003ad3d79550baa32b13f957997a96960a146ebdcd57d278b09a8a6ed182", 0xe6}, {&(0x7f0000000a00)="be060be8e018833d96f4f3bcf8d9de8a92c0053aa33748480d017447a94ec7459cb70875cf015559e6b547873dd5ce40369fce1d3d540ddd670e180030879b8d737e3fe0926aea85fc88b24b9bed45e706d0c7599bed3fcdfef40552e467077eed2afcff1e80a76adba9d948795c491d52b9bf2be1e4dde13f1d201031bfce178100be1cf702ae1599a9eaa9ebf278e91601508af2131e31df7651774d9e5434a94056", 0xa3}], 0x4, &(0x7f0000000b00)}, 0x40004) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x2, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x5, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095", @ANYRESHEX=r0, @ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf639}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x18, 0x1402, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000000301010400000000000000000200000030000180"], 0x44}}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'hsr0\x00', @multicast}) setsockopt$sock_attach_bpf(r5, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r5, 0x29, 0x15, &(0x7f00000000c0), 0xb9) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xf06}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x9, 0x29, &(0x7f00000006c0)=""/41, 0x41000, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000007c0)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20004001) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0) 494.678985ms ago: executing program 3 (id=9249): close(0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="04002700"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x9, 0x400000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000090000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000001500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, r3}, 0x94) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x20004000) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) mount$bpf(0x0, 0x0, 0x0, 0x10804, 0xfffffffffffffffd) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000040)={'pimreg0\x00'}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) fstat(r4, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) 296.965231ms ago: executing program 3 (id=9250): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0xa3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x4}, 0x1829, 0x1000000000, 0x0, 0x8, 0x0, 0x10}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000880)='cpu<5\x00\x00\x00\x06\x00\xaf\"\xbb\xc1\x12\xbb\xd5\x0f7\xf4 1\x9bQ=\f6\x98\xfd\x83\xc4|\x9a\xdb;\x9eO0\x9c\xc7\xa96\a\xc5\x9a\xa9\f_vf\xff1yK\x8dNc\x01\x9a~\xb2\xdd\x05N(\xb1e\xfasQ\xff\xadW\xc7oG\x8bB\xd9\x81L\r\xdcir\x05\x10\x8c\xc9\x98\x1bF\x96}\xc4\xb3\x10\xc1\x91\xb5\x05Y\x17\x99]\xa8\xbe\xb7D\xa7\xb4\x87cy\xb0\xf6\x1ekEPL\x04\xfc\x13^\x01H\xf6\xdc\x92\xa8\\\x82u$\xeb\x9eJ\x9c\\l\xec\xb2f\a<\x96\xe1\xfd\'\xc4\xea\xe8\x12\xa9\x90S\xd7,:q\x87^\x8a1\xbb\x8e\xa2\x18i \xdf\xaf\xed\x7f,\x01\xe7Z\xe6\f\xb6\f3\r\xf41\xe3\x91\xc4p\x82>\xcbU\x7fk\xc6\xdd\xba\xa4\xb9\x10\xe2tT\xa2\xeb^\xb7\x14\xd4@\xb7\x8a\xdetj\xe5\xa2\xa2:\xf2k\xe2\x1f+\x81\xf22\xdcv\x96\x0fs\xd0\x99\x9cV\x12]T\xca\x87|\x15\xe3|\x11K\xaaq\xe7\x8a\xfe0\x91wz\xf7\xd0\x96/\xce\x83\xb8\x19[\xa2\xff\xc2\xf0\xf1\xf7\x8fh-\xe9\x0e[\xf5\xc5?\xf5e\x93ki\xdf\x06R\xf2\xd4\xcb\x05%>c\t\xebLN\xb0o\xe9U\xcfp\x18y,M*B\x1f-;\xebj\x87\xc0t\xb8\xb1j\xa01\xc0w\xdc\n\xf4\xd4(\xf1\xc2\t\xda\x7fZ\xf9!\xcc<\xb6\x835l\x9a\"\xa7f\xa6\xb2\x05r\xf1+\x04y\xd3\x82\xcf\xfeo\xbc\x1b\x93z\xbfT>\xba\x05\x893\xe8;V9\xa7\x0ft\x0e\xd0)\xb6\x1d\x06]\xb5\x14\xf6\\\xf1\xcfjH\xce/\x9c\xe2\xa0\xd9w\x98\x9ag\xaa\f:\xa7G$y\x8b\xcb\x18\x18M9b\xb92\x06\xfe\x80\xbf') r4 = socket$kcm(0x11, 0x2, 0x0) close(r4) (async) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xd, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x4880, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1100"], 0x50) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) close(0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x3e}, 0x8) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async, rerun: 64) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 32) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r5 = socket$kcm(0xa, 0x2, 0x3a) r6 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, 0x0) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000002600096b23bd4ceacfb18e8e6bf230bd0800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24008000) 202.066517ms ago: executing program 4 (id=9251): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4040) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0xfff, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0x1103, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x1) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4c, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0x8000000000000000}, 0xa000, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9b, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x60, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3ff}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xeb}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xffffff80, 0x2}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x36c8, 0x2}}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x18014045}, 0x800) bpf$ENABLE_STATS(0x20, &(0x7f00000005c0), 0x4) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r8, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe9, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', r9, 0x0, 0xfffffffc, 0x3, 0xfffffefc}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000580)='syzkaller\x00'}, 0x94) 130.757671ms ago: executing program 0 (id=9252): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x6}, 0xc02, 0x1, 0x0, 0x0, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000001000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00003c49a9cb0d39258165000922f37700000000000000000000000000000000000000000029d3600a35605d2d1e77c2af9059bc0883a062e4d8174229e7f6cb5eaa8bfb2964bdbeb78f0b09142472813dd63a1225bfc5bc4c65cfd784b97e7771dfaab290672f976576c0f38d246089f55f8d49c95ff54c9f2aadd6117b5f7533c3497cfb8cbea4f697862e729a449830d8eee740534f9cb2cf03dcf3fdc49cc8b5e93179346152c19bd884a0147c30cf204a77e718d689c5ee1eba6f67d41f57ce8a8672d48e928a60d84bdcca1a3a357a616ec7559a08650f9eba5e4af7b9e976e3938f99adf4b07e8b530111030c"], 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0xa00, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb904021d0800fe007c05e8fe55a10a001200020014260c600e12100015007f370401a8001000200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 9 (id=9253): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="b9ff03fe6044238cb89e14f080350de0ffff00184000632f77fbac14140ee000000d62079f4b4d0f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000002a40)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) kernel console output (not intermixed with test programs): k, BSSID ee:42:8a:65:a2:9d [ 1267.938542][ T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.078290][T30736] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7357'. [ 1268.432653][T26337] Bluetooth: hci5: unexpected subevent 0x0e length: 150 > 15 [ 1268.441100][T26337] Bluetooth: hci5: Unable to find connection for dst 00:00:00:00:00:06 sid 0x00 [ 1268.533665][T26337] Bluetooth: hci2: command tx timeout [ 1268.727062][T30693] lo speed is unknown, defaulting to 1000 [ 1268.924808][T30693] gretap0 speed is unknown, defaulting to 1000 [ 1268.981386][T30745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7359'. [ 1269.064960][T30745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7359'. [ 1269.558324][ T57] bridge_slave_1: left allmulticast mode [ 1269.588888][ T57] bridge_slave_1: left promiscuous mode [ 1269.610421][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.670112][ T57] bridge_slave_0: left allmulticast mode [ 1269.690488][ T57] bridge_slave_0: left promiscuous mode [ 1269.714056][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.605746][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.643824][T26337] Bluetooth: hci2: command tx timeout [ 1270.813872][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1270.826060][ T57] bond0 (unregistering): Released all slaves [ 1271.153919][T26337] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 1271.174790][T26337] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:06 sid 0x00 [ 1271.273565][T30772] netlink: 'syz.9.7364': attribute type 1 has an invalid length. [ 1271.283919][T30772] netlink: 'syz.9.7364': attribute type 2 has an invalid length. [ 1271.757253][T30809] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7371'. [ 1271.826675][T30808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7370'. [ 1271.865934][T30808] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7370'. [ 1272.348807][T30819] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7374'. [ 1272.392485][T30819] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7374'. [ 1272.498129][T30823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1272.556885][ T57] hsr_slave_0: left promiscuous mode [ 1272.572033][ T57] hsr_slave_1: left promiscuous mode [ 1272.588748][T30825] openvswitch: netlink: EtherType 50a is less than min 600 [ 1272.597204][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1272.608895][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1272.656101][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1272.663553][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1272.686305][T26337] Bluetooth: hci2: command tx timeout [ 1272.700638][ T57] veth1_macvtap: left promiscuous mode [ 1272.706662][ T57] veth0_macvtap: left promiscuous mode [ 1272.712474][ T57] veth1_vlan: left promiscuous mode [ 1272.717917][ T57] veth0_vlan: left promiscuous mode [ 1272.927916][T30831] __nla_validate_parse: 1 callbacks suppressed [ 1272.927940][T30831] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7378'. [ 1273.703218][T30847] openvswitch: netlink: EtherType 50a is less than min 600 [ 1273.768412][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1273.798748][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1274.380829][T30851] mac80211_hwsim hwsim93 ..ãc¤±: renamed from wlan1 (while UP) [ 1274.485563][T30867] openvswitch: netlink: EtherType 50a is less than min 600 [ 1274.578152][T30693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.585751][T30693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.593024][T30693] bridge_slave_0: entered allmulticast mode [ 1274.600855][T30693] bridge_slave_0: entered promiscuous mode [ 1274.609335][T30693] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.616638][T30693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.623928][T30693] bridge_slave_1: entered allmulticast mode [ 1274.633410][T30693] bridge_slave_1: entered promiscuous mode [ 1274.745795][T30693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1274.764461][T26337] Bluetooth: hci2: command tx timeout [ 1274.795861][T30693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1274.963340][T30693] team0: Port device team_slave_0 added [ 1275.018300][T30693] team0: Port device team_slave_1 added [ 1275.163681][T30693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1275.219854][T30693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1275.245878][T30693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1275.296034][T30882] netlink: 'syz.9.7391': attribute type 1 has an invalid length. [ 1275.323057][T30882] netlink: 'syz.9.7391': attribute type 2 has an invalid length. [ 1275.393871][T30693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1275.535493][T30886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7393'. [ 1275.553991][T30693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1275.733836][T30693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1275.801584][T30693] hsr_slave_0: entered promiscuous mode [ 1275.808599][T30693] hsr_slave_1: entered promiscuous mode [ 1275.815172][T30693] debugfs: 'hsr0' already exists in 'hsr' [ 1275.820969][T30693] Cannot create hsr debugfs directory [ 1276.362802][T30900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1276.570345][T30907] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7398'. [ 1276.649940][T30907] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7398'. [ 1276.831558][T30913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7400'. [ 1278.272098][T30957] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7413'. [ 1278.352529][T30962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7415'. [ 1278.492354][T30965] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7416'. [ 1278.501535][T30965] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7416'. [ 1278.806036][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1278.840671][T30693] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1278.856467][T30693] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1278.890449][T30693] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1278.926184][T30693] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1278.951157][T30693] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1278.991577][T30693] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1279.012486][T30693] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1279.048192][T30693] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1279.223211][T30989] bridge_slave_1: left allmulticast mode [ 1279.253980][T30989] bridge_slave_1: left promiscuous mode [ 1279.276729][T30989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.383673][T30989] bridge_slave_0: left allmulticast mode [ 1279.389452][T30989] bridge_slave_0: left promiscuous mode [ 1279.414483][T30989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.309480][T30977] lo speed is unknown, defaulting to 1000 [ 1280.349929][T30977] gretap0 speed is unknown, defaulting to 1000 [ 1280.571457][T30693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1280.614869][T30693] 8021q: adding VLAN 0 to HW filter on device team0 [ 1280.657064][ T7561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.664340][ T7561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1280.723958][ T7561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.731240][ T7561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1281.482905][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1281.574073][T31038] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7432'. [ 1281.657318][T31027] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7430'. [ 1281.731643][T31044] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7432'. [ 1281.766678][T31043] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7433'. [ 1281.821262][T31043] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7433'. [ 1282.534990][T31065] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7438'. [ 1282.550936][T30693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1282.781386][T30693] veth0_vlan: entered promiscuous mode [ 1282.878810][T30693] veth1_vlan: entered promiscuous mode [ 1282.891928][T31070] netlink: 'syz.6.7440': attribute type 1 has an invalid length. [ 1282.899716][T31070] netlink: 'syz.6.7440': attribute type 1 has an invalid length. [ 1282.940414][T30693] veth0_macvtap: entered promiscuous mode [ 1282.982322][T30693] veth1_macvtap: entered promiscuous mode [ 1283.028576][T30693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1283.099162][T30693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1283.226030][T21399] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.273132][T21399] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.437184][T21399] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.472651][T21399] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.687721][ T742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.702339][ T742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.730918][T31087] lo speed is unknown, defaulting to 1000 [ 1283.809785][ T5271] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1283.852470][ T742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.868363][ T742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.876258][T31087] gretap0 speed is unknown, defaulting to 1000 [ 1284.627016][T31120] netlink: 'syz.9.7451': attribute type 1 has an invalid length. [ 1284.657553][T31120] netlink: 'syz.9.7451': attribute type 2 has an invalid length. [ 1285.765188][T31140] sit0: entered allmulticast mode [ 1285.965733][ T5271] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1285.973313][T31140] sit0: entered promiscuous mode [ 1286.029840][T31146] __nla_validate_parse: 4 callbacks suppressed [ 1286.029862][T31146] netlink: 68 bytes leftover after parsing attributes in process `syz.7.7459'. [ 1286.215947][T31156] netlink: 276 bytes leftover after parsing attributes in process `syz.7.7461'. [ 1286.493164][T31164] FAULT_INJECTION: forcing a failure. [ 1286.493164][T31164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1286.571090][T31164] CPU: 0 UID: 0 PID: 31164 Comm: syz.7.7464 Not tainted syzkaller #0 PREEMPT(full) [ 1286.571120][T31164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1286.571133][T31164] Call Trace: [ 1286.571151][T31164] [ 1286.571163][T31164] dump_stack_lvl+0xe8/0x150 [ 1286.571214][T31164] should_fail_ex+0x40c/0x560 [ 1286.571285][T31164] _copy_from_user+0x2d/0xb0 [ 1286.571339][T31164] ___sys_sendmsg+0x1c6/0x360 [ 1286.571386][T31164] ? perf_trace_run_bpf_submit+0xee/0x170 [ 1286.571433][T31164] ? __pfx____sys_sendmsg+0x10/0x10 [ 1286.571568][T31164] ? __fget_files+0x2a/0x420 [ 1286.571649][T31164] ? __fget_files+0x2a/0x420 [ 1286.571684][T31164] ? __fget_files+0x3a2/0x420 [ 1286.571771][T31164] __x64_sys_sendmsg+0x1b1/0x290 [ 1286.571826][T31164] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1286.571963][T31164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.572002][T31164] do_syscall_64+0x174/0x580 [ 1286.572043][T31164] ? trace_irq_disable+0x3b/0x140 [ 1286.572077][T31164] ? clear_bhb_loop+0x40/0x90 [ 1286.572128][T31164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.572153][T31164] RIP: 0033:0x7f1a1999e0d9 [ 1286.572186][T31164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.572205][T31164] RSP: 002b:00007f1a1a7ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1286.572228][T31164] RAX: ffffffffffffffda RBX: 00007f1a19c25fa0 RCX: 00007f1a1999e0d9 [ 1286.572244][T31164] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000005 [ 1286.572258][T31164] RBP: 00007f1a1a7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1286.572272][T31164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.572285][T31164] R13: 00007f1a19c26038 R14: 00007f1a19c25fa0 R15: 00007ffd727d87d8 [ 1286.572374][T31164] [ 1286.573725][ T742] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.854267][T31173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7466'. [ 1287.101058][T31179] openvswitch: netlink: EtherType 50a is less than min 600 [ 1287.560334][ T742] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.784890][T31200] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7472'. [ 1287.846045][T31200] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7472'. [ 1287.923564][ T742] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.224151][ T742] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.254760][T31209] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7473'. [ 1288.280366][T31215] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7476'. [ 1288.331380][T31217] netlink: 'syz.6.7477': attribute type 6 has an invalid length. [ 1288.358109][T31222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7479'. [ 1288.402642][T31222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7479'. [ 1290.254505][T31221] lo speed is unknown, defaulting to 1000 [ 1290.341106][T31221] gretap0 speed is unknown, defaulting to 1000 [ 1290.370198][ T742] bridge_slave_1: left allmulticast mode [ 1290.383900][ T742] bridge_slave_1: left promiscuous mode [ 1290.389762][ T742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.422139][T31250] openvswitch: netlink: EtherType 50a is less than min 600 [ 1290.497494][ T742] bridge_slave_0: left allmulticast mode [ 1290.503206][ T742] bridge_slave_0: left promiscuous mode [ 1290.509049][ T742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.536793][T31285] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7489'. [ 1291.565819][T31283] netlink: 76 bytes leftover after parsing attributes in process `syz.9.7491'. [ 1291.848656][T31289] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7492'. [ 1291.960995][ T742] team0: Port device geneve1 removed [ 1291.999415][ T742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1292.011502][ T742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1292.098585][ T742] bond0 (unregistering): (slave veth1_to_batadv): Releasing backup interface [ 1292.118210][ T742] bond0 (unregistering): Released all slaves [ 1292.888229][T31317] openvswitch: netlink: EtherType 50a is less than min 600 [ 1293.218017][T31326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.387702][T31326] bridge_slave_0 (unregistering): left allmulticast mode [ 1293.410495][T31326] bridge_slave_0 (unregistering): left promiscuous mode [ 1293.437616][T31326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.889395][T31349] netlink: 76 bytes leftover after parsing attributes in process `syz.9.7502'. [ 1294.091666][ T742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1294.111268][T31355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7506'. [ 1294.120379][T31355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7506'. [ 1294.124662][ T742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1294.178352][ T742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1294.185805][ T742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1294.234734][ T742] veth1_macvtap: left promiscuous mode [ 1294.240371][ T742] veth0_macvtap: left promiscuous mode [ 1294.249981][ T742] veth1_vlan: left promiscuous mode [ 1294.255404][ T742] veth0_vlan: left promiscuous mode [ 1294.328724][T31360] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7508'. [ 1295.157325][ T742] team0 (unregistering): Port device team_slave_1 removed [ 1295.196301][ T742] team0 (unregistering): Port device team_slave_0 removed [ 1295.354131][T31362] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7505'. [ 1295.363316][T31362] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7505'. [ 1295.586107][T31372] lo speed is unknown, defaulting to 1000 [ 1295.631020][T31372] gretap0 speed is unknown, defaulting to 1000 [ 1296.594968][T31407] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7519'. [ 1296.645287][T31411] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.7522'. [ 1297.340764][ T742] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.781474][ T742] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.138191][ T5725] page_pool_release_retry() stalled pool shutdown: id 297, 1 inflight 60 sec [ 1298.299252][T31454] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7534'. [ 1299.196747][ T742] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.415414][T31434] lo speed is unknown, defaulting to 1000 [ 1299.435932][T31434] gretap0 speed is unknown, defaulting to 1000 [ 1299.582599][T31478] netlink: 'syz.7.7536': attribute type 21 has an invalid length. [ 1299.604753][T31478] IPv6: NLM_F_CREATE should be specified when creating new route [ 1299.616019][T31478] netlink: 'syz.7.7536': attribute type 1 has an invalid length. [ 1299.624234][ T742] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.491184][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.498097][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.833429][T31491] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.7538'. [ 1300.939695][T31480] lo speed is unknown, defaulting to 1000 [ 1301.038347][T31480] gretap0 speed is unknown, defaulting to 1000 [ 1301.540461][ T742] bridge_slave_1: left allmulticast mode [ 1301.553023][ T742] bridge_slave_1: left promiscuous mode [ 1301.576595][ T742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.596288][ T742] bridge_slave_0: left allmulticast mode [ 1301.618169][ T742] bridge_slave_0: left promiscuous mode [ 1301.637202][ T742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.676919][ T742] batadv0: left allmulticast mode [ 1301.700771][ T742] batadv0: left promiscuous mode [ 1301.718047][ T742] ¥: port 1(batadv0) entered disabled state [ 1301.787060][ T742] team0: left allmulticast mode [ 1301.792139][ T742] team_slave_0: left allmulticast mode [ 1301.799963][ T742] team_slave_1: left allmulticast mode [ 1301.810936][ T742] geneve1: left allmulticast mode [ 1301.817648][ T742] bridge0: left allmulticast mode [ 1301.879086][ T742] team0: left promiscuous mode [ 1301.884472][ T742] team_slave_0: left promiscuous mode [ 1301.890126][ T742] team_slave_1: left promiscuous mode [ 1301.896514][ T742] geneve1: left promiscuous mode [ 1301.949566][ T742] bridge0: left promiscuous mode [ 1301.955397][ T742] : port 1(team0) entered disabled state [ 1302.364848][T31509] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7541'. [ 1302.453165][T26337] Bluetooth: hci0: command 0x0406 tx timeout [ 1302.476059][ T742] team0: Port device geneve1 removed [ 1302.512672][ T742] team0: Port device bridge0 removed [ 1302.552443][ T742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.573195][ T742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.597290][T31535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7542'. [ 1302.608833][ T742] bond0 (unregistering): Released all slaves [ 1302.929108][T31541] netlink: 'syz.6.7543': attribute type 1 has an invalid length. [ 1302.936917][T31541] netlink: 'syz.6.7543': attribute type 2 has an invalid length. [ 1303.707060][T31564] netlink: 'syz.6.7548': attribute type 1 has an invalid length. [ 1303.737078][T31564] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.7548'. [ 1303.764635][T31565] cgroup: Unknown subsys name '' [ 1303.807920][T31568] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.7550'. [ 1303.943642][ T742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1303.951716][ T742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1304.013845][ T742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1304.036784][ T742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1304.136393][ T742] veth1_macvtap: left promiscuous mode [ 1304.171443][ T742] veth0_macvtap: left promiscuous mode [ 1304.192121][ T742] veth1_vlan: left promiscuous mode [ 1304.229031][ T742] veth0_vlan: left promiscuous mode [ 1305.061716][T31602] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7557'. [ 1305.332756][ T742] team0 (unregistering): Port device team_slave_1 removed [ 1305.420598][ T742] team0 (unregistering): Port device team_slave_0 removed [ 1306.213910][T31633] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7563'. [ 1306.271680][T31633] netlink: 68 bytes leftover after parsing attributes in process `syz.9.7563'. [ 1306.467461][T31638] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.7565'. [ 1308.658379][T31668] xt_socket: unknown flags 0x50 [ 1308.670830][T31671] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7574'. [ 1308.786229][T31668] netlink: 'syz.4.7572': attribute type 1 has an invalid length. [ 1309.334324][T31688] netlink: 'syz.2.7576': attribute type 3 has an invalid length. [ 1311.728702][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1312.641995][T31779] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7601'. [ 1313.506345][T31799] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7606'. [ 1313.576262][T31803] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7606'. [ 1313.685401][T31799] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7606'. [ 1313.711918][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1314.077442][T31816] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7610'. [ 1314.108479][T31816] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7610'. [ 1316.412852][T31874] netlink: 65039 bytes leftover after parsing attributes in process `syz.9.7627'. [ 1316.562372][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1317.122642][T31901] netlink: 13439 bytes leftover after parsing attributes in process `syz.9.7632'. [ 1317.580028][T31917] netlink: 'syz.6.7636': attribute type 7 has an invalid length. [ 1317.611682][T31917] netlink: 'syz.6.7636': attribute type 8 has an invalid length. [ 1317.769221][T31914] IPv6: NLM_F_CREATE should be specified when creating new route [ 1318.095708][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1318.618073][T31938] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.7642'. [ 1318.814531][T31950] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7646'. [ 1318.977691][T31953] netlink: 13439 bytes leftover after parsing attributes in process `syz.9.7647'. [ 1318.998675][T31962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7649'. [ 1319.008317][T31962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7649'. [ 1319.017429][T31962] netlink: 'syz.2.7649': attribute type 6 has an invalid length. [ 1319.117496][T31965] netlink: 92 bytes leftover after parsing attributes in process `syz.6.7650'. [ 1319.358173][T31971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7652'. [ 1319.908447][T31997] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7660'. [ 1319.953753][T31996] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.7659'. [ 1319.966651][ T5271] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1319.990426][T31997] bond0: (slave bond_slave_0): Releasing backup interface [ 1320.150446][T31997] bond_slave_0: entered promiscuous mode [ 1320.157424][T31997] bond_slave_0: entered allmulticast mode [ 1320.445086][T32011] netlink: 'syz.7.7664': attribute type 21 has an invalid length. [ 1320.467636][T32014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7665'. [ 1320.481512][T32015] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7666'. [ 1321.195155][T32034] openvswitch: netlink: EtherType 50a is less than min 600 [ 1321.391013][ T5271] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1321.476291][T32037] lo speed is unknown, defaulting to 1000 [ 1321.484130][T32037] gretap0 speed is unknown, defaulting to 1000 [ 1321.568801][T32039] lo speed is unknown, defaulting to 1000 [ 1321.719473][T32039] gretap0 speed is unknown, defaulting to 1000 [ 1322.936537][T32093] openvswitch: netlink: EtherType 50a is less than min 600 [ 1324.163611][T32115] __nla_validate_parse: 6 callbacks suppressed [ 1324.163634][T32115] netlink: 68 bytes leftover after parsing attributes in process `syz.7.7691'. [ 1324.378008][ T5271] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1324.587862][T32127] FAULT_INJECTION: forcing a failure. [ 1324.587862][T32127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1324.600973][T32127] CPU: 0 UID: 0 PID: 32127 Comm: syz.7.7693 Not tainted syzkaller #0 PREEMPT(full) [ 1324.601004][T32127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1324.601018][T32127] Call Trace: [ 1324.601027][T32127] [ 1324.601036][T32127] dump_stack_lvl+0xe8/0x150 [ 1324.601074][T32127] should_fail_ex+0x40c/0x560 [ 1324.601104][T32127] _copy_to_user+0x31/0xb0 [ 1324.601138][T32127] simple_read_from_buffer+0xe1/0x170 [ 1324.601174][T32127] proc_fail_nth_read+0x1bb/0x230 [ 1324.601211][T32127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1324.601247][T32127] ? rw_verify_area+0x24a/0x4c0 [ 1324.601284][T32127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1324.601316][T32127] vfs_read+0x213/0xa80 [ 1324.601355][T32127] ? __pfx___mutex_lock+0x10/0x10 [ 1324.601378][T32127] ? __pfx_vfs_read+0x10/0x10 [ 1324.601414][T32127] ? __fget_files+0x2a/0x420 [ 1324.601449][T32127] ? __fget_files+0x3a2/0x420 [ 1324.601478][T32127] ? __fget_files+0x2a/0x420 [ 1324.601518][T32127] ksys_read+0x150/0x270 [ 1324.601555][T32127] ? __pfx_ksys_read+0x10/0x10 [ 1324.601599][T32127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.601624][T32127] do_syscall_64+0x174/0x580 [ 1324.601658][T32127] ? trace_irq_disable+0x3b/0x140 [ 1324.601685][T32127] ? clear_bhb_loop+0x40/0x90 [ 1324.601721][T32127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.601743][T32127] RIP: 0033:0x7f1a1995e90e [ 1324.601765][T32127] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1324.601784][T32127] RSP: 002b:00007f1a1a7ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1324.601808][T32127] RAX: ffffffffffffffda RBX: 00007f1a1a7cd6c0 RCX: 00007f1a1995e90e [ 1324.601824][T32127] RDX: 000000000000000f RSI: 00007f1a1a7cd0a0 RDI: 0000000000000006 [ 1324.601839][T32127] RBP: 00007f1a1a7cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1324.601853][T32127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1324.601866][T32127] R13: 00007f1a19c26128 R14: 00007f1a19c26090 R15: 00007ffd727d87d8 [ 1324.601900][T32127] [ 1324.671481][T32104] lo speed is unknown, defaulting to 1000 [ 1324.952801][T32104] gretap0 speed is unknown, defaulting to 1000 [ 1325.072263][T32139] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7697'. [ 1325.513988][T32149] openvswitch: netlink: EtherType 50a is less than min 600 [ 1326.298493][T32172] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.7702'. [ 1326.487228][T32181] netlink: 80 bytes leftover after parsing attributes in process `syz.7.7705'. [ 1326.508845][T32180] netlink: 80 bytes leftover after parsing attributes in process `syz.7.7705'. [ 1326.600675][T32182] netlink: 164 bytes leftover after parsing attributes in process `syz.6.7704'. [ 1326.643539][ T5271] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1326.916826][T32188] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7707'. [ 1326.925933][T32188] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7707'. [ 1327.326105][T32205] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.7713'. [ 1327.814785][T32215] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7715'. [ 1327.861268][T26337] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 1327.869402][T26337] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:06 sid 0x00 [ 1328.607960][T26337] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 1328.619253][T26337] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:06 sid 0x00 [ 1329.349051][T32260] __nla_validate_parse: 5 callbacks suppressed [ 1329.353004][T32260] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7728'. [ 1329.409245][T26337] Bluetooth: hci5: unexpected subevent 0x0e length: 150 > 15 [ 1329.419061][T26337] Bluetooth: hci5: Unable to find connection for dst 00:00:00:00:00:06 sid 0x00 [ 1329.457475][T32260] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7728'. [ 1329.468474][T32260] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7728'. [ 1330.049228][T32283] netlink: 13439 bytes leftover after parsing attributes in process `syz.9.7732'. [ 1330.349952][T32295] netlink: 13439 bytes leftover after parsing attributes in process `syz.6.7735'. [ 1330.373789][T32291] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7736'. [ 1330.674941][T26337] Bluetooth: hci4: ISO packet for unknown connection handle 1 [ 1330.685159][T32294] lo speed is unknown, defaulting to 1000 [ 1330.755628][T32294] gretap0 speed is unknown, defaulting to 1000 [ 1331.033304][ T57] bridge_slave_1: left allmulticast mode [ 1331.087202][ T57] bridge_slave_1: left promiscuous mode [ 1331.103667][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.178285][ T57] bridge_slave_0: left allmulticast mode [ 1331.184000][ T57] bridge_slave_0: left promiscuous mode [ 1331.189897][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.291165][T32322] netlink: 13439 bytes leftover after parsing attributes in process `syz.9.7746'. [ 1331.891033][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1331.945204][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1331.970080][ T57] bond0 (unregistering): Released all slaves [ 1331.990885][T32339] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.7753'. [ 1332.244270][T32348] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7754'. [ 1333.221594][T32383] netlink: 'syz.4.7761': attribute type 1 has an invalid length. [ 1333.260549][T32383] netlink: 'syz.4.7761': attribute type 2 has an invalid length. [ 1333.854233][T32398] netlink: 92 bytes leftover after parsing attributes in process `syz.7.7767'. [ 1334.230612][ T57] veth1_macvtap: left promiscuous mode [ 1334.248892][ T57] veth0_macvtap: left promiscuous mode [ 1334.269713][ T57] veth1_vlan: left promiscuous mode [ 1334.293847][ T57] veth0_vlan: left promiscuous mode [ 1335.682777][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1335.766165][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1336.128963][T32442] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7777'. [ 1336.150854][T32402] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.7768'. [ 1336.166026][T32442] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7777'. [ 1336.221998][T32388] lo speed is unknown, defaulting to 1000 [ 1336.229997][T32388] gretap0 speed is unknown, defaulting to 1000 [ 1336.879425][T32461] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7784'. [ 1337.493500][T32483] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7789'. [ 1337.610595][T32479] netlink: 65039 bytes leftover after parsing attributes in process `syz.9.7788'. [ 1338.343448][T32502] lo speed is unknown, defaulting to 1000 [ 1338.371481][T32502] gretap0 speed is unknown, defaulting to 1000 [ 1339.636696][T32528] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.7803'. [ 1339.882643][T32531] netlink: 144 bytes leftover after parsing attributes in process `syz.9.7804'. [ 1339.896902][T32534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7805'. [ 1339.905828][T32534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7805'. [ 1340.202398][T32543] syzkaller0: entered promiscuous mode [ 1340.243553][T32543] syzkaller0: entered allmulticast mode [ 1341.909569][T32591] __nla_validate_parse: 8 callbacks suppressed [ 1341.909593][T32591] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7821'. [ 1341.979413][T32591] netlink: 'syz.2.7821': attribute type 16 has an invalid length. [ 1341.987371][T32591] netlink: 'syz.2.7821': attribute type 17 has an invalid length. [ 1342.297682][T32603] netlink: 52 bytes leftover after parsing attributes in process `syz.9.7824'. [ 1343.972016][T32650] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7833'. [ 1344.074044][T32650] netlink: 'syz.4.7833': attribute type 1 has an invalid length. [ 1344.187465][T32661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7835'. [ 1344.196404][T32661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7835'. [ 1344.851308][T32673] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7839'. [ 1345.941173][T32721] netlink: 65039 bytes leftover after parsing attributes in process `syz.9.7851'. [ 1346.811049][T32736] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7854'. [ 1347.246096][T32759] netlink: 'syz.4.7864': attribute type 4 has an invalid length. [ 1347.290653][T32760] netlink: 'syz.4.7864': attribute type 4 has an invalid length. [ 1347.612903][ T303] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.7868'. [ 1349.442749][ T367] openvswitch: netlink: Multiple metadata blocks provided [ 1349.877184][ T379] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7890'. [ 1350.512120][ T406] netlink: 'syz.9.7897': attribute type 16 has an invalid length. [ 1350.528628][ T406] netlink: 'syz.9.7897': attribute type 17 has an invalid length. [ 1350.722667][ T412] netlink: 'syz.6.7898': attribute type 11 has an invalid length. [ 1350.747481][ T405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7896'. [ 1350.761242][ T412] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7898'. [ 1350.799759][ T406] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1351.286134][ T5782] lo speed is unknown, defaulting to 1000 [ 1351.293930][T21392] bridge0: port 3(team_slave_1) entered blocking state [ 1351.300947][T21392] bridge0: port 3(team_slave_1) entered forwarding state [ 1351.398700][ T430] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7903'. [ 1351.488197][ T405] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1351.497592][ T405] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1351.507242][ T405] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1352.429449][ T453] lo speed is unknown, defaulting to 1000 [ 1352.457254][ T453] gretap0 speed is unknown, defaulting to 1000 [ 1353.654199][ T498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7918'. [ 1354.331146][ T519] lo speed is unknown, defaulting to 1000 [ 1354.339173][ T519] gretap0 speed is unknown, defaulting to 1000 [ 1354.515944][ T536] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7929'. [ 1355.289104][ T570] netlink: 'syz.9.7937': attribute type 23 has an invalid length. [ 1356.344722][ T586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7942'. [ 1358.435254][T26337] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 1358.444085][T26337] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:06 sid 0x00 [ 1358.609469][ T664] netlink: 'syz.4.7969': attribute type 1 has an invalid length. [ 1358.617762][ T664] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.7969'. [ 1358.825026][ T667] netlink: 'syz.7.7970': attribute type 16 has an invalid length. [ 1358.851838][ T667] netlink: 'syz.7.7970': attribute type 17 has an invalid length. [ 1359.272878][ T685] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7975'. [ 1359.287675][ T685] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1359.321718][ T685] netlink: 'syz.9.7975': attribute type 1 has an invalid length. [ 1359.330435][ T685] netlink: 'syz.9.7975': attribute type 4 has an invalid length. [ 1359.338986][ T685] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.7975'. [ 1359.549403][ T690] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7976'. [ 1359.558643][ T690] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7976'. [ 1359.763233][ T699] netlink: 'syz.4.7978': attribute type 1 has an invalid length. [ 1360.001547][ T709] team_slave_1: left allmulticast mode [ 1360.013924][ T709] team_slave_1: left promiscuous mode [ 1360.030784][ T709] bridge0: port 3(team_slave_1) entered disabled state [ 1360.433070][ T709] bridge_slave_1: left allmulticast mode [ 1360.464865][ T709] bridge_slave_1: left promiscuous mode [ 1360.478379][ T709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.512002][ T709] bridge_slave_0: left allmulticast mode [ 1360.521703][ T709] bridge_slave_0: left promiscuous mode [ 1360.533833][ T709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.618863][ T749] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7993'. [ 1361.723853][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.737753][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.729788][T26337] Bluetooth: hci5: command 0x0406 tx timeout [ 1364.532086][ T749] mac80211_hwsim hwsim87 wlan0: entered allmulticast mode [ 1364.903132][ T787] netlink: 13439 bytes leftover after parsing attributes in process `syz.6.8003'. [ 1365.571743][ T30] audit: type=1107 audit(1786088361.740:9): pid=810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1366.782072][ T835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8015'. [ 1367.652552][ T871] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8025'. [ 1367.705194][ T871] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8025'. [ 1367.714789][ T871] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8025'. [ 1367.791211][ T874] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8026'. [ 1368.667000][ T893] lo speed is unknown, defaulting to 1000 [ 1368.678851][ T897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8033'. [ 1368.750964][ T893] gretap0 speed is unknown, defaulting to 1000 [ 1368.953040][ T906] netlink: 'syz.9.8034': attribute type 37 has an invalid length. [ 1368.962478][ T906] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8034'. [ 1369.825892][ T935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8039'. [ 1369.902164][ T935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8039'. [ 1370.875492][T19408] Bluetooth: hci0: Malformed LE Event: 0x0b [ 1371.276185][ T967] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8046'. [ 1371.357752][ T967] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8046'. [ 1372.835231][ T976] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8048'. [ 1373.212920][ T1001] netlink: 88 bytes leftover after parsing attributes in process `syz.9.8053'. [ 1373.301339][ T1003] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8053'. [ 1373.332034][ T1003] netlink: 'syz.9.8053': attribute type 10 has an invalid length. [ 1373.355257][ T1003] netlink: 55 bytes leftover after parsing attributes in process `syz.9.8053'. [ 1374.528310][ T1019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8057'. [ 1374.550476][ T1019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8057'. [ 1374.609928][ T1019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8057'. [ 1375.747887][ T1060] netlink: 'syz.2.8062': attribute type 1 has an invalid length. [ 1375.830390][ T1060] netlink: 'syz.2.8062': attribute type 2 has an invalid length. [ 1376.360216][ T1072] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8064'. [ 1376.371556][ T1026] lo speed is unknown, defaulting to 1000 [ 1376.379558][ T1026] gretap0 speed is unknown, defaulting to 1000 [ 1378.296314][ T1095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8069'. [ 1380.693088][ T1101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8072'. [ 1380.722546][ T1101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8072'. [ 1382.402919][ T30] audit: type=1107 audit(1786088378.580:10): pid=1125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1382.459251][ T1133] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8077'. [ 1383.006798][ T1149] mac80211_hwsim hwsim77 ..ãc¤±: renamed from wlan1 (while UP) [ 1383.176539][ T1151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8085'. [ 1383.185494][ T1151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8085'. [ 1384.397916][ T1173] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8093'. [ 1384.452394][ T1173] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8093'. [ 1384.477333][ T1156] lo speed is unknown, defaulting to 1000 [ 1384.503549][ T1156] gretap0 speed is unknown, defaulting to 1000 [ 1384.572496][ T1176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8094'. [ 1386.257069][ T1190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8097'. [ 1386.266252][ T1190] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8097'. [ 1386.384053][ T1188] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8096'. [ 1386.538523][ T1194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1387.723515][ T1212] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8101'. [ 1388.305790][ T1226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8108'. [ 1388.595994][ T1229] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8110'. [ 1388.862785][ T1240] lo speed is unknown, defaulting to 1000 [ 1388.892701][ T1244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8113'. [ 1388.928188][ T1244] netlink: 'syz.4.8113': attribute type 10 has an invalid length. [ 1388.944783][ T1244] netlink: 55 bytes leftover after parsing attributes in process `syz.4.8113'. [ 1389.683082][ T1240] gretap0 speed is unknown, defaulting to 1000 [ 1389.884038][T19408] Bluetooth: hci2: command 0x0406 tx timeout [ 1389.945307][ T1255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8118'. [ 1389.959828][ T1258] netlink: 132 bytes leftover after parsing attributes in process `syz.9.8119'. [ 1389.983923][ T1255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8118'. [ 1389.999952][ T1255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8118'. [ 1390.164348][ T1265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8120'. [ 1390.480637][ T1267] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.894835][ T1272] lo speed is unknown, defaulting to 1000 [ 1390.902833][ T1272] gretap0 speed is unknown, defaulting to 1000 [ 1392.386197][ T1326] netlink: 'syz.2.8137': attribute type 17 has an invalid length. [ 1392.468700][ T1326] netlink: 'syz.2.8137': attribute type 27 has an invalid length. [ 1392.666761][ T5271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1393.014343][ T1338] lo speed is unknown, defaulting to 1000 [ 1393.223436][ T1338] gretap0 speed is unknown, defaulting to 1000 [ 1393.882772][ T1369] __nla_validate_parse: 6 callbacks suppressed [ 1393.882864][ T1369] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8152'. [ 1394.007581][ T1375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8154'. [ 1394.065757][ T1359] lo speed is unknown, defaulting to 1000 [ 1394.117429][ T1359] gretap0 speed is unknown, defaulting to 1000 [ 1394.153283][ T1377] netlink: 68 bytes leftover after parsing attributes in process `syz.7.8155'. [ 1395.833626][ T1409] netlink: 13439 bytes leftover after parsing attributes in process `syz.6.8164'. [ 1395.965868][ T1418] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8166'. [ 1395.981168][ T1407] lo speed is unknown, defaulting to 1000 [ 1395.983264][ T1407] gretap0 speed is unknown, defaulting to 1000 [ 1396.139223][ T1427] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8170'. [ 1396.150684][ T1422] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8168'. [ 1396.182763][ T1422] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8168'. [ 1396.459510][ T1440] netlink: 'syz.6.8172': attribute type 1 has an invalid length. [ 1396.947300][ T1460] netlink: 'syz.2.8180': attribute type 21 has an invalid length. [ 1396.955648][ T1460] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8180'. [ 1396.968221][ T1461] netlink: 64 bytes leftover after parsing attributes in process `syz.7.8179'. [ 1398.408270][ T1496] lo speed is unknown, defaulting to 1000 [ 1398.456682][ T1496] gretap0 speed is unknown, defaulting to 1000 [ 1398.789078][ T1512] netlink: 'syz.6.8194': attribute type 21 has an invalid length. [ 1398.903470][ T1502] netlink: 'syz.7.8193': attribute type 1 has an invalid length. [ 1398.911308][ T1502] netlink: 'syz.7.8193': attribute type 2 has an invalid length. [ 1398.935409][ T1512] netlink: 'syz.6.8194': attribute type 1 has an invalid length. [ 1399.397743][ T1503] syzkaller0: entered promiscuous mode [ 1399.415203][ T1503] syzkaller0: entered allmulticast mode [ 1400.173336][ T1538] __nla_validate_parse: 2 callbacks suppressed [ 1400.173364][ T1538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8205'. [ 1400.188791][ T1538] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8205'. [ 1401.249007][ T1554] netlink: 'syz.4.8210': attribute type 1 has an invalid length. [ 1401.256821][ T1554] netlink: 'syz.4.8210': attribute type 2 has an invalid length. [ 1401.257901][ T1555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8209'. [ 1406.439502][ T1603] netlink: 'syz.2.8223': attribute type 1 has an invalid length. [ 1406.523395][ T1603] netlink: 'syz.2.8223': attribute type 2 has an invalid length. [ 1406.828313][ T1618] sock: sock_set_timeout: `syz.7.8230' (pid 1618) tries to set negative timeout [ 1406.921779][ T1624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8232'. [ 1407.776194][ T1644] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8242'. [ 1407.848305][ T1647] netlink: 'syz.6.8242': attribute type 1 has an invalid length. [ 1407.857809][ T1658] netlink: 'syz.2.8243': attribute type 1 has an invalid length. [ 1407.865598][ T1658] netlink: 'syz.2.8243': attribute type 2 has an invalid length. [ 1408.130047][ T1664] netlink: 'syz.6.8247': attribute type 2 has an invalid length. [ 1408.310549][ T1671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8250'. [ 1408.549964][ T1678] FAULT_INJECTION: forcing a failure. [ 1408.549964][ T1678] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.604203][ T1678] CPU: 0 UID: 0 PID: 1678 Comm: syz.7.8252 Not tainted syzkaller #0 PREEMPT(full) [ 1408.604233][ T1678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1408.604248][ T1678] Call Trace: [ 1408.604257][ T1678] [ 1408.604267][ T1678] dump_stack_lvl+0xe8/0x150 [ 1408.604307][ T1678] should_fail_ex+0x40c/0x560 [ 1408.604340][ T1678] should_failslab+0xa8/0x100 [ 1408.604378][ T1678] __kmalloc_noprof+0xfe/0x720 [ 1408.604407][ T1678] ? vfs_write+0x22b/0xba0 [ 1408.604442][ T1678] ? kernfs_fop_write_iter+0x157/0x540 [ 1408.604466][ T1678] ? kernfs_fop_write_iter+0x157/0x540 [ 1408.604501][ T1678] kernfs_fop_write_iter+0x157/0x540 [ 1408.604533][ T1678] vfs_write+0x612/0xba0 [ 1408.604577][ T1678] ? __pfx_vfs_write+0x10/0x10 [ 1408.604624][ T1678] ? __fget_files+0x2a/0x420 [ 1408.604667][ T1678] ksys_write+0x150/0x270 [ 1408.604692][ T1678] ? __pfx_ksys_write+0x10/0x10 [ 1408.604724][ T1678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.604760][ T1678] do_syscall_64+0x174/0x580 [ 1408.604795][ T1678] ? trace_irq_disable+0x3b/0x140 [ 1408.604823][ T1678] ? clear_bhb_loop+0x40/0x90 [ 1408.604849][ T1678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.604872][ T1678] RIP: 0033:0x7f1a1999e0d9 [ 1408.604893][ T1678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1408.604913][ T1678] RSP: 002b:00007f1a1a7ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1408.604936][ T1678] RAX: ffffffffffffffda RBX: 00007f1a19c25fa0 RCX: 00007f1a1999e0d9 [ 1408.604953][ T1678] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 000000000000000b [ 1408.604967][ T1678] RBP: 00007f1a1a7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1408.604982][ T1678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1408.604995][ T1678] R13: 00007f1a19c26038 R14: 00007f1a19c25fa0 R15: 00007ffd727d87d8 [ 1408.605033][ T1678] [ 1409.050095][ T1687] syz.9.8257 (1687) used obsolete PPPIOCDETACH ioctl [ 1410.260014][ T1717] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8263'. [ 1410.565787][ T1719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8265'. [ 1411.075810][ T1737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8269'. [ 1412.456172][ T1765] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8280'. [ 1412.764507][ T1774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8283'. [ 1413.183037][ T1784] netlink: 68 bytes leftover after parsing attributes in process `syz.9.8287'. [ 1414.131866][ T1810] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8294'. [ 1414.219483][ T1812] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8296'. [ 1414.768055][ T1830] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.8303'. [ 1415.252196][ T1848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8309'. [ 1415.648285][ T1850] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8312'. [ 1415.833995][ T1856] FAULT_INJECTION: forcing a failure. [ 1415.833995][ T1856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1415.848176][ T1856] CPU: 0 UID: 0 PID: 1856 Comm: syz.9.8311 Not tainted syzkaller #0 PREEMPT(full) [ 1415.848207][ T1856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1415.848222][ T1856] Call Trace: [ 1415.848231][ T1856] [ 1415.848241][ T1856] dump_stack_lvl+0xe8/0x150 [ 1415.848280][ T1856] should_fail_ex+0x40c/0x560 [ 1415.848312][ T1856] _copy_from_user+0x2d/0xb0 [ 1415.848346][ T1856] __sys_bpf+0x2e7/0xd90 [ 1415.848388][ T1856] ? __pfx___sys_bpf+0x10/0x10 [ 1415.848423][ T1856] ? __pfx_trace_call_bpf+0x10/0x10 [ 1415.848502][ T1856] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1415.848532][ T1856] ? ksys_write+0x242/0x270 [ 1415.848560][ T1856] ? __pfx_ksys_write+0x10/0x10 [ 1415.848592][ T1856] __x64_sys_bpf+0xba/0xd0 [ 1415.848620][ T1856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.848648][ T1856] do_syscall_64+0x174/0x580 [ 1415.848689][ T1856] ? clear_bhb_loop+0x40/0x90 [ 1415.848721][ T1856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.848746][ T1856] RIP: 0033:0x7f8f3559e0d9 [ 1415.848770][ T1856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1415.848790][ T1856] RSP: 002b:00007f8f337f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1415.848816][ T1856] RAX: ffffffffffffffda RBX: 00007f8f35825fa0 RCX: 00007f8f3559e0d9 [ 1415.848833][ T1856] RDX: 0000000000000020 RSI: 0000200000000640 RDI: 0000000000000001 [ 1415.848849][ T1856] RBP: 00007f8f337f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1415.848864][ T1856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1415.848880][ T1856] R13: 00007f8f35826038 R14: 00007f8f35825fa0 R15: 00007fffc9db18f8 [ 1415.848923][ T1856] [ 1415.852307][ T1861] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8314'. [ 1416.171315][ T1861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1416.241132][ T1868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8317'. [ 1416.522517][ T1868] : renamed from bond_slave_0 (while UP) [ 1418.026333][ T1914] netlink: 'syz.7.8332': attribute type 1 has an invalid length. [ 1418.072702][ T1914] netlink: 'syz.7.8332': attribute type 2 has an invalid length. [ 1418.107640][ T1916] __nla_validate_parse: 5 callbacks suppressed [ 1418.107664][ T1916] netlink: 140 bytes leftover after parsing attributes in process `syz.6.8331'. [ 1419.662218][ T1943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8339'. [ 1419.999122][ T1952] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8342'. [ 1420.024493][ T1952] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8342'. [ 1420.450759][ T1965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8347'. [ 1420.685811][ T1972] netlink: 'syz.4.8348': attribute type 2 has an invalid length. [ 1420.693742][ T1972] netlink: 'syz.4.8348': attribute type 2 has an invalid length. [ 1420.896371][ T1980] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8351'. [ 1422.206887][ T2010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8360'. [ 1422.265808][ T2010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8360'. [ 1422.351679][ T2014] netlink: 'syz.7.8363': attribute type 1 has an invalid length. [ 1422.370226][ T2014] netlink: 'syz.7.8363': attribute type 1 has an invalid length. [ 1423.003171][ T2026] netlink: 'syz.9.8368': attribute type 19 has an invalid length. [ 1423.028334][ T2026] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8368'. [ 1423.082970][ T2026] netlink: 140 bytes leftover after parsing attributes in process `syz.9.8368'. [ 1423.098064][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.098131][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.237030][ T2037] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8372'. [ 1423.336200][ T2037] bond0 (unregistering): (slave 42): Releasing backup interface [ 1423.392467][ T2037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1423.441354][ T2037] bond0 (unregistering): Released all slaves [ 1425.620477][ T2088] netlink: 92 bytes leftover after parsing attributes in process `syz.9.8390'. [ 1427.064774][ T1217] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1427.146390][ T1217] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1427.158133][ T1217] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1427.175749][ T1217] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1427.200809][ T1217] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1428.543140][ T2118] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.8401'. [ 1428.601614][ T2129] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8404'. [ 1429.019947][ T2104] lo speed is unknown, defaulting to 1000 [ 1429.048617][ T2104] gretap0 speed is unknown, defaulting to 1000 [ 1429.244228][ T1217] Bluetooth: hci3: command tx timeout [ 1429.615361][ T2143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8409'. [ 1431.324689][ T1217] Bluetooth: hci3: command tx timeout [ 1431.898220][ T2104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.906810][ T2104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.916378][ T2104] bridge_slave_0: entered allmulticast mode [ 1431.924456][ T2104] bridge_slave_0: entered promiscuous mode [ 1431.933956][ T2104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.941382][ T2104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.948715][ T2104] bridge_slave_1: entered allmulticast mode [ 1431.956959][ T2104] bridge_slave_1: entered promiscuous mode [ 1432.001066][ T2104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1432.014826][ T2104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1432.062903][ T2104] team0: Port device team_slave_0 added [ 1432.072286][ T2104] team0: Port device team_slave_1 added [ 1432.111883][ T2104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.123621][ T2104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.150277][ T2104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1432.164132][ T2104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1432.171348][ T2104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.222383][ T2104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1432.387969][ T2104] hsr_slave_0: entered promiscuous mode [ 1432.405094][ T2104] hsr_slave_1: entered promiscuous mode [ 1432.418513][ T2104] debugfs: 'hsr0' already exists in 'hsr' [ 1432.432679][ T2104] Cannot create hsr debugfs directory [ 1433.403792][ T1217] Bluetooth: hci3: command tx timeout [ 1435.319356][ T2238] netlink: zone id is out of range [ 1435.341978][ T2238] netlink: zone id is out of range [ 1435.363235][ T2238] netlink: zone id is out of range [ 1435.382769][ T2238] netlink: zone id is out of range [ 1435.432885][ T2238] netlink: zone id is out of range [ 1435.461126][ T2238] netlink: zone id is out of range [ 1435.484247][ T1217] Bluetooth: hci3: command tx timeout [ 1435.496667][ T2238] netlink: zone id is out of range [ 1435.507587][ T2238] netlink: zone id is out of range [ 1435.551160][ T2238] netlink: zone id is out of range [ 1435.608826][ T2238] netlink: zone id is out of range [ 1436.014686][ T2257] netlink: 'syz.2.8432': attribute type 10 has an invalid length. [ 1437.265233][ T2104] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1437.334975][ T2104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1437.375410][ T2104] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1437.486576][ T2104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1437.494670][ T2104] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1437.526998][ T2104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1437.544840][ T2104] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1437.576566][ T2104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1438.279385][ T2104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1438.312750][ T2315] netlink: 'syz.7.8444': attribute type 11 has an invalid length. [ 1438.378610][ T2104] 8021q: adding VLAN 0 to HW filter on device team0 [ 1438.441442][T21391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.448777][T21391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1438.505857][ T7561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.513128][ T7561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1438.770657][ T2104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1438.831585][ T2313] lo speed is unknown, defaulting to 1000 [ 1439.049885][ T2313] gretap0 speed is unknown, defaulting to 1000 [ 1439.208365][ T2333] netlink: 92 bytes leftover after parsing attributes in process `syz.9.8451'. [ 1439.350215][ T2331] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.8450'. [ 1440.834390][ T2104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1440.993312][ T2104] veth0_vlan: entered promiscuous mode [ 1441.055008][ T2104] veth1_vlan: entered promiscuous mode [ 1441.191739][ T2104] veth0_macvtap: entered promiscuous mode [ 1441.240616][ T2104] veth1_macvtap: entered promiscuous mode [ 1441.313372][ T2104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1441.370140][ T2374] siw: device registration error -23 [ 1441.406092][ T2104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1441.460694][T15695] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.497414][T15695] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.538069][T15695] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.571444][T15695] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.719173][ T2384] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8463'. [ 1441.795340][ T2372] lo speed is unknown, defaulting to 1000 [ 1441.847371][ T2372] gretap0 speed is unknown, defaulting to 1000 [ 1441.869216][T15695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1441.881753][T15695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1442.790105][ T2402] netlink: 10 bytes leftover after parsing attributes in process `syz.9.8466'. [ 1442.892711][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1442.902644][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1442.957523][ T2392] lo speed is unknown, defaulting to 1000 [ 1442.980403][ T2417] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8467'. [ 1443.009884][ T2392] gretap0 speed is unknown, defaulting to 1000 [ 1443.026465][ T2417] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8467'. [ 1444.803626][ T2471] netlink: 'syz.7.8479': attribute type 15 has an invalid length. [ 1444.811585][ T2486] lo speed is unknown, defaulting to 1000 [ 1444.921204][ T2495] FAULT_INJECTION: forcing a failure. [ 1444.921204][ T2495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1444.934340][ T2495] CPU: 1 UID: 0 PID: 2495 Comm: syz.0.8482 Not tainted syzkaller #0 PREEMPT(full) [ 1444.934372][ T2495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1444.934388][ T2495] Call Trace: [ 1444.934398][ T2495] [ 1444.934410][ T2495] dump_stack_lvl+0xe8/0x150 [ 1444.934451][ T2495] should_fail_ex+0x40c/0x560 [ 1444.934496][ T2495] _copy_from_user+0x2d/0xb0 [ 1444.934540][ T2495] __sys_bpf+0x2e7/0xd90 [ 1444.934593][ T2495] ? __pfx___sys_bpf+0x10/0x10 [ 1444.934671][ T2495] ? __fget_files+0x2a/0x420 [ 1444.934736][ T2495] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1444.934768][ T2495] ? ksys_write+0x242/0x270 [ 1444.934797][ T2495] ? __pfx_ksys_write+0x10/0x10 [ 1444.934830][ T2495] __x64_sys_bpf+0xba/0xd0 [ 1444.934861][ T2495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.934889][ T2495] do_syscall_64+0x174/0x580 [ 1444.934927][ T2495] ? trace_irq_disable+0x3b/0x140 [ 1444.934958][ T2495] ? clear_bhb_loop+0x40/0x90 [ 1444.934992][ T2495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.935018][ T2495] RIP: 0033:0x7f44f9d9e0d9 [ 1444.935043][ T2495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1444.935066][ T2495] RSP: 002b:00007f44fac82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1444.935092][ T2495] RAX: ffffffffffffffda RBX: 00007f44fa025fa0 RCX: 00007f44f9d9e0d9 [ 1444.935110][ T2495] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 1444.935126][ T2495] RBP: 00007f44fac82090 R08: 0000000000000000 R09: 0000000000000000 [ 1444.935141][ T2495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1444.935155][ T2495] R13: 00007f44fa026038 R14: 00007f44fa025fa0 R15: 00007ffeb58f5028 [ 1444.935202][ T2495] [ 1445.465601][ T2486] gretap0 speed is unknown, defaulting to 1000 [ 1447.061260][ T2548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8495'. [ 1447.393351][ T2557] bridge_slave_1: left allmulticast mode [ 1447.416780][ T2557] bridge_slave_1: left promiscuous mode [ 1447.438762][ T2557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.534019][ T2557] bridge_slave_0: left allmulticast mode [ 1447.547580][ T2557] bridge_slave_0: left promiscuous mode [ 1447.561163][ T2565] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8500'. [ 1447.570179][ T2557] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.472828][ T2662] FAULT_INJECTION: forcing a failure. [ 1451.472828][ T2662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1451.489466][ T2662] CPU: 1 UID: 0 PID: 2662 Comm: syz.0.8516 Not tainted syzkaller #0 PREEMPT(full) [ 1451.489498][ T2662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1451.489512][ T2662] Call Trace: [ 1451.489521][ T2662] [ 1451.489531][ T2662] dump_stack_lvl+0xe8/0x150 [ 1451.489569][ T2662] should_fail_ex+0x40c/0x560 [ 1451.489600][ T2662] _copy_from_user+0x2d/0xb0 [ 1451.489631][ T2662] bpf_test_init+0xd8/0x150 [ 1451.489672][ T2662] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 1451.489713][ T2662] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1451.489741][ T2662] ? __fget_files+0x2a/0x420 [ 1451.489778][ T2662] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1451.489810][ T2662] bpf_prog_test_run+0x2c5/0x340 [ 1451.489845][ T2662] __sys_bpf+0xa22/0xd90 [ 1451.489882][ T2662] ? __pfx___sys_bpf+0x10/0x10 [ 1451.489922][ T2662] ? __fget_files+0x2a/0x420 [ 1451.489971][ T2662] ? ksys_write+0x242/0x270 [ 1451.489996][ T2662] ? __pfx_ksys_write+0x10/0x10 [ 1451.490023][ T2662] __x64_sys_bpf+0xba/0xd0 [ 1451.490049][ T2662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.490074][ T2662] do_syscall_64+0x174/0x580 [ 1451.490108][ T2662] ? trace_irq_disable+0x3b/0x140 [ 1451.490136][ T2662] ? clear_bhb_loop+0x40/0x90 [ 1451.490164][ T2662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.490187][ T2662] RIP: 0033:0x7f44f9d9e0d9 [ 1451.490208][ T2662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1451.490228][ T2662] RSP: 002b:00007f44fac82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1451.490252][ T2662] RAX: ffffffffffffffda RBX: 00007f44fa025fa0 RCX: 00007f44f9d9e0d9 [ 1451.490269][ T2662] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 1451.490284][ T2662] RBP: 00007f44fac82090 R08: 0000000000000000 R09: 0000000000000000 [ 1451.490299][ T2662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1451.490312][ T2662] R13: 00007f44fa026038 R14: 00007f44fa025fa0 R15: 00007ffeb58f5028 [ 1451.490348][ T2662] [ 1451.709872][ T2668] FAULT_INJECTION: forcing a failure. [ 1451.709872][ T2668] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1451.723232][ T2668] CPU: 1 UID: 0 PID: 2668 Comm: syz.2.8517 Not tainted syzkaller #0 PREEMPT(full) [ 1451.723262][ T2668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1451.723276][ T2668] Call Trace: [ 1451.723285][ T2668] [ 1451.723295][ T2668] dump_stack_lvl+0xe8/0x150 [ 1451.723331][ T2668] should_fail_ex+0x40c/0x560 [ 1451.723362][ T2668] prepare_alloc_pages+0x230/0x650 [ 1451.723402][ T2668] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1451.723440][ T2668] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1451.723477][ T2668] ? __pfx_policy_nodemask+0x10/0x10 [ 1451.723509][ T2668] ? __get_vm_area_node+0x136/0x300 [ 1451.723533][ T2668] ? __vmalloc_node_range_noprof+0x358/0x1730 [ 1451.723560][ T2668] ? __vmalloc_noprof+0xd2/0x120 [ 1451.723584][ T2668] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1451.723613][ T2668] ? bpf_prog_alloc+0x3c/0x1a0 [ 1451.723639][ T2668] ? __sys_bpf+0xd0d/0xd90 [ 1451.723668][ T2668] ? __x64_sys_bpf+0xba/0xd0 [ 1451.723690][ T2668] ? do_syscall_64+0x174/0x580 [ 1451.723723][ T2668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.723752][ T2668] alloc_pages_mpol+0x212/0x380 [ 1451.723800][ T2668] alloc_pages_noprof+0xac/0x2a0 [ 1451.723837][ T2668] get_free_pages_noprof+0xf/0x80 [ 1451.723869][ T2668] __kasan_populate_vmalloc+0x38/0x1c0 [ 1451.723897][ T2668] ? do_raw_spin_unlock+0xf5/0x210 [ 1451.723928][ T2668] alloc_vmap_area+0xd1a/0x1420 [ 1451.723970][ T2668] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1451.723997][ T2668] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 1451.724028][ T2668] ? __get_vm_area_node+0x136/0x300 [ 1451.724051][ T2668] ? __get_vm_area_node+0x136/0x300 [ 1451.724082][ T2668] __get_vm_area_node+0x1f2/0x300 [ 1451.724115][ T2668] __vmalloc_node_range_noprof+0x358/0x1730 [ 1451.724144][ T2668] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1451.724176][ T2668] ? __lock_acquire+0x683/0x2cf0 [ 1451.724229][ T2668] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1451.724268][ T2668] ? __fget_files+0x2a/0x420 [ 1451.724301][ T2668] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1451.724328][ T2668] __vmalloc_noprof+0xd2/0x120 [ 1451.724355][ T2668] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1451.724387][ T2668] bpf_prog_alloc_no_stats+0x47/0x560 [ 1451.724415][ T2668] ? bpf_prog_alloc+0x2a/0x1a0 [ 1451.724446][ T2668] bpf_prog_alloc+0x3c/0x1a0 [ 1451.724477][ T2668] bpf_prog_load+0x7f8/0x1c20 [ 1451.724519][ T2668] ? __pfx_bpf_prog_load+0x10/0x10 [ 1451.724586][ T2668] __sys_bpf+0xd0d/0xd90 [ 1451.724641][ T2668] ? __pfx___sys_bpf+0x10/0x10 [ 1451.724682][ T2668] ? __fget_files+0x2a/0x420 [ 1451.724731][ T2668] ? ksys_write+0x242/0x270 [ 1451.724762][ T2668] ? __pfx_ksys_write+0x10/0x10 [ 1451.724790][ T2668] __x64_sys_bpf+0xba/0xd0 [ 1451.724816][ T2668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.724842][ T2668] do_syscall_64+0x174/0x580 [ 1451.724874][ T2668] ? trace_irq_disable+0x3b/0x140 [ 1451.724902][ T2668] ? clear_bhb_loop+0x40/0x90 [ 1451.724930][ T2668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.724954][ T2668] RIP: 0033:0x7f65f439e0d9 [ 1451.724975][ T2668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1451.724995][ T2668] RSP: 002b:00007f65f51b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1451.725019][ T2668] RAX: ffffffffffffffda RBX: 00007f65f4625fa0 RCX: 00007f65f439e0d9 [ 1451.725036][ T2668] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 1451.725050][ T2668] RBP: 00007f65f51b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1451.725065][ T2668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1451.725078][ T2668] R13: 00007f65f4626038 R14: 00007f65f4625fa0 R15: 00007ffd6c78bcd8 [ 1451.725114][ T2668] [ 1452.087796][ T2668] syz.2.8517: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1452.105454][ T2668] CPU: 1 UID: 0 PID: 2668 Comm: syz.2.8517 Not tainted syzkaller #0 PREEMPT(full) [ 1452.105486][ T2668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1452.105500][ T2668] Call Trace: [ 1452.105509][ T2668] [ 1452.105519][ T2668] dump_stack_lvl+0xe8/0x150 [ 1452.105556][ T2668] warn_alloc+0x24c/0x270 [ 1452.105587][ T2668] ? kasan_quarantine_put+0xbb/0x1f0 [ 1452.105620][ T2668] ? __pfx_warn_alloc+0x10/0x10 [ 1452.105651][ T2668] ? __get_vm_area_node+0x20b/0x300 [ 1452.105682][ T2668] ? __get_vm_area_node+0x20b/0x300 [ 1452.105715][ T2668] __vmalloc_node_range_noprof+0x37d/0x1730 [ 1452.105757][ T2668] ? __lock_acquire+0x683/0x2cf0 [ 1452.105812][ T2668] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1452.105848][ T2668] ? __fget_files+0x2a/0x420 [ 1452.105881][ T2668] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1452.105910][ T2668] __vmalloc_noprof+0xd2/0x120 [ 1452.105937][ T2668] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1452.105969][ T2668] bpf_prog_alloc_no_stats+0x47/0x560 [ 1452.105997][ T2668] ? bpf_prog_alloc+0x2a/0x1a0 [ 1452.106027][ T2668] bpf_prog_alloc+0x3c/0x1a0 [ 1452.106059][ T2668] bpf_prog_load+0x7f8/0x1c20 [ 1452.106101][ T2668] ? __pfx_bpf_prog_load+0x10/0x10 [ 1452.106157][ T2668] __sys_bpf+0xd0d/0xd90 [ 1452.106193][ T2668] ? __pfx___sys_bpf+0x10/0x10 [ 1452.106234][ T2668] ? __fget_files+0x2a/0x420 [ 1452.106284][ T2668] ? ksys_write+0x242/0x270 [ 1452.106308][ T2668] ? __pfx_ksys_write+0x10/0x10 [ 1452.106335][ T2668] __x64_sys_bpf+0xba/0xd0 [ 1452.106361][ T2668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.106386][ T2668] do_syscall_64+0x174/0x580 [ 1452.106420][ T2668] ? trace_irq_disable+0x3b/0x140 [ 1452.106447][ T2668] ? clear_bhb_loop+0x40/0x90 [ 1452.106475][ T2668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.106498][ T2668] RIP: 0033:0x7f65f439e0d9 [ 1452.106519][ T2668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1452.106538][ T2668] RSP: 002b:00007f65f51b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1452.106562][ T2668] RAX: ffffffffffffffda RBX: 00007f65f4625fa0 RCX: 00007f65f439e0d9 [ 1452.106579][ T2668] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 1452.106594][ T2668] RBP: 00007f65f51b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1452.106609][ T2668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1452.106623][ T2668] R13: 00007f65f4626038 R14: 00007f65f4625fa0 R15: 00007ffd6c78bcd8 [ 1452.106658][ T2668] [ 1452.106667][ T2668] Mem-Info: [ 1452.251522][ T2670] netlink: 76 bytes leftover after parsing attributes in process `syz.7.8514'. [ 1452.256402][ T2668] active_anon:20362 inactive_anon:0 isolated_anon:0 [ 1452.256402][ T2668] active_file:1727 inactive_file:62805 isolated_file:0 [ 1452.256402][ T2668] unevictable:0 dirty:248 writeback:0 [ 1452.256402][ T2668] slab_reclaimable:7065 slab_unreclaimable:112973 [ 1452.256402][ T2668] mapped:30544 shmem:542 pagetables:1835 [ 1452.256402][ T2668] sec_pagetables:0 bounce:0 [ 1452.256402][ T2668] kernel_misc_reclaimable:0 [ 1452.256402][ T2668] free:1271940 free_pcp:10317 free_cma:0 [ 1452.416028][ T2668] Node 0 active_anon:81248kB inactive_anon:0kB active_file:6908kB inactive_file:251016kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122176kB dirty:992kB writeback:0kB shmem:2168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13496kB pagetables:7216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1452.450621][ T2668] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1452.484644][ T2668] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1452.515487][ T2668] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 1452.521502][ T2668] Node 0 DMA32 free:1125076kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:81248kB inactive_anon:0kB active_file:6908kB inactive_file:251016kB unevictable:0kB writepending:992kB zspages:0kB present:3129332kB managed:2548768kB mlocked:0kB bounce:0kB free_pcp:41580kB local_pcp:20308kB free_cma:0kB [ 1452.554550][ T2668] lowmem_reserve[]: 0 0 0 0 0 [ 1452.559324][ T2668] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:268kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1452.612537][ T2668] lowmem_reserve[]: 0 0 0 0 0 [ 1452.640477][ T2668] Node 1 Normal free:3947324kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1452.732763][ T2668] lowmem_reserve[]: 0 0 0 0 0 [ 1452.740633][ T2668] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1452.755806][ T2668] Node 0 DMA32: 2292*4kB (UME) 2180*8kB (UME) 1266*16kB (UME) 1822*32kB (UME) 1042*64kB (UME) 351*128kB (UME) 171*256kB (UME) 95*512kB (UM) 55*1024kB (UME) 19*2048kB (UME) 176*4096kB (UM) = 1125328kB [ 1452.808478][ T2668] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1452.831795][ T2684] netlink: 'syz.0.8519': attribute type 10 has an invalid length. [ 1452.852261][ T2684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1452.862149][ T2668] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 5*16kB (UM) 2*32kB (UM) 8*64kB (UM) 5*128kB (UM) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 0*2048kB 962*4096kB (M) = 3947324kB [ 1452.881566][ T2684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1452.894171][ T2668] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1452.910671][ T2684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1452.928476][ T2668] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1452.938186][ T2684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1452.946101][ T2668] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1452.955945][ T2668] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1452.965440][ T2668] 65072 total pagecache pages [ 1452.970342][ T2668] 0 pages in swap cache [ 1452.977009][ T2668] Free swap = 124996kB [ 1452.986919][ T2668] Total swap = 124996kB [ 1453.011817][ T2668] 2097051 pages RAM [ 1453.021918][ T2668] 0 pages HighMem/MovableOnly [ 1453.054288][ T2668] 428177 pages reserved [ 1453.068492][ T2690] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8520'. [ 1453.069740][ T2668] 0 pages cma reserved [ 1453.099309][ T2690] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8520'. [ 1453.566439][ T2710] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8526'. [ 1453.796102][ T2717] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8526'. [ 1453.880478][ T2717] netlink: 'syz.9.8526': attribute type 1 has an invalid length. [ 1454.944827][ T2743] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8530'. [ 1455.325314][ T2757] xt_cluster: you have exceeded the maximum number of cluster nodes (2621472 > 32) [ 1455.911230][ T1217] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1 [ 1455.912473][T19408] Bluetooth: hci0: hardware error 0x00 [ 1456.370802][ T2771] netlink: 13439 bytes leftover after parsing attributes in process `syz.4.8536'. [ 1456.899788][ T2801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8544'. [ 1457.204367][ T2789] lo speed is unknown, defaulting to 1000 [ 1457.241980][ T2789] gretap0 speed is unknown, defaulting to 1000 [ 1457.519681][ T2848] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.8549'. [ 1457.581419][ T2850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8550'. [ 1458.123895][T19408] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1458.924181][ T2867] netlink: 'syz.0.8554': attribute type 39 has an invalid length. [ 1458.952610][ T2867] hsr_slave_0: left promiscuous mode [ 1458.987840][ T2867] hsr_slave_1: left promiscuous mode [ 1459.180491][ T2878] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.8556'. [ 1459.504045][ T2891] netlink: 68 bytes leftover after parsing attributes in process `syz.9.8561'. [ 1459.526045][ T2893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8563'. [ 1459.654098][ T2893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8563'. [ 1459.969735][T21391] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.985585][ T2901] netlink: 13695 bytes leftover after parsing attributes in process `syz.7.8564'. [ 1460.349963][T21391] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.902560][T19408] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1461.305424][T21391] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.706748][ T2933] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.8573'. [ 1461.724362][ T2939] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8571'. [ 1462.050746][T21391] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.814370][ T2955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8579'. [ 1462.923888][T19408] Bluetooth: hci1: command 0x0406 tx timeout [ 1463.706220][ T2976] net_ratelimit: 115 callbacks suppressed [ 1463.706243][ T2976] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1464.238488][T21391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1464.279867][T21391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1464.307199][T21391] bond0 (unregistering): Released all slaves [ 1464.339468][ T2956] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.8580'. [ 1464.392508][ T2981] netlink: 65039 bytes leftover after parsing attributes in process `syz.9.8585'. [ 1464.867940][ T2998] netlink: 92 bytes leftover after parsing attributes in process `syz.4.8588'. [ 1465.021766][ T5271] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1465.034501][ T1217] Bluetooth: hci1: command 0x0406 tx timeout [ 1465.337309][ T3012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8592'. [ 1465.617949][ T3017] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8593'. [ 1465.944687][ T3021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8594'. [ 1466.019263][ T3021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8594'. [ 1466.705550][ T3029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8598'. [ 1466.714514][ T3029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8598'. [ 1467.413712][T21391] hsr_slave_0: left promiscuous mode [ 1467.441241][T21391] hsr_slave_1: left promiscuous mode [ 1467.466556][T21391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1467.584136][T21391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1467.669640][T21391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1467.701359][T21391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1467.867329][ T3062] __nla_validate_parse: 1 callbacks suppressed [ 1467.867354][ T3062] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8604'. [ 1467.941254][ T3065] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8606'. [ 1468.615312][T21391] veth1_macvtap: left promiscuous mode [ 1468.620891][T21391] veth0_macvtap: left promiscuous mode [ 1468.626567][T21391] veth1_vlan: left promiscuous mode [ 1468.631913][T21391] veth0_vlan: left promiscuous mode [ 1469.262490][ T3083] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8608'. [ 1469.294338][ T3083] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8608'. [ 1469.791813][T21391] team0 (unregistering): Port device team_slave_1 removed [ 1469.847372][T21391] team0 (unregistering): Port device team_slave_0 removed [ 1470.289092][ T5271] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1470.656483][ T3095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8613'. [ 1471.460211][ T3119] netlink: 'syz.4.8621': attribute type 41 has an invalid length. [ 1471.493488][ T3116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8618'. [ 1474.737382][ T5271] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1475.226880][ T3176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8632'. [ 1475.242976][ T3176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8632'. [ 1475.491338][ T3181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8634'. [ 1476.392132][ T5271] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1476.582582][ T3240] netlink: 'syz.2.8647': attribute type 7 has an invalid length. [ 1476.858465][ T3247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8649'. [ 1477.040283][ T3256] netlink: 64 bytes leftover after parsing attributes in process `syz.7.8651'. [ 1477.296725][ T3262] netlink: 13951 bytes leftover after parsing attributes in process `syz.2.8653'. [ 1477.484358][ T3269] netlink: 'syz.7.8655': attribute type 21 has an invalid length. [ 1477.505913][ T3269] netlink: 'syz.7.8655': attribute type 1 has an invalid length. [ 1478.092235][ T3293] netlink: 'syz.2.8661': attribute type 19 has an invalid length. [ 1478.110720][ T3293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8661'. [ 1478.144498][ T3293] netlink: 140 bytes leftover after parsing attributes in process `syz.2.8661'. [ 1478.562400][ T3301] lo speed is unknown, defaulting to 1000 [ 1478.569971][ T3301] gretap0 speed is unknown, defaulting to 1000 [ 1479.003044][ T3317] netlink: 68 bytes leftover after parsing attributes in process `syz.7.8668'. [ 1481.768126][ T3363] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8684'. [ 1481.783636][ T3362] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8683'. [ 1481.816252][ T3362] netlink: 68 bytes leftover after parsing attributes in process `syz.9.8683'. [ 1483.061226][ T3379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8689'. [ 1483.186556][ T3382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8691'. [ 1484.529833][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.536767][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.020680][ T3426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8702'. [ 1485.078914][ T3426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8702'. [ 1485.323330][ T3430] netlink: 76 bytes leftover after parsing attributes in process `syz.9.8704'. [ 1485.883597][ T3447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8710'. [ 1486.271573][ T3463] netlink: 68 bytes leftover after parsing attributes in process `syz.9.8714'. [ 1486.494291][ T3470] FAULT_INJECTION: forcing a failure. [ 1486.494291][ T3470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1486.507399][ T3470] CPU: 1 UID: 0 PID: 3470 Comm: syz.7.8719 Not tainted syzkaller #0 PREEMPT(full) [ 1486.507444][ T3470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1486.507466][ T3470] Call Trace: [ 1486.507492][ T3470] [ 1486.507502][ T3470] dump_stack_lvl+0xe8/0x150 [ 1486.507545][ T3470] should_fail_ex+0x40c/0x560 [ 1486.507581][ T3470] _copy_to_user+0x31/0xb0 [ 1486.507618][ T3470] simple_read_from_buffer+0xe1/0x170 [ 1486.507659][ T3470] proc_fail_nth_read+0x1bb/0x230 [ 1486.507698][ T3470] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1486.507737][ T3470] ? rw_verify_area+0x24a/0x4c0 [ 1486.507777][ T3470] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1486.507811][ T3470] vfs_read+0x213/0xa80 [ 1486.507854][ T3470] ? __pfx___mutex_lock+0x10/0x10 [ 1486.507882][ T3470] ? __pfx_vfs_read+0x10/0x10 [ 1486.507921][ T3470] ? __fget_files+0x2a/0x420 [ 1486.507959][ T3470] ? __fget_files+0x3a2/0x420 [ 1486.507989][ T3470] ? __fget_files+0x2a/0x420 [ 1486.508033][ T3470] ksys_read+0x150/0x270 [ 1486.508073][ T3470] ? __pfx_ksys_read+0x10/0x10 [ 1486.508122][ T3470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.508150][ T3470] do_syscall_64+0x174/0x580 [ 1486.508188][ T3470] ? clear_bhb_loop+0x40/0x90 [ 1486.508218][ T3470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.508242][ T3470] RIP: 0033:0x7f1a1995e90e [ 1486.508265][ T3470] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1486.508286][ T3470] RSP: 002b:00007f1a1a7edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1486.508310][ T3470] RAX: ffffffffffffffda RBX: 00007f1a1a7ee6c0 RCX: 00007f1a1995e90e [ 1486.508327][ T3470] RDX: 000000000000000f RSI: 00007f1a1a7ee0a0 RDI: 0000000000000006 [ 1486.508341][ T3470] RBP: 00007f1a1a7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1486.508355][ T3470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1486.508368][ T3470] R13: 00007f1a19c26038 R14: 00007f1a19c25fa0 R15: 00007ffd727d87d8 [ 1486.508410][ T3470] [ 1486.890724][ T3463] mac80211_hwsim hwsim76 wlan0: entered allmulticast mode [ 1487.491508][ T3499] __nla_validate_parse: 2 callbacks suppressed [ 1487.491531][ T3499] netlink: 144 bytes leftover after parsing attributes in process `syz.7.8728'. [ 1487.535889][ T3498] netlink: 144 bytes leftover after parsing attributes in process `syz.7.8728'. [ 1488.029370][ T3509] lo speed is unknown, defaulting to 1000 [ 1488.051787][ T3509] gretap0 speed is unknown, defaulting to 1000 [ 1488.885887][ T3533] netlink: 92 bytes leftover after parsing attributes in process `syz.7.8737'. [ 1489.347281][ T3539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8738'. [ 1490.039168][ T3562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8744'. [ 1492.093187][ T3614] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8758'. [ 1492.237155][ T3616] netlink: 76 bytes leftover after parsing attributes in process `syz.9.8757'. [ 1492.271012][ T3616] netlink: 'syz.9.8757': attribute type 21 has an invalid length. [ 1492.974751][ T3631] netlink: 200 bytes leftover after parsing attributes in process `syz.7.8763'. [ 1493.032085][ T3631] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1493.976730][ T3658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8770'. [ 1494.101194][ T3666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8769'. [ 1495.581564][ T3710] lo speed is unknown, defaulting to 1000 [ 1495.601520][ T3714] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8785'. [ 1495.639761][ T3710] gretap0 speed is unknown, defaulting to 1000 [ 1497.779983][ T3762] syzkaller0: entered promiscuous mode [ 1497.785780][ T3762] syzkaller0: entered allmulticast mode [ 1497.798596][ T3771] netlink: 830 bytes leftover after parsing attributes in process `syz.7.8798'. [ 1498.333951][ T3784] netlink: 'syz.4.8799': attribute type 21 has an invalid length. [ 1498.395163][ T3784] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8799'. [ 1501.814080][ T3779] netlink: 830 bytes leftover after parsing attributes in process `syz.4.8799'. [ 1501.845909][ T3784] netlink: 'syz.4.8799': attribute type 5 has an invalid length. [ 1501.864032][ T3784] netlink: 'syz.4.8799': attribute type 6 has an invalid length. [ 1501.889901][ T3784] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8799'. [ 1502.381425][ T3825] netlink: 92 bytes leftover after parsing attributes in process `syz.7.8814'. [ 1502.566233][ T3830] netlink: 'syz.0.8817': attribute type 10 has an invalid length. [ 1502.596709][ T3830] ipvlan0: entered allmulticast mode [ 1502.608590][ T3830] veth0_vlan: entered allmulticast mode [ 1502.631019][ T3830] team0: Device ipvlan0 failed to register rx_handler [ 1502.910114][ T3846] netlink: 'syz.9.8821': attribute type 10 has an invalid length. [ 1502.950967][ T3846] 8021q: adding VLAN 0 to HW filter on device team0 [ 1502.980763][ T3846] bond0: (slave team0): Enslaving as an active interface with an up link [ 1503.127849][ T3854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8824'. [ 1503.331324][ T3865] netlink: 13439 bytes leftover after parsing attributes in process `syz.4.8828'. [ 1503.769797][ T3880] netlink: 'syz.7.8833': attribute type 1 has an invalid length. [ 1503.777611][ T3880] netlink: 'syz.7.8833': attribute type 2 has an invalid length. [ 1503.805235][ T3885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8835'. [ 1503.814337][ T3885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8835'. [ 1504.087330][ T3893] netlink: 830 bytes leftover after parsing attributes in process `syz.7.8840'. [ 1504.159910][ T3889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8838'. [ 1504.218037][ T3893] netlink: 'syz.7.8840': attribute type 21 has an invalid length. [ 1504.250450][ T3893] netlink: 128 bytes leftover after parsing attributes in process `syz.7.8840'. [ 1504.385771][ T3893] netlink: 'syz.7.8840': attribute type 5 has an invalid length. [ 1504.478483][ T3893] netlink: 'syz.7.8840': attribute type 6 has an invalid length. [ 1504.554736][ T3893] netlink: 3 bytes leftover after parsing attributes in process `syz.7.8840'. [ 1504.667192][ T3907] netlink: 13695 bytes leftover after parsing attributes in process `syz.9.8841'. [ 1504.760149][ T3911] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8845'. [ 1504.962652][ T3914] netlink: 'syz.7.8846': attribute type 23 has an invalid length. [ 1505.250518][ T3914] netlink: 'syz.7.8846': attribute type 46 has an invalid length. [ 1505.286776][ T3914] netlink: 55 bytes leftover after parsing attributes in process `syz.7.8846'. [ 1505.867469][ T3919] lo speed is unknown, defaulting to 1000 [ 1506.016697][ T3919] gretap0 speed is unknown, defaulting to 1000 [ 1507.974106][T19408] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1508.025196][ T3931] netlink: 'syz.2.8850': attribute type 1 has an invalid length. [ 1508.061259][ T3931] netlink: 'syz.2.8850': attribute type 2 has an invalid length. [ 1508.372352][ T3941] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8855'. [ 1508.469500][ T3942] mac80211_hwsim hwsim85 wlan0: entered allmulticast mode [ 1508.885717][ T3955] netlink: 'syz.2.8860': attribute type 33 has an invalid length. [ 1508.895098][ T3955] __nla_validate_parse: 2 callbacks suppressed [ 1508.895137][ T3955] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8860'. [ 1508.980060][T19408] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1509.187894][ T3967] netlink: 'syz.0.8864': attribute type 1 has an invalid length. [ 1509.195864][ T3967] netlink: 'syz.0.8864': attribute type 2 has an invalid length. [ 1509.518836][ T3975] lo speed is unknown, defaulting to 1000 [ 1509.555148][ T3975] gretap0 speed is unknown, defaulting to 1000 [ 1510.053996][ T3964] Bluetooth: hci1: command 0x0406 tx timeout [ 1510.791621][ T4001] lo speed is unknown, defaulting to 1000 [ 1510.838641][ T4001] gretap0 speed is unknown, defaulting to 1000 [ 1510.897629][ T4008] netlink: 'syz.7.8878': attribute type 2 has an invalid length. [ 1511.051104][ T4008] : entered promiscuous mode [ 1511.071430][ T4012] netlink: 'syz.2.8877': attribute type 1 has an invalid length. [ 1511.110122][ T3964] Bluetooth: hci2: command 0x0406 tx timeout [ 1511.130475][ T4012] netlink: 'syz.2.8877': attribute type 2 has an invalid length. [ 1512.028254][ T4027] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8881'. [ 1512.145910][T19408] Bluetooth: hci1: command 0x0406 tx timeout [ 1512.423512][ T4030] netlink: 68 bytes leftover after parsing attributes in process `syz.9.8883'. [ 1512.980897][ T4032] lo speed is unknown, defaulting to 1000 [ 1512.988887][ T4032] gretap0 speed is unknown, defaulting to 1000 [ 1513.163813][ T1217] Bluetooth: hci2: command 0x0406 tx timeout [ 1513.679100][ T4058] netlink: 'syz.0.8890': attribute type 10 has an invalid length. [ 1513.687022][ T4058] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.8890'. [ 1514.439481][ T4070] netlink: 'syz.4.8892': attribute type 1 has an invalid length. [ 1514.484666][ T4070] netlink: 'syz.4.8892': attribute type 2 has an invalid length. [ 1514.806503][ T4081] netlink: 'syz.2.8896': attribute type 10 has an invalid length. [ 1514.844476][ T4081] netlink: 3531 bytes leftover after parsing attributes in process `syz.2.8896'. [ 1514.997850][ T4079] lo speed is unknown, defaulting to 1000 [ 1515.005954][ T4079] gretap0 speed is unknown, defaulting to 1000 [ 1515.929049][ T4110] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8902'. [ 1515.931303][ T4109] netlink: 'syz.0.8900': attribute type 33 has an invalid length. [ 1515.947069][ T4109] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8900'. [ 1516.005967][ T4109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1516.175284][ T4106] lo speed is unknown, defaulting to 1000 [ 1516.200424][ T4106] gretap0 speed is unknown, defaulting to 1000 [ 1517.013378][ T4130] lo speed is unknown, defaulting to 1000 [ 1517.021955][ T4130] gretap0 speed is unknown, defaulting to 1000 [ 1517.368365][ T4145] netlink: 'syz.4.8910': attribute type 15 has an invalid length. [ 1517.392243][ T4145] netlink: 11870 bytes leftover after parsing attributes in process `syz.4.8910'. [ 1518.046726][ T4148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8913'. [ 1518.315404][ T4154] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8916'. [ 1518.442284][ T4155] netlink: 68 bytes leftover after parsing attributes in process `syz.9.8916'. [ 1519.507225][ T4175] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8921'. [ 1521.162557][ T1217] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1521.180037][ T1217] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1521.188766][ T4189] lo speed is unknown, defaulting to 1000 [ 1521.200203][ T4189] gretap0 speed is unknown, defaulting to 1000 [ 1521.207202][ T1217] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1521.225005][ T1217] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1521.236054][ T1217] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1521.809285][ T4202] netlink: 'syz.0.8928': attribute type 2 has an invalid length. [ 1522.352627][ T4191] lo speed is unknown, defaulting to 1000 [ 1522.386236][ T4191] gretap0 speed is unknown, defaulting to 1000 [ 1522.792758][T31246] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.275456][T31246] bond0: (slave netdevsim1): Releasing backup interface [ 1523.288734][T31246] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.342740][ T4233] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8936'. [ 1523.395382][ T1217] Bluetooth: hci5: command tx timeout [ 1523.453829][ T4233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8936'. [ 1523.725931][T31246] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.455769][ T1217] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1524.522411][ T4254] netlink: 'syz.0.8941': attribute type 19 has an invalid length. [ 1524.532175][ T4254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8941'. [ 1524.635114][ T4261] netlink: 140 bytes leftover after parsing attributes in process `syz.0.8941'. [ 1525.403879][ T1217] Bluetooth: hci5: command tx timeout [ 1525.794932][T31246] team0: Port device geneve1 removed [ 1525.864015][T31246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1525.897699][T31246] bond0 (unregistering): (slave team0): Releasing backup interface [ 1525.916243][T31246] bond0 (unregistering): Released all slaves [ 1525.961755][ T4285] nftables ruleset with unbound chain [ 1526.110324][T31246] ´: left promiscuous mode [ 1526.267076][ T4292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8949'. [ 1526.304353][ T4292] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8949'. [ 1526.321168][ T5271] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1526.330501][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.337950][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.345303][ T4191] bridge_slave_0: entered allmulticast mode [ 1526.367518][ T4295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8948'. [ 1526.376434][ T4295] netlink: 316 bytes leftover after parsing attributes in process `syz.0.8948'. [ 1526.386054][ T4191] bridge_slave_0: entered promiscuous mode [ 1526.417797][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.438899][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.463968][ T4191] bridge_slave_1: entered allmulticast mode [ 1526.472902][ T4191] bridge_slave_1: entered promiscuous mode [ 1526.523824][ T1217] Bluetooth: hci1: command 0x0406 tx timeout [ 1526.536084][ T4298] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8950'. [ 1526.759217][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1527.042006][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1527.409059][ T4191] team0: Port device team_slave_0 added [ 1527.451951][ T4191] team0: Port device team_slave_1 added [ 1527.497230][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1527.517677][ T3964] Bluetooth: hci5: command tx timeout [ 1527.629479][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1527.758122][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1527.816562][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1527.845564][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1527.896843][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1528.051912][T31246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1528.060938][T31246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1528.080897][T31246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1528.091689][T31246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.489890][T31246] veth1_vlan: left promiscuous mode [ 1528.502550][T31246] veth0_vlan: left promiscuous mode [ 1528.603875][ T3964] Bluetooth: hci1: command 0x0406 tx timeout [ 1529.563819][ T1217] Bluetooth: hci5: command tx timeout [ 1531.837945][ T3964] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1531.852259][ T3964] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1531.863420][ T3964] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1531.873313][ T3964] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1531.886555][ T3964] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1533.964267][ T1217] Bluetooth: hci4: command tx timeout [ 1534.671452][T31246] team0 (unregistering): Port device team_slave_0 removed [ 1534.945464][T15695] smbdirect: ib_dev[syz2] removed [ 1534.956441][ T4324] netlink: 'syz.2.8956': attribute type 10 has an invalid length. [ 1534.965521][ T4324] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.8956'. [ 1535.058939][ T5271] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1535.076824][ T24] lo speed is unknown, defaulting to 1000 [ 1535.102952][ T24] infiniband syz2: ib_query_port failed (-19) [ 1535.253785][ T4191] hsr_slave_0: entered promiscuous mode [ 1535.264896][ T4191] hsr_slave_1: entered promiscuous mode [ 1535.282045][ T4191] debugfs: 'hsr0' already exists in 'hsr' [ 1535.299207][ T4191] Cannot create hsr debugfs directory [ 1536.044506][ T1217] Bluetooth: hci4: command tx timeout [ 1536.109035][ T4356] gretap0 speed is unknown, defaulting to 1000 [ 1538.124061][ T1217] Bluetooth: hci4: command tx timeout [ 1538.361975][ T5271] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1538.682275][ T4332] gretap0 speed is unknown, defaulting to 1000 [ 1538.923613][ T4386] netlink: 'syz.0.8967': attribute type 10 has an invalid length. [ 1538.950028][ T4386] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.8967'. [ 1539.153314][ T4393] netlink: 'syz.0.8968': attribute type 2 has an invalid length. [ 1539.712519][ T4191] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1539.730899][ T4191] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1539.754843][ T4191] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1539.768403][ T4409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8971'. [ 1539.806101][ T4191] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1539.901830][ T4191] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1539.938190][ T4191] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1539.965831][ T4191] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1540.008465][ T4191] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1540.226526][ T1217] Bluetooth: hci4: command tx timeout [ 1540.472635][ T4422] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 1541.096928][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.123348][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.154123][ T4332] bridge_slave_0: entered allmulticast mode [ 1541.182427][ T4332] bridge_slave_0: entered promiscuous mode [ 1541.227834][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.244064][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.255383][ T4332] bridge_slave_1: entered allmulticast mode [ 1541.279579][ T4332] bridge_slave_1: entered promiscuous mode [ 1541.376564][ T4454] netlink: 'syz.0.8976': attribute type 10 has an invalid length. [ 1541.420417][ T4454] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.8976'. [ 1541.455261][ T4456] netlink: 13439 bytes leftover after parsing attributes in process `syz.4.8977'. [ 1541.469092][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1541.492482][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1541.549321][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1541.636911][ T4332] team0: Port device team_slave_0 added [ 1541.664413][ T4332] team0: Port device team_slave_1 added [ 1541.811696][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 1541.920516][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1541.940850][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1541.991938][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1542.029679][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1542.047372][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1542.103747][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1542.137322][T31246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.144645][T31246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1542.176794][T31246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.184202][T31246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1542.317289][ T4465] gretap0 speed is unknown, defaulting to 1000 [ 1542.468423][ T4332] hsr_slave_0: entered promiscuous mode [ 1542.488604][ T4332] hsr_slave_1: entered promiscuous mode [ 1542.502487][ T4332] debugfs: 'hsr0' already exists in 'hsr' [ 1542.519870][ T4332] Cannot create hsr debugfs directory [ 1543.447426][ T4508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8985'. [ 1543.595684][ T4513] netlink: 'syz.4.8985': attribute type 10 has an invalid length. [ 1545.517423][ T4513] team0: Device nlmon0 is of different type [ 1545.967544][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.974155][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.036569][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1547.458781][ T4571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8995'. [ 1548.803127][ T4593] gretap0 speed is unknown, defaulting to 1000 [ 1549.371493][ T4191] veth0_vlan: entered promiscuous mode [ 1549.476321][ T4191] veth1_vlan: entered promiscuous mode [ 1549.634625][ T4191] veth0_macvtap: entered promiscuous mode [ 1549.810039][ T4191] veth1_macvtap: entered promiscuous mode [ 1549.997128][ T4332] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1550.040907][ T4332] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1550.072502][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1550.131938][ T4332] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1550.150794][ T4332] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1550.176726][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1550.200000][ T4332] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1550.250574][ T4332] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1550.285041][ T4332] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1550.313479][ T4332] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1550.382520][ T742] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.496849][ T742] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.530727][ T742] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.552764][ T742] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.900674][ T742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1550.933856][ T742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1550.945935][ T4652] gretap0 speed is unknown, defaulting to 1000 [ 1551.287074][ T4669] netlink: 13439 bytes leftover after parsing attributes in process `syz.0.9008'. [ 1551.316438][ T7572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.324324][ T7572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.477017][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1551.596063][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.672338][T15695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.679697][T15695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1552.555941][ T4700] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8925'. [ 1553.164035][ T3964] Bluetooth: hci3: command 0x0406 tx timeout [ 1553.787118][T21390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.794433][T21390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1553.903373][ T4698] gretap0 speed is unknown, defaulting to 1000 [ 1555.373463][ T4748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1556.048690][ T4755] gretap0 speed is unknown, defaulting to 1000 [ 1557.544928][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1557.716684][ T4332] veth0_vlan: entered promiscuous mode [ 1557.732212][ T4332] veth1_vlan: entered promiscuous mode [ 1557.926588][ T4332] veth0_macvtap: entered promiscuous mode [ 1558.001703][ T4332] veth1_macvtap: entered promiscuous mode [ 1558.013241][ T4813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9031'. [ 1558.088805][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1558.185343][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1558.192959][ T4815] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1558.205762][ T4815] netlink: 'syz.9.9032': attribute type 23 has an invalid length. [ 1558.298581][ T4813] can: request_module (can-proto-0) failed. [ 1558.360216][T31246] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.371411][T31246] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.380187][T31246] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.429515][T31246] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.706037][ T4821] gretap0 speed is unknown, defaulting to 1000 [ 1558.759933][ T4832] netlink: 92 bytes leftover after parsing attributes in process `syz.9.9035'. [ 1558.781524][ T7572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.801065][ T7572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.300213][ T7572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.318266][ T7572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.924446][ T4849] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1559.957256][ T4849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1560.243152][ T1217] Bluetooth: hci4: unexpected subevent 0x12 length: 150 > 5 [ 1563.617218][ T4897] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.9046'. [ 1563.896933][ T4912] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9052'. [ 1567.823131][ T4956] netlink: 13439 bytes leftover after parsing attributes in process `syz.3.9061'. [ 1567.889751][ T4975] netlink: 13439 bytes leftover after parsing attributes in process `syz.9.9065'. [ 1567.970099][ T4978] netlink: 92 bytes leftover after parsing attributes in process `syz.4.9066'. [ 1568.936354][ T5010] netlink: 13439 bytes leftover after parsing attributes in process `syz.4.9077'. [ 1571.964053][ T5059] netlink: 'syz.3.9086': attribute type 10 has an invalid length. [ 1571.971934][ T5059] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.9086'. [ 1572.181663][ T5066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9090'. [ 1572.235141][ T5066] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9090'. [ 1572.271830][ T5077] netlink: 13439 bytes leftover after parsing attributes in process `syz.2.9089'. [ 1572.282594][ T5076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9092'. [ 1572.291520][ T5076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9092'. [ 1574.618815][ T5142] netlink: 13439 bytes leftover after parsing attributes in process `syz.9.9106'. [ 1575.054446][ T5158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9110'. [ 1575.094424][ T5158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9110'. [ 1575.884439][ T5185] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1575.893455][ T5185] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1576.759766][ T5203] netlink: 'syz.0.9120': attribute type 10 has an invalid length. [ 1576.767685][ T5203] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.9120'. [ 1576.889757][ T5206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9122'. [ 1577.515185][ T5228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9127'. [ 1577.556205][ T5228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9127'. [ 1577.736776][ T5232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9129'. [ 1578.210354][ T5243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1578.815482][ T5259] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9132'. [ 1579.722298][ T5268] netlink: 'syz.2.9133': attribute type 10 has an invalid length. [ 1579.760945][ T5268] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.9133'. [ 1579.893140][ T5282] IPv6: Can't replace route, no match found [ 1581.115563][ T5300] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.9142'. [ 1581.312056][ T5298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9140'. [ 1581.323791][ T5298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9140'. [ 1581.813645][ T5312] netlink: 14 bytes leftover after parsing attributes in process `syz.9.9146'. [ 1582.042949][ T5319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1583.282859][ T5334] netlink: 'syz.4.9151': attribute type 10 has an invalid length. [ 1583.290764][ T5334] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.9151'. [ 1583.301863][ T5332] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9148'. [ 1583.789430][ T5355] netlink: 13695 bytes leftover after parsing attributes in process `syz.4.9155'. [ 1584.008092][ T5366] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9157'. [ 1584.085849][ T5370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1584.774501][ T5383] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.9164'. [ 1585.145653][ T5386] netlink: 'syz.4.9165': attribute type 10 has an invalid length. [ 1585.214612][ T5386] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.9165'. [ 1585.419729][ T1217] Bluetooth: hci3: unexpected subevent 0x10 length: 150 > 2 [ 1585.720096][ T5405] netlink: 13695 bytes leftover after parsing attributes in process `syz.9.9170'. [ 1585.900707][ T5412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9169'. [ 1586.660233][ T5445] IPv6: NLM_F_CREATE should be specified when creating new route [ 1587.881217][T21393] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.516836][T21393] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.590511][ T5472] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9190'. [ 1588.634085][ T5470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1588.882013][T21393] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.020402][ T5482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9196'. [ 1589.472401][T21393] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.579024][ T5513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9205'. [ 1591.542873][ T5526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1591.838924][ T5533] FAULT_INJECTION: forcing a failure. [ 1591.838924][ T5533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1591.899020][T21393] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 1591.925258][ T5533] CPU: 0 UID: 0 PID: 5533 Comm: syz.2.9213 Not tainted syzkaller #0 PREEMPT(full) [ 1591.925289][ T5533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1591.925304][ T5533] Call Trace: [ 1591.925325][ T5533] [ 1591.925339][ T5533] dump_stack_lvl+0xe8/0x150 [ 1591.925403][ T5533] should_fail_ex+0x40c/0x560 [ 1591.925478][ T5533] _copy_to_user+0x31/0xb0 [ 1591.925540][ T5533] simple_read_from_buffer+0xe1/0x170 [ 1591.925618][ T5533] proc_fail_nth_read+0x1bb/0x230 [ 1591.925687][ T5533] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1591.925758][ T5533] ? rw_verify_area+0x24a/0x4c0 [ 1591.925820][ T5533] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1591.925866][ T5533] vfs_read+0x213/0xa80 [ 1591.925953][ T5533] ? __pfx___mutex_lock+0x10/0x10 [ 1591.925996][ T5533] ? __pfx_vfs_read+0x10/0x10 [ 1591.926061][ T5533] ? __fget_files+0x2a/0x420 [ 1591.926140][ T5533] ? __fget_files+0x3a2/0x420 [ 1591.926184][ T5533] ? __fget_files+0x2a/0x420 [ 1591.926289][ T5533] ksys_read+0x150/0x270 [ 1591.926366][ T5533] ? __pfx_ksys_read+0x10/0x10 [ 1591.926414][ T5533] ? __pfx_sock_ioctl+0x10/0x10 [ 1591.926497][ T5533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.926541][ T5533] do_syscall_64+0x174/0x580 [ 1591.926582][ T5533] ? trace_irq_disable+0x3b/0x140 [ 1591.926624][ T5533] ? clear_bhb_loop+0x40/0x90 [ 1591.926682][ T5533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.926711][ T5533] RIP: 0033:0x7f65f435e90e [ 1591.926744][ T5533] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1591.926764][ T5533] RSP: 002b:00007f65f51affe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1591.926788][ T5533] RAX: ffffffffffffffda RBX: 00007f65f51b06c0 RCX: 00007f65f435e90e [ 1591.926805][ T5533] RDX: 000000000000000f RSI: 00007f65f51b00a0 RDI: 0000000000000005 [ 1591.926820][ T5533] RBP: 00007f65f51b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1591.926834][ T5533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1591.926848][ T5533] R13: 00007f65f4626038 R14: 00007f65f4625fa0 R15: 00007ffd6c78bcd8 [ 1591.926976][ T5533] [ 1592.261024][T21393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1592.343906][T21393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1592.369697][T21393] bond0 (unregistering): Released all slaves [ 1592.408655][ T5542] netlink: 13439 bytes leftover after parsing attributes in process `syz.0.9215'. [ 1592.483480][ T5541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1592.512056][T21393] : left promiscuous mode [ 1593.516704][ T5577] netlink: 'syz.0.9227': attribute type 1 has an invalid length. [ 1593.529676][ T5577] netlink: 'syz.0.9227': attribute type 2 has an invalid length. [ 1593.662994][T21393] hsr_slave_0: left promiscuous mode [ 1593.692966][T21393] hsr_slave_1: left promiscuous mode [ 1593.729309][T21393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1593.766853][T21393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1593.837728][T21393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1593.869026][ T5589] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9232'. [ 1593.869714][T21393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1593.909451][ T5591] netlink: 'syz.3.9229': attribute type 1 has an invalid length. [ 1593.917341][ T5591] netlink: 'syz.3.9229': attribute type 2 has an invalid length. [ 1594.094514][ T5599] netlink: 13439 bytes leftover after parsing attributes in process `syz.0.9230'. [ 1594.235589][T21393] veth1_macvtap: left promiscuous mode [ 1594.261194][T21393] veth0_macvtap: left promiscuous mode [ 1594.284979][T21393] veth1_vlan: left promiscuous mode [ 1594.290334][T21393] veth0_vlan: left promiscuous mode [ 1594.555868][ T1217] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1595.013584][ T5617] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9237'. [ 1595.064480][ T5619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9239'. [ 1595.080730][ T5619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9239'. [ 1595.304825][ T5625] openvswitch: netlink: IPv4 tun info is not correct [ 1595.812901][ T5640] netlink: 13439 bytes leftover after parsing attributes in process `syz.4.9246'. [ 1595.836044][T21393] team0 (unregistering): Port device team_slave_1 removed [ 1595.859901][T21393] team0 (unregistering): Port device team_slave_0 removed [ 1596.176512][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1596.297561][ T5587] gretap0 speed is unknown, defaulting to 1000 [ 1596.550293][ T5662] netlink: 'syz.0.9252': attribute type 21 has an invalid length. [ 1596.558210][ T5662] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9252'. [ 1596.605429][ T3964] Bluetooth: hci4: command 0x2016 tx timeout [ 1598.045228][ T5674] [ 1598.047660][ T5674] ============================================ [ 1598.053828][ T5674] WARNING: possible recursive locking detected [ 1598.060006][ T5674] syzkaller #0 Not tainted [ 1598.064434][ T5674] -------------------------------------------- [ 1598.070594][ T5674] syz.9.9253/5674 is trying to acquire lock: [ 1598.076593][ T5674] ffff88802664f838 (rhashtable_bucket){-.-.}-{0:0}, at: rht_lock+0x8b/0x180 [ 1598.085379][ T5674] [ 1598.085379][ T5674] but task is already holding lock: [ 1598.092761][ T5674] ffff88807bdbc238 (rhashtable_bucket){-.-.}-{0:0}, at: rht_lock+0x8b/0x180 [ 1598.101562][ T5674] [ 1598.101562][ T5674] other info that might help us debug this: [ 1598.109660][ T5674] Possible unsafe locking scenario: [ 1598.109660][ T5674] [ 1598.117124][ T5674] CPU0 [ 1598.120425][ T5674] ---- [ 1598.123729][ T5674] lock(rhashtable_bucket); [ 1598.128365][ T5674] lock(rhashtable_bucket); [ 1598.132983][ T5674] [ 1598.132983][ T5674] *** DEADLOCK *** [ 1598.132983][ T5674] [ 1598.141141][ T5674] May be due to missing lock nesting notation [ 1598.141141][ T5674] [ 1598.149477][ T5674] 6 locks held by syz.9.9253/5674: [ 1598.154611][ T5674] #0: ffff8880669f68d0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 1598.165356][ T5674] #1: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: nf_tables_newobj+0xe44/0x1c70 [ 1598.175066][ T5674] #2: ffff88807bdbc238 (rhashtable_bucket){-.-.}-{0:0}, at: rht_lock+0x8b/0x180 [ 1598.184248][ T5674] #3: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: trace_call_bpf+0xb6/0xb80 [ 1598.193608][ T5674] #4: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: rhtab_map_delete_elem+0x21/0x190 [ 1598.203580][ T5674] #5: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: rhtab_delete_elem+0x15c/0x1b30 [ 1598.213377][ T5674] [ 1598.213377][ T5674] stack backtrace: [ 1598.219287][ T5674] CPU: 0 UID: 0 PID: 5674 Comm: syz.9.9253 Not tainted syzkaller #0 PREEMPT(full) [ 1598.219319][ T5674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1598.219336][ T5674] Call Trace: [ 1598.219347][ T5674] [ 1598.219357][ T5674] dump_stack_lvl+0xe8/0x150 [ 1598.219388][ T5674] print_deadlock_bug+0x279/0x290 [ 1598.219426][ T5674] __lock_acquire+0x24df/0x2cf0 [ 1598.219466][ T5674] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1598.219502][ T5674] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1598.219540][ T5674] ? rht_lock+0x8b/0x180 [ 1598.219568][ T5674] lock_acquire+0x106/0x350 [ 1598.219600][ T5674] ? rht_lock+0x8b/0x180 [ 1598.219649][ T5674] rht_lock+0xa3/0x180 [ 1598.219679][ T5674] ? rht_lock+0x8b/0x180 [ 1598.219713][ T5674] rhtab_delete_elem+0x404/0x1b30 [ 1598.219747][ T5674] ? rhtab_lookup_elem+0x29/0xd90 [ 1598.219784][ T5674] ? rhtab_delete_elem+0x15c/0x1b30 [ 1598.219817][ T5674] ? rhtab_map_delete_elem+0x21/0x190 [ 1598.219845][ T5674] ? rhtab_map_delete_elem+0x21/0x190 [ 1598.219875][ T5674] rhtab_map_delete_elem+0xe2/0x190 [ 1598.219908][ T5674] bpf_prog_a4f1e23443ac9f8e+0x4e/0x56 [ 1598.219931][ T5674] trace_call_bpf+0x47b/0xb80 [ 1598.219962][ T5674] ? trace_call_bpf+0xb6/0xb80 [ 1598.219999][ T5674] ? __pfx_trace_call_bpf+0x10/0x10 [ 1598.220030][ T5674] ? register_lock_class+0x31/0x2e0 [ 1598.220067][ T5674] perf_trace_run_bpf_submit+0x78/0x170 [ 1598.220095][ T5674] perf_trace_lock+0x32d/0x410 [ 1598.220128][ T5674] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1598.220167][ T5674] ? __pfx_perf_trace_lock+0x10/0x10 [ 1598.220201][ T5674] ? rht_lock+0x8b/0x180 [ 1598.220221][ T5674] ? lock_acquire+0x106/0x350 [ 1598.220248][ T5674] ? rht_lock+0x8b/0x180 [ 1598.220272][ T5674] ? rht_assign_unlock+0x38/0x110 [ 1598.220295][ T5674] ? rht_assign_unlock+0x38/0x110 [ 1598.220318][ T5674] lock_release+0x38e/0x3c0 [ 1598.220354][ T5674] rht_assign_unlock+0x40/0x110 [ 1598.220382][ T5674] nf_tables_newobj+0x156e/0x1c70 [ 1598.220430][ T5674] ? __pfx_nf_tables_newobj+0x10/0x10 [ 1598.220469][ T5674] ? __nla_parse+0x40/0x60 [ 1598.220502][ T5674] nfnetlink_rcv+0x1288/0x28c0 [ 1598.220574][ T5674] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1598.220608][ T5674] ? trace_call_bpf+0x7d1/0xb80 [ 1598.220658][ T5674] ? ref_tracker_free+0x689/0x830 [ 1598.220711][ T5674] ? skb_clone+0x246/0x3a0 [ 1598.220736][ T5674] ? __netlink_deliver_tap+0x811/0x860 [ 1598.220780][ T5674] ? netlink_deliver_tap+0x2e/0x1b0 [ 1598.220812][ T5674] ? netlink_deliver_tap+0x2e/0x1b0 [ 1598.220851][ T5674] netlink_unicast+0x7bb/0x940 [ 1598.220895][ T5674] netlink_sendmsg+0x813/0xb40 [ 1598.220915][ T5674] ? __pfx_trace_call_bpf+0x10/0x10 [ 1598.220953][ T5674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1598.220979][ T5674] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1598.221020][ T5674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1598.221038][ T5674] sock_sendmsg_nosec+0x13a/0x180 [ 1598.221067][ T5674] ____sys_sendmsg+0x54e/0x850 [ 1598.221107][ T5674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1598.221151][ T5674] ? import_iovec+0x73/0xa0 [ 1598.221184][ T5674] ___sys_sendmsg+0x2a5/0x360 [ 1598.221224][ T5674] ? __pfx____sys_sendmsg+0x10/0x10 [ 1598.221283][ T5674] ? __fget_files+0x2a/0x420 [ 1598.221325][ T5674] ? __fget_files+0x2a/0x420 [ 1598.221352][ T5674] ? __fget_files+0x3a2/0x420 [ 1598.221392][ T5674] __x64_sys_sendmsg+0x1b1/0x290 [ 1598.221429][ T5674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1598.221483][ T5674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.221507][ T5674] do_syscall_64+0x174/0x580 [ 1598.221541][ T5674] ? clear_bhb_loop+0x40/0x90 [ 1598.221568][ T5674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.221588][ T5674] RIP: 0033:0x7f139959e0d9 [ 1598.221615][ T5674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1598.221632][ T5674] RSP: 002b:00007f139a4e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1598.221657][ T5674] RAX: ffffffffffffffda RBX: 00007f1399826090 RCX: 00007f139959e0d9 [ 1598.221672][ T5674] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000000000000003 [ 1598.221686][ T5674] RBP: 00007f1399635024 R08: 0000000000000000 R09: 0000000000000000 [ 1598.221699][ T5674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1598.221711][ T5674] R13: 00007f1399826128 R14: 00007f1399826090 R15: 00007ffe773aa5c8 [ 1598.221748][ T5674] [ 1598.699078][ T1217] Bluetooth: hci4: command 0x2016 tx timeout [ 1599.155324][ T5664] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9251'. [ 1599.937410][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1600.287770][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1600.619271][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1607.407464][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.414222][ T1306] ieee802154 phy1 wpan1: encryption failed: -22