last executing test programs: 10.332570569s ago: executing program 4 (id=141): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/17, 0x11}], 0x1}, 0x40) 10.012433009s ago: executing program 4 (id=142): r0 = socket$kcm(0x10, 0x400000002, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1000000}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xb, &(0x7f0000000080), 0x4) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x3}, 0x828, 0x0, 0x0, 0x8, 0x80000001, 0x7ffffd, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="34010000170001000000000000000000640101020000000000000000000000000000000000000000e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa0000004000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aaac14140200000000000000000000000000000000000100000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000a7ce0e089223b6e40db7b71d1000000000000000000000000000000000000000b10f0000000000000000000000000000000000f6f1000000000004c8c2b52ef91c15e67aa9117da30500003f94f1db000000000000000000000004000000b86b6e00"], 0x134}}, 0x0) r4 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6004a, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, 0x47, 0x107, 0xfffffffe, 0xffffffff, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40004000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0027400000000000000c7f14000000110001"], 0xb4}}, 0x8044) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async, rerun: 64) r9 = socket$kcm(0xa, 0x922000000003, 0x11) (rerun: 64) setsockopt$sock_attach_bpf(r9, 0x3a, 0x21, 0x0, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x4, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=r10, 0x4) (async) write$cgroup_type(r8, &(0x7f0000000180), 0x40001) mount$bpf(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000600), 0x200401, &(0x7f0000000800)={[{@mode={'mode', 0x3d, 0xfffffffffffffffa}}]}) 6.761837554s ago: executing program 4 (id=149): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000300)="61020000000580", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0xf3, 0xa, 0x0, 0x0, 0xd006e1258c4875cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x4c30, 0xc8, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300060023000000000000000000000000ac1414aa2c200007"], 0xfdef) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2, @perf_config_ext={0x2, 0x1946}, 0x100800, 0x0, 0x0, 0x8, 0x7fff, 0x13f, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@fallback=r4, 0xffffffffffffffff, 0x4, 0x5}, 0x20) 6.649827961s ago: executing program 1 (id=151): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x400, 0x7ffffffc, 0x3, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711032000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800000000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.489698073s ago: executing program 4 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x3, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0xa765ac6bc85a8f84}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x576c}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40080) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x2, 0x1, 0x7, 0x9, 0x4, 0x6}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xc, 0xde8d, 0x2, 0x36a}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x312, 0x81, 0x2, 0x80000000, 0x6}}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x2f, 0x0, @void}, 0x10) 6.428546478s ago: executing program 2 (id=155): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@gettaction={0x20, 0x5a, 0x1, 0xfffffffe, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x10, 0x10100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x1, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r1, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x10800, &(0x7f0000000440)) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="1c0000005e007f029e3b470ded9b72ab25399c3683e5caa9bb22d956", 0x1c}], 0x1}, 0x20001850) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010300000000000000000b"], 0x14}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0xff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) 6.355425898s ago: executing program 1 (id=156): r0 = socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x3, 0x84) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x400, 0x5, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000002c6f160b000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f2, &(0x7f0000000080)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000040), 0x0}, 0x20) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 5.231705351s ago: executing program 1 (id=157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206030000000000000000000700000014000780ed39d3b71608000889fc166d2dcaf0384000000001080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000016000300686173683a6e65"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2, @perf_config_ext={0x2, 0x1946}, 0x100800, 0x0, 0x0, 0x8, 0x7fff, 0x13f, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000f80)={@map, 0xffffffffffffffff, 0x11, 0x8}, 0x20) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0500000004000000040000000700000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="020000000100"/20], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@updpolicy={0x1f8, 0x19, 0x100, 0x0, 0x10, {{@in=@remote, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4000000000004f42, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0x100000}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x1}, [@srcaddr={0x14, 0xd, @in=@empty}, @etimer_thresh={0x8, 0xc, 0xfffffffe}, @algo_auth={0x107, 0x1, {{'cryptd(cbcmac-aes-ce)\x00'}, 0x5f8, "0a9b43d7a1944274746a0055aa2ee0f330d9d141997c9a1c938d68c32274865ae4a3864cba8e7467fc417434da8480f70b93fc3de53fccd3f54df4d2bab64324fed8581d910b96ff0e29b770c31308bf36a283710e9ed987885f8d0a005fab6eb5b57a0817983b65157c2c7d4d27e958ecf15309e974829e2860f7fb964382110ae2f9f6cdffd58c661ff3b36a220c1660ea3d7cd0075c1eacdd6cf38a972729154f33ec64b0873ba53a331a0e302bf54068ab4535222251f790ffde106dfa"}}, @encap={0x1c, 0x4, {0x7662a13f91d9f2ad, 0x4e24, 0x4e23, @in=@private=0xa010100}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000009c0)=r4, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$unix(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)="c495", 0x2}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}], 0x20, 0x10}, 0xa8d1) 5.230382442s ago: executing program 4 (id=159): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000002000000fcffffff00000000000000010500000010000000000000000000000402"], 0x0, 0x4e}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="300900000b06010200000000000000000a00000a0900020073797a3000000000100008800c00078005001500fd000000e62c427cea6ed98b8c705c85fa696a2100ddfe6efe78d8e90a7a67a67faed11ee678e5b08a8449d153f2acd72ee53034119521cbd7c6a8a4b5e4970675e7a979accc8161ffeaaef8019ddea27ca0a74ff16f2f67f4270ddfbb4190a2681ea7c8881c3d3179853f9306d5a07822b01bbc7a7031fde616776f6f7d0adc0ef1ecd45640db1a52aebfea5dab16d12f2a6efdda764bc4667c38016fd7072b37a037f778df419c75d3f70e0ffd2093e913768c"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0xa080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f00000000c0)=r2}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x81, 0xbe, 0xdc, 0x6, 0x0, 0x430, 0x20444, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={&(0x7f00000003c0), 0x2}, 0x2000, 0x40, 0xfffffffc, 0x7, 0x8, 0x200, 0x9, 0x0, 0x81, 0x0, 0xa}, r6, 0x0, 0xffffffffffffffff, 0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}, 0x0) r9 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES16=r9], 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 5.188332848s ago: executing program 2 (id=160): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0xfdef}, {0x0}], 0x2, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x20000810) 4.960803766s ago: executing program 2 (id=162): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e09d547ed387d9bc1d40cdde1639", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x15, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4.782030222s ago: executing program 3 (id=163): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/17, 0x11}], 0x1}, 0x40) 4.53926144s ago: executing program 3 (id=165): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x4000, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000250001012cbd7000fbfffffe890001000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28850) 4.404418085s ago: executing program 3 (id=166): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x13, &(0x7f0000000200)=r6, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r6}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0x7}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x684e, 0xe568d1ced4768344, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[], 0xa) 1.832208471s ago: executing program 3 (id=167): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1c}, 0x20000011) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x4}, 0x80, 0x0}, 0xe07e872420dfef8a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82648, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x2, @perf_config_ext={0x401, 0x1}, 0x0, 0x0, 0x0, 0x5, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x1, 0x2, 0x6, 0x7, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2549570, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x2d, 0x2, 0x0) r4 = socket(0x1d, 0x2, 0x6) setsockopt$sock_attach_bpf(r4, 0x84, 0x6e, 0x0, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000"], 0xb8}}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8001) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xaa5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, 0x0, 0x20008040) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) 1.830341175s ago: executing program 2 (id=168): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x3, 0x6}, 0x0, 0xffffffffffeffffc, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000000, 0x0, 0x8, 0x4, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) close(r4) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x260}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3d50, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r8}, &(0x7f0000001080), &(0x7f00000001c0)=r9}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="5eeced8e46dc3f0adf33c9f7b986", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000)=r11, 0x8) 1.679347516s ago: executing program 0 (id=169): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}, {0x0, 0x20}], 0x2, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x20000810) 1.635000479s ago: executing program 1 (id=170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206030000000000000000000700000014000780ed39d3b71608000889fc166d2dcaf0384000000001080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000016000300686173683a6e65"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2, @perf_config_ext={0x2, 0x1946}, 0x100800, 0x0, 0x0, 0x8, 0x7fff, 0x13f, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000f80)={@map, 0xffffffffffffffff, 0x11, 0x8}, 0x20) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0500000004000000040000000700000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="020000000100"/20], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@updpolicy={0x1f8, 0x19, 0x100, 0x0, 0x10, {{@in=@remote, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x32}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4000000000004f42, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0x100000}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x1}, [@srcaddr={0x14, 0xd, @in=@empty}, @etimer_thresh={0x8, 0xc, 0xfffffffe}, @algo_auth={0x107, 0x1, {{'cryptd(cbcmac-aes-ce)\x00'}, 0x5f8, "0a9b43d7a1944274746a0055aa2ee0f330d9d141997c9a1c938d68c32274865ae4a3864cba8e7467fc417434da8480f70b93fc3de53fccd3f54df4d2bab64324fed8581d910b96ff0e29b770c31308bf36a283710e9ed987885f8d0a005fab6eb5b57a0817983b65157c2c7d4d27e958ecf15309e974829e2860f7fb964382110ae2f9f6cdffd58c661ff3b36a220c1660ea3d7cd0075c1eacdd6cf38a972729154f33ec64b0873ba53a331a0e302bf54068ab4535222251f790ffde106dfa"}}, @encap={0x1c, 0x4, {0x7662a13f91d9f2ad, 0x4e24, 0x4e23, @in=@private=0xa010100}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000009c0)=r4, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$unix(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)="c495", 0x2}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}], 0x20, 0x10}, 0xa8d1) 1.41648125s ago: executing program 0 (id=171): r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x2a, 0x1, 0x1ffff8002}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000080)="76bf1a34a356e3e365463abe9ac0cde4e2e406ea1a39268379f4a384d204d07a8d3ff9e3024371b04b3e7d186e2501b47e659f30f1e2d29e5ff4c985b5478d3b7cb1fbf015d18818730295a6d655b0", 0x4f}], 0x1, &(0x7f0000000c40)=[{0x78, 0x10c, 0x9, "ea2162fa0140c32fbf48f5b5777ba57ccf6b78261edeba1ed981fb7c8dcfe8b4d551da239874d315cc7f36a181fcb63f08854d4074a8e2b2016929016ca41cb21ca02eb7067bff6536f8fed075b12895d389f84aaf02e33fd370525f689bcd457410"}, {0x28, 0x0, 0x3, "d05ff3a45568f2da20b77baec1d91e9ef183944773267dbe"}, {0x108, 0x84, 0x8, "f17311a239392a0d515b6f2faaf9d1f76d0d15d0dc1c852c8c9214b15320cf100732acd7426921b4849a2e6e0540c992aac65093e6f1ad855ef77b63263d7e7f89ccc31eded9c2a4e62f9200ee3fbd579f4ec0b3927008eafae45af3666a36e1bdd41c844f192348e6aa0630845b1e6a0d0baa8a9a1659f1dec1e0d8f7b0ffdaa05465d0662c1286672843b18113dc8ce8e3058f53c8ec72130c3c361e58a2a7551af0549b34bbe47e720a226c3a624b53ecdde3b41939bd2f47064a48aea1b1592d60a612ab8c30d9fc02344f06d59637df7cb64be18513cf3de38e5ab365965e71afc5967579cc44a0759f0899699620108b2bdf4e"}, {0xe8, 0x102, 0x7f, "0865c2d2c1a8f731b6fca56654ff9db9c847ca69849528a526eb2a8791a1c2621eaf0b765bffde43507fb00d6b760593264b7cf412a823120933c5e20f443e6df4bc5baab14e95cbd20626847ab6ac0c8ff128bb8ce75d5c5ba0e683d38287bb000b9e520485032363dc253b519feff82493436a4dc69fca8e6b76be1ab92adaef8c6ea001732b04445acc9b35d1df70cff20f5f1014cad8d98eefff2c4bb1e99784f4f2f8dd55e5ab9c2be8de58eee3556c069725d0b6078a7e2501e139a00307e64cb879d3bd21c5072d79432b13444fc2a114ec"}], 0x290, 0x40040}, 0x38) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef18e43b, 0x0, @perf_config_ext={0x2, 0x5}, 0x200, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000064bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071101b00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a08fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f50890bfdde34f829f211e9de4e0089648ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd29568a87e810b582e596962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39f038d89e36e3bccff3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.311948939s ago: executing program 2 (id=172): socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x103, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2000, 0x1, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2000000008, 0x800}, 0x0, 0x9, 0x0, 0x4, 0xa970, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r3 = bpf$MAP_CREATE(0xffffffe4, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000280)="1fc774", &(0x7f0000000400)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.064246854s ago: executing program 0 (id=173): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x7ff}, 0x1012fa, 0x4, 0x98, 0x0, 0x4, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff25000600ffffffff7a0a18001000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000a58ce882718c9d275a3a6c50f1cfbeac4dcfc36bfdd37d5c649934ff"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 767.463957ms ago: executing program 1 (id=174): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x3, 0x6}, 0x0, 0xffffffffffeffffc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000)=r5, 0x8) 723.101757ms ago: executing program 3 (id=175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111640000000000851000000200000085000000b200000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x10}}], 0xffffffffffffffca}, 0x2000) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xff04, 0x0) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000250001012cbd7000fbfffffe890001000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28850) 596.46593ms ago: executing program 2 (id=176): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x5}, 0x104101, 0x4, 0x9, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x7}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x57}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f0000002f00)=ANY=[@ANYBLOB="1e000000040000660d00", @ANYRES32=r1, @ANYBLOB='\a\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0500000002000000000000000c00"/28], 0x50) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002f80)={0xffffffff}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000000000000000100000e00000080020000", @ANYRES32=r2, @ANYBLOB="050000000010000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="0100000004000000050000000600"/28], 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="d50eec034537d1da0954a42568133a65b2229a02e9edf53c7b2547401a5172cbd88c811fe930029d7f265617b625ec256b7bc7bec7dd6c5cc9ea9bef94db70fd52a39df1cb73574912eb681c44de3ff576f62150ce9a7f99453297683f8de1bfd5a024ed9f7d856db1ce8c53d7b157901deb994f1b7dad3fbe2db8c599ae0d60657ee9aaaec76fca8092d8ee241cdb4d9acbaf2f8f60b78c326412c8623506d532518d0899ce2f696e651cc2c798f532430ae45e1a0e18cdb16064cb92714c4c5dfe9316c14ff3145e879923d4f1d2a8cc6822b41787a31b2948541f1f190e5f38ac66551df2b11e3c4bd8687d39c46346b04fc6c2b7484b1827bb37cc8e2a2222b5b9d98a19165599f9a6cb254784eae955b1a544d818a66e769326386e1a5fcdb08f8fc4ec6814d0da9490996d2a1c", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) fstat(r9, &(0x7f00000003c0)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) 480.478404ms ago: executing program 0 (id=177): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="851000000100"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c13c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c77aa"], 0xfdef) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 282.424826ms ago: executing program 0 (id=178): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 229.174506ms ago: executing program 1 (id=179): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000640)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e03010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 112.715915ms ago: executing program 0 (id=180): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) write$cgroup_int(r1, &(0x7f00000001c0), 0xfffffdef) 56.449585ms ago: executing program 4 (id=181): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfdef) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xbd, 0x5, 0x80, 0x7, 0x0, 0x7fffffff, 0x7a5d4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_bp={0x0, 0xe}, 0x2, 0x1, 0x7, 0x4, 0x81, 0x8, 0x9, 0x0, 0x20002, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 0s ago: executing program 3 (id=182): close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x7, &(0x7f0000000680)={0x20ffffff}, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. [ 63.812352][ T5810] cgroup: Unknown subsys name 'net' [ 63.932265][ T5810] cgroup: Unknown subsys name 'cpuset' [ 63.940914][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.294767][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.600287][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.608751][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.616995][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.617741][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.625115][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.633195][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.647057][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.647653][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.662125][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.663274][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.684621][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.692576][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.700812][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.707907][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.707905][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.709151][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.715794][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.723122][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.743860][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.753368][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.184744][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 69.207181][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 69.310260][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 69.356698][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.369186][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.376962][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.385828][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.399115][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.476531][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.484247][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.495290][ T5826] bridge_slave_0: entered allmulticast mode [ 69.502455][ T5826] bridge_slave_0: entered promiscuous mode [ 69.512504][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.519703][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.526868][ T5826] bridge_slave_1: entered allmulticast mode [ 69.534282][ T5826] bridge_slave_1: entered promiscuous mode [ 69.588548][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.595684][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.603246][ T5823] bridge_slave_0: entered allmulticast mode [ 69.610411][ T5823] bridge_slave_0: entered promiscuous mode [ 69.618008][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 69.664833][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.672642][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.680198][ T5823] bridge_slave_1: entered allmulticast mode [ 69.687158][ T5823] bridge_slave_1: entered promiscuous mode [ 69.699669][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.706795][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.714176][ T5822] bridge_slave_0: entered allmulticast mode [ 69.721136][ T5822] bridge_slave_0: entered promiscuous mode [ 69.733339][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.740698][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.747863][ T5822] bridge_slave_1: entered allmulticast mode [ 69.755085][ T5822] bridge_slave_1: entered promiscuous mode [ 69.764892][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.813265][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.872830][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.893120][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.914007][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.940136][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.961235][ T5826] team0: Port device team_slave_0 added [ 69.999580][ T5826] team0: Port device team_slave_1 added [ 70.006906][ T5822] team0: Port device team_slave_0 added [ 70.030376][ T5823] team0: Port device team_slave_0 added [ 70.046235][ T5822] team0: Port device team_slave_1 added [ 70.086807][ T5823] team0: Port device team_slave_1 added [ 70.092908][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.100487][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.107628][ T5824] bridge_slave_0: entered allmulticast mode [ 70.114694][ T5824] bridge_slave_0: entered promiscuous mode [ 70.136877][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.144049][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.170005][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.194547][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.201917][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.209230][ T5824] bridge_slave_1: entered allmulticast mode [ 70.216130][ T5824] bridge_slave_1: entered promiscuous mode [ 70.223894][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.230955][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.256921][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.270579][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.277547][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.303640][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.315382][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.322419][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.352010][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.401758][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.420214][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.430207][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.437196][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.463142][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.475530][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.482670][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.508785][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.574536][ T5824] team0: Port device team_slave_0 added [ 70.597203][ T5823] hsr_slave_0: entered promiscuous mode [ 70.603632][ T5823] hsr_slave_1: entered promiscuous mode [ 70.619537][ T5824] team0: Port device team_slave_1 added [ 70.657279][ T5822] hsr_slave_0: entered promiscuous mode [ 70.663781][ T5822] hsr_slave_1: entered promiscuous mode [ 70.670203][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 70.676010][ T5822] Cannot create hsr debugfs directory [ 70.730268][ T5826] hsr_slave_0: entered promiscuous mode [ 70.736576][ T5826] hsr_slave_1: entered promiscuous mode [ 70.743083][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 70.748915][ T5826] Cannot create hsr debugfs directory [ 70.754464][ T5148] Bluetooth: hci0: command tx timeout [ 70.769346][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.776315][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.802717][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.818286][ T5830] Bluetooth: hci1: command tx timeout [ 70.818489][ T5835] Bluetooth: hci2: command tx timeout [ 70.824046][ T5148] Bluetooth: hci3: command tx timeout [ 70.867776][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.874969][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.900975][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.045186][ T5824] hsr_slave_0: entered promiscuous mode [ 71.051711][ T5824] hsr_slave_1: entered promiscuous mode [ 71.057728][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 71.063725][ T5824] Cannot create hsr debugfs directory [ 71.086187][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 71.350463][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.357690][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.365422][ T5853] bridge_slave_0: entered allmulticast mode [ 71.372649][ T5853] bridge_slave_0: entered promiscuous mode [ 71.381582][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.388873][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.396073][ T5853] bridge_slave_1: entered allmulticast mode [ 71.403110][ T5853] bridge_slave_1: entered promiscuous mode [ 71.461750][ T5148] Bluetooth: hci4: command tx timeout [ 71.462224][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.473735][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.498738][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.519397][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.576866][ T5853] team0: Port device team_slave_0 added [ 71.597777][ T5853] team0: Port device team_slave_1 added [ 71.617274][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.645946][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.656814][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.664103][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.691045][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.703550][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.710720][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.736858][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.757853][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.774204][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.835856][ T5853] hsr_slave_0: entered promiscuous mode [ 71.842572][ T5853] hsr_slave_1: entered promiscuous mode [ 71.849054][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 71.854786][ T5853] Cannot create hsr debugfs directory [ 71.891415][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.913477][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.939666][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.949794][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.094758][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.124801][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.135340][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.147363][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.245573][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.255579][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.289877][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.300221][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.343188][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.399511][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.444793][ T5853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.455170][ T5853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.470361][ T5853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.485581][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.492840][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.512555][ T5853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.527470][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.534614][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.554473][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.572036][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.603494][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.636458][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.643643][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.659810][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.683562][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.690695][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.707130][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.714322][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.746048][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.753199][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.830210][ T5148] Bluetooth: hci0: command tx timeout [ 72.875188][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.901772][ T5148] Bluetooth: hci2: command tx timeout [ 72.902166][ T5835] Bluetooth: hci3: command tx timeout [ 72.907216][ T5148] Bluetooth: hci1: command tx timeout [ 72.992844][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.006596][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.025533][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.032798][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.103531][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.116343][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.123654][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.168506][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.175747][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.202644][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.221968][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.229220][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.415056][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.480960][ T5823] veth0_vlan: entered promiscuous mode [ 73.501494][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.536447][ T5823] veth1_vlan: entered promiscuous mode [ 73.545439][ T5148] Bluetooth: hci4: command tx timeout [ 73.606771][ T5826] veth0_vlan: entered promiscuous mode [ 73.645003][ T5822] veth0_vlan: entered promiscuous mode [ 73.680610][ T5822] veth1_vlan: entered promiscuous mode [ 73.705564][ T5826] veth1_vlan: entered promiscuous mode [ 73.765140][ T5823] veth0_macvtap: entered promiscuous mode [ 73.783317][ T5822] veth0_macvtap: entered promiscuous mode [ 73.793084][ T5823] veth1_macvtap: entered promiscuous mode [ 73.806651][ T5822] veth1_macvtap: entered promiscuous mode [ 73.816216][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.831473][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.871929][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.897785][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.923062][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.936516][ T340] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.954786][ T5826] veth0_macvtap: entered promiscuous mode [ 73.983613][ T340] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.003106][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.024497][ T3525] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.044467][ T5826] veth1_macvtap: entered promiscuous mode [ 74.077103][ T3525] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.103542][ T3525] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.133916][ T3525] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.153174][ T3525] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.187148][ T340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.224156][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.237815][ T5824] veth0_vlan: entered promiscuous mode [ 74.240960][ T340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.252848][ T5824] veth1_vlan: entered promiscuous mode [ 74.276653][ T340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.300250][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.327695][ T1154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.364353][ T1154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.380438][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.388826][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.406281][ T1154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.415366][ T1154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.431634][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.450192][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.474974][ T5824] veth0_macvtap: entered promiscuous mode [ 74.495055][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.554854][ T5824] veth1_macvtap: entered promiscuous mode [ 74.599305][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.607175][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.624734][ T5853] veth0_vlan: entered promiscuous mode [ 74.662694][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.678216][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.705889][ T340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.722558][ T340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.723876][ T173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.757245][ T5853] veth1_vlan: entered promiscuous mode [ 74.787332][ T173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.801544][ T173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.823634][ T5939] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 74.882230][ T173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.898390][ T5148] Bluetooth: hci0: command tx timeout [ 74.954006][ T340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.964259][ T340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.978445][ T5148] Bluetooth: hci3: command tx timeout [ 74.983942][ T5835] Bluetooth: hci1: command tx timeout [ 74.990561][ T5148] Bluetooth: hci2: command tx timeout [ 75.022218][ T5853] veth0_macvtap: entered promiscuous mode [ 75.046170][ T5853] veth1_macvtap: entered promiscuous mode [ 75.079331][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.130351][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.142738][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 75.173175][ T173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.238403][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.257189][ T5948] openvswitch: netlink: Message has 576 unknown bytes. [ 75.277764][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.279025][ T5948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.305265][ T173] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.374095][ T173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.397432][ T173] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.537991][ C0] hrtimer: interrupt took 45028 ns [ 75.619050][ T5148] Bluetooth: hci4: command tx timeout [ 75.675613][ T5962] netlink: 'syz.0.11': attribute type 1 has an invalid length. [ 75.689923][ T5962] netlink: 'syz.0.11': attribute type 39 has an invalid length. [ 76.978114][ T5148] Bluetooth: hci0: command tx timeout [ 77.058479][ T5835] Bluetooth: hci2: command tx timeout [ 77.058590][ T5830] Bluetooth: hci1: command tx timeout [ 77.064098][ T5148] Bluetooth: hci3: command tx timeout [ 77.698157][ T5148] Bluetooth: hci4: command tx timeout [ 77.999263][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.007131][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.368410][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.376361][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.445692][ T173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.462873][ T173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.701936][ T1211] cfg80211: failed to load regulatory.db [ 88.640985][ T5979] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12'. [ 88.925310][ T5979] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12'. [ 89.742245][ T6018] netlink: 'syz.1.29': attribute type 1 has an invalid length. [ 89.751896][ T6018] netlink: 96 bytes leftover after parsing attributes in process `syz.1.29'. [ 89.789724][ T6018] netlink: 1 bytes leftover after parsing attributes in process `syz.1.29'. [ 89.862105][ T6018] netlink: 'syz.1.29': attribute type 1 has an invalid length. [ 90.085653][ T6032] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.34'. [ 90.135783][ T6030] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.35'. [ 90.260984][ T6038] FAULT_INJECTION: forcing a failure. [ 90.260984][ T6038] name failslab, interval 1, probability 0, space 0, times 1 [ 90.313010][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: syz.4.38 Not tainted syzkaller #0 PREEMPT(full) [ 90.313035][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.313053][ T6038] Call Trace: [ 90.313060][ T6038] [ 90.313068][ T6038] dump_stack_lvl+0xe8/0x150 [ 90.313104][ T6038] should_fail_ex+0x412/0x560 [ 90.313138][ T6038] should_failslab+0xa8/0x100 [ 90.313163][ T6038] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 90.313187][ T6038] ? __alloc_skb+0x1d0/0x7d0 [ 90.313204][ T6038] ? __local_bh_enable_ip+0xd0/0x130 [ 90.313235][ T6038] __alloc_skb+0x1d0/0x7d0 [ 90.313254][ T6038] ? netlink_ack_tlv_len+0x78/0x210 [ 90.313285][ T6038] netlink_ack+0x146/0xa50 [ 90.313331][ T6038] audit_receive+0x6b6/0x2c80 [ 90.313365][ T6038] ? __lock_acquire+0x6b5/0x2cf0 [ 90.313401][ T6038] ? __pfx_audit_receive+0x10/0x10 [ 90.313433][ T6038] ? perf_trace_run_bpf_submit+0xee/0x170 [ 90.313459][ T6038] ? __lock_acquire+0x6b5/0x2cf0 [ 90.313502][ T6038] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 90.313531][ T6038] ? __netlink_lookup+0x7e4/0x8b0 [ 90.313558][ T6038] ? __netlink_deliver_tap+0x823/0x850 [ 90.313585][ T6038] ? netlink_deliver_tap+0x2e/0x1b0 [ 90.313620][ T6038] ? netlink_deliver_tap+0x2e/0x1b0 [ 90.313658][ T6038] netlink_unicast+0x80f/0x9b0 [ 90.313722][ T6038] ? __pfx_netlink_unicast+0x10/0x10 [ 90.313752][ T6038] ? netlink_sendmsg+0x650/0xb40 [ 90.313768][ T6038] ? skb_put+0x11b/0x210 [ 90.313792][ T6038] netlink_sendmsg+0x813/0xb40 [ 90.313823][ T6038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.313846][ T6038] ? aa_sock_msg_perm+0xf1/0x1b0 [ 90.313876][ T6038] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 90.313901][ T6038] ____sys_sendmsg+0x972/0x9f0 [ 90.313936][ T6038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.313970][ T6038] ? import_iovec+0x73/0xa0 [ 90.313995][ T6038] ___sys_sendmsg+0x2a5/0x360 [ 90.314025][ T6038] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.314055][ T6038] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 90.314117][ T6038] ? __fget_files+0x2a/0x420 [ 90.314142][ T6038] ? __fget_files+0x3a0/0x420 [ 90.314183][ T6038] __x64_sys_sendmsg+0x1bd/0x2a0 [ 90.314209][ T6038] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 90.314229][ T6038] ? perf_trace_preemptirq_template+0xb2/0x350 [ 90.314269][ T6038] ? __pfx_ksys_write+0x10/0x10 [ 90.314306][ T6038] do_syscall_64+0x14d/0xf80 [ 90.314327][ T6038] ? trace_irq_disable+0x3b/0x150 [ 90.314351][ T6038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.314370][ T6038] ? clear_bhb_loop+0x40/0x90 [ 90.314395][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.314412][ T6038] RIP: 0033:0x7f95fdd9c799 [ 90.314440][ T6038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.314454][ T6038] RSP: 002b:00007f95feb95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.314473][ T6038] RAX: ffffffffffffffda RBX: 00007f95fe015fa0 RCX: 00007f95fdd9c799 [ 90.314486][ T6038] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 90.314503][ T6038] RBP: 00007f95feb95090 R08: 0000000000000000 R09: 0000000000000000 [ 90.314514][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.314524][ T6038] R13: 00007f95fe016038 R14: 00007f95fe015fa0 R15: 00007ffc1cea43e8 [ 90.314559][ T6038] [ 90.824692][ T6046] netlink: 60 bytes leftover after parsing attributes in process `syz.4.42'. [ 90.847802][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 90.928226][ T6051] netlink: 60 bytes leftover after parsing attributes in process `syz.0.43'. [ 91.016223][ T6046] netlink: 104 bytes leftover after parsing attributes in process `syz.4.42'. [ 91.390878][ T6054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.482102][ T6054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.544531][ T6054] bond0 (unregistering): Released all slaves [ 91.657527][ T6070] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.862899][ T6068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.938375][ T6068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.958484][ T6068] bond0 (unregistering): Released all slaves [ 93.007026][ T6083] Zero length message leads to an empty skb [ 93.228830][ T29] audit: type=1107 audit(1774564578.738:2): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 93.501112][ T6100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.824315][ T6100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.281787][ T6100] bond0 (unregistering): Released all slaves [ 94.515884][ T6110] can: request_module (can-proto-4) failed. [ 94.676617][ T6112] warning: `syz.1.69' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.703125][ T6116] __nla_validate_parse: 6 callbacks suppressed [ 94.703138][ T6116] netlink: 60 bytes leftover after parsing attributes in process `syz.1.69'. [ 94.978242][ T6128] netlink: 14 bytes leftover after parsing attributes in process `syz.4.74'. [ 95.039223][ T6130] netlink: 104 bytes leftover after parsing attributes in process `syz.3.75'. [ 95.097280][ T6134] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.77'. [ 95.216089][ T6132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.326209][ T6143] ======================================================= [ 95.326209][ T6143] WARNING: The mand mount option has been deprecated and [ 95.326209][ T6143] and is ignored by this kernel. Remove the mand [ 95.326209][ T6143] option from the mount to silence this warning. [ 95.326209][ T6143] ======================================================= [ 95.405929][ T6143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.453749][ T6145] netlink: 14 bytes leftover after parsing attributes in process `syz.3.82'. [ 95.469381][ T6147] netlink: 68 bytes leftover after parsing attributes in process `syz.1.83'. [ 95.583825][ T6145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.619405][ T6145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.633082][ T6145] bond0 (unregistering): Released all slaves [ 95.879090][ T6165] netlink: 'syz.2.87': attribute type 1 has an invalid length. [ 95.904022][ T6165] netlink: 2704 bytes leftover after parsing attributes in process `syz.2.87'. [ 96.123104][ T6159] can: request_module (can-proto-4) failed. [ 96.281399][ T6169] netlink: 104 bytes leftover after parsing attributes in process `syz.1.90'. [ 96.931965][ T6191] netlink: 'syz.3.98': attribute type 1 has an invalid length. [ 97.938284][ T6217] FAULT_INJECTION: forcing a failure. [ 97.938284][ T6217] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.953158][ T6217] CPU: 1 UID: 0 PID: 6217 Comm: syz.2.107 Not tainted syzkaller #0 PREEMPT(full) [ 97.953183][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 97.953194][ T6217] Call Trace: [ 97.953201][ T6217] [ 97.953209][ T6217] dump_stack_lvl+0xe8/0x150 [ 97.953239][ T6217] should_fail_ex+0x412/0x560 [ 97.953269][ T6217] _copy_from_user+0x2d/0xb0 [ 97.953290][ T6217] generic_map_update_batch+0x69a/0x990 [ 97.953322][ T6217] ? __pfx_generic_map_update_batch+0x10/0x10 [ 97.953345][ T6217] ? __fget_files+0x2a/0x420 [ 97.953377][ T6217] ? __pfx_generic_map_update_batch+0x10/0x10 [ 97.953398][ T6217] bpf_map_do_batch+0x39b/0x630 [ 97.953422][ T6217] __sys_bpf+0x7c1/0x950 [ 97.953450][ T6217] ? __pfx___sys_bpf+0x10/0x10 [ 97.953500][ T6217] ? ksys_write+0x242/0x270 [ 97.953522][ T6217] ? __pfx_ksys_write+0x10/0x10 [ 97.953549][ T6217] __x64_sys_bpf+0x7c/0x90 [ 97.953574][ T6217] do_syscall_64+0x14d/0xf80 [ 97.953594][ T6217] ? trace_irq_disable+0x3b/0x150 [ 97.953619][ T6217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.953637][ T6217] ? clear_bhb_loop+0x40/0x90 [ 97.953659][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.953676][ T6217] RIP: 0033:0x7f7b5299c799 [ 97.953693][ T6217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.953707][ T6217] RSP: 002b:00007f7b5382a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.953726][ T6217] RAX: ffffffffffffffda RBX: 00007f7b52c15fa0 RCX: 00007f7b5299c799 [ 97.953738][ T6217] RDX: 0000000000000038 RSI: 00002000000002c0 RDI: 000000000000001a [ 97.953749][ T6217] RBP: 00007f7b5382a090 R08: 0000000000000000 R09: 0000000000000000 [ 97.953760][ T6217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.953770][ T6217] R13: 00007f7b52c16038 R14: 00007f7b52c15fa0 R15: 00007ffc2f41fbe8 [ 97.953798][ T6217] [ 98.240904][ T6218] can: request_module (can-proto-4) failed. [ 98.419207][ T6220] netlink: 104 bytes leftover after parsing attributes in process `syz.4.106'. [ 98.471254][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.108'. [ 98.583851][ T6226] syzkaller0: entered promiscuous mode [ 98.617478][ T6226] syzkaller0: entered allmulticast mode [ 100.513959][ T6269] netlink: 'syz.4.120': attribute type 2 has an invalid length. [ 100.523858][ T6269] __nla_validate_parse: 2 callbacks suppressed [ 100.523877][ T6269] netlink: 164 bytes leftover after parsing attributes in process `syz.4.120'. [ 100.561808][ T6268] netlink: 'syz.4.120': attribute type 2 has an invalid length. [ 100.570924][ T6268] netlink: 164 bytes leftover after parsing attributes in process `syz.4.120'. [ 100.663944][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'. [ 100.673459][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'. [ 101.124416][ T6296] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 101.153034][ T6296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.498248][ T6311] netlink: 156 bytes leftover after parsing attributes in process `syz.0.134'. [ 101.739595][ T6315] netlink: 68 bytes leftover after parsing attributes in process `syz.4.136'. [ 101.913439][ T6326] FAULT_INJECTION: forcing a failure. [ 101.913439][ T6326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.986096][ T6326] CPU: 0 UID: 0 PID: 6326 Comm: syz.1.139 Not tainted syzkaller #0 PREEMPT(full) [ 101.986122][ T6326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.986133][ T6326] Call Trace: [ 101.986139][ T6326] [ 101.986147][ T6326] dump_stack_lvl+0xe8/0x150 [ 101.986176][ T6326] should_fail_ex+0x412/0x560 [ 101.986207][ T6326] _copy_from_user+0x2d/0xb0 [ 101.986229][ T6326] generic_map_update_batch+0x648/0x990 [ 101.986262][ T6326] ? __pfx_generic_map_update_batch+0x10/0x10 [ 101.986284][ T6326] ? __fget_files+0x2a/0x420 [ 101.986324][ T6326] ? __pfx_generic_map_update_batch+0x10/0x10 [ 101.986344][ T6326] bpf_map_do_batch+0x39b/0x630 [ 101.986368][ T6326] __sys_bpf+0x7c1/0x950 [ 101.986396][ T6326] ? __pfx___sys_bpf+0x10/0x10 [ 101.986434][ T6326] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 101.986460][ T6326] ? ksys_write+0x242/0x270 [ 101.986481][ T6326] ? __pfx_ksys_write+0x10/0x10 [ 101.986507][ T6326] __x64_sys_bpf+0x7c/0x90 [ 101.986532][ T6326] do_syscall_64+0x14d/0xf80 [ 101.986553][ T6326] ? trace_irq_disable+0x3b/0x150 [ 101.986575][ T6326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.986590][ T6326] ? clear_bhb_loop+0x40/0x90 [ 101.986609][ T6326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.986625][ T6326] RIP: 0033:0x7f1481f9c799 [ 101.986642][ T6326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.986656][ T6326] RSP: 002b:00007f1482dbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.986675][ T6326] RAX: ffffffffffffffda RBX: 00007f1482215fa0 RCX: 00007f1481f9c799 [ 101.986687][ T6326] RDX: 0000000000000038 RSI: 00002000000002c0 RDI: 000000000000001a [ 101.986698][ T6326] RBP: 00007f1482dbb090 R08: 0000000000000000 R09: 0000000000000000 [ 101.986709][ T6326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.986720][ T6326] R13: 00007f1482216038 R14: 00007f1482215fa0 R15: 00007ffc9450b908 [ 101.986748][ T6326] [ 102.395445][ T6340] netlink: 'syz.4.142': attribute type 21 has an invalid length. [ 102.412993][ T6338] netlink: 830 bytes leftover after parsing attributes in process `syz.4.142'. [ 102.474173][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.142'. [ 102.923154][ T6349] block nbd0: not configured, cannot reconfigure [ 103.137871][ T6352] Driver unsupported XDP return value 0 on prog (id 114) dev N/A, expect packet loss! [ 105.695941][ T6364] netlink: 'syz.0.150': attribute type 10 has an invalid length. [ 105.723612][ T6364] netlink: 152 bytes leftover after parsing attributes in process `syz.0.150'. [ 105.830664][ T6366] netlink: 68 bytes leftover after parsing attributes in process `syz.1.151'. [ 105.891890][ T6373] netlink: 'syz.2.155': attribute type 2 has an invalid length. [ 107.221309][ T6391] netlink: 60 bytes leftover after parsing attributes in process `syz.1.157'. [ 107.420085][ T6391] netlink: 104 bytes leftover after parsing attributes in process `syz.1.157'. [ 108.247841][ T6388] netlink: 'syz.4.159': attribute type 13 has an invalid length. [ 110.823756][ T6428] netlink: 60 bytes leftover after parsing attributes in process `syz.1.170'. [ 111.212440][ T6428] netlink: 104 bytes leftover after parsing attributes in process `syz.1.170'. [ 111.864138][ T6445] netlink: 14 bytes leftover after parsing attributes in process `syz.2.176'. [ 112.305729][ T6453] ------------[ cut here ]------------ [ 112.311504][ T6453] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 112.337933][ T6453] WARNING: kernel/bpf/verifier.c:2850 at reg_bounds_sanity_check+0x201/0xc30, CPU#1: syz.1.179/6453 [ 112.351102][ T6453] Modules linked in: [ 112.361181][ T6453] CPU: 1 UID: 0 PID: 6453 Comm: syz.1.179 Not tainted syzkaller #0 PREEMPT(full) [ 112.370663][ T6453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.381191][ T6453] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 112.387556][ T6453] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 112.407763][ T6453] RSP: 0018:ffffc9000ccb6f30 EFLAGS: 00010246 [ 112.414040][ T6453] RAX: dffffc0000000000 RBX: 1ffff1100fff624a RCX: 00000000ffffdfcd [ 112.422582][ T6453] RDX: ffffffff8bd47360 RSI: ffffffff8bd4fb20 RDI: ffffffff9015bab0 [ 112.431909][ T6453] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 112.440878][ T6453] R10: ffff88807ffb1358 R11: 1ffff1100fff6250 R12: ffff88807ffb1250 [ 112.449029][ T6453] R13: 00000000ffffdfcd R14: 1ffff1100fff6249 R15: 00000000ffffdfcc [ 112.457137][ T6453] FS: 00007f1482dbb6c0(0000) GS:ffff88812555a000(0000) knlGS:0000000000000000 [ 112.466271][ T6453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.473035][ T6453] CR2: 00007fdb18a4eddd CR3: 000000007a0ea000 CR4: 00000000003526f0 [ 112.481178][ T6453] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 112.489318][ T6453] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 112.497436][ T6453] Call Trace: [ 112.500974][ T6453] [ 112.504058][ T6453] reg_set_min_max+0x264/0x340 [ 112.509127][ T6453] check_cond_jmp_op+0x1db1/0x3270 [ 112.514410][ T6453] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 112.520080][ T6453] ? kfree+0x1c1/0x630 [ 112.524314][ T6453] ? do_check+0x62ee/0x105f0 [ 112.529079][ T6453] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 112.537202][ T6453] do_check+0x7938/0x105f0 [ 112.541963][ T6453] ? irqentry_exit+0x59e/0x620 [ 112.547037][ T6453] ? __pfx_do_check+0x10/0x10 [ 112.552026][ T6453] ? init_func_state+0x1ad5/0x2910 [ 112.557313][ T6453] do_check_common+0x1a21/0x2600 [ 112.562458][ T6453] bpf_check+0x23b2/0x1ccc0 [ 112.567133][ T6453] ? perf_trace_lock_acquire+0x109/0x440 [ 112.572941][ T6453] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 112.579689][ T6453] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 112.585838][ T6453] ? __mutex_trylock_common+0x158/0x260 [ 112.591631][ T6453] ? __pfx___mutex_trylock_common+0x10/0x10 [ 112.597673][ T6453] ? css_rstat_updated+0x23a/0x530 [ 112.602965][ T6453] ? __pfx_css_rstat_updated+0x10/0x10 [ 112.608623][ T6453] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 112.614752][ T6453] ? __lock_acquire+0x6b5/0x2cf0 [ 112.619915][ T6453] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 112.626079][ T6453] ? perf_trace_preemptirq_template+0xb2/0x350 [ 112.632439][ T6453] ? seqcount_lockdep_reader_access+0x70/0x100 [ 112.640518][ T6453] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 112.647375][ T6453] ? __pfx_bpf_check+0x10/0x10 [ 112.652352][ T6453] ? ktime_get_with_offset+0x93/0x2a0 [ 112.660531][ T6453] ? ktime_get_with_offset+0x93/0x2a0 [ 112.666406][ T6453] ? __asan_memset+0x22/0x50 [ 112.671239][ T6453] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 112.676552][ T6453] ? security_bpf_prog_load+0x125/0x3c0 [ 112.682554][ T6453] bpf_prog_load+0x1484/0x1ae0 [ 112.687447][ T6453] ? __pfx_bpf_prog_load+0x10/0x10 [ 112.692987][ T6453] ? futex_wake+0x4ac/0x580 [ 112.697808][ T6453] ? bpf_lsm_bpf+0x9/0x20 [ 112.702454][ T6453] ? security_bpf+0x7e/0x2d0 [ 112.707215][ T6453] __sys_bpf+0x618/0x950 [ 112.711618][ T6453] ? __pfx___sys_bpf+0x10/0x10 [ 112.716563][ T6453] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 112.723328][ T6453] ? rcu_is_watching+0x15/0xb0 [ 112.728279][ T6453] __x64_sys_bpf+0x7c/0x90 [ 112.732883][ T6453] do_syscall_64+0x14d/0xf80 [ 112.738855][ T6453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.746108][ T6453] ? clear_bhb_loop+0x40/0x90 [ 112.751064][ T6453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.757225][ T6453] RIP: 0033:0x7f1481f9c799 [ 112.761797][ T6453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.781587][ T6453] RSP: 002b:00007f1482dbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.790219][ T6453] RAX: ffffffffffffffda RBX: 00007f1482215fa0 RCX: 00007f1481f9c799 [ 112.798597][ T6453] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 112.806683][ T6453] RBP: 00007f1482032c99 R08: 0000000000000000 R09: 0000000000000000 [ 112.814791][ T6453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.824255][ T6453] R13: 00007f1482216038 R14: 00007f1482215fa0 R15: 00007ffc9450b908 [ 112.832637][ T6453] [ 112.835935][ T6453] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.843246][ T6453] CPU: 1 UID: 0 PID: 6453 Comm: syz.1.179 Not tainted syzkaller #0 PREEMPT(full) [ 112.852456][ T6453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.862541][ T6453] Call Trace: [ 112.865864][ T6453] [ 112.868805][ T6453] vpanic+0x56c/0xa60 [ 112.872824][ T6453] ? __pfx__printk+0x10/0x10 [ 112.877464][ T6453] ? __pfx_vpanic+0x10/0x10 [ 112.882010][ T6453] ? is_bpf_text_address+0x292/0x2b0 [ 112.887316][ T6453] ? is_bpf_text_address+0x26/0x2b0 [ 112.892545][ T6453] panic+0xc5/0xd0 [ 112.896294][ T6453] ? __pfx_panic+0x10/0x10 [ 112.900726][ T6453] __warn+0x315/0x4f0 [ 112.904736][ T6453] ? reg_bounds_sanity_check+0x201/0xc30 [ 112.910395][ T6453] ? reg_bounds_sanity_check+0x201/0xc30 [ 112.916033][ T6453] __report_bug+0x29a/0x540 [ 112.920535][ T6453] ? __pfx_stack_trace_save+0x10/0x10 [ 112.925907][ T6453] ? reg_bounds_sanity_check+0x201/0xc30 [ 112.931537][ T6453] ? __pfx___report_bug+0x10/0x10 [ 112.936592][ T6453] ? check_cond_jmp_op+0x1c51/0x3270 [ 112.941909][ T6453] ? do_check+0x7938/0x105f0 [ 112.946512][ T6453] ? do_check_common+0x1a21/0x2600 [ 112.951635][ T6453] ? bpf_check+0x23b2/0x1ccc0 [ 112.956336][ T6453] ? bpf_prog_load+0x1484/0x1ae0 [ 112.961274][ T6453] ? __sys_bpf+0x618/0x950 [ 112.965696][ T6453] ? __x64_sys_bpf+0x7c/0x90 [ 112.970316][ T6453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.976391][ T6453] report_bug_entry+0x19a/0x290 [ 112.981244][ T6453] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 112.986894][ T6453] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 112.992570][ T6453] handle_bug+0xce/0x200 [ 112.996841][ T6453] exc_invalid_op+0x1a/0x50 [ 113.001344][ T6453] asm_exc_invalid_op+0x1a/0x20 [ 113.006215][ T6453] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 113.012494][ T6453] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 113.032123][ T6453] RSP: 0018:ffffc9000ccb6f30 EFLAGS: 00010246 [ 113.038195][ T6453] RAX: dffffc0000000000 RBX: 1ffff1100fff624a RCX: 00000000ffffdfcd [ 113.046178][ T6453] RDX: ffffffff8bd47360 RSI: ffffffff8bd4fb20 RDI: ffffffff9015bab0 [ 113.054152][ T6453] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 113.062129][ T6453] R10: ffff88807ffb1358 R11: 1ffff1100fff6250 R12: ffff88807ffb1250 [ 113.070112][ T6453] R13: 00000000ffffdfcd R14: 1ffff1100fff6249 R15: 00000000ffffdfcc [ 113.078143][ T6453] reg_set_min_max+0x264/0x340 [ 113.082953][ T6453] check_cond_jmp_op+0x1db1/0x3270 [ 113.088073][ T6453] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 113.093531][ T6453] ? kfree+0x1c1/0x630 [ 113.097598][ T6453] ? do_check+0x62ee/0x105f0 [ 113.102178][ T6453] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 113.108167][ T6453] do_check+0x7938/0x105f0 [ 113.112640][ T6453] ? irqentry_exit+0x59e/0x620 [ 113.117446][ T6453] ? __pfx_do_check+0x10/0x10 [ 113.122118][ T6453] ? init_func_state+0x1ad5/0x2910 [ 113.127230][ T6453] do_check_common+0x1a21/0x2600 [ 113.132194][ T6453] bpf_check+0x23b2/0x1ccc0 [ 113.136726][ T6453] ? perf_trace_lock_acquire+0x109/0x440 [ 113.142375][ T6453] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 113.148369][ T6453] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 113.154370][ T6453] ? __mutex_trylock_common+0x158/0x260 [ 113.159933][ T6453] ? __pfx___mutex_trylock_common+0x10/0x10 [ 113.165878][ T6453] ? css_rstat_updated+0x23a/0x530 [ 113.170992][ T6453] ? __pfx_css_rstat_updated+0x10/0x10 [ 113.176447][ T6453] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 113.182429][ T6453] ? __lock_acquire+0x6b5/0x2cf0 [ 113.187370][ T6453] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 113.193348][ T6453] ? perf_trace_preemptirq_template+0xb2/0x350 [ 113.199504][ T6453] ? seqcount_lockdep_reader_access+0x70/0x100 [ 113.205652][ T6453] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 113.212259][ T6453] ? __pfx_bpf_check+0x10/0x10 [ 113.217057][ T6453] ? ktime_get_with_offset+0x93/0x2a0 [ 113.222439][ T6453] ? ktime_get_with_offset+0x93/0x2a0 [ 113.227810][ T6453] ? __asan_memset+0x22/0x50 [ 113.232389][ T6453] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 113.237584][ T6453] ? security_bpf_prog_load+0x125/0x3c0 [ 113.243130][ T6453] bpf_prog_load+0x1484/0x1ae0 [ 113.247917][ T6453] ? __pfx_bpf_prog_load+0x10/0x10 [ 113.253048][ T6453] ? futex_wake+0x4ac/0x580 [ 113.257595][ T6453] ? bpf_lsm_bpf+0x9/0x20 [ 113.261940][ T6453] ? security_bpf+0x7e/0x2d0 [ 113.266545][ T6453] __sys_bpf+0x618/0x950 [ 113.270795][ T6453] ? __pfx___sys_bpf+0x10/0x10 [ 113.275664][ T6453] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 113.282257][ T6453] ? rcu_is_watching+0x15/0xb0 [ 113.287036][ T6453] __x64_sys_bpf+0x7c/0x90 [ 113.291452][ T6453] do_syscall_64+0x14d/0xf80 [ 113.296044][ T6453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.302109][ T6453] ? clear_bhb_loop+0x40/0x90 [ 113.306782][ T6453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.312665][ T6453] RIP: 0033:0x7f1481f9c799 [ 113.317073][ T6453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.336681][ T6453] RSP: 002b:00007f1482dbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.345113][ T6453] RAX: ffffffffffffffda RBX: 00007f1482215fa0 RCX: 00007f1481f9c799 [ 113.353099][ T6453] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 113.361072][ T6453] RBP: 00007f1482032c99 R08: 0000000000000000 R09: 0000000000000000 [ 113.369051][ T6453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.377021][ T6453] R13: 00007f1482216038 R14: 00007f1482215fa0 R15: 00007ffc9450b908 [ 113.385017][ T6453] [ 113.388196][ T6453] Kernel Offset: disabled [ 113.392518][ T6453] Rebooting in 86400 seconds..