last executing test programs: 11m25.02533877s ago: executing program 32 (id=2836): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0xa}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x4520, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='./file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10m7.833873713s ago: executing program 2 (id=3216): perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x49, 0x1, 0xfc, 0x0, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x7ff, 0x9}, 0x2, 0x0, 0x0, 0x6, 0x43fe, 0x7ffffffb, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001600)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5", @ANYBLOB="650c755272637e4f4e79869aa2e353fa2ae467ce009d94de92483ede2928cce11db279f15252ecde5c1b2ad38ab29f52be0190"], &(0x7f0000000380)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(0x0, 0x0, 0x400001, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r1, @ANYRES32=r0], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01fda1ed8743e6d4dc60fce56e2d880018c7df65faed8783052b006edf6e000000000000000c0000000c0200000200000091d717a99049d09cd71b720628b0bef2eedbd4cef029ac0b5caa8c987ac1ee27d74364e104ff29f9acff3e841ee8f6093ab6191059a9"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffef, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 10m7.676369022s ago: executing program 2 (id=3218): socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="a0000000210000012abd7000fddbdf25ff010000000000000000000000000001fc0200000000000000000000000000014e2210004e24a61f0200008029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x810}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc020) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000700"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="0800000004000000", @ANYRES32, @ANYBLOB="3eac559935819bd88470a601", @ANYRES32=r5, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="550000000506050000000000000400000100000a0900030073797a30000000000900030073797a30000000000900030073797a32000000000900020073797a3100000000050001"], 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x24008810) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000015000100fcff070000deff0001"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r8 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r8, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100000000, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x0, 0xcc05, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10m6.921405646s ago: executing program 3 (id=3226): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$sock(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)}, 0x11) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x4, 0x12d1, 0x4, 0x41}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r2, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x40010100) socket$kcm(0x29, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10m6.810944892s ago: executing program 2 (id=3228): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x80, 0x0, 0x7, {[@generic={0xc7, 0xc, "57f1c3a4450977079cd0"}, @timestamp={0x44, 0x2c, 0xbb, 0x0, 0x8, [0x200, 0x3, 0xe, 0xffffffe8, 0xa, 0x5, 0x0, 0x821, 0x800, 0xffff8000]}, @cipso={0x86, 0x10, 0x2, [{0x7, 0xa, "fbb3d709100fb5d9"}]}, @timestamp_prespec={0x44, 0x14, 0x8c, 0x3, 0x3, [{@empty, 0x9}, {@remote, 0x800}]}, @lsrr={0x83, 0xb, 0x61, [@multicast1, @loopback]}, @ssrr={0x89, 0x7, 0x6a, [@empty]}, @generic={0x0, 0x2}]}}}], 0x80}, 0x8000) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0xa92e338440b7f238) r2 = socket$unix(0x1, 0x5, 0x0) fstat(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpid() r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x420002, 0x0) fstat(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r7, 0x400454ce, r8) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r10 = gettid() fstat(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r13, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fstat(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000000ac0)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000200)="bc1c3705817873081bf1e6f69f82cecb3038f9329c113f129dc4e8225a999ce6494fb28c3000b728d401b86338af3bb6e759a5641b629a6a4b71e3b222e46964b59d9a3f3e09ccc2c3c503bd5d8ddb2c13825cfde741cea08908ba78c2c108ceaf8c0e5bd557e25247fdc2b8bccaa76118910da2fd03780b24edb2f7dc4dad9c9449c1d71ec467b048008d6946043de3d5d9555b3146af00a536d976650616fdbd93468b0cb66765a9cc272506192715bd11a751041f", 0xb6}, {&(0x7f00000002c0)="af73f990d370800826dcd644c19079863518567f8513f4592d3f7858ab4dde3197e1f4acf14407c105cd20fbe1709746e7e036982da71490f3d92c4071d762f6a1ab6a8a2734a248c6cdcecc41cb3d251821e8167ebe6338faaa94faaf827c5a1a25192707b1c9a47df635534c95542386340d749e62c3eaf5125a8283235a8874998a4a895de00b414673efa9d6852335adc46365e67100875ace1c4687b52a1e239c867e2bb665ea0d6735783fe5fb7cdbfea48e944b5c4a52af", 0xbb}, {&(0x7f0000000380)="d8db6676c85c36cf38dd25b9266920e8ebb3a2d4b802c7c42174849be05f5790af073ac431af4f7c457fa5d426ae8974ff19a88c1f6dd8285bb28b5b270df590e5f5ec66f4dab50ef787197cd4b34b352d0b6bfd9716a9b710cda72441ecf054342e1ecd2342", 0x66}, {&(0x7f0000000400)="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", 0xfd}, {&(0x7f0000000500)="598f7e430654a09d34bb8813287f3972d65b17ef8013964102b550f0e8fd67de5c86b6379eec1786f09674fe0a1387560f26e3fae54c60547b44f706cf6c0d04c0dfc5111bc091fd776000", 0x4b}, {&(0x7f0000000580)="c41eb27be6a9e71f7ef0e9a7d31ea848de5b8b34a6e6c6e8e8d75c11275704fe35d03d59e41214ed12e1360b07f670da07195423ce107f880ff4772806d5a6439e549d", 0x43}, {&(0x7f0000000600)="8bc90ca9bdcc2b3ccad01eeed9e5946ff50ec9ae62ddf113d4fa0460d3ad695905d3c33fb0741e1438d578f7f8d8f6797e5f8aae680a5bb85c84dd2d0118dcdf1f71e1447297a87ea0ea40e279d544d935a7612579e3d2c5dd75c10322397199c0e5c8243e5980015a8ebaf44d41ba249bbf170afcee7765a0a8e5b9cff56fde9a9703a8d7f9ed", 0x87}], 0x7, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, r8}}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x30, 0x1, 0x1, [r1, r1, r0, r1, r1, r1, r0, r1]}}, @rights={{0x30, 0x1, 0x1, [r1, r0, r1, r1, r0, r0, r1, r0]}}], 0xd8, 0x4008000}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40047438, 0x110e22fff6) 10m6.745287845s ago: executing program 5 (id=3229): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8000000004ca}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x750842, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x5760, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r1}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x64, 0x24, 0xf0b, 0x70bd2e, 0x2, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x2}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x7, 0x4e0e, 0x400003, 0x1, 0x1ff, 0x3ff}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) (async) socket$kcm(0x11, 0xa, 0x300) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32], 0x48) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb22, 0x200000000002}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r8 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x7, 0xf}, 0x104101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x10, 0x70bd25, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x22040040) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001bc0)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$TUNSETOFFLOAD(r12, 0xc004743e, 0x110e22fff6) (async, rerun: 64) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) (rerun: 64) 10m6.507643286s ago: executing program 5 (id=3230): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000604000000711050000000000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m6.50712093s ago: executing program 2 (id=3231): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594", 0xf}], 0x1}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c000000010401010000006cde000000000002000006050001000200"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) (async) mount$bpf(0x0, &(0x7f0000000240)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0), 0x41, 0x0) (async) r6 = socket$kcm(0x2, 0x5, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r7, 0x0, 0x8}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r8, 0x0, 0x9}, 0x18) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000340)={r9}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000180)={'wg1\x00', @multicast}) (async) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x17}}, 0xffd1, 0x0}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x1d, &(0x7f0000000a00)=ANY=[@ANYBLOB="0000000e000000000016100000000000000000000b1a0299c5f21e7c33ffa529c4c4dfa40e93abd82a31047d22488a87f70b688209a8e415120c86880a3e18e90f29c4a578ec506c25679ebfb84cdaa1b48b73a273e940d9da90c467ae334a4396245e64786fd5dcb7d7a9d4b1a70b247da867ee56c41515d58682b8a1ea243ba1044da94030da18350ab8dd3663f82024fb5b7622d85b8ef69965ecd8079ba7e1b84d53204d9903d614dbf9a65d2e5437242d9d4ea754113165873c3ea64d3d3912de210eb2aeed424391f9cddcb85924a98baadc43aec3f4612951020b9e4c945ce2cad5a952", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b70800000180ffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000071172000f4ffffffbf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x5, 0x3, 0x10}, 0x10, 0xffffffffffffffff, r5, 0x1, &(0x7f00000007c0)=[r10, r4, r10, r10, r10, r4, r10, r4], &(0x7f0000000800)=[{0x1, 0x4, 0x4, 0x1}], 0x10, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) 10m6.390836287s ago: executing program 2 (id=3232): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x804, 0x4c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x4, @perf_bp={0x0, 0x4}, 0xa0, 0x58, 0x8, 0x6, 0x2, 0x2c9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002400000000000010000020a0500000000000000000000000004090001"], 0x190}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$qrtr(0x2a, 0x2, 0x0) close(r4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x4000, 0x0, 0x0, 0x0, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket(0x840000000002, 0x3, 0xff) sendmsg$rds(r8, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0xfd83}], 0x1, 0x0, 0x0, 0x8000}, 0x48004) r9 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0xb68f7a295f19f843, &(0x7f0000000740)={[{}, {@gid}, {}], [{@hash}, {@fowner_lt}]}) r10 = gettid() fstat(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpid() r13 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r12, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, r14) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r15) sendmsg$netlink(r8, &(0x7f00000000c0)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc, &(0x7f0000000080)=[{&(0x7f00000003c0)={0x1c4, 0x31, 0x1, 0x70bd28, 0x25dfdbff, "", [@generic="95671aa7adc242eee7e9c177c307ba6b7b7436e21c4b608818e47dfe56ad8c432ff76700e01a5d38aae73d5f00f2b91cd5227ace2534b6160455d4e9c01fde816f941e305da7415dd2ef954b87ade3a64b9b2a4e84e8faa865580f3b9cab5062ff0b50789953f989714709edc11dbdd479eb50fd0b2baeeadc5cf44ba601d42321207e15d4b78d714d9ffe4139a4970b1a0d1115f2a280ed7ad1b3926807cec8e05ff07e0b074732", @generic="8b1e1b5ae4fd0547f387dc4ece5d2a30d221e7222d1b0e599ccbb900854e06289e34f0a10887478886f8ba0be8988539463a53494c4d83d089c8016b7ce01f3448d3de5f8a62379bcedf019ba693edbec5e12846b31021c0d2428c67c3a7c3df3ea1c42b6baff3acf5b42fdca2326737288a4ed0663a192231e4f04d42477e8ab6", @nested={0x24, 0x72, 0x0, 0x1, [@nested={0x4, 0x141}, @generic="2ddad7a822f9b222a9579d7111a1bfe1192dedd0", @typed={0x8, 0x5e, 0x0, 0x0, @fd=r3}]}, @generic="90df24020e3179da8e99145c33c4e5f9a7b24e3a47cbde6a6c263813bca2a6107778a06ea18afcb0d85cb2ba86b6d535f4ed51fd05cc15a9224d384b2ddeb130aaf0bf4f21a9a4fe178a7fc4df9808174efa", @generic="8cd24a2d831d65792a6a1fbf0166996d8a8780"]}, 0x1c4}], 0x1, &(0x7f00000006c0)=[@rights={{0x34, 0x1, 0x1, [r7, r3, r3, r7, r9, r5, r5, r6, r3]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r15}}}], 0x78, 0x810}, 0x4000840) 10m6.361169549s ago: executing program 3 (id=3233): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) 10m6.356701266s ago: executing program 5 (id=3234): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a0000000000000080ffffff05000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a00000000000000200100"/102], 0xd0}}, 0x40) r5 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 10m5.910357941s ago: executing program 5 (id=3236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x7400}, 0x20040051) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x105d30, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES16=r3, @ANYRES8=r2], 0x9a) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="696d69552011637075613e11ee40f314598966c46a34f08a0f18d57b87d3ba63616363"], 0x23) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x60, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x8a80, 0x0, 0x3, 0x8, 0x3, 0x7ffffff7, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 10m5.905225999s ago: executing program 3 (id=3237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) (async) 10m5.750719172s ago: executing program 3 (id=3239): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x40016}, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80440, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x8, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x52) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x10, r3, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x19, 0x0, 0x14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b04e3ff0000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c720000f5ffffffe3ffffff020000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000200), 0x4) 10m5.6107672s ago: executing program 5 (id=3240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0xffffef81, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xb, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0xffffff77, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x20, 0x5e, 0x1, 0x4, 0x0, "", [@typed={0x5c, 0x0, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x4, 0x2}]}, 0x20}], 0x1, 0x0, 0x0, 0x48004}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x80d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x800}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x8, 0xffffffffffffffff, 0x4, 0x8}}, @TCA_CT_LABELS={0x14, 0x7, "a31a5744c98714e0c10894427408df27"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x800) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001c80)={0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, r7}, 0x38) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060300000000000000000000000000140007800800124000000002050005000400000005000100060000000500050002000000050004000000000011000300686173683a69702c706f7274000000000900020073797a3200000000"], 0x60}}, 0x0) 10m5.367050759s ago: executing program 3 (id=3241): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80212, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c00000000040000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x95, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x95, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@gettaction={0x24, 0x5a, 0x1, 0x0, 0xffffffff, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x2d, 0x0, 0x0, 0x7}, 0x80, 0x0}, 0x0) (async) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x2d, 0x0, 0x0, 0x7}, 0x80, 0x0}, 0x0) 10m5.268440401s ago: executing program 3 (id=3242): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$sock(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)}, 0x11) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x4, 0x12d1, 0x4, 0x41}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r2, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x40010100) socket$kcm(0x29, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10m5.226542019s ago: executing program 2 (id=3243): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0xfe33) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000005380)='ns/ipc\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000000) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007600"], 0xfe33) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$sock(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000001400)="48ea0fba", 0x4}], 0x1}, 0x8000) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/43, 0x2b}, 0x100) close(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114d01, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) 10m5.040040392s ago: executing program 5 (id=3246): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x41) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x1, 0x4, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xe42}, @NFULA_CFG_CMD={0x5, 0x1, 0x5}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8000}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4803) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x140, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4, @local, 0x3, 0x4}, 0x80, &(0x7f0000000100)=[{0x0, 0x21}], 0x1}, 0x4804) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x17a, 0x4d4cf609}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=0x1, 0xe, 0x1, 0x67, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@cgroup=r4, r2, 0x4, 0x1, r2, @void, @value=r2, @void, @void, r3}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r5 = socket(0x10, 0x3, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0xa, 0x1, 0x106) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="2000000076001f0b4abd7000fbdbdf25080000000400000008000a"], 0x20}], 0x1, 0x0, 0x0, 0x24044814}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0x25) setsockopt$sock_attach_bpf(r8, 0x1, 0x19, &(0x7f0000000180), 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@gettaction={0x24, 0x5a, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x404c000) 8m5.459458106s ago: executing program 33 (id=3245): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a0000000000000080ffffff05000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a00000000000000200100"/102], 0xd0}}, 0x40) r5 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 8m3.812773604s ago: executing program 34 (id=3246): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x41) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x1, 0x4, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xe42}, @NFULA_CFG_CMD={0x5, 0x1, 0x5}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8000}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4803) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x140, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4, @local, 0x3, 0x4}, 0x80, &(0x7f0000000100)=[{0x0, 0x21}], 0x1}, 0x4804) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x17a, 0x4d4cf609}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=0x1, 0xe, 0x1, 0x67, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@cgroup=r4, r2, 0x4, 0x1, r2, @void, @value=r2, @void, @void, r3}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r5 = socket(0x10, 0x3, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0xa, 0x1, 0x106) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="2000000076001f0b4abd7000fbdbdf25080000000400000008000a"], 0x20}], 0x1, 0x0, 0x0, 0x24044814}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0x25) setsockopt$sock_attach_bpf(r8, 0x1, 0x19, &(0x7f0000000180), 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@gettaction={0x24, 0x5a, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x404c000) 8m3.166303976s ago: executing program 35 (id=3243): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[], 0xfe33) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000005380)='ns/ipc\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000000) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007600"], 0xfe33) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$sock(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000001400)="48ea0fba", 0x4}], 0x1}, 0x8000) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/43, 0x2b}, 0x100) close(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114d01, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) 8m2.81864658s ago: executing program 36 (id=3242): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$sock(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)}, 0x11) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x4, 0x12d1, 0x4, 0x41}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r2, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x40010100) socket$kcm(0x29, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5m5.773580288s ago: executing program 4 (id=3907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 5m5.507309807s ago: executing program 4 (id=3909): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x48, 0x1, 0x30, 0x4, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x27}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000200)='\xec\x02\xa3\x1d\x85\x11\xb3\x1d=\xc3\x8e\xa5\x98S\xb2\xd5\x17irf\t$>\xb0\x89h\xfdQ-\xe6\x88\xb3\x12\xfc%\xa5e\xe3}') 5m5.208083757s ago: executing program 4 (id=3911): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x6c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcebe20bb2d052c13}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x2, 0x5, 0xd39, 0x2a, 0x9784}, {0x4, 0x2, 0x9, 0x0, 0xf07, 0x9}, 0xfffffffc, 0x2000, 0xe56}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x3a) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x21, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x100) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x19, &(0x7f0000000ec0), 0x4) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x6}, 0x4008, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(r6, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000002a00)=@migrate={0x1300, 0x21, 0x100, 0x70bd2b, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4e24, 0xd2a5, 0x4e23, 0x3ff, 0x2, 0x20, 0x1a0, 0x6, 0x0, 0xee01}, 0x6e6bb1, 0x1}, [@etimer_thresh={0x8, 0xc, 0x70}, @tfcpad={0x8, 0x16, 0x2}, @algo_auth_trunc={0x113, 0x14, {{'sha384-ce\x00'}, 0x638, 0xc0, "d2a4cc0c9707400db93d33c1861e517da69996a316b2be71ee18ba40aefb8423ecdfb64e5b09ef391b1473e6776d88c42329e82abf1c8950e9b8518d24b4f2bc19eaebff18ee4e5d22ebf5c85adbece5d84ea54e613f0b5b421eb9ff1fac24313c71ebc9e3d220c518836662a918cf92da71117b8b5da33bdbdb40ef9f7a1efb42361230985647379e1c2af617f86fcb68e90a89e72b35b89b894bde6032be37b42e0647bfa9e8ad9c35558c0495b67874a2871fc00753ef22dedf9d2a497c386e99997e2d1c7c"}}, @lastused={0xc, 0xf, 0x5aa}, @algo_auth_trunc={0x76, 0x14, {{'ghash\x00'}, 0x150, 0x40, "a8decb9892977d1d6b8870c98593d7138e809604e3be3654f76268e5ab4a58df4542815c52ff4d3b9ad4"}}, @offload={0xc, 0x1c, {r2, 0x3}}, @algo_auth={0xa3, 0x1, {{'sm3-ce\x00'}, 0x2d8, "00c317371a0de3e295818aa22c132ac4a1a862da5b4bf106d588f59b6f9edb112fd501bb4d42cefff7b33088014430eff493cc376d17ae53342c098201ade02719a515dd3290c6545994756890064b6ea7f4e5db39c79ecf3fb5e7"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffff7}, @algo_comp={0x1048, 0x3, {{'lzs\x00'}, 0x8000, "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"}}]}, 0x1300}, 0x1, 0x0, 0x0, 0x240408d4}, 0x400c000) sendmsg$sock(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="6bd9", 0x2}], 0x1}, 0x40810) r10 = gettid() r11 = perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0xffffffff}, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xff}, 0xc18, 0x0, 0x4, 0x1, 0x0, 0xc1b3, 0x0, 0x0, 0x1}, 0x0, 0x0, r11, 0x0) r12 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c40a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0xc884, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r11, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x2400, 0x8b) 5m3.746076761s ago: executing program 4 (id=3915): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x2b04, 0x900}, 0x60) 5m3.444771717s ago: executing program 4 (id=3919): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000300)='syzkaller\x00', 0x22b, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=@raw=[@func, @map_fd, @exit, @jmp={0x5, 0x0, 0x4}], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r4, &(0x7f0000003a00)={&(0x7f0000001940)={0xa, 0x4e21, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000003980)=[{&(0x7f0000001980)="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", 0x560}], 0x1, &(0x7f00000039c0)=[@dstopts_2292={{0x38, 0x29, 0x4, {0x2e, 0x4, '\x00', [@hao={0xc9, 0x10, @private0}, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0x2}]}}}], 0x38}, 0x1) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r5}) sendmsg$nl_generic(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x1a8, 0x24, 0x10, 0x70bd2a, 0x25dfdbfb, {0x20}, [@nested={0xcf, 0x90, 0x0, 0x1, [@nested={0x4, 0xb4}, @nested={0x4, 0x8}, @nested={0x4, 0x52}, @generic="d2b6d5123c9327ee08c140b42543476a2f6e6b1079174bbfe0e594853644e50e1b90a1bb2dd91c072ea874008d1ec671476acd4bd748b75299b8395e9f03e1a7a20dde0ea2e80321cf744aeb237a795daf8dc88c1d5677872b88fa38c638fceb8d8294899d7e33ca0ce35a2278f29ecec752665dd0bea56ca6e32b70d94f1804a9a99c0a5cc1ae325bee3de9370bfab7d39929a1010915a5c823a6c372f1b0c8d7f0ccdb665f0a7e82e65c079f82665211af1e6bcc74df4e2684906c12872f"]}, @nested={0x51, 0x54, 0x0, 0x1, [@nested={0x4, 0x30}, @generic="8f0c3ef0a11087c3b63ee16a36a65b7c6ac7224185b4120478dc7c6b718254f3121fe780c63384127064a83c8ff215db08a82dfea7d7df519170734dc60b2705fc8bec16524108d4e7"]}, @generic="d50b93db2f6cbdc9ce747ca90694db965735b1d245f7423227947a5e801699977a404b107d452fd9b0311fdb4a49049ba0de9fc8e8a65efdbb0ad5475e910f8d1b13e743a55f88a4319cd95451c435f9c7fd64132e5de4dea2082637436fb8cd30eaae754694645e398f0ac03995"]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000}, 0x4) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) 5m2.636497626s ago: executing program 4 (id=3923): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28, 0x40000000}, 0x40) 4m47.49743533s ago: executing program 37 (id=3923): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28, 0x40000000}, 0x40) 2m4.199596197s ago: executing program 6 (id=5502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000007efff000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xdc}}, 0x0) 2m4.121646384s ago: executing program 6 (id=5504): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40002100) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x5c, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x8, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@newchain={0x3c, 0x64, 0x100, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x9, 0xa}, {0xb, 0x2}, {0x2, 0x2}}, [@f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @loopback}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000800) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b904021d08040000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300fffc07600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000) 2m3.168968169s ago: executing program 6 (id=5519): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="5c00000012006bab9a3ff3d86e17aa0a056b876c1d00489200000080000000002a5ad6f7007ea60864160af34afe5f5e1be7ff5bdf1931a0e64f88c1976627dc80fd4460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}, {&(0x7f0000000380)}, {&(0x7f00000006c0)="b2baa164b197fa8603817e603576b664654d01b1139d1a43737dba64da0e460cf2968642c35b635091b614907a9a9cf4939c17ed38cbd4e0e5", 0x39}, {&(0x7f0000000700)="90113146052753b2118f98adf652ab3bca53e5f3", 0x14}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f00000009c0)=""/185, 0xb9}, {&(0x7f0000000a80)=""/92, 0xb9}, {&(0x7f0000000480)=""/199, 0xc7}, {&(0x7f0000000100)=""/146, 0x92}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000240)=""/81, 0x51}, {&(0x7f0000000600)=""/183, 0xb7}], 0x8}, 0x40010022) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10182) r1 = perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x8, 0xeb, 0x6, 0x9, 0x0, 0x6, 0x28020, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10005, 0x2, @perf_config_ext={0x4, 0x20}, 0x8008, 0xfffffffffffffffe, 0x1, 0x1c, 0x24, 0x408, 0x1, 0x0, 0x483, 0x0, 0x20008}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000054}, 0x2000c8d1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) 2m1.717970412s ago: executing program 6 (id=5523): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @loopback, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="24000000000000002900000032000000ff020000000000000000000000000001ea10cfc94ad8fcd7d86c2c5cfad68ec86feb0fb5b7d7b90f0563e18cba0b15d92d5f96aa", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x4004000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000010000008000", @ANYRES32=0x0, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b70200001fffffff7b", @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) sendmsg(0xffffffffffffffff, 0x0, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$kcm(0x2c, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x59, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32], 0x0, 0x4}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000290091"], 0xfe33) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x51) socket$kcm(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) perf_event_open(&(0x7f0000000000)={0x5, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xcf}, 0x10000, 0x0, 0x0, 0x0, 0xf1f, 0x402000a, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0x8000000000, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780), 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000000) 2m1.470992401s ago: executing program 6 (id=5527): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040080}, 0x24000851) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xc9, 0x47, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000160081044e81f782db44b9040a1d080206000000040000a118000200fe05000000000e1208000f0100810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803", 0x4c}, {&(0x7f0000000500)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a69d81efd66f3affa37aaa31c99041171824f069f392273bd5ce1ab2b2b6f2dcd0b5b5935c360149c52fd45fec45f0cf2728205888adff194e4191575a40", 0x8c}], 0x2, 0x0, 0x0, 0x7400}, 0x0) getpid() ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x40000) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x6d458, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000f0000000000000000002f00000085000000110000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000540)="00000000000000008a7e84d67aa8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m1.054722317s ago: executing program 6 (id=5533): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="5c00000012006bab9a3ff3d86e17aa0a056b876c1d00489200000080000000002a5ad6f7007ea60864160af34afe5f5e1be7ff5bdf1931a0e64f88c1976627dc80fd4460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}, {&(0x7f0000000380)}, {&(0x7f00000006c0)="b2baa164b197fa8603817e603576b664654d01b1139d1a43737dba64da0e460cf2968642c35b635091b614907a9a9cf4939c17ed38cbd4e0e5", 0x39}, {&(0x7f0000000700)="90113146052753b2118f98adf652ab3bca53e5f3", 0x14}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f00000009c0)=""/185, 0xb9}, {&(0x7f0000000a80)=""/92, 0xb9}, {&(0x7f0000000480)=""/199, 0xc7}, {&(0x7f0000000100)=""/146, 0x92}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000240)=""/81, 0x51}, {&(0x7f0000000600)=""/183, 0xb7}], 0x8}, 0x40010022) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10182) r1 = perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x8, 0xeb, 0x6, 0x9, 0x0, 0x6, 0x28020, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10005, 0x2, @perf_config_ext={0x4, 0x20}, 0x8008, 0xfffffffffffffffe, 0x1, 0x1c, 0x24, 0x408, 0x1, 0x0, 0x483, 0x0, 0x20008}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000054}, 0x2000c8d1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) 1m45.921057322s ago: executing program 38 (id=5533): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="5c00000012006bab9a3ff3d86e17aa0a056b876c1d00489200000080000000002a5ad6f7007ea60864160af34afe5f5e1be7ff5bdf1931a0e64f88c1976627dc80fd4460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}, {&(0x7f0000000380)}, {&(0x7f00000006c0)="b2baa164b197fa8603817e603576b664654d01b1139d1a43737dba64da0e460cf2968642c35b635091b614907a9a9cf4939c17ed38cbd4e0e5", 0x39}, {&(0x7f0000000700)="90113146052753b2118f98adf652ab3bca53e5f3", 0x14}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f00000009c0)=""/185, 0xb9}, {&(0x7f0000000a80)=""/92, 0xb9}, {&(0x7f0000000480)=""/199, 0xc7}, {&(0x7f0000000100)=""/146, 0x92}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000240)=""/81, 0x51}, {&(0x7f0000000600)=""/183, 0xb7}], 0x8}, 0x40010022) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10182) r1 = perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x8, 0xeb, 0x6, 0x9, 0x0, 0x6, 0x28020, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10005, 0x2, @perf_config_ext={0x4, 0x20}, 0x8008, 0xfffffffffffffffe, 0x1, 0x1c, 0x24, 0x408, 0x1, 0x0, 0x483, 0x0, 0x20008}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000054}, 0x2000c8d1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) 4.190071624s ago: executing program 7 (id=6494): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0x100600, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ad}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xbf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2086, 0x8, 0x0, 0x8, 0x9c03, 0x7fffffff, 0x80, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x1411, 0x2, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10044484}, 0x4000804) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x8, r1}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x19c1856, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x2d, 0x0, 0x6}, 0x28) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000190059"], 0xfe33) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x4000000) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff00c9ab007110b30000000000000000007500000095000104eda97092"], &(0x7f0000000480)='GPL\x00'}, 0x94) close(r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2880000004000000e817a10f50a7ce5f326b7c28a42e8ece278376ba3398e0c0220771800694ba9868cce12b3d896a017f37bde6d6aa5740d78e190603c00feff013767bb683825daf94de740b521e1f3633f02479b710c53b33c40a96277e0de7807457e89de4e4cb38930f734f091425f4256c6887827e6475675538804b8a44ea18e616f15eb7af8cc40c8fc33790ae210aa2ff311904a4b25bbb4c78bc26985f77c196681120dd4b1f8151fa2194d7935cc29c334f"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) 3.235646778s ago: executing program 7 (id=6501): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000001500000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x5, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) 3.046272552s ago: executing program 7 (id=6504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000213400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000000000100da"], 0x0, 0x52}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x64, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x4d, 0x3, 0x0, 0x1, [@generic="ae32562498623e57c04d11f7f76d67ea4e37aa19f834a729a0421838cf7b03d518c506086b4c990f409e23687aedbbcd3ca0c8ce696f8785dab61a23bdd3efaeefdc60853f6328b837"]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 3.039891863s ago: executing program 8 (id=6505): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x22, 0x0, 0xfeeb) recvmsg(r0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/30, 0x1e}, 0x2120) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001600)="1b", 0x1}], 0x1, &(0x7f00000015c0), 0x0, 0x44080}, 0x4008880) socket$kcm(0x10, 0x400000002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x9, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82680, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xc, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket$kcm(0xa, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x7a000000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000300000001000000040000080300ea9b3ad704929e6d330c6a936b9edade00000000000073b883e5bd0000000200000000010000000000001202000000002e00b6286fb7ab9ab388ff89"], 0x0, 0x3f, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x7, 0x1ff2f6bb}, 0x28) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x48884}, 0xc000) sendmsg$inet(r4, 0x0, 0x20040040) r6 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r6, 0x0, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x5c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x45, 0x11, 0x0, 0x1, [@generic="31f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d9015743a8b75c24acbba11f7967adc49e9cd2ebf5ec7b641b65781514f96489d456cf5"]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 2.270848794s ago: executing program 7 (id=6510): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x10, 0x0, 0x0, 0x82, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="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", 0xfdef}], 0x1}, 0x48800) sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000008c0)="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", 0x1f5}], 0x1, &(0x7f0000000780)=ANY=[], 0x50}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2d, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000d00)=[{0x10, 0x29, 0x8}], 0x10}, 0x80) r4 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x44, 0x9, 0x0, 0x1, 0xcb00}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)='%ps \x00'}, 0x20) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="11000000520033d087277b9b108b4ab51c"], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110b400000100"/24], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 2.087718035s ago: executing program 7 (id=6512): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='A', 0x1}], 0x1}, 0x24008051) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = perf_event_open(0x0, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x20000800) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)={0x14, 0x32, 0x1, 0x70bd2d, 0x25dfdbfc, {0x11}}, 0x14}}, 0x20004080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=[{0x10, 0x29, 0x4}], 0x10}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x4) close(r11) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r13 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r13, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x21, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffa}, {}, {}, [@call={0x85, 0x0, 0x0, 0x23}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xc3d}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @alu={0x7, 0x0, 0x8, 0xc, 0xa, 0x4, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) 2.041292378s ago: executing program 1 (id=6513): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2000000008, 0x800}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x3932671b473b2ee3, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r0, 0x0, 0x417}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000010010000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 2.039234908s ago: executing program 8 (id=6514): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0502000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/197, 0xc5}, {&(0x7f00000007c0)=""/251, 0xfb}, {&(0x7f0000002980)=""/4048, 0xfd0}, {&(0x7f0000003980)=""/4136, 0x1028}, {&(0x7f00000006c0)=""/198, 0xc6}, {&(0x7f00000001c0)=""/97, 0x61}, {&(0x7f0000000540)=""/138, 0x8a}], 0x7}, 0x120) (async) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 1.972582993s ago: executing program 9 (id=6515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a0104000000f5ffffff000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac404000000afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff5000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.830027977s ago: executing program 0 (id=6517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000007000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003400008"], 0xf4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.828623062s ago: executing program 9 (id=6518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1d) (async, rerun: 64) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x3b, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000003c0)=r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x41c001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000440)={'caif0\x00', 0x400}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1d8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x1}, [@NFQA_PAYLOAD={0x2a, 0xa, "7899ddaf1f38eb369f4b05dffea6fea081437ab2c13faa85669aaf021b47ee1bfd203665369a"}, @NFQA_VLAN={0x3c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1b4c}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_CT={0x10, 0xb, 0x0, 0x1, [@CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, @NFQA_PAYLOAD={0x6e, 0xa, "9fa7d5ee0b28c69980547a4fea605256a14229cf4ceb2f5c28dca2a98fd147570d6a61b4a398ea8ca7711f31d76a0267421580078a180c29a0932c81ecfed68cc6ba5cdcc47cc02c94773129270da47fb1bdc61d3ca6d7b80788261da4833ff35a4a127ea2d8c875e04f"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x7}}, @NFQA_PAYLOAD={0x5e, 0xa, "c423082876e7237ebcc8395da3983b5d71ea1210cf13f87e68ff06ff1aa96330f325bdf544fd33ab53b887767ebc48aba1787f0b63dd0a8f9fd0b2c11a68b4f82b0b355b6d172dfd74ae27c2a4de1676ea7b7547548985923221"}, @NFQA_VLAN={0x4c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x800}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xc}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_VLAN={0x24, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000840)) (async, rerun: 32) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x4000, r2}, 0x18) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r7}, &(0x7f0000000900), &(0x7f0000000940)}, 0x20) (async) fstat(r6, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) fstat(r4, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e00)={&(0x7f0000000b00)=@report={0x2cc, 0x20, 0x400, 0x70bd26, 0x25dfdbfe, {0x2b, {@in=@multicast2, @in=@local, 0x4e23, 0x3, 0x4e23, 0x6, 0x2, 0x80, 0x0, 0x3, r1, r8}}, [@offload={0xc, 0x1c, {r1, 0x1}}, @algo_auth={0x11f, 0x1, {{'hmac(sha224-asm)\x00'}, 0x6b8, "de1a3b3b34a7f7cdc384367068aa98169dfe7ab7c2de19aa3e3ede79b80edacca7ea292663b7c761c99e16c1fc16c3e2302168a56fef92b6bb75bde244eed92508c7812d816caf73874e0fd068a96befae63956052f0aba322da80bf833d21a080771b3511164537a9567a7241c24f85688056133a5218fd310febcc581cf171594c76be33590df4d8acffa10a1a9267f01395e227966b5f82aae70461c77801eac7d49d8dda327381d0f3a74e1c3dbdb7ebe70f1af668b968d603c93d5d0853a32d9c8fec08fca87bce1c9535bddedfa93759646a9255"}}, @address_filter={0x28, 0x1a, {@in6=@private2, @in=@multicast2, 0xa, 0x4, 0x7}}, @etimer_thresh={0x8, 0xc, 0xc0}, @policy_type={0xa}, @algo_crypt={0x4d, 0x2, {{'lrw(ctr-cast5-avx)\x00'}, 0x28, "5b767ea6ef"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xfffff800}, @etimer_thresh={0x8, 0xc, 0x10001}, @policy={0xac, 0x7, {{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x4e20, 0x390a, 0xa, 0x20, 0x20, 0x33, r1, r9}, {0x247, 0xb, 0x6, 0x1, 0xf11f, 0x400, 0x1000, 0x1}, {0x4, 0x3, 0x7e1, 0xffffffffffffffff}, 0x8a, 0x0, 0x1, 0x1, 0x2}}, @policy_type={0xa, 0x10, {0x1}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) (async, rerun: 64) r10 = socket(0x2, 0xa, 0x1) (rerun: 64) sendmsg$nl_generic(r10, &(0x7f0000001380)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001340)={&(0x7f0000000ec0)={0x45c, 0x20, 0x100, 0x70bd2c, 0x25dfdbff, {0x10}, [@nested={0x8, 0x94, 0x0, 0x1, [@nested={0x4, 0x11c}]}, @nested={0x10, 0x5e, 0x0, 0x1, [@nested={0x4, 0x2e}, @nested={0x4, 0xb2}, @typed={0x4, 0x6d}]}, @generic="b5e32ad39f16e968bd8bd17f07837ebf3ec16cc6816c34f281c5cd161cd56edb2e9bca670cd71553877658240cb8fa53abfc2260a4571c32de29029ba6198b1ff9a7927df79c58e5e729d3db48313c", @nested={0x39f, 0x111, 0x0, 0x1, [@generic="03bbcfdda9a4a68f40e9b135395ca0a98aacf489d6ede04947c822d62a3952e004ecbf05806ef51095ea65aba1fefbab0f8a3c7c8f3a8eab2442bd9dcb9a56624a170e5ca49af038764b9069ba0abfe8267820d7285471dd003805f3ddfee4867c82fedad5a00ba64235ce8f88158a1893563f188a37115b17c1b400dc966c06d44a7560b1a56675a82ca41644f61d43ae5475c4e6cec05ece5b38e3cb362b2f3bc7bb327873c9268eeaf215224526ccbcba38e6ad4a9f5a4f1bb8c2d6ca7023987fd1150382acbcb7a4bda023ede6a22cdb2d6bc6aa2c57c333b143acc9dfb4345b1ff27e938f6660ed2fbd3e418b992240cf476bd9e9", @generic="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", @generic="67725d7375b4bdc5ebf39620bc144ef614aca43ceec962fbb8374837a3d04821787e70b8208ad36d5e131eb989263b56d7", @typed={0x72, 0x142, 0x0, 0x0, @binary="39e90daee67d9d7f12a59d0ee539b0c968623caed10da05176f900ac4b23699a3a08f0fe9bc7f97fe5c8ae9fbedb0ca8a37805e0d40956da7330d1586b1f54141bb0e5fdca82718848a9a4318e9d6776dd450499b92cc95b02f37bf3d56466be5249a3567794def178757efd07cb"}, @typed={0x5, 0x72, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x30, 0x0, 0x0, @u32=0x40000000}, @nested={0x4, 0x14e}, @typed={0x8, 0x87, 0x0, 0x0, @uid=r9}, @nested={0x4, 0x7f}, @generic="12afb3aa313ce3954789b7833f316ef6ab983e357b0c2f06b8ea77145f86483311bcbaf4f35a7405c19c6b575a4d6601d925bd4a114d5aec9a84e205e96f9baf9788c4d0f9b8619df6274e3980a0de4f5a1076f75f90ae8ca4e29fa5b401d50afef1e210cdc275e3b83e4bbb5818832428539dfb91250bab7625cac740a2a81161182da979b3e50598b83998aeedfc9a3795364fda0e2d5aa52fe8672f5a911f81736a76226a639ef0fd734c3aaac8f6738ccbc8c6be3ee28afe5dc7e50b20878608bbea4a7a1145c5f34b5e3c463163ea2c88502d4dde7760f66c44792d895fc44e"]}, @generic="33bd33726a457716192b4d1afa58b92e33728b5eb8b911adbefb362bfe36a5491b7a31fb1f4f313ac0a9dfb58927e5460a65d836a00b20515b734729dc3ea7"]}, 0x45c}}, 0x800) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001700)={0x6, 0x23, &(0x7f00000013c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@call={0x85, 0x0, 0x0, 0x44}, @alu={0x0, 0x1, 0x3, 0xb, 0xa, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001500)='syzkaller\x00', 0x4, 0x53, &(0x7f0000001540)=""/83, 0x40f00, 0x1, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001600)={0x4, 0x5, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001640)=[r7], &(0x7f0000001680)=[{0x2, 0x5, 0x8, 0xa}, {0x2, 0x1, 0xb, 0x5}, {0x3, 0x3, 0xe, 0xa}, {0x2, 0x2, 0xc, 0x6}, {0x2, 0x4, 0xe, 0xc}, {0x2, 0x4, 0xb, 0x3}], 0x10, 0xe}, 0x94) (async) r11 = socket$netlink(0x10, 0x3, 0xe) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000028c0)={r7, &(0x7f00000017c0)="8e23642e7a645b6dbbcd5ec6703e6b9534e5fed0536561dff39ff3b2f0452e46f6a8b1e1f556d76f711952307960dff9d853f3e88389f50e22f9cc5c994f85433273ceff143e6c5735bac262f2be8f7801d9164c149ed9866dd074db75e7d5a2f0db83e800899fd7dfd758717b57d407657cce08ac8a85a88da5900e63dd46706fce334760b58452f1c6a1b30c6257acec93f33c962afd78e615ae9085a8aa03ebe78f021c6cb2641e4f076fea7566f0aea06d36eea2f6726cb2c054240702fd229c0659e7e2c5f454c5787158ce793a412747953890256d5ebcddc04ce4e149888771696490c268cdf56ccd16a4", &(0x7f00000018c0)=""/4096, 0x4}, 0x20) (async) r12 = openat$cgroup_ro(r11, &(0x7f0000002900)='blkio.bfq.time_recursive\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(r12, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x14, 0xc, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}}, 0x4000000) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)=@delqdisc={0x5c, 0x25, 0x500, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x3, 0xfff1}, {0x1, 0xfff1}, {0x9}}, [@TCA_RATE={0x6, 0x5, {0x66}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf3, 0x7, 0xa, 0xe, 0x3, 0x5, 0xa917, 0x6}}, {0x10, 0x2, [0x5, 0x4, 0xfff8, 0x7, 0x3, 0x9]}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x804) 1.771282397s ago: executing program 1 (id=6519): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_LINK_CREATE(0xa, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x3, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x100000, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, r1, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000000, 0x8, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2d", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f90020"}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x400c804) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fc08000000000200875a65969ff57b00000000000000000000000300ac1414aa"], 0xfdef) 1.770591426s ago: executing program 8 (id=6520): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000880)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000b40)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240), &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x36, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x45, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000010) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) sendmsg$xdp(r3, &(0x7f0000000b00)={&(0x7f00000006c0)={0x2c, 0x2, r4, 0x3}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000700)="92216411721d3cb008d87e3c5378f1345421b5599f17a6538ae39c869cc6e1337d06950c108ebb82812b152f0763ece12ff07d2fdc7ad67dcb29a236f8f427ed47e5e3e36445b4ceaae9c5718bd701925c91175a97c7d57a2cd820a84eb445f3f6cb8cd5cede6cb28f0232ebc9f7cfa3866140628a2a9761a688c66f66b00a26fbacb0e97ae75abe1d875223fcd52c183e12e2c028d53395d8ad5f6c6bd95e6309d932f2c86ba79e451ef97bc700179461228288a805c3f2ff158ce141c3ccd5f04a44369825b84e13223a559429b5f1c8c91e2ccec0b1dc99ff435304465d0f32e4ab80eb05ae389fe11c", 0xeb}, {&(0x7f0000000800)="5506428ad21de7bca499d1f42b19545c20f65f51dceb5a3ee9b3c19625a692ca91e9cae4548e0d198befa2862cbd8fd44ed35c1cabbc3c1831bbb90bc99909fc18ead204ef0f2553ab866f7c", 0x4c}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="3bbe4a291f837bf0895b26cec78a642a8d0ef7ad4fbea8d00d94d5d059b67d591048ad9547ee746a7277e741e675e4e21ac786a98d3912b54ac955262c68195996baa145284cf7088c36f92f9e53217f544bae74d7453195bf7008a94b5b340fcd5fccfc3ba8c5f02cbcb92bb8308dc26e3a4a25d3d2223612debaa71967420658c5380408c882df13ab23b021da3c811c89815c46ee04dfec1d41788189a0f52202ef17b3fd86bb793677a59f2771627e14d89437468190", 0xb8}, {&(0x7f0000000980)="30b190af698fb4a466cc23187986ff4e3d912c8c6c11f7b5cb5923f6bf0e684559c8f8663c549a2b5bf396", 0x2b}, {&(0x7f00000009c0)="df02036ad9830495fd54733c023cc7dd99de92cd32a01f4209d05459ba960b7d497d9ed306c09810ea48226580be4a977e0fed088b", 0x35}, {&(0x7f0000000a00)="f21f69cb8b6eb0a98cd129494aebd27ac6a14cadee41ff4e0efd8308c7a961e8afd3973749bc94e060f95d8a184a484a14ea7ec0fec9c3312e6df124c5416864372f12b98c13db7f85e193", 0x4b}], 0x7, 0x0, 0x0, 0x20000}, 0xc1) 1.701653264s ago: executing program 0 (id=6521): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000100)=@hci={0x1f, 0x1}, 0x80, 0xffffffffffffffff}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000009c0)="2e00000011008188e6b62aa73772cc891ba1f848430000005e14060200007026b29029001000000002e0c536a8bfd4b4d9", 0x31}], 0x1}, 0x24004000) socketpair(0x16, 0x80000, 0xa4c, &(0x7f00000007c0)) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000780)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x1a, &(0x7f0000000140), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x44c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0e00009bd028ef8020"], 0xfe33) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x2, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0xffffffffffffffff, 0x41000, 0x0, '\x00', 0x0, 0x38}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[], 0xc8}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002500010125bd7000fbfffffe4a000040080003004700"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x4011}, 0x4000050) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$kcm(0x28, 0x5, 0x0) 1.644756543s ago: executing program 1 (id=6522): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x10, 0x0, 0x0, 0x82, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="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", 0xfdef}], 0x1}, 0x48800) sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000008c0)="25dadad1ea3fefc966a35de8837c6f0476ac1fe28a22563c61f0e168b3b00c1ec8437de08a977472add50682f4c11664552cb29db4fa17fa8f986a74db40b02396c94a247c72a91de30343a04156c5e97f311f99731ca3173760da21bf53f315936ce8428eddd046eaae7f202a20b1fad0281ddf8492d329923190b4705aea46c7234ec453c792878c0ca542f5a162851ac14bf876a3cbf5b8467d38acc00ffa143b8e267affead3affbdecf1befa47daf6bcffae571be532f955d564e26261eaa594329b91b7506e3606f257d5d43d1fd6469c4c38f6b8dcffad7835484ee99b4a7c492037aca8bd6205477e5bde91b3a5d153ca205d33c263db61d6c85f4935d824fe5e3d7ce2f4b8ecae234201224bf82d56cce927c0747ff29ba88a86614213cefe72b5b5be77a51262f1f54735c3d0e953c3a6766d007423cda7fa0a4ba7d850b08b56b77e547be93ddb40ef96c24c9e257b15fd81ec4ef6a212ae2e8c3e4050b580e73ac39ee05aeb9e13f284174ab91e8aabbf41136eab0baf552fde4b5332affa44c3085b30d9bd60ee6410adf18ecd1aec827dc588adc8b88d3de5907fc088b6c15d90295a4fe854a62fe2a1a9f088961fea613b1e3ed550d6a82fa03ce6750615f83b832f6b3731badc19a80d4bf107e674b53afb969d5a4e111bad1730843d868229404354ccea7c3e96df9b9338c18", 0x1f5}], 0x1, &(0x7f0000000780)=ANY=[], 0x50}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2d, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000d00)=[{0x10, 0x29, 0x8}], 0x10}, 0x80) r4 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x44, 0x9, 0x0, 0x1, 0xcb00}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)='%ps \x00'}, 0x20) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="11000000520033d087277b9b108b4ab51c"], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110b400000100"/24], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 1.591045269s ago: executing program 9 (id=6523): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x2, 0x0, 0x84) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x5c}, 0x1, 0x200000000000000, 0x0, 0x44000}, 0x20040844) 1.589485758s ago: executing program 8 (id=6524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x400400d) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000010300000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) close(0x3) socketpair(0x1, 0x6, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x56) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x2400c0d4) r6 = getpid() r7 = perf_event_open(0x0, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r9, 0x0, 0x2404c0c5) 978.11639ms ago: executing program 1 (id=6525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000ef004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xdc}}, 0x0) 666.082078ms ago: executing program 7 (id=6526): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 607.276725ms ago: executing program 1 (id=6527): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000e40), 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x14) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 606.113844ms ago: executing program 0 (id=6528): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) getpid() r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b70200001400009e219999dcade5b2c9f000b703000000000d008500000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 572.070868ms ago: executing program 8 (id=6529): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x4, &(0x7f0000002b00)=ANY=[@ANYBLOB="18000000000000000000000008002000911172000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4000000, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}, 0x94) 564.120839ms ago: executing program 0 (id=6530): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0800000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230000) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x8004745a, 0xf0ff1f00000000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={0x0}, 0x1, 0x400000000000000}, 0x4008) r8 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2050, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r9) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 469.966471ms ago: executing program 9 (id=6531): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="380200001a0013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000037000000000033000000ac1414000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000ffffffffffffffff0000000000000000ffffffff000000000000000000000000000000000a00020060000000000000004801010073686131000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"], 0x238}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8040) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 469.364746ms ago: executing program 8 (id=6532): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRESDEC=r0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89b1, &(0x7f0000000900)={'vlan0\x00', @random="0600002000"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x1c, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x2800000000000, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffff80, 0x2}, 0x10094, 0x7, 0x0, 0x4, 0x401, 0x7ffffffc, 0x400}, 0x0, 0x2, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, 0x0, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000004000000000000000300000018110000", @ANYRES16=r0, @ANYRES8=r3], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x100008, 0x0, 0x0, 0x4, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0x4000000000000007, r5, 0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000000000021aee3dece8055f60000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000100000000000000000000200000000000000000000000000000000000000100000300000000440005000a010101000000000000000000000000000004d62b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r8, &(0x7f0000000a80)={&(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}, 0x20040044) 466.491126ms ago: executing program 1 (id=6533): socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x7, &(0x7f0000000000)=r1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) socket$kcm(0x2, 0x0, 0x84) r8 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r10, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x404001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r11 = socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x2, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r13, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r12}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000180)=r15, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 324.305813ms ago: executing program 9 (id=6534): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x10000}, 0x28) syz_clone(0x170500, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x11, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xffffffffffffffff}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x6, 0xff, 0x4, 0x0, 0xffffffff, 0x108, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x2, @perf_bp={0x0, 0x9}, 0x1204, 0x27, 0x7, 0x6, 0x2, 0x4, 0x4, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x42, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a0, 0x0, @perf_config_ext={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x8000}, 0x8880) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00050000b7060000080000003c6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae58e99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472ad529cefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc979ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa09acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b183940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0xfffffffffffffff3, 0x10, &(0x7f0000000340)={0x0, 0x9}, 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) 281.642201ms ago: executing program 0 (id=6535): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x10, 0x0, 0x0, 0x82, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) socket$kcm(0x11, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x20}, 0x8000) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000008c0)="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", 0x1f5}], 0x1, &(0x7f0000000780)=ANY=[], 0x50}, 0x0) 162.882643ms ago: executing program 9 (id=6536): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRESDEC=r0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89b1, &(0x7f0000000900)={'vlan0\x00', @random="0600002000"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x1c, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffff80, 0x2}, 0x10094, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0x2, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, 0x0, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000004000000000000000300000018110000", @ANYRES16=r0, @ANYRES8=r3], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x100008, 0x0, 0x0, 0x4, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0x4000000000000007, r5, 0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000000000021aee3dece8055f60000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000100000000000000000000200000000000000000000000000000000000000100000300000000440005000a010101000000000000000000000000000004d62b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r7, &(0x7f0000000a80)={&(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x600}, 0x20040044) 0s ago: executing program 0 (id=6537): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_generic(r3, 0x0, 0xc001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x600c0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r5, 0x29, 0x19, 0x0, 0xfcd8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000039000100faff07000400000101"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db1af87ff1000000bfa100000000000007010000f8ffffffb702000008000000b703001d0000000085000000ca00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xcf, &(0x7f0000000000)=""/207, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, r7, 0x5, 0x2, 0x20000}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000061be18710000", @ANYRES32=r8], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) kernel console output (not intermixed with test programs): r+0x3c5/0x5b0 [ 860.405600][T20807] ___sys_sendmsg+0x1a5/0x2a0 [ 860.405622][T20807] ? __pfx____sys_sendmsg+0x10/0x10 [ 860.405671][T20807] ? __fget_files+0x2a/0x420 [ 860.405703][T20807] ? __fget_files+0x2a/0x420 [ 860.405722][T20807] ? __fget_files+0x3a0/0x420 [ 860.405752][T20807] __x64_sys_sendmsg+0x19b/0x260 [ 860.405776][T20807] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 860.405812][T20807] ? __pfx_ksys_write+0x10/0x10 [ 860.405843][T20807] do_syscall_64+0xec/0xf80 [ 860.405863][T20807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.405879][T20807] ? trace_irq_disable+0x37/0x100 [ 860.405898][T20807] ? clear_bhb_loop+0x60/0xb0 [ 860.405917][T20807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.405933][T20807] RIP: 0033:0x7f23a698f749 [ 860.405948][T20807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 860.405962][T20807] RSP: 002b:00007f23a77ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 860.405981][T20807] RAX: ffffffffffffffda RBX: 00007f23a6be5fa0 RCX: 00007f23a698f749 [ 860.405994][T20807] RDX: 0000000000000880 RSI: 0000200000000580 RDI: 0000000000000004 [ 860.406005][T20807] RBP: 00007f23a77ae090 R08: 0000000000000000 R09: 0000000000000000 [ 860.406016][T20807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.406025][T20807] R13: 00007f23a6be6038 R14: 00007f23a6be5fa0 R15: 00007ffe11d1a478 [ 860.406058][T20807] [ 860.407245][T20805] bridge0: port 3(dummy0) entered blocking state [ 860.672319][T20805] bridge0: port 3(dummy0) entered disabled state [ 861.099617][T20831] FAULT_INJECTION: forcing a failure. [ 861.099617][T20831] name failslab, interval 1, probability 0, space 0, times 0 [ 861.122144][T20831] CPU: 0 UID: 0 PID: 20831 Comm: syz.9.4794 Not tainted syzkaller #0 PREEMPT(full) [ 861.122166][T20831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 861.122175][T20831] Call Trace: [ 861.122181][T20831] [ 861.122189][T20831] dump_stack_lvl+0xe8/0x150 [ 861.122214][T20831] should_fail_ex+0x414/0x560 [ 861.122236][T20831] should_failslab+0xa8/0x100 [ 861.122258][T20831] __kmalloc_noprof+0xdf/0x800 [ 861.122275][T20831] ? taskstats_user_cmd+0x503/0x1130 [ 861.122300][T20831] taskstats_user_cmd+0x503/0x1130 [ 861.122334][T20831] ? __pfx_taskstats_user_cmd+0x10/0x10 [ 861.122354][T20831] ? rcu_is_watching+0x15/0xb0 [ 861.122375][T20831] ? __nla_parse+0x40/0x60 [ 861.122396][T20831] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 861.122418][T20831] genl_family_rcv_msg_doit+0x215/0x300 [ 861.122441][T20831] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 861.122469][T20831] ? bpf_lsm_capable+0x9/0x20 [ 861.122487][T20831] ? security_capable+0x7e/0x2e0 [ 861.122514][T20831] genl_rcv_msg+0x60e/0x790 [ 861.122539][T20831] ? __pfx_genl_rcv_msg+0x10/0x10 [ 861.122556][T20831] ? __pfx_taskstats_user_cmd+0x10/0x10 [ 861.122579][T20831] ? __asan_memcpy+0x40/0x70 [ 861.122594][T20831] ? __pfx_ref_tracker_free+0x10/0x10 [ 861.122611][T20831] ? __skb_clone+0x63/0x7a0 [ 861.122648][T20831] netlink_rcv_skb+0x208/0x470 [ 861.122671][T20831] ? __pfx_genl_rcv_msg+0x10/0x10 [ 861.122690][T20831] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 861.122709][T20831] ? genl_rcv+0x19/0x40 [ 861.122743][T20831] ? down_read+0x274/0x2e0 [ 861.122762][T20831] ? genl_rcv+0xd/0x40 [ 861.122781][T20831] genl_rcv+0x28/0x40 [ 861.122797][T20831] netlink_unicast+0x82f/0x9e0 [ 861.122826][T20831] ? __pfx_netlink_unicast+0x10/0x10 [ 861.122845][T20831] ? __alloc_skb+0x198/0x3a0 [ 861.122863][T20831] ? netlink_sendmsg+0x642/0xb30 [ 861.122880][T20831] ? skb_put+0x11b/0x210 [ 861.122902][T20831] netlink_sendmsg+0x805/0xb30 [ 861.122931][T20831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.122955][T20831] ? aa_sock_msg_perm+0xf1/0x1b0 [ 861.122979][T20831] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 861.122995][T20831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.123018][T20831] __sock_sendmsg+0x21c/0x270 [ 861.123038][T20831] ____sys_sendmsg+0x505/0x820 [ 861.123066][T20831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 861.123096][T20831] ? import_iovec+0x74/0xa0 [ 861.123120][T20831] ___sys_sendmsg+0x21f/0x2a0 [ 861.123144][T20831] ? __pfx____sys_sendmsg+0x10/0x10 [ 861.123200][T20831] ? __fget_files+0x2a/0x420 [ 861.123220][T20831] ? __fget_files+0x3a0/0x420 [ 861.123251][T20831] __x64_sys_sendmsg+0x19b/0x260 [ 861.123275][T20831] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 861.123306][T20831] ? __pfx_ksys_write+0x10/0x10 [ 861.123335][T20831] do_syscall_64+0xec/0xf80 [ 861.123354][T20831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.123370][T20831] ? clear_bhb_loop+0x60/0xb0 [ 861.123390][T20831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.123406][T20831] RIP: 0033:0x7f23a698f749 [ 861.123422][T20831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 861.123436][T20831] RSP: 002b:00007f23a77ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 861.123456][T20831] RAX: ffffffffffffffda RBX: 00007f23a6be5fa0 RCX: 00007f23a698f749 [ 861.123469][T20831] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 861.123480][T20831] RBP: 00007f23a77ae090 R08: 0000000000000000 R09: 0000000000000000 [ 861.123491][T20831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.123501][T20831] R13: 00007f23a6be6038 R14: 00007f23a6be5fa0 R15: 00007ffe11d1a478 [ 861.123531][T20831] [ 861.943975][T20846] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4798'. [ 864.230403][T20929] vxcan1: mtu less than device minimum [ 864.885902][T20938] pim6reg1: entered allmulticast mode [ 864.942699][T20946] netlink: 'syz.7.4841': attribute type 39 has an invalid length. [ 866.499247][T20980] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4852'. [ 866.509311][T20980] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4852'. [ 866.518727][T20980] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4852'. [ 866.555998][T20980] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4852'. [ 867.087392][T20993] FAULT_INJECTION: forcing a failure. [ 867.087392][T20993] name failslab, interval 1, probability 0, space 0, times 0 [ 867.100484][T20993] CPU: 0 UID: 0 PID: 20993 Comm: syz.9.4858 Not tainted syzkaller #0 PREEMPT(full) [ 867.100507][T20993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 867.100518][T20993] Call Trace: [ 867.100526][T20993] [ 867.100534][T20993] dump_stack_lvl+0xe8/0x150 [ 867.100559][T20993] should_fail_ex+0x414/0x560 [ 867.100584][T20993] should_failslab+0xa8/0x100 [ 867.100606][T20993] __kmalloc_noprof+0xdf/0x800 [ 867.100623][T20993] ? sock_kmalloc+0xd6/0x160 [ 867.100650][T20993] sock_kmalloc+0xd6/0x160 [ 867.100674][T20993] ____sys_sendmsg+0x1b5/0x820 [ 867.100701][T20993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 867.100730][T20993] ? import_iovec+0x74/0xa0 [ 867.100754][T20993] ___sys_sendmsg+0x21f/0x2a0 [ 867.100777][T20993] ? __pfx____sys_sendmsg+0x10/0x10 [ 867.100831][T20993] ? __fget_files+0x2a/0x420 [ 867.100850][T20993] ? __fget_files+0x3a0/0x420 [ 867.100880][T20993] __x64_sys_sendmsg+0x19b/0x260 [ 867.100904][T20993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 867.100934][T20993] ? __pfx_ksys_write+0x10/0x10 [ 867.100963][T20993] do_syscall_64+0xec/0xf80 [ 867.100981][T20993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.100997][T20993] ? trace_irq_disable+0x37/0x100 [ 867.101016][T20993] ? clear_bhb_loop+0x60/0xb0 [ 867.101036][T20993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.101052][T20993] RIP: 0033:0x7f23a698f749 [ 867.101068][T20993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 867.101083][T20993] RSP: 002b:00007f23a778d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 867.101102][T20993] RAX: ffffffffffffffda RBX: 00007f23a6be6090 RCX: 00007f23a698f749 [ 867.101115][T20993] RDX: 000000000004c840 RSI: 00002000000001c0 RDI: 0000000000000004 [ 867.101127][T20993] RBP: 00007f23a778d090 R08: 0000000000000000 R09: 0000000000000000 [ 867.101137][T20993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.101148][T20993] R13: 00007f23a6be6128 R14: 00007f23a6be6090 R15: 00007ffe11d1a478 [ 867.101185][T20993] [ 868.027095][T21015] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4864'. [ 868.084206][T21012] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4864'. [ 868.630817][T21040] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4874'. [ 868.640041][T21040] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4874'. [ 868.649052][T21040] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4874'. [ 868.888754][T21047] wlan1 speed is unknown, defaulting to 1000 [ 868.917572][T21053] netlink: 7 bytes leftover after parsing attributes in process `syz.7.4877'. [ 869.198194][T21062] FAULT_INJECTION: forcing a failure. [ 869.198194][T21062] name failslab, interval 1, probability 0, space 0, times 0 [ 869.285494][T21062] CPU: 1 UID: 0 PID: 21062 Comm: syz.8.4878 Not tainted syzkaller #0 PREEMPT(full) [ 869.285519][T21062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 869.285529][T21062] Call Trace: [ 869.285539][T21062] [ 869.285549][T21062] dump_stack_lvl+0xe8/0x150 [ 869.285586][T21062] should_fail_ex+0x414/0x560 [ 869.285634][T21062] should_failslab+0xa8/0x100 [ 869.285668][T21062] __kmalloc_cache_noprof+0x84/0x700 [ 869.285695][T21062] ? nfnetlink_rcv+0xf97/0x2590 [ 869.285744][T21062] nfnetlink_rcv+0xf97/0x2590 [ 869.285914][T21062] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 869.286020][T21062] ? ref_tracker_free+0x63a/0x7d0 [ 869.286164][T21062] ? __netlink_deliver_tap+0x807/0x850 [ 869.286190][T21062] ? netlink_deliver_tap+0x2e/0x1b0 [ 869.286293][T21062] netlink_unicast+0x82f/0x9e0 [ 869.286358][T21062] ? __pfx_netlink_unicast+0x10/0x10 [ 869.286383][T21062] ? __alloc_skb+0x198/0x3a0 [ 869.286410][T21062] ? netlink_sendmsg+0x642/0xb30 [ 869.286428][T21062] ? skb_put+0x11b/0x210 [ 869.286469][T21062] netlink_sendmsg+0x805/0xb30 [ 869.286535][T21062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.286579][T21062] ? aa_sock_msg_perm+0xf1/0x1b0 [ 869.286616][T21062] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 869.286635][T21062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.286667][T21062] __sock_sendmsg+0x21c/0x270 [ 869.286705][T21062] ____sys_sendmsg+0x505/0x820 [ 869.286760][T21062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 869.286830][T21062] ? import_iovec+0x74/0xa0 [ 869.286874][T21062] ___sys_sendmsg+0x21f/0x2a0 [ 869.286915][T21062] ? __pfx____sys_sendmsg+0x10/0x10 [ 869.287106][T21062] ? __fget_files+0x2a/0x420 [ 869.287129][T21062] ? __fget_files+0x3a0/0x420 [ 869.287201][T21062] __x64_sys_sendmsg+0x19b/0x260 [ 869.287241][T21062] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 869.287310][T21062] ? __pfx_ksys_write+0x10/0x10 [ 869.287387][T21062] do_syscall_64+0xec/0xf80 [ 869.287411][T21062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.287427][T21062] ? trace_irq_disable+0x37/0x100 [ 869.287447][T21062] ? clear_bhb_loop+0x60/0xb0 [ 869.287483][T21062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.287500][T21062] RIP: 0033:0x7f15ebb8f749 [ 869.287523][T21062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.287535][T21062] RSP: 002b:00007f15eca7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 869.287554][T21062] RAX: ffffffffffffffda RBX: 00007f15ebde5fa0 RCX: 00007f15ebb8f749 [ 869.287566][T21062] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 869.287577][T21062] RBP: 00007f15eca7e090 R08: 0000000000000000 R09: 0000000000000000 [ 869.287588][T21062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 869.287598][T21062] R13: 00007f15ebde6038 R14: 00007f15ebde5fa0 R15: 00007ffeea9d3928 [ 869.287689][T21062] [ 869.752495][T21071] netlink: 'syz.8.4882': attribute type 21 has an invalid length. [ 869.902639][T21061] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 871.364713][T21137] netlink: 'syz.9.4902': attribute type 10 has an invalid length. [ 871.373307][T21136] netlink: 'syz.9.4902': attribute type 10 has an invalid length. [ 871.576623][T21131] __nla_validate_parse: 6 callbacks suppressed [ 871.576643][T21131] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.4900'. [ 871.717228][T21146] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4905'. [ 875.861399][T21169] FAULT_INJECTION: forcing a failure. [ 875.861399][T21169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.956266][T21169] CPU: 1 UID: 0 PID: 21169 Comm: syz.8.4912 Not tainted syzkaller #0 PREEMPT(full) [ 875.956292][T21169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 875.956303][T21169] Call Trace: [ 875.956313][T21169] [ 875.956323][T21169] dump_stack_lvl+0xe8/0x150 [ 875.956360][T21169] should_fail_ex+0x414/0x560 [ 875.956407][T21169] _copy_from_user+0x2d/0xb0 [ 875.956439][T21169] ___sys_sendmsg+0x158/0x2a0 [ 875.956487][T21169] ? __pfx____sys_sendmsg+0x10/0x10 [ 875.956604][T21169] ? __fget_files+0x2a/0x420 [ 875.956677][T21169] ? __fget_files+0x2a/0x420 [ 875.956699][T21169] ? __fget_files+0x3a0/0x420 [ 875.956770][T21169] __x64_sys_sendmsg+0x19b/0x260 [ 875.956810][T21169] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 875.956878][T21169] ? __pfx_ksys_write+0x10/0x10 [ 875.956951][T21169] do_syscall_64+0xec/0xf80 [ 875.956975][T21169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.956991][T21169] ? trace_irq_disable+0x37/0x100 [ 875.957011][T21169] ? clear_bhb_loop+0x60/0xb0 [ 875.957047][T21169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.957065][T21169] RIP: 0033:0x7f15ebb8f749 [ 875.957087][T21169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.957101][T21169] RSP: 002b:00007f15eca7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 875.957120][T21169] RAX: ffffffffffffffda RBX: 00007f15ebde5fa0 RCX: 00007f15ebb8f749 [ 875.957133][T21169] RDX: 000000000004c840 RSI: 00002000000001c0 RDI: 0000000000000003 [ 875.957145][T21169] RBP: 00007f15eca7e090 R08: 0000000000000000 R09: 0000000000000000 [ 875.957156][T21169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.957166][T21169] R13: 00007f15ebde6038 R14: 00007f15ebde5fa0 R15: 00007ffeea9d3928 [ 875.957255][T21169] [ 876.223025][ T3678] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.267127][T21177] netlink: 'syz.1.4917': attribute type 10 has an invalid length. [ 876.344921][T21180] netlink: 120 bytes leftover after parsing attributes in process `syz.6.4916'. [ 876.370649][T21179] delete_channel: no stack [ 876.402989][T21183] netlink: 64779 bytes leftover after parsing attributes in process `syz.8.4918'. [ 876.482419][ T3678] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.575856][T21183] netlink: 'syz.8.4918': attribute type 29 has an invalid length. [ 876.655983][T21183] netlink: 'syz.8.4918': attribute type 29 has an invalid length. [ 876.666480][T21183] netlink: 500 bytes leftover after parsing attributes in process `syz.8.4918'. [ 877.346221][ T3678] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.449057][ T3678] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 877.570797][ T3678] batman_adv: batadv0: Removing interface: netdevsim0 [ 877.587614][T21210] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4928'. [ 877.640187][ T3678] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.736321][T21204] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.4925'. [ 878.250785][T21228] FAULT_INJECTION: forcing a failure. [ 878.250785][T21228] name failslab, interval 1, probability 0, space 0, times 0 [ 878.331356][T21228] CPU: 1 UID: 0 PID: 21228 Comm: syz.8.4934 Not tainted syzkaller #0 PREEMPT(full) [ 878.331382][T21228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 878.331393][T21228] Call Trace: [ 878.331403][T21228] [ 878.331413][T21228] dump_stack_lvl+0xe8/0x150 [ 878.331451][T21228] should_fail_ex+0x414/0x560 [ 878.331499][T21228] should_failslab+0xa8/0x100 [ 878.331537][T21228] __kmalloc_noprof+0xdf/0x800 [ 878.331562][T21228] ? bpf_test_init+0x9f/0x150 [ 878.331611][T21228] bpf_test_init+0x9f/0x150 [ 878.331658][T21228] bpf_prog_test_run_skb+0x376/0x1d50 [ 878.331716][T21228] ? __fget_files+0x2a/0x420 [ 878.331756][T21228] ? __fget_files+0x2a/0x420 [ 878.331778][T21228] ? __fget_files+0x3a0/0x420 [ 878.331800][T21228] ? __fget_files+0x2a/0x420 [ 878.331849][T21228] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 878.331882][T21228] bpf_prog_test_run+0x2c7/0x340 [ 878.331929][T21228] __sys_bpf+0x5ee/0x8a0 [ 878.331969][T21228] ? __pfx___sys_bpf+0x10/0x10 [ 878.332067][T21228] ? ksys_write+0x22a/0x250 [ 878.332126][T21228] ? __pfx_ksys_write+0x10/0x10 [ 878.332186][T21228] __x64_sys_bpf+0x7c/0x90 [ 878.332219][T21228] do_syscall_64+0xec/0xf80 [ 878.332243][T21228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.332259][T21228] ? trace_irq_disable+0x37/0x100 [ 878.332279][T21228] ? clear_bhb_loop+0x60/0xb0 [ 878.332319][T21228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.332337][T21228] RIP: 0033:0x7f15ebb8f749 [ 878.332359][T21228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.332373][T21228] RSP: 002b:00007f15eca7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 878.332392][T21228] RAX: ffffffffffffffda RBX: 00007f15ebde5fa0 RCX: 00007f15ebb8f749 [ 878.332405][T21228] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 878.332416][T21228] RBP: 00007f15eca7e090 R08: 0000000000000000 R09: 0000000000000000 [ 878.332427][T21228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.332436][T21228] R13: 00007f15ebde6038 R14: 00007f15ebde5fa0 R15: 00007ffeea9d3928 [ 878.332525][T21228] [ 878.720277][ T3678] bridge_slave_1: left allmulticast mode [ 878.726245][ T3678] bridge_slave_1: left promiscuous mode [ 878.732116][ T3678] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.804040][ T3678] bridge_slave_0: left promiscuous mode [ 878.823448][ T3678] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.858321][T21240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4939'. [ 882.206657][T21265] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4945'. [ 882.985210][ T3678] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 883.311482][ T3678] team0: Port device bond0 removed [ 883.320295][ T3678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 883.331686][ T3678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 883.342606][ T3678] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 883.354480][ T3678] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 883.371328][ T3678] bond0 (unregistering): Released all slaves [ 883.680711][T21299] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4957'. [ 883.755202][T21299] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4957'. [ 883.840502][T21299] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4957'. [ 884.155831][T21307] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.4959'. [ 884.184872][T21307] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.4959'. [ 884.298202][T15527] wlan1 speed is unknown, defaulting to 1000 [ 884.375095][T15527] syz0: Port: 1 Link DOWN [ 884.840954][T21337] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4967'. [ 884.965985][ T3678] hsr_slave_0: left promiscuous mode [ 885.013824][ T3678] hsr_slave_1: left promiscuous mode [ 885.064366][ T3678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 885.120623][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 885.289644][ T3678] veth1_vlan: left promiscuous mode [ 885.295367][ T3678] veth0_vlan: left promiscuous mode [ 885.862121][ T30] audit: type=1107 audit(1768650316.937:6): pid=21363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='zgJxx'q` -_Xwn!߻sBoqUmkI MO*k?Vx./5Ӆ0\6׮ ZSE߷Rү7Hkk펕W4(RC͙; Xu&+ nKZ[\' [ 886.176776][ T3678] team0 (unregistering): Port device team_slave_1 removed [ 886.220960][ T3678] team0 (unregistering): Port device C removed [ 887.189607][T21392] netlink: 'syz.7.4983': attribute type 5 has an invalid length. [ 887.236657][T21392] netlink: 'syz.7.4983': attribute type 5 has an invalid length. [ 887.244682][T21392] netlink: 'syz.7.4983': attribute type 5 has an invalid length. [ 887.381265][T21403] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4985'. [ 888.084776][T21430] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 888.616629][T21440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4992'. [ 888.665660][T21440] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 888.776076][T21454] netlink: 126588 bytes leftover after parsing attributes in process `syz.9.4997'. [ 889.114848][T21457] netlink: 'syz.1.4995': attribute type 2 has an invalid length. [ 889.224760][T21457] netlink: 'syz.1.4995': attribute type 1 has an invalid length. [ 889.269388][T21457] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4995'. [ 890.367958][T21480] FAULT_INJECTION: forcing a failure. [ 890.367958][T21480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.435830][T21480] CPU: 1 UID: 0 PID: 21480 Comm: syz.1.5002 Not tainted syzkaller #0 PREEMPT(full) [ 890.435855][T21480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 890.435866][T21480] Call Trace: [ 890.435876][T21480] [ 890.435887][T21480] dump_stack_lvl+0xe8/0x150 [ 890.435923][T21480] should_fail_ex+0x414/0x560 [ 890.435971][T21480] _copy_from_user+0x2d/0xb0 [ 890.436003][T21480] ____sys_sendmsg+0x2fe/0x820 [ 890.436058][T21480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 890.436128][T21480] ? import_iovec+0x74/0xa0 [ 890.436172][T21480] ___sys_sendmsg+0x21f/0x2a0 [ 890.436212][T21480] ? __pfx____sys_sendmsg+0x10/0x10 [ 890.436330][T21480] ? __fget_files+0x2a/0x420 [ 890.436418][T21480] ? __fget_files+0x2a/0x420 [ 890.436440][T21480] ? __fget_files+0x3a0/0x420 [ 890.436510][T21480] __x64_sys_sendmsg+0x19b/0x260 [ 890.436549][T21480] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 890.436617][T21480] ? __pfx_ksys_write+0x10/0x10 [ 890.436691][T21480] do_syscall_64+0xec/0xf80 [ 890.436715][T21480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.436730][T21480] ? trace_irq_disable+0x37/0x100 [ 890.436749][T21480] ? clear_bhb_loop+0x60/0xb0 [ 890.436784][T21480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.436801][T21480] RIP: 0033:0x7f5f38d8f749 [ 890.436822][T21480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 890.436839][T21480] RSP: 002b:00007f5f39c94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 890.436856][T21480] RAX: ffffffffffffffda RBX: 00007f5f38fe5fa0 RCX: 00007f5f38d8f749 [ 890.436867][T21480] RDX: 000000000004c840 RSI: 00002000000001c0 RDI: 0000000000000003 [ 890.436878][T21480] RBP: 00007f5f39c94090 R08: 0000000000000000 R09: 0000000000000000 [ 890.436888][T21480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.436899][T21480] R13: 00007f5f38fe6038 R14: 00007f5f38fe5fa0 R15: 00007ffef7d0b968 [ 890.436987][T21480] [ 890.445796][T21483] netlink: 14568 bytes leftover after parsing attributes in process `syz.7.5003'. [ 890.587759][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 890.671841][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 890.765150][ T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.987603][ T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.161925][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 891.171636][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 891.179915][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 891.190002][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 891.197782][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 891.272131][ T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.518352][ T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.300469][ T36] bridge0: port 3(dummy0) entered disabled state [ 892.413327][ T36] bridge_slave_1: left allmulticast mode [ 892.445001][ T36] bridge_slave_1: left promiscuous mode [ 892.489249][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.517389][ T36] bridge_slave_0: left allmulticast mode [ 892.552818][ T36] bridge_slave_0: left promiscuous mode [ 892.560713][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.245534][ T5846] Bluetooth: hci1: command tx timeout [ 894.399171][ T36] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 894.626657][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.642095][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 894.654605][ T36] bond0 (unregistering): (slave team0): Releasing backup interface [ 894.670653][ T36] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 894.684421][ T36] bond0 (unregistering): Released all slaves [ 894.711800][T21560] netlink: 'syz.9.5026': attribute type 2 has an invalid length. [ 894.750001][T21589] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5035'. [ 894.797084][T21589] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 894.920163][T21594] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5037'. [ 895.029095][T21503] chnl_net:caif_netlink_parms(): no params data found [ 895.326525][ T5846] Bluetooth: hci1: command tx timeout [ 895.446661][T21613] netlink: 'syz.7.5041': attribute type 1 has an invalid length. [ 895.814695][T21618] netlink: 'syz.1.5045': attribute type 21 has an invalid length. [ 896.227398][ T36] hsr_slave_0: left promiscuous mode [ 896.283349][ T36] hsr_slave_1: left promiscuous mode [ 896.303727][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.348568][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.417047][T21635] netlink: 7 bytes leftover after parsing attributes in process `syz.9.5048'. [ 896.468818][T21635] netlink: 7 bytes leftover after parsing attributes in process `syz.9.5048'. [ 896.509015][ T36] veth1_vlan: left promiscuous mode [ 896.519312][ T36] veth0_vlan: left promiscuous mode [ 897.424954][ T5846] Bluetooth: hci1: command tx timeout [ 898.060477][T21678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5059'. [ 898.636993][ T36] team0 (unregistering): Port device team_slave_1 removed [ 898.698284][ T36] team0 (unregistering): Port device team_slave_0 removed [ 899.453219][T21684] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5063'. [ 899.483563][T21685] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5062'. [ 899.493777][ T5846] Bluetooth: hci1: command tx timeout [ 899.503129][T21686] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5063'. [ 899.516586][T21686] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5063'. [ 899.619008][T21503] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.665494][T21503] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.672770][T21503] bridge_slave_0: entered allmulticast mode [ 899.700542][T21503] bridge_slave_0: entered promiscuous mode [ 899.733991][T21503] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.751500][T21503] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.780273][T21503] bridge_slave_1: entered allmulticast mode [ 899.789402][T21503] bridge_slave_1: entered promiscuous mode [ 899.952254][T21503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.001484][T21503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.171517][T21503] team0: Port device team_slave_0 added [ 900.188611][T21503] team0: Port device team_slave_1 added [ 900.322642][T21722] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5072'. [ 900.366751][T21503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.399151][T21503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.410511][T21730] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5075'. [ 900.487611][T21730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5075'. [ 900.525553][T21503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.658357][T21503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.684094][T21503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.762365][T21503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.946726][T21743] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5076'. [ 900.958698][T21503] hsr_slave_0: entered promiscuous mode [ 900.978732][T21503] hsr_slave_1: entered promiscuous mode [ 901.089440][T21748] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5078'. [ 901.160251][T21752] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5078'. [ 901.212994][T21748] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5078'. [ 901.414632][T21763] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5081'. [ 901.436285][T21765] netlink: 'syz.7.5082': attribute type 2 has an invalid length. [ 902.576992][T21800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5091'. [ 902.910543][T21808] macvlan1: entered promiscuous mode [ 902.918057][T21808] macvlan1: entered allmulticast mode [ 902.953526][T21808] veth1_vlan: entered allmulticast mode [ 903.082017][T21823] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5095'. [ 903.125090][T21822] netlink: 'syz.1.5096': attribute type 39 has an invalid length. [ 903.422647][T21503] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 903.456798][T21503] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 903.771403][T21848] netlink: 'syz.7.5103': attribute type 10 has an invalid length. [ 903.796727][T21503] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 903.847359][T21503] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 903.918944][T21850] netlink: 'syz.6.5104': attribute type 21 has an invalid length. [ 904.317948][T21503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.346563][T21503] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.367122][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.374271][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.471246][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.478440][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.610718][T11067] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.756321][T11067] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.898818][T11067] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.131092][T21900] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 905.173203][T11067] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.253832][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 905.265553][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 905.273907][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 905.283343][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 905.297045][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 905.366122][T21503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 905.863416][T21931] netlink: 'syz.7.5120': attribute type 21 has an invalid length. [ 905.934919][T11067] bridge_slave_1: left allmulticast mode [ 905.982586][T11067] bridge_slave_1: left promiscuous mode [ 906.005677][T11067] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.032171][T11067] bridge_slave_0: left allmulticast mode [ 906.048298][T11067] bridge_slave_0: left promiscuous mode [ 906.061704][T11067] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.118678][T21940] __nla_validate_parse: 11 callbacks suppressed [ 906.118698][T21940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5122'. [ 906.158579][T21942] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5123'. [ 906.174883][T21942] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5123'. [ 906.572521][T11067] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 906.729533][T21949] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5125'. [ 906.738909][T21949] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5125'. [ 906.783209][T11067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 906.801478][T11067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 906.821073][T11067] bond0 (unregistering): Released all slaves [ 907.032038][T11067] : left promiscuous mode [ 907.244269][T21961] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5127'. [ 907.317580][T21960] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5128'. [ 907.330255][ T5846] Bluetooth: hci0: command tx timeout [ 907.411906][T21967] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5128'. [ 907.428301][T21970] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5129'. [ 907.441862][T21960] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5128'. [ 907.638348][T21503] veth0_vlan: entered promiscuous mode [ 907.798227][T21905] chnl_net:caif_netlink_parms(): no params data found [ 907.847105][T21503] veth1_vlan: entered promiscuous mode [ 908.522595][T11067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 908.533810][T11067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.548098][T11067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 908.555761][T11067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.587756][T11067] veth1_vlan: left promiscuous mode [ 908.593418][T11067] veth0_vlan: left promiscuous mode [ 909.415594][ T5846] Bluetooth: hci0: command tx timeout [ 909.432641][T11067] team0 (unregistering): Port device team_slave_1 removed [ 909.474296][T11067] team0 (unregistering): Port device team_slave_0 removed [ 909.912268][T21905] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.927205][T21905] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.934452][T21905] bridge_slave_0: entered allmulticast mode [ 909.945243][T21905] bridge_slave_0: entered promiscuous mode [ 909.959903][T21905] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.969701][T21905] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.977388][T21905] bridge_slave_1: entered allmulticast mode [ 909.986398][T21905] bridge_slave_1: entered promiscuous mode [ 910.129186][T21503] veth0_macvtap: entered promiscuous mode [ 910.149863][T21503] veth1_macvtap: entered promiscuous mode [ 910.178891][T21905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.244722][T21905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.361123][T21503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 910.408486][T21905] team0: Port device team_slave_0 added [ 910.429791][T21905] team0: Port device team_slave_1 added [ 910.640718][T21503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.798166][T21905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.827705][T21905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.930207][T21905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.951214][T15528] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.979931][T21905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.987550][T21905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.022323][T21905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.049880][T15528] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.090685][T15528] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.106139][T15528] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.271648][T21905] hsr_slave_0: entered promiscuous mode [ 911.287601][T21905] hsr_slave_1: entered promiscuous mode [ 911.299561][T21905] debugfs: 'hsr0' already exists in 'hsr' [ 911.309215][T21905] Cannot create hsr debugfs directory [ 911.376760][T22075] __nla_validate_parse: 4 callbacks suppressed [ 911.376791][T22075] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5160'. [ 911.488086][ T5846] Bluetooth: hci0: command tx timeout [ 911.702668][T22085] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5164'. [ 911.768515][T22085] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5164'. [ 911.779435][T22089] IPv6: NLM_F_CREATE should be specified when creating new route [ 911.795689][T22089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 911.802958][T22089] IPv6: NLM_F_CREATE should be set when creating new route [ 911.846183][T22090] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5164'. [ 911.859037][ T2024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.877220][ T2024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.964470][T22093] netlink: 'syz.9.5167': attribute type 40 has an invalid length. [ 912.019670][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.030908][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.033628][T22093] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.498050][T22110] netlink: 'syz.9.5169': attribute type 22 has an invalid length. [ 912.506152][T22110] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5169'. [ 912.750198][T21905] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 912.808937][T21905] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 912.855224][T21905] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 912.879453][T21905] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 913.192287][T22145] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5178'. [ 913.193368][T21905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.255015][T21905] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.276124][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.283347][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.330170][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.337418][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.574183][ T5846] Bluetooth: hci0: command tx timeout [ 913.960871][T22158] : renamed from bond0 (while UP) [ 914.364857][T22174] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5183'. [ 914.718891][T21905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.991540][T21905] veth0_vlan: entered promiscuous mode [ 915.050857][T21905] veth1_vlan: entered promiscuous mode [ 915.144131][T21905] veth0_macvtap: entered promiscuous mode [ 915.155299][T21905] veth1_macvtap: entered promiscuous mode [ 915.178568][T21905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.221283][T21905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.345755][T22198] FAULT_INJECTION: forcing a failure. [ 915.345755][T22198] name failslab, interval 1, probability 0, space 0, times 0 [ 915.394680][T22198] CPU: 1 UID: 0 PID: 22198 Comm: syz.9.5189 Not tainted syzkaller #0 PREEMPT(full) [ 915.394707][T22198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 915.394719][T22198] Call Trace: [ 915.394727][T22198] [ 915.394736][T22198] dump_stack_lvl+0xe8/0x150 [ 915.394765][T22198] should_fail_ex+0x414/0x560 [ 915.394792][T22198] should_failslab+0xa8/0x100 [ 915.394816][T22198] __kmalloc_cache_node_noprof+0x88/0x700 [ 915.394838][T22198] ? page_pool_create_percpu+0x76/0xb80 [ 915.394863][T22198] page_pool_create_percpu+0x76/0xb80 [ 915.394882][T22198] ? bpf_test_run_xdp_live+0x1ba/0x1b20 [ 915.394914][T22198] bpf_test_run_xdp_live+0x1cf/0x1b20 [ 915.394938][T22198] ? bpf_dispatcher_change_prog+0xb35/0xc90 [ 915.394967][T22198] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 915.395001][T22198] ? 0xffffffffa02057c0 [ 915.395021][T22198] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 915.395045][T22198] ? 0xffffffffa02057c0 [ 915.395081][T22198] ? 0xffffffffa02036d4 [ 915.395125][T22198] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 915.395156][T22198] ? rep_movs_alternative+0x4a/0x90 [ 915.395181][T22198] ? _copy_from_user+0x94/0xb0 [ 915.395203][T22198] ? bpf_test_init+0x113/0x150 [ 915.395223][T22198] ? xdp_convert_md_to_buff+0x5b/0x330 [ 915.395252][T22198] bpf_prog_test_run_xdp+0x7c4/0x1110 [ 915.395290][T22198] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 915.395318][T22198] ? __fget_files+0x2a/0x420 [ 915.395346][T22198] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 915.395372][T22198] bpf_prog_test_run+0x2c7/0x340 [ 915.395400][T22198] __sys_bpf+0x5ee/0x8a0 [ 915.395425][T22198] ? __pfx___sys_bpf+0x10/0x10 [ 915.395464][T22198] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 915.395486][T22198] ? ksys_write+0x22a/0x250 [ 915.395508][T22198] ? __pfx_ksys_write+0x10/0x10 [ 915.395535][T22198] __x64_sys_bpf+0x7c/0x90 [ 915.395558][T22198] do_syscall_64+0xec/0xf80 [ 915.395582][T22198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.395598][T22198] ? trace_irq_disable+0x37/0x100 [ 915.395618][T22198] ? clear_bhb_loop+0x60/0xb0 [ 915.395640][T22198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.395657][T22198] RIP: 0033:0x7f23a698f749 [ 915.395679][T22198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 915.395693][T22198] RSP: 002b:00007f23a77ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 915.395713][T22198] RAX: ffffffffffffffda RBX: 00007f23a6be5fa0 RCX: 00007f23a698f749 [ 915.395727][T22198] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 915.395738][T22198] RBP: 00007f23a77ae090 R08: 0000000000000000 R09: 0000000000000000 [ 915.395750][T22198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.395761][T22198] R13: 00007f23a6be6038 R14: 00007f23a6be5fa0 R15: 00007ffe11d1a478 [ 915.395793][T22198] [ 915.678302][ T3476] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.700189][ T3476] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.711630][ T3476] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.723898][ T3476] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.075179][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.145711][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.258588][T22208] delete_channel: no stack [ 916.791551][T11067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.800703][T11067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.245171][T22234] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5197'. [ 917.270228][T22241] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5198'. [ 917.325109][T22245] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5198'. [ 917.451734][T22252] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5198'. [ 917.849363][T22273] netlink: 'syz.7.5207': attribute type 10 has an invalid length. [ 917.956052][T22279] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5210'. [ 918.330898][T22301] tap0: tun_chr_ioctl cmd 2147767511 [ 918.347630][T22303] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5216'. [ 918.466004][T22312] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5218'. [ 918.491311][T22312] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5218'. [ 918.516035][T22312] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5218'. [ 918.545566][T22315] openvswitch: netlink: Message has 576 unknown bytes. [ 918.604690][T22315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 919.101969][T22347] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5229'. [ 919.153368][T22353] netlink: 'syz.7.5231': attribute type 21 has an invalid length. [ 919.973149][T22395] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 921.699842][T22471] netlink: 'syz.8.5266': attribute type 27 has an invalid length. [ 922.125457][ T5846] Bluetooth: hci0: ISO packet for unknown connection handle 3074 [ 922.381405][T22501] __nla_validate_parse: 16 callbacks suppressed [ 922.381417][T22501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5278'. [ 922.764239][T22506] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5282'. [ 923.256903][T22522] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5288'. [ 923.277182][T22522] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5288'. [ 923.306120][T22522] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5288'. [ 923.629203][T22538] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5293'. [ 924.601492][T22554] netlink: 'syz.6.5298': attribute type 1 has an invalid length. [ 924.610368][T22554] netlink: 157116 bytes leftover after parsing attributes in process `syz.6.5298'. [ 924.910729][T22568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5303'. [ 925.087176][T22575] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 925.563239][T22595] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5310'. [ 925.956556][T22597] syzkaller0: entered promiscuous mode [ 925.962585][T22597] syzkaller0: entered allmulticast mode [ 927.526202][T22613] netlink: 'syz.6.5315': attribute type 39 has an invalid length. [ 927.887354][T22618] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5317'. [ 930.780024][T22634] ref_ctr_offset mismatch. inode: 0xb3 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 930.853775][T22636] netlink: 'syz.8.5320': attribute type 1 has an invalid length. [ 930.902579][T22636] netlink: 10084 bytes leftover after parsing attributes in process `syz.8.5320'. [ 931.313597][T22650] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5325'. [ 931.511931][T22657] netlink: 'syz.9.5326': attribute type 21 has an invalid length. [ 931.531621][T22657] IPv6: NLM_F_CREATE should be specified when creating new route [ 931.829750][T22665] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5329'. [ 932.450174][T22674] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 932.656846][T22677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5333'. [ 932.681318][T22679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5332'. [ 932.695464][T22679] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5332'. [ 932.704661][T22679] tc_dump_action: action bad kind [ 932.923524][T22677] netlink: 'syz.1.5333': attribute type 10 has an invalid length. [ 933.018388][T22677] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5333'. [ 933.212111][T22694] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5338'. [ 933.338814][T22695] veth1_macvtap: left promiscuous mode [ 933.350757][T22695] macsec0: entered allmulticast mode [ 933.394864][T22698] veth1_macvtap: entered promiscuous mode [ 933.431364][T22698] veth1_macvtap: entered allmulticast mode [ 933.449510][T22698] macsec0: entered promiscuous mode [ 933.460338][T22708] netlink: 'syz.1.5341': attribute type 21 has an invalid length. [ 933.474709][T22708] IPv6: NLM_F_CREATE should be specified when creating new route [ 933.507489][T22710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 933.700988][T22718] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5347'. [ 933.786949][T22716] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5346'. [ 934.908259][T22730] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5350'. [ 934.952955][T22730] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5350'. [ 934.965522][T22730] netlink: 80 bytes leftover after parsing attributes in process `syz.9.5350'. [ 935.002053][T22733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5352'. [ 935.136267][T22740] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5354'. [ 935.154821][T22742] netlink: 'syz.9.5355': attribute type 21 has an invalid length. [ 935.471097][T22761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5361'. [ 937.087448][T22797] netlink: 'syz.6.5370': attribute type 21 has an invalid length. [ 938.599403][T22832] __nla_validate_parse: 7 callbacks suppressed [ 938.599422][T22832] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5381'. [ 938.838394][T22849] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5388'. [ 938.880910][T22849] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5388'. [ 938.899682][T22852] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5390'. [ 938.912558][T22849] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5388'. [ 939.000483][T22852] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5390'. [ 939.035460][T22852] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5390'. [ 939.689702][T22875] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5396'. [ 940.316911][T22881] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5398'. [ 940.482820][T22886] IPv6: NLM_F_CREATE should be specified when creating new route [ 940.801926][T22896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5406'. [ 940.837285][T22898] netlink: 'syz.7.5405': attribute type 10 has an invalid length. [ 940.859170][T22898] geneve0: entered promiscuous mode [ 941.862173][T22898] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 942.380507][T22940] netlink: 'syz.6.5419': attribute type 21 has an invalid length. [ 943.304001][T22994] netlink: 'syz.6.5439': attribute type 21 has an invalid length. [ 944.130406][T23017] __nla_validate_parse: 12 callbacks suppressed [ 944.130425][T23017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5449'. [ 944.164445][T23017] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 944.666007][T23027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5453'. [ 944.829369][T23036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5457'. [ 944.898467][T23036] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5457'. [ 944.911176][T23036] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5457'. [ 944.986718][T23039] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5458'. [ 945.018291][T23042] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5459'. [ 945.039610][T23042] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5459'. [ 945.119599][T23042] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5459'. [ 945.305523][T23048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5462'. [ 947.249951][T23093] IPv6: Can't replace route, no match found [ 947.817103][T23131] netlink: 'syz.7.5490': attribute type 4 has an invalid length. [ 947.971785][T23131] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 948.659933][T23150] netem: incorrect ge model size [ 948.675531][T23150] netem: change failed [ 948.688022][T23150] -1: renamed from syzkaller0 [ 948.732873][T23150] netlink: 'syz.8.5496': attribute type 23 has an invalid length. [ 949.230456][T23185] sctp: [Deprecated]: syz.9.5508 (pid 23185) Use of int in maxseg socket option. [ 949.230456][T23185] Use struct sctp_assoc_value instead [ 949.468500][T23192] __nla_validate_parse: 20 callbacks suppressed [ 949.468533][T23192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5510'. [ 949.514043][T23194] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5511'. [ 949.722826][T23200] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5514'. [ 949.848434][T23202] vxcan1: entered allmulticast mode [ 949.879683][T23206] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5517'. [ 949.942785][T23206] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5517'. [ 949.957431][T23210] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5518'. [ 949.990751][T23206] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5517'. [ 950.035892][T23213] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5519'. [ 950.086476][T23213] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5519'. [ 950.523303][T23215] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5519'. [ 951.479920][T23227] netlink: 'syz.6.5523': attribute type 10 has an invalid length. [ 951.534226][T23227] : (slave netdevsim0): Enslaving as an active interface with an up link [ 951.988920][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 951.995857][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 952.039106][T23233] delete_channel: no stack [ 954.803338][T23272] __nla_validate_parse: 8 callbacks suppressed [ 954.803358][T23272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5538'. [ 955.384520][T23277] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5540'. [ 956.226988][T23281] netlink: 'syz.8.5540': attribute type 10 has an invalid length. [ 956.375740][T23281] netlink: 152 bytes leftover after parsing attributes in process `syz.8.5540'. [ 957.945742][T23285] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5542'. [ 958.713766][T23303] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5549'. [ 958.727329][T23303] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5549'. [ 958.750400][T23303] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5549'. [ 959.526894][T23331] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5558'. [ 960.224544][T23354] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5567'. [ 960.272714][T23351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 960.294839][T23354] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5567'. [ 960.304017][T23354] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5567'. [ 960.461315][T23360] netlink: 'syz.7.5569': attribute type 7 has an invalid length. [ 960.550885][T23363] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5571'. [ 961.371179][T23392] tmpfs: Bad value for 'mode' [ 962.003669][T23407] netlink: 'syz.9.5584': attribute type 10 has an invalid length. [ 962.012017][T23407] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5584'. [ 962.022207][T23407] veth0_vlan: entered allmulticast mode [ 962.055193][T23407] bridge0: port 3(veth0_vlan) entered blocking state [ 962.088512][T23407] bridge0: port 3(veth0_vlan) entered disabled state [ 962.182095][T23407] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 963.204674][T23446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5599'. [ 963.269690][T23446] netlink: 'syz.1.5599': attribute type 10 has an invalid length. [ 963.278321][T23446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5599'. [ 963.290401][T23446] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5599'. [ 963.312436][T23446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5599'. [ 963.744139][T23464] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5603'. [ 963.754160][T23464] netlink: 'syz.7.5603': attribute type 6 has an invalid length. [ 964.351309][T23487] netlink: 'syz.8.5614': attribute type 10 has an invalid length. [ 964.599036][T23498] netlink: 'syz.9.5619': attribute type 2 has an invalid length. [ 967.308292][T23529] __nla_validate_parse: 1 callbacks suppressed [ 967.308320][T23529] netlink: 9 bytes leftover after parsing attributes in process `syz.7.5630'. [ 967.559350][T23529] netlink: 9 bytes leftover after parsing attributes in process `syz.7.5630'. [ 967.811469][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 967.842810][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 967.851149][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 967.859080][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 967.867270][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 967.997367][T23537] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5633'. [ 968.026953][T23541] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5634'. [ 968.311326][T23552] netlink: 'syz.7.5636': attribute type 10 has an invalid length. [ 968.343044][T23552] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5636'. [ 968.404661][T23552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 968.480475][T23551] netlink: 'syz.1.5637': attribute type 39 has an invalid length. [ 969.069131][ T6499] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.101347][T23530] chnl_net:caif_netlink_parms(): no params data found [ 969.123463][T23571] netlink: 'syz.9.5644': attribute type 12 has an invalid length. [ 969.149028][T23571] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5644'. [ 969.212024][ T6499] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.376972][ T6499] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.824063][T23595] netlink: 7 bytes leftover after parsing attributes in process `syz.8.5651'. [ 969.840309][T23595] netlink: 7 bytes leftover after parsing attributes in process `syz.8.5651'. [ 969.883735][ T6499] : (slave netdevsim0): Releasing backup interface [ 969.914223][ T6499] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.970920][ T5840] Bluetooth: hci2: command tx timeout [ 970.042912][T23605] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5653'. [ 970.059331][T23605] IPv6: NLM_F_CREATE should be specified when creating new route [ 970.124770][T23602] mac80211_hwsim hwsim68 wlan0: entered allmulticast mode [ 970.147171][T23601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 970.169135][T23530] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.177664][T23530] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.184897][T23530] bridge_slave_0: entered allmulticast mode [ 970.193356][T23530] bridge_slave_0: entered promiscuous mode [ 970.258706][T23530] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.294324][T23530] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.314989][T23530] bridge_slave_1: entered allmulticast mode [ 970.362031][T23530] bridge_slave_1: entered promiscuous mode [ 970.670262][T23618] netlink: 'syz.7.5659': attribute type 10 has an invalid length. [ 970.719663][T23620] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5660'. [ 970.777447][T23618] veth1_macvtap (unregistering): left allmulticast mode [ 970.972057][T23628] FAULT_INJECTION: forcing a failure. [ 970.972057][T23628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.985696][T23628] CPU: 0 UID: 0 PID: 23628 Comm: syz.1.5663 Not tainted syzkaller #0 PREEMPT(full) [ 970.985741][T23628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 970.985760][T23628] Call Trace: [ 970.985768][T23628] [ 970.985775][T23628] dump_stack_lvl+0xe8/0x150 [ 970.985803][T23628] should_fail_ex+0x414/0x560 [ 970.985827][T23628] _copy_from_user+0x2d/0xb0 [ 970.985847][T23628] memdup_user+0x5e/0xd0 [ 970.985868][T23628] do_vfs_ioctl+0xf66/0x1430 [ 970.985887][T23628] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 970.985915][T23628] ? trace_call_bpf+0xc7/0xb60 [ 970.985947][T23628] ? __fget_files+0x2a/0x420 [ 970.985970][T23628] ? __fget_files+0x2a/0x420 [ 970.985989][T23628] ? __fget_files+0x3a0/0x420 [ 970.986007][T23628] ? __fget_files+0x2a/0x420 [ 970.986031][T23628] ? bpf_lsm_file_ioctl+0x9/0x20 [ 970.986053][T23628] __se_sys_ioctl+0x82/0x170 [ 970.986084][T23628] do_syscall_64+0xec/0xf80 [ 970.986104][T23628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.986121][T23628] ? clear_bhb_loop+0x60/0xb0 [ 970.986140][T23628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.986157][T23628] RIP: 0033:0x7f7c7ed8f749 [ 970.986172][T23628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 970.986187][T23628] RSP: 002b:00007f7c7fbae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 970.986206][T23628] RAX: ffffffffffffffda RBX: 00007f7c7efe5fa0 RCX: 00007f7c7ed8f749 [ 970.986218][T23628] RDX: 0000200000000540 RSI: 00000000c0189436 RDI: 000000000000000c [ 970.986229][T23628] RBP: 00007f7c7fbae090 R08: 0000000000000000 R09: 0000000000000000 [ 970.986239][T23628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.986250][T23628] R13: 00007f7c7efe6038 R14: 00007f7c7efe5fa0 R15: 00007ffe8ea58718 [ 970.986276][T23628] [ 971.030276][T23632] netlink: 'syz.9.5665': attribute type 21 has an invalid length. [ 971.217559][T23530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.232482][T23530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.379665][T23530] team0: Port device team_slave_0 added [ 971.409441][T23642] netlink: 'syz.7.5668': attribute type 12 has an invalid length. [ 971.439051][T23530] team0: Port device team_slave_1 added [ 971.702655][T23530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.716387][T23530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.753763][T23530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.777158][ T6499] bridge_slave_1: left allmulticast mode [ 971.782858][ T6499] bridge_slave_1: left promiscuous mode [ 971.789429][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.830580][ T6499] bridge_slave_0: left allmulticast mode [ 971.847593][ T6499] bridge_slave_0: left promiscuous mode [ 971.853633][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.045404][ T5840] Bluetooth: hci2: command tx timeout [ 972.608927][T23661] __nla_validate_parse: 3 callbacks suppressed [ 972.608944][T23661] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5676'. [ 972.796802][T23668] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5678'. [ 973.034331][ T6499] (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.058443][ T6499] (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.072479][ T6499] (unregistering): (slave batadv0): Releasing backup interface [ 973.089078][ T6499] (unregistering): (slave wlan1): Releasing backup interface [ 973.103307][ T6499] (unregistering): Released all slaves [ 973.135586][T23530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.142579][T23530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.215326][T23530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.248953][T23661] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5676'. [ 973.273584][T23672] netlink: 'syz.7.5679': attribute type 10 has an invalid length. [ 973.639492][T23672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.712852][T23672] team0: Port device bond0 added [ 974.091958][T23678] netlink: 'syz.1.5680': attribute type 12 has an invalid length. [ 974.115068][T23678] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5680'. [ 974.125385][ T5840] Bluetooth: hci2: command tx timeout [ 974.204589][T23681] netlink: 'syz.7.5682': attribute type 9 has an invalid length. [ 974.213818][T23681] netlink: 'syz.7.5682': attribute type 11 has an invalid length. [ 974.235342][T23681] netlink: 'syz.7.5682': attribute type 12 has an invalid length. [ 974.243204][T23681] netlink: 210020 bytes leftover after parsing attributes in process `syz.7.5682'. [ 974.282108][T23681] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5682'. [ 974.320139][T23530] hsr_slave_0: entered promiscuous mode [ 974.326933][T23530] hsr_slave_1: entered promiscuous mode [ 974.343623][T23530] debugfs: 'hsr0' already exists in 'hsr' [ 974.350706][T23530] Cannot create hsr debugfs directory [ 974.428287][T23688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5684'. [ 974.697699][T23697] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5689'. [ 974.759236][T23697] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5689'. [ 975.066538][T23704] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5690'. [ 975.156293][ T6499] hsr_slave_0: left promiscuous mode [ 975.303505][ T6499] hsr_slave_1: left promiscuous mode [ 975.336290][ T6499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.344133][ T6499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.373086][ T6499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.390750][ T6499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.798034][ T6499] veth1_vlan: left promiscuous mode [ 975.803428][ T6499] veth0_vlan: left promiscuous mode [ 976.205674][ T5840] Bluetooth: hci2: command tx timeout [ 976.435829][ T6499] team0 (unregistering): Port device team_slave_1 removed [ 976.482731][ T6499] team0 (unregistering): Port device team_slave_0 removed [ 976.933145][T23730] netlink: 'syz.7.5694': attribute type 12 has an invalid length. [ 978.133228][T23749] : entered promiscuous mode [ 978.283093][T23760] __nla_validate_parse: 2 callbacks suppressed [ 978.283111][T23760] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5706'. [ 978.890675][T23530] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 978.919633][T23530] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 978.963398][T23530] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 978.999298][T23530] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 979.985769][T23530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.048894][T23530] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.089467][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.096724][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.157580][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.164846][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.320043][T23530] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 980.330621][T23530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 980.741951][T23849] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5727'. [ 980.891849][T23530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 981.654778][T23530] veth0_vlan: entered promiscuous mode [ 981.734570][T23530] veth1_vlan: entered promiscuous mode [ 982.128534][T23530] veth0_macvtap: entered promiscuous mode [ 982.215622][T23530] veth1_macvtap: entered promiscuous mode [ 982.383267][T23530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 982.420319][T23530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 982.481577][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.590185][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.903783][T23886] netlink: 'syz.9.5734': attribute type 10 has an invalid length. [ 982.913561][T23886] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5734'. [ 982.950044][T23881] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5736'. [ 983.048282][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.077441][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.080505][T23889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5737'. [ 983.144620][T23886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 983.236320][T23894] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5738'. [ 983.493200][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.525474][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.615009][ T6499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.654551][ T6499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.275121][T23951] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5751'. [ 985.734192][T23970] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5755'. [ 985.772609][T23952] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5752'. [ 986.374040][T23995] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5759'. [ 986.799688][T24009] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5766'. [ 987.074499][T24016] netlink: 'syz.8.5769': attribute type 12 has an invalid length. [ 987.099850][T24016] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5769'. [ 987.885459][T24012] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5768'. [ 987.976838][T24031] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5772'. [ 988.033962][T24031] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 988.223390][T24047] netlink: 'syz.1.5776': attribute type 10 has an invalid length. [ 988.639537][T24062] IPv6: NLM_F_CREATE should be specified when creating new route [ 988.670926][T24061] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5779'. [ 989.043835][T24081] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5785'. [ 990.204666][T24131] netlink: 'syz.0.5801': attribute type 10 has an invalid length. [ 990.620678][T24150] netlink: 'syz.8.5806': attribute type 12 has an invalid length. [ 990.655921][T24150] __nla_validate_parse: 8 callbacks suppressed [ 990.655940][T24150] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5806'. [ 990.687302][T24155] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5807'. [ 990.712839][T24155] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5807'. [ 991.016273][T24173] netlink: 'syz.8.5810': attribute type 12 has an invalid length. [ 991.024136][T24173] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5810'. [ 992.828227][T24209] netlink: 30487 bytes leftover after parsing attributes in process `syz.7.5819'. [ 992.876362][T24209] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5819'. [ 993.071597][T24209] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5819'. [ 993.624351][T24225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 994.550593][T24260] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5833'. [ 995.257757][T24283] netlink: 9 bytes leftover after parsing attributes in process `syz.7.5836'. [ 995.325961][T24283] netlink: 9 bytes leftover after parsing attributes in process `syz.7.5836'. [ 995.693605][T24305] __nla_validate_parse: 2 callbacks suppressed [ 995.693624][T24305] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5843'. [ 996.351008][T24323] xt_HMARK: spi-set and port-set can't be combined [ 996.876101][T24336] netlink: 'syz.9.5853': attribute type 12 has an invalid length. [ 996.895409][T24336] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5853'. [ 997.051473][T24343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5856'. [ 997.291395][T24353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5859'. [ 997.301803][T24353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5859'. [ 997.310909][T24353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5859'. [ 997.793050][T24371] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5863'. [ 998.465189][T24394] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5869'. [ 998.641223][T24413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5872'. [ 998.793756][T24416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5873'. [ 999.326819][T24409] netlink: zone id is out of range [ 999.332010][T24409] netlink: zone id is out of range [ 999.351874][T24409] netlink: zone id is out of range [ 999.402506][T24409] netlink: get zone limit has 8 unknown bytes [ 1001.029977][T24443] netlink: 703 bytes leftover after parsing attributes in process `syz.0.5880'. [ 1001.319418][T24464] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5885'. [ 1001.454004][T24469] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5887'. [ 1001.470071][T24475] netlink: 'syz.7.5889': attribute type 12 has an invalid length. [ 1001.485562][T24475] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5889'. [ 1003.067899][T24538] netlink: 'syz.1.5903': attribute type 12 has an invalid length. [ 1003.090602][T24538] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5903'. [ 1003.332272][T24529] netlink: 'syz.0.5900': attribute type 21 has an invalid length. [ 1004.341233][T24570] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5911'. [ 1004.408193][T24572] xt_l2tp: invalid flags combination: 0 [ 1004.419938][T24570] netlink: 'syz.9.5911': attribute type 10 has an invalid length. [ 1004.466438][T24570] netlink: 152 bytes leftover after parsing attributes in process `syz.9.5911'. [ 1005.196349][T24604] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5921'. [ 1005.207340][T24601] netlink: 7 bytes leftover after parsing attributes in process `syz.8.5922'. [ 1005.236475][T24601] netlink: 7 bytes leftover after parsing attributes in process `syz.8.5922'. [ 1005.922680][T24638] netlink: 'syz.8.5936': attribute type 46 has an invalid length. [ 1006.231011][T24644] __nla_validate_parse: 3 callbacks suppressed [ 1006.231028][T24644] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5939'. [ 1006.478021][T24650] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5938'. [ 1006.618631][T24656] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5943'. [ 1006.848561][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1006.873662][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1006.882147][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1006.892590][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1006.902035][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1007.074339][T24667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1007.148030][T15573] team0: Port device syz_tun removed [ 1007.294050][T24677] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5951'. [ 1007.570078][T24662] chnl_net:caif_netlink_parms(): no params data found [ 1007.793161][T24701] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5957'. [ 1007.828003][T24704] lo: entered allmulticast mode [ 1007.919544][T24662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.936497][T24662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.944813][T24662] bridge_slave_0: entered allmulticast mode [ 1007.954953][T24662] bridge_slave_0: entered promiscuous mode [ 1008.010916][T24662] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.033853][T24662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.046135][T24662] bridge_slave_1: entered allmulticast mode [ 1008.054833][T24662] bridge_slave_1: entered promiscuous mode [ 1008.263083][T24662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.277571][T24662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.328752][T24662] team0: Port device team_slave_0 added [ 1008.343074][T24662] team0: Port device team_slave_1 added [ 1008.409400][T24662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1008.419233][T24662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1008.446197][T24662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1008.463226][T24662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1008.471552][T24662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1008.502901][T24662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1008.519070][T24721] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5965'. [ 1008.531079][T24721] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5965'. [ 1008.742790][T24662] hsr_slave_0: entered promiscuous mode [ 1008.755482][T24662] hsr_slave_1: entered promiscuous mode [ 1008.762463][T24662] debugfs: 'hsr0' already exists in 'hsr' [ 1008.789328][T24662] Cannot create hsr debugfs directory [ 1008.925734][ T5846] Bluetooth: hci3: command tx timeout [ 1009.644499][T24779] nbd: illegal input index 895345970 [ 1010.082657][T24780] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5982'. [ 1011.035424][ T5846] Bluetooth: hci3: command tx timeout [ 1011.240655][T24662] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.329054][T24662] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.575005][T24797] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5987'. [ 1011.577129][T24662] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.690025][T24662] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.682906][T24662] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1012.697583][T24662] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1012.722227][T24662] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1012.744419][T24662] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1012.752479][T24812] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5992'. [ 1012.786385][T24812] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5992'. [ 1012.862133][T24823] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5993'. [ 1013.017378][T24662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.062710][T24662] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.089119][ T5846] Bluetooth: hci3: command tx timeout [ 1013.118825][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.126076][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.420388][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1013.433098][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1013.457472][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.464659][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1013.649808][T24662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1013.716796][T24836] netlink: 'syz.8.5997': attribute type 10 has an invalid length. [ 1015.495314][ T9243] Bluetooth: hci1: command 0x0406 tx timeout [ 1015.501439][ T5840] Bluetooth: hci3: command tx timeout [ 1015.610746][T24853] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6000'. [ 1015.926704][T24662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.317152][T24882] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6007'. [ 1016.706052][T24662] veth0_vlan: entered promiscuous mode [ 1016.760360][T24662] veth1_vlan: entered promiscuous mode [ 1016.833808][T24904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6012'. [ 1016.868365][T24662] veth0_macvtap: entered promiscuous mode [ 1016.875140][T24904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6012'. [ 1016.894496][T24662] veth1_macvtap: entered promiscuous mode [ 1016.901191][T24904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6012'. [ 1016.950765][T24662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.992932][T24662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1017.038928][ T3476] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.068713][ T3476] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.100267][ T3476] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.132328][ T3476] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.215732][T24911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6015'. [ 1017.416023][T11066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.454731][T11066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.587322][T24930] netlink: 'syz.0.6018': attribute type 2 has an invalid length. [ 1017.691117][T24934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6018'. [ 1018.278094][T11066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.302999][T11066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.323065][ T2024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.459637][T24948] netlink: 9 bytes leftover after parsing attributes in process `syz.8.6023'. [ 1018.473101][T24949] netlink: 'syz.7.6024': attribute type 12 has an invalid length. [ 1018.483591][T24949] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6024'. [ 1018.493784][T24948] netlink: 9 bytes leftover after parsing attributes in process `syz.8.6023'. [ 1018.683738][T24961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6025'. [ 1018.762247][T24961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6025'. [ 1019.462818][T24993] FAULT_INJECTION: forcing a failure. [ 1019.462818][T24993] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.504330][T24993] CPU: 0 UID: 0 PID: 24993 Comm: syz.9.6033 Not tainted syzkaller #0 PREEMPT(full) [ 1019.504356][T24993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1019.504368][T24993] Call Trace: [ 1019.504377][T24993] [ 1019.504387][T24993] dump_stack_lvl+0xe8/0x150 [ 1019.504421][T24993] should_fail_ex+0x414/0x560 [ 1019.504457][T24993] should_failslab+0xa8/0x100 [ 1019.504486][T24993] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 1019.504510][T24993] ? __alloc_skb+0x1dc/0x3a0 [ 1019.504531][T24993] ? tipc_own_addr+0x45/0x2a0 [ 1019.504563][T24993] __alloc_skb+0x1dc/0x3a0 [ 1019.504596][T24993] tipc_msg_create+0x51/0x4d0 [ 1019.504633][T24993] tipc_group_proto_xmit+0xce/0x790 [ 1019.504674][T24993] tipc_group_delete+0x146/0x480 [ 1019.504695][T24993] ? lockdep_hardirqs_on+0x7b/0x110 [ 1019.504730][T24993] ? kmem_cache_free+0x197/0x620 [ 1019.504750][T24993] ? __pfx_tipc_group_delete+0x10/0x10 [ 1019.504810][T24993] ? tipc_group_self+0x26/0x1c0 [ 1019.504844][T24993] tipc_sk_leave+0x138/0x4e0 [ 1019.504875][T24993] ? tipc_release+0xb0/0x20e0 [ 1019.504900][T24993] ? __pfx_tipc_sk_leave+0x10/0x10 [ 1019.504937][T24993] ? __local_bh_enable_ip+0xd0/0x130 [ 1019.504970][T24993] tipc_release+0x321/0x20e0 [ 1019.505024][T24993] ? __pfx_tipc_release+0x10/0x10 [ 1019.505043][T24993] ? locks_remove_posix+0x381/0x630 [ 1019.505096][T24993] sock_close+0xc3/0x240 [ 1019.505120][T24993] ? __pfx_sock_close+0x10/0x10 [ 1019.505140][T24993] __fput+0x44c/0xa70 [ 1019.505193][T24993] fput_close_sync+0x113/0x220 [ 1019.505216][T24993] ? __pfx_fput_close_sync+0x10/0x10 [ 1019.505266][T24993] __x64_sys_close+0x7f/0x110 [ 1019.505301][T24993] do_syscall_64+0xec/0xf80 [ 1019.505321][T24993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.505337][T24993] ? trace_irq_disable+0x37/0x100 [ 1019.505356][T24993] ? clear_bhb_loop+0x60/0xb0 [ 1019.505383][T24993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.505401][T24993] RIP: 0033:0x7fb456f8f749 [ 1019.505420][T24993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1019.505434][T24993] RSP: 002b:00007fb457f11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1019.505452][T24993] RAX: ffffffffffffffda RBX: 00007fb4571e5fa0 RCX: 00007fb456f8f749 [ 1019.505464][T24993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1019.505474][T24993] RBP: 00007fb457f11090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.505485][T24993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.505496][T24993] R13: 00007fb4571e6038 R14: 00007fb4571e5fa0 R15: 00007ffeb1e29eb8 [ 1019.505553][T24993] [ 1019.826330][T25000] netlink: 'syz.1.6037': attribute type 12 has an invalid length. [ 1019.953863][T25003] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1020.059188][T25018] netlink: 'syz.9.6038': attribute type 21 has an invalid length. [ 1020.067794][T25018] IPv6: NLM_F_CREATE should be specified when creating new route [ 1020.587264][T25051] netlink: 'syz.9.6047': attribute type 6 has an invalid length. [ 1021.572593][T25068] netlink: 'syz.1.6052': attribute type 10 has an invalid length. [ 1021.676738][T25067] netlink: 'syz.7.6053': attribute type 10 has an invalid length. [ 1021.904519][T25084] netlink: 'syz.1.6059': attribute type 1 has an invalid length. [ 1021.952319][ T5846] Bluetooth: hci0: unexpected event 0x3d length: 82 > 14 [ 1023.303598][T25145] __nla_validate_parse: 8 callbacks suppressed [ 1023.303634][T25145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6082'. [ 1023.343488][T25146] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6083'. [ 1023.366272][T25145] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1023.691423][T25154] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6085'. [ 1023.742158][T25156] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6087'. [ 1023.874205][T25156] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6087'. [ 1024.306325][T25166] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6091'. [ 1025.356647][T25176] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6094'. [ 1025.383888][T25176] bond_slave_0: entered promiscuous mode [ 1025.389896][T25176] bond_slave_1: entered promiscuous mode [ 1025.635425][T25176] netlink: 'syz.0.6094': attribute type 27 has an invalid length. [ 1025.643318][T25176] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6094'. [ 1025.793302][T25182] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6095'. [ 1025.929251][T25182] netlink: 'syz.7.6095': attribute type 10 has an invalid length. [ 1025.939619][T25182] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6095'. [ 1026.966320][T25200] lo: entered promiscuous mode [ 1026.985530][T25200] lo: left allmulticast mode [ 1027.108775][T25210] netlink: 'syz.7.6106': attribute type 1 has an invalid length. [ 1029.424306][T25245] netlink: 'syz.0.6120': attribute type 10 has an invalid length. [ 1029.556500][T25245] __nla_validate_parse: 2 callbacks suppressed [ 1029.556525][T25245] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6120'. [ 1029.672585][T25246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6119'. [ 1030.561702][T25275] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1030.606438][T25277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6132'. [ 1030.694997][T25283] netlink: 'syz.7.6134': attribute type 10 has an invalid length. [ 1030.705052][T25283] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6134'. [ 1030.784086][T25287] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6133'. [ 1030.796473][T25287] netlink: 4696 bytes leftover after parsing attributes in process `syz.9.6133'. [ 1031.056489][T25295] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6138'. [ 1031.068841][T25295] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6138'. [ 1031.078456][T25295] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6138'. [ 1031.097736][T25295] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6138'. [ 1031.274827][T25292] netlink: 'syz.8.6137': attribute type 27 has an invalid length. [ 1031.565402][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 1031.925653][T25318] netlink: 'syz.1.6146': attribute type 10 has an invalid length. [ 1031.935128][T25318] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.945089][T25318] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.033523][T25318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.041348][T25318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.050039][T25318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.057824][T25318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.120679][T25318] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1033.486987][T25391] FAULT_INJECTION: forcing a failure. [ 1033.486987][T25391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.502159][T25391] CPU: 0 UID: 0 PID: 25391 Comm: syz.0.6173 Not tainted syzkaller #0 PREEMPT(full) [ 1033.502184][T25391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1033.502196][T25391] Call Trace: [ 1033.502204][T25391] [ 1033.502212][T25391] dump_stack_lvl+0xe8/0x150 [ 1033.502239][T25391] should_fail_ex+0x414/0x560 [ 1033.502265][T25391] _copy_from_user+0x2d/0xb0 [ 1033.502288][T25391] ___sys_sendmsg+0x158/0x2a0 [ 1033.502315][T25391] ? __pfx____sys_sendmsg+0x10/0x10 [ 1033.502360][T25391] ? __fget_files+0x2a/0x420 [ 1033.502403][T25391] ? __fget_files+0x2a/0x420 [ 1033.502423][T25391] ? __fget_files+0x3a0/0x420 [ 1033.502456][T25391] __x64_sys_sendmsg+0x19b/0x260 [ 1033.502481][T25391] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1033.502514][T25391] ? __pfx_ksys_write+0x10/0x10 [ 1033.502546][T25391] do_syscall_64+0xec/0xf80 [ 1033.502566][T25391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.502582][T25391] ? trace_irq_disable+0x37/0x100 [ 1033.502603][T25391] ? clear_bhb_loop+0x60/0xb0 [ 1033.502623][T25391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.502640][T25391] RIP: 0033:0x7fa98b18f749 [ 1033.502657][T25391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1033.502671][T25391] RSP: 002b:00007fa98c0b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1033.502691][T25391] RAX: ffffffffffffffda RBX: 00007fa98b3e5fa0 RCX: 00007fa98b18f749 [ 1033.502702][T25391] RDX: 0000000020000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 1033.502712][T25391] RBP: 00007fa98c0b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.502722][T25391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.502731][T25391] R13: 00007fa98b3e6038 R14: 00007fa98b3e5fa0 R15: 00007ffd0c0758d8 [ 1033.502761][T25391] [ 1035.457576][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1035.467888][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1035.476503][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1035.484534][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1035.492862][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1036.409219][T15562] team0: Port device syz_tun removed [ 1036.479109][T25445] FAULT_INJECTION: forcing a failure. [ 1036.479109][T25445] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.508253][T25445] CPU: 0 UID: 0 PID: 25445 Comm: syz.8.6191 Not tainted syzkaller #0 PREEMPT(full) [ 1036.508281][T25445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1036.508292][T25445] Call Trace: [ 1036.508300][T25445] [ 1036.508308][T25445] dump_stack_lvl+0xe8/0x150 [ 1036.508335][T25445] should_fail_ex+0x414/0x560 [ 1036.508359][T25445] should_failslab+0xa8/0x100 [ 1036.508382][T25445] __kmalloc_cache_node_noprof+0x88/0x700 [ 1036.508403][T25445] ? __get_vm_area_node+0x13f/0x300 [ 1036.508424][T25445] __get_vm_area_node+0x13f/0x300 [ 1036.508444][T25445] __vmalloc_node_range_noprof+0x371/0x16a0 [ 1036.508462][T25445] ? bpf_prog_alloc_no_stats+0x4a/0x500 [ 1036.508511][T25445] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1036.508531][T25445] ? __lock_acquire+0x6b6/0x2cf0 [ 1036.508556][T25445] ? bpf_prog_alloc_no_stats+0x4a/0x500 [ 1036.508576][T25445] __vmalloc_noprof+0xd2/0x120 [ 1036.508591][T25445] ? bpf_prog_alloc_no_stats+0x4a/0x500 [ 1036.508614][T25445] bpf_prog_alloc_no_stats+0x4a/0x500 [ 1036.508640][T25445] bpf_prog_alloc+0x3c/0x1a0 [ 1036.508664][T25445] bpf_prog_load+0x735/0x1a10 [ 1036.508692][T25445] ? get_pid_task+0x20/0x1f0 [ 1036.508714][T25445] ? __pfx_bpf_prog_load+0x10/0x10 [ 1036.508736][T25445] ? __might_fault+0xb0/0x130 [ 1036.508771][T25445] ? bpf_lsm_bpf+0x9/0x20 [ 1036.508789][T25445] ? security_bpf+0x7e/0x300 [ 1036.508811][T25445] __sys_bpf+0x5c3/0x8a0 [ 1036.508834][T25445] ? __pfx___sys_bpf+0x10/0x10 [ 1036.508867][T25445] ? do_syscall_64+0xa9/0xf80 [ 1036.508889][T25445] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1036.508912][T25445] ? __pfx_ksys_write+0x10/0x10 [ 1036.508937][T25445] __x64_sys_bpf+0x7c/0x90 [ 1036.508965][T25445] do_syscall_64+0xec/0xf80 [ 1036.508984][T25445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.509000][T25445] ? trace_irq_disable+0x37/0x100 [ 1036.509019][T25445] ? clear_bhb_loop+0x60/0xb0 [ 1036.509039][T25445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.509056][T25445] RIP: 0033:0x7fabce38f749 [ 1036.509071][T25445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.509085][T25445] RSP: 002b:00007fabcf2d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1036.509105][T25445] RAX: ffffffffffffffda RBX: 00007fabce5e5fa0 RCX: 00007fabce38f749 [ 1036.509118][T25445] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 1036.509130][T25445] RBP: 00007fabcf2d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.509142][T25445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.509153][T25445] R13: 00007fabce5e6038 R14: 00007fabce5e5fa0 R15: 00007ffd9e2d7478 [ 1036.509181][T25445] [ 1036.509190][T25445] warn_alloc: 2 callbacks suppressed [ 1036.509199][T25445] syz.8.6191: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 1036.615031][T25453] __nla_validate_parse: 71 callbacks suppressed [ 1036.615064][T25453] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6190'. [ 1036.615405][T25445] ,cpuset=/,mems_allowed=0-1 [ 1036.840053][T25445] CPU: 0 UID: 0 PID: 25445 Comm: syz.8.6191 Not tainted syzkaller #0 PREEMPT(full) [ 1036.840079][T25445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1036.840090][T25445] Call Trace: [ 1036.840098][T25445] [ 1036.840106][T25445] dump_stack_lvl+0xe8/0x150 [ 1036.840134][T25445] warn_alloc+0x214/0x310 [ 1036.840159][T25445] ? __pfx_warn_alloc+0x10/0x10 [ 1036.840178][T25445] ? __get_vm_area_node+0x13f/0x300 [ 1036.840200][T25445] ? __get_vm_area_node+0x2b5/0x300 [ 1036.840223][T25445] __vmalloc_node_range_noprof+0x396/0x16a0 [ 1036.840269][T25445] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1036.840290][T25445] ? __lock_acquire+0x6b6/0x2cf0 [ 1036.840316][T25445] ? bpf_prog_alloc_no_stats+0x4a/0x500 [ 1036.840337][T25445] __vmalloc_noprof+0xd2/0x120 [ 1036.840355][T25445] ? bpf_prog_alloc_no_stats+0x4a/0x500 [ 1036.840380][T25445] bpf_prog_alloc_no_stats+0x4a/0x500 [ 1036.840406][T25445] bpf_prog_alloc+0x3c/0x1a0 [ 1036.840431][T25445] bpf_prog_load+0x735/0x1a10 [ 1036.840460][T25445] ? get_pid_task+0x20/0x1f0 [ 1036.840482][T25445] ? __pfx_bpf_prog_load+0x10/0x10 [ 1036.840504][T25445] ? __might_fault+0xb0/0x130 [ 1036.840538][T25445] ? bpf_lsm_bpf+0x9/0x20 [ 1036.840556][T25445] ? security_bpf+0x7e/0x300 [ 1036.840578][T25445] __sys_bpf+0x5c3/0x8a0 [ 1036.840602][T25445] ? __pfx___sys_bpf+0x10/0x10 [ 1036.840636][T25445] ? do_syscall_64+0xa9/0xf80 [ 1036.840658][T25445] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1036.840682][T25445] ? __pfx_ksys_write+0x10/0x10 [ 1036.840706][T25445] __x64_sys_bpf+0x7c/0x90 [ 1036.840726][T25445] do_syscall_64+0xec/0xf80 [ 1036.840744][T25445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.840759][T25445] ? trace_irq_disable+0x37/0x100 [ 1036.840778][T25445] ? clear_bhb_loop+0x60/0xb0 [ 1036.840798][T25445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.840815][T25445] RIP: 0033:0x7fabce38f749 [ 1036.840831][T25445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.840845][T25445] RSP: 002b:00007fabcf2d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1036.840865][T25445] RAX: ffffffffffffffda RBX: 00007fabce5e5fa0 RCX: 00007fabce38f749 [ 1036.840879][T25445] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 1036.840891][T25445] RBP: 00007fabcf2d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.840903][T25445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.840914][T25445] R13: 00007fabce5e6038 R14: 00007fabce5e5fa0 R15: 00007ffd9e2d7478 [ 1036.840948][T25445] [ 1036.840967][T25445] Mem-Info: [ 1036.874060][T25429] chnl_net:caif_netlink_parms(): no params data found [ 1036.907275][T25445] active_anon:14920 inactive_anon:0 isolated_anon:0 [ 1036.907275][T25445] active_file:22526 inactive_file:40240 isolated_file:0 [ 1036.907275][T25445] unevictable:768 dirty:276 writeback:0 [ 1036.907275][T25445] slab_reclaimable:12310 slab_unreclaimable:112985 [ 1036.907275][T25445] mapped:33057 shmem:1376 pagetables:1913 [ 1036.907275][T25445] sec_pagetables:0 bounce:0 [ 1036.907275][T25445] kernel_misc_reclaimable:0 [ 1036.907275][T25445] free:1273190 free_pcp:16555 free_cma:0 [ 1037.153271][T25445] Node 0 active_anon:59680kB inactive_anon:0kB active_file:90104kB inactive_file:160752kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140328kB dirty:1104kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14348kB pagetables:7516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1037.197769][T25445] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1037.235088][T25445] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1037.266272][T25445] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 1037.272069][T25445] Node 0 DMA32 free:1187788kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:59480kB inactive_anon:0kB active_file:90104kB inactive_file:160752kB unevictable:1536kB writepending:1104kB zspages:0kB present:3129332kB managed:2559472kB mlocked:0kB bounce:0kB free_pcp:46464kB local_pcp:23812kB free_cma:0kB [ 1037.306879][T25445] lowmem_reserve[]: 0 0 1 1 1 [ 1037.311649][T25445] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1037.342074][T25445] lowmem_reserve[]: 0 0 0 0 0 [ 1037.346886][T25445] Node 1 Normal free:3889464kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19080kB local_pcp:9352kB free_cma:0kB [ 1037.380282][T25445] lowmem_reserve[]: 0 0 0 0 0 [ 1037.385032][T25445] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1037.408971][T25445] Node 0 DMA32: 5699*4kB (UME) 4848*8kB (UME) 3308*16kB (UME) 781*32kB (UME) 1424*64kB (UM) 598*128kB (UM) 340*256kB (UME) 309*512kB (UME) 202*1024kB (UM) 77*2048kB (UME) 66*4096kB (UM) = 1187308kB [ 1037.428832][T25445] Node 0 Normal: 0*4kB 0*8kB [ 1037.431648][T25429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.444567][T25429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.451937][T25429] bridge_slave_0: entered allmulticast mode [ 1037.470639][T25445] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1037.481643][T25445] Node 1 Normal: 162*4kB (UE) 42*8kB (UM) 26*16kB (UME) 80*32kB (UM) 25*64kB (UME) 5*128kB (UME) 7*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3889464kB [ 1037.485446][T25429] bridge_slave_0: entered promiscuous mode [ 1037.499950][T25445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1037.499972][T25445] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1037.499987][T25445] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1037.500003][T25445] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1037.500020][T25445] 64138 total pagecache pages [ 1037.500042][T25445] 0 pages in swap cache [ 1037.500049][T25445] Free swap = 124996kB [ 1037.500057][T25445] Total swap = 124996kB [ 1037.500068][T25445] 2097051 pages RAM [ 1037.500075][T25445] 0 pages HighMem/MovableOnly [ 1037.500083][T25445] 425093 pages reserved [ 1037.500089][T25445] 0 pages cma reserved [ 1037.547887][T25429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.565343][ T5840] Bluetooth: hci4: command tx timeout [ 1037.575822][T25429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.611760][T25429] bridge_slave_1: entered allmulticast mode [ 1037.619644][T25429] bridge_slave_1: entered promiscuous mode [ 1037.661700][T25475] netlink: 'syz.9.6195': attribute type 13 has an invalid length. [ 1037.704726][T25429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1037.718769][T25429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1037.757428][T25473] netlink: 'syz.0.6194': attribute type 4 has an invalid length. [ 1037.782675][T25473] netlink: 'syz.0.6194': attribute type 17 has an invalid length. [ 1037.824213][T25429] team0: Port device team_slave_0 added [ 1037.838437][T25429] team0: Port device team_slave_1 added [ 1037.906838][T25429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1037.913824][T25429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.008955][T25429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1038.022802][T25429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.121196][T25487] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6201'. [ 1038.130454][T25429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.130489][T25429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1038.222205][T25429] hsr_slave_0: entered promiscuous mode [ 1038.229238][T25429] hsr_slave_1: entered promiscuous mode [ 1038.235708][T25429] debugfs: 'hsr0' already exists in 'hsr' [ 1038.241461][T25429] Cannot create hsr debugfs directory [ 1038.561296][T25429] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.601158][T25500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6206'. [ 1038.677427][T25429] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.883904][T25429] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.077333][T25429] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.229688][T25532] netlink: 9 bytes leftover after parsing attributes in process `syz.9.6218'. [ 1039.281171][T25532] netlink: 9 bytes leftover after parsing attributes in process `syz.9.6218'. [ 1039.487552][T25536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6219'. [ 1039.646935][ T5840] Bluetooth: hci4: command tx timeout [ 1040.026910][T25429] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1040.079400][T25429] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1040.119679][T25429] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1040.140863][T25429] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1040.229294][T25552] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6222'. [ 1040.479788][T25429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.583306][T25429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1040.610308][T11067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.617552][T11067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.721706][T25566] netlink: 92 bytes leftover after parsing attributes in process `syz.8.6223'. [ 1040.744657][T11067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.751910][T11067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1040.944358][T25571] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6227'. [ 1040.959682][T25571] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6227'. [ 1041.250644][T25582] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1041.559815][T25429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.728440][ T5840] Bluetooth: hci4: command tx timeout [ 1042.161520][T25617] netlink: 'syz.1.6242': attribute type 10 has an invalid length. [ 1042.174640][T25617] __nla_validate_parse: 2 callbacks suppressed [ 1042.174660][T25617] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6242'. [ 1042.259018][T25429] veth0_vlan: entered promiscuous mode [ 1042.277726][T25620] netlink: 'syz.0.6243': attribute type 10 has an invalid length. [ 1042.305493][T25620] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6243'. [ 1042.336856][T25429] veth1_vlan: entered promiscuous mode [ 1042.357830][T25625] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6244'. [ 1042.430966][T25429] veth0_macvtap: entered promiscuous mode [ 1042.485791][T25429] veth1_macvtap: entered promiscuous mode [ 1042.511321][T25429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1042.531231][T25429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.557882][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.579151][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.594211][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.611732][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.759383][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.793180][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.890813][T11065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.904762][T11065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.026925][T25649] netlink: 'syz.8.6255': attribute type 10 has an invalid length. [ 1043.041711][T25649] netlink: 152 bytes leftover after parsing attributes in process `syz.8.6255'. [ 1043.213139][T25651] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6185'. [ 1043.453597][T25655] netlink: 'syz.0.6257': attribute type 10 has an invalid length. [ 1043.491531][T25655] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6257'. [ 1043.525950][T25655] team0: entered promiscuous mode [ 1043.540921][T25655] team_slave_0: entered promiscuous mode [ 1043.559970][T25655] team_slave_1: entered promiscuous mode [ 1043.579355][T25655] bridge0: port 3(team0) entered blocking state [ 1043.598962][T25655] bridge0: port 3(team0) entered disabled state [ 1043.616535][T25655] team0: entered allmulticast mode [ 1043.629407][T25655] team_slave_0: entered allmulticast mode [ 1043.644013][T25655] team_slave_1: entered allmulticast mode [ 1043.664162][T25655] bridge0: port 3(team0) entered blocking state [ 1043.670605][T25655] bridge0: port 3(team0) entered forwarding state [ 1043.806263][ T5840] Bluetooth: hci4: command tx timeout [ 1043.853298][T25661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6258'. [ 1043.952195][T25663] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6260'. [ 1044.316456][T25682] netlink: 'syz.1.6266': attribute type 10 has an invalid length. [ 1044.324454][T25682] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6266'. [ 1044.468393][T25686] netlink: 92 bytes leftover after parsing attributes in process `syz.7.6267'. [ 1044.480914][T25688] lo: entered allmulticast mode [ 1044.923729][T25704] sit0: entered allmulticast mode [ 1044.987168][T25704] sit0: entered promiscuous mode [ 1045.059203][T25712] netlink: 'syz.8.6279': attribute type 2 has an invalid length. [ 1045.092726][T25712] netlink: 'syz.8.6279': attribute type 2 has an invalid length. [ 1045.125482][T25712] netlink: 'syz.8.6279': attribute type 1 has an invalid length. [ 1045.156569][T25712] netlink: 'syz.8.6279': attribute type 1 has an invalid length. [ 1045.171047][T25712] netlink: 'syz.8.6279': attribute type 2 has an invalid length. [ 1045.180996][T25718] netlink: 'syz.0.6281': attribute type 10 has an invalid length. [ 1045.716734][T25740] netlink: 'syz.9.6289': attribute type 10 has an invalid length. [ 1047.577138][T25777] __nla_validate_parse: 8 callbacks suppressed [ 1047.577178][T25777] netlink: 4280 bytes leftover after parsing attributes in process `syz.8.6301'. [ 1047.637278][T25782] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6305'. [ 1047.683385][T25786] lo: entered allmulticast mode [ 1047.807367][T25792] netlink: 92 bytes leftover after parsing attributes in process `syz.9.6308'. [ 1049.077308][T25807] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6314'. [ 1049.588725][T25834] validate_nla: 3 callbacks suppressed [ 1049.588745][T25834] netlink: 'syz.1.6322': attribute type 1 has an invalid length. [ 1049.654049][ T5840] Bluetooth: hci0: unexpected event 0x3c length: 82 > 7 [ 1050.356632][T25848] netlink: 'syz.1.6328': attribute type 10 has an invalid length. [ 1050.375960][T25850] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6329'. [ 1050.406516][T25850] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6329'. [ 1050.484402][T25848] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1050.495007][T25850] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6329'. [ 1051.326224][T25883] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1052.028206][T25906] netlink: 'syz.9.6346': attribute type 1 has an invalid length. [ 1052.414525][T25920] netlink: 'syz.9.6355': attribute type 10 has an invalid length. [ 1052.432328][T25920] netlink: 152 bytes leftover after parsing attributes in process `syz.9.6355'. [ 1052.589058][T25922] netlink: 'syz.8.6351': attribute type 29 has an invalid length. [ 1052.648285][T25922] netlink: 'syz.8.6351': attribute type 4 has an invalid length. [ 1053.026174][T25924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6356'. [ 1053.079483][T25924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6356'. [ 1053.417781][T25942] netlink: 'syz.9.6362': attribute type 1 has an invalid length. [ 1053.542674][T25948] netlink: 'syz.7.6363': attribute type 1 has an invalid length. [ 1053.556075][T25949] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6364'. [ 1053.575589][T25949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6364'. [ 1054.353589][T25964] netlink: 'syz.0.6367': attribute type 10 has an invalid length. [ 1054.361852][T25964] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6367'. [ 1054.674115][T25975] netlink: 'syz.7.6374': attribute type 1 has an invalid length. [ 1054.683646][T25978] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1054.759194][T25975] netlink: 'syz.7.6374': attribute type 1 has an invalid length. [ 1054.939450][T25984] netlink: 7 bytes leftover after parsing attributes in process `syz.8.6375'. [ 1055.015050][T25984] netlink: 7 bytes leftover after parsing attributes in process `syz.8.6375'. [ 1055.123156][T25995] netlink: 'syz.0.6381': attribute type 1 has an invalid length. [ 1055.658552][T26006] netlink: 9 bytes leftover after parsing attributes in process `syz.9.6385'. [ 1055.690057][T26006] netlink: 9 bytes leftover after parsing attributes in process `syz.9.6385'. [ 1055.765057][T26012] netlink: 'syz.9.6388': attribute type 31 has an invalid length. [ 1055.800836][T26012] netlink: 'syz.9.6388': attribute type 31 has an invalid length. [ 1055.812125][T26012] netlink: 'syz.9.6388': attribute type 31 has an invalid length. [ 1055.820339][T26012] netlink: 'syz.9.6388': attribute type 31 has an invalid length. [ 1055.828633][T26012] netlink: 'syz.9.6388': attribute type 31 has an invalid length. [ 1055.861991][T26012] netlink: 'syz.9.6388': attribute type 31 has an invalid length. [ 1055.870187][T26012] netlink: 'syz.9.6388': attribute type 31 has an invalid length. [ 1055.898213][T26018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6390'. [ 1056.126840][T26028] tipc: Started in network mode [ 1056.132418][T26028] tipc: Node identity 1340008, cluster identity 4711 [ 1056.139295][T26028] tipc: Node number set to 20185096 [ 1056.146045][T26029] : renamed from veth1_vlan (while UP) [ 1056.467522][ T5840] Bluetooth: hci2: unexpected event 0x3b length: 82 > 10 [ 1059.510364][ T5840] Bluetooth: hci1: unexpected event 0x3b length: 82 > 10 [ 1063.504366][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1063.584994][T26114] __nla_validate_parse: 5 callbacks suppressed [ 1063.585027][T26114] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6422'. [ 1063.644140][T26117] netlink: 7 bytes leftover after parsing attributes in process `syz.8.6423'. [ 1063.650913][T26123] proc: Bad value for 'gid' [ 1063.659505][T26117] netlink: 7 bytes leftover after parsing attributes in process `syz.8.6423'. [ 1063.874192][T26134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6431'. [ 1063.958614][T26134] validate_nla: 30 callbacks suppressed [ 1063.958666][T26134] netlink: 'syz.0.6431': attribute type 10 has an invalid length. [ 1063.975407][T26134] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6431'. [ 1064.016008][T26134] dummy0: entered promiscuous mode [ 1064.030381][T26134] dummy0: entered allmulticast mode [ 1064.087232][T26134] bridge0: port 4(dummy0) entered blocking state [ 1064.116710][T26134] bridge0: port 4(dummy0) entered disabled state [ 1064.239566][T26141] netlink: 'syz.7.6434': attribute type 10 has an invalid length. [ 1064.277031][T26134] bridge0: port 4(dummy0) entered blocking state [ 1064.284441][T26134] bridge0: port 4(dummy0) entered forwarding state [ 1064.328454][T26141] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6434'. [ 1064.867163][T26155] netlink: 9 bytes leftover after parsing attributes in process `syz.9.6439'. [ 1064.903173][T26155] netlink: 9 bytes leftover after parsing attributes in process `syz.9.6439'. [ 1064.939906][T26150] netlink: 172 bytes leftover after parsing attributes in process `syz.8.6437'. [ 1064.960531][T26151] netlink: 172 bytes leftover after parsing attributes in process `syz.8.6437'. [ 1065.033382][T26164] netlink: 'syz.7.6441': attribute type 10 has an invalid length. [ 1065.063228][T26164] veth0_vlan: entered allmulticast mode [ 1065.098694][T26164] bridge0: port 3(veth0_vlan) entered blocking state [ 1065.122124][T26164] bridge0: port 3(veth0_vlan) entered disabled state [ 1065.173391][T26164] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1066.102535][T26203] netlink: 'syz.7.6455': attribute type 1 has an invalid length. [ 1066.179831][ T5840] Bluetooth: hci4: unexpected event 0x3b length: 82 > 10 [ 1066.234591][T26218] netlink: 'syz.9.6459': attribute type 11 has an invalid length. [ 1066.443213][T26226] netlink: 'syz.8.6462': attribute type 10 has an invalid length. [ 1066.555408][T26226] team0: Port device wlan1 added [ 1066.656285][T26238] netlink: 'syz.0.6466': attribute type 2 has an invalid length. [ 1066.684104][T26238] 9: entered promiscuous mode [ 1066.715738][T26243] lo: entered allmulticast mode [ 1067.113665][T26254] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1067.315593][T26257] netlink: 'syz.0.6475': attribute type 1 has an invalid length. [ 1067.398425][ T5840] Bluetooth: hci2: unexpected event 0x3c length: 82 > 7 [ 1067.785863][T26272] netlink: 'syz.1.6479': attribute type 21 has an invalid length. [ 1068.673038][T26289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1068.711029][T26291] __nla_validate_parse: 8 callbacks suppressed [ 1068.711062][T26291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6487'. [ 1068.811823][T26297] netlink: 1044 bytes leftover after parsing attributes in process `syz.8.6488'. [ 1068.831402][T26299] netlink: 'syz.1.6491': attribute type 1 has an invalid length. [ 1068.853801][ T5840] Bluetooth: hci0: unexpected event 0x3c length: 82 > 7 [ 1068.913404][T26303] netlink: 'syz.9.6493': attribute type 2 has an invalid length. [ 1068.937969][T26303] netlink: 14974 bytes leftover after parsing attributes in process `syz.9.6493'. [ 1069.826960][T26322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6499'. [ 1069.874950][ T12] bridge0: port 3(dummy0) entered disabled state [ 1069.897662][ T12] bridge_slave_1: left allmulticast mode [ 1069.903383][ T12] bridge_slave_1: left promiscuous mode [ 1069.935489][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.047169][ T12] bridge_slave_0: left allmulticast mode [ 1070.052946][ T12] bridge_slave_0: left promiscuous mode [ 1070.059016][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.258852][T26345] netlink: 'syz.9.6506': attribute type 39 has an invalid length. [ 1070.477946][ T12] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1070.499734][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1070.651388][ T12] team0: Port device bond0 removed [ 1070.658259][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.670602][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.680822][ T12] bond0 (unregistering): Released all slaves [ 1070.913502][T26353] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1071.102783][T26363] netlink: 'syz.8.6514': attribute type 6 has an invalid length. [ 1071.104417][T26364] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6514'. [ 1071.140516][T26365] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6514'. [ 1071.161575][T26371] netlink: 'syz.0.6516': attribute type 10 has an invalid length. [ 1071.165869][T26363] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6514'. [ 1071.173001][T26371] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6516'. [ 1071.192849][T26364] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6514'. [ 1071.498619][T26386] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6521'. [ 1071.610126][T26396] netlink: 'syz.9.6523': attribute type 21 has an invalid length. [ 1077.045458][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1077.051851][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1153.512856][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1153.530367][ T9243] Bluetooth: hci3: command 0x0406 tx timeout [ 1153.538026][ T9243] Bluetooth: hci2: command 0x0406 tx timeout [ 1153.554823][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1169.727240][ T5199] udevd[5199]: worker [26441] /devices/virtual/mac80211_hwsim/hwsim131 is taking a long time [ 1201.077004][T26443] Bluetooth: hci4: command 0x0406 tx timeout [ 1212.242838][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 114s! [syz.9.6536:26435] [ 1212.242873][ C0] Modules linked in: [ 1212.242894][ C0] irq event stamp: 11250253 [ 1212.242902][ C0] hardirqs last enabled at (11250252): [] irqentry_exit+0x5e8/0x670 [ 1212.242930][ C0] hardirqs last disabled at (11250253): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 1212.242952][ C0] softirqs last enabled at (5129558): [] __irq_exit_rcu+0x60/0x150 [ 1212.242973][ C0] softirqs last disabled at (5129561): [] __irq_exit_rcu+0x60/0x150 [ 1212.243006][ C0] CPU: 0 UID: 0 PID: 26435 Comm: syz.9.6536 Not tainted syzkaller #0 PREEMPT(full) [ 1212.243033][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1212.243044][ C0] RIP: 0010:unwind_next_frame+0xc2/0x23d0 [ 1212.243065][ C0] Code: 00 e8 72 b1 33 00 4c 8d 3d 00 00 00 00 48 c7 c7 a0 1a f4 8d 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 41 57 e8 9e f0 29 00 <48> 83 c4 08 e8 95 28 e6 09 85 c0 74 3a e8 ac ff 32 00 84 c0 75 31 [ 1212.243079][ C0] RSP: 0018:ffffc900000075b0 EFLAGS: 00000286 [ 1212.243093][ C0] RAX: 1bff952f3d9d9600 RBX: ffffffff8b5b5088 RCX: 0000000000000101 [ 1212.243106][ C0] RDX: 0000000054904df0 RSI: ffffffff8d97773b RDI: ffffffff8bc08a60 [ 1212.243117][ C0] RBP: dffffc0000000000 R08: ffffffff8173fdd5 R09: ffffffff8df41aa0 [ 1212.243130][ C0] R10: ffffc90000007360 R11: ffffffff81acf4b0 R12: 1ffff92000000ed1 [ 1212.243142][ C0] R13: ffffc900000076c0 R14: ffffc90000007688 R15: ffffffff8173fdd5 [ 1212.243156][ C0] FS: 00007fb457ecf6c0(0000) GS:ffff888125e1e000(0000) knlGS:0000000000000000 [ 1212.243170][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1212.243183][ C0] CR2: 0000559f8fc7d048 CR3: 0000000077394000 CR4: 00000000003526f0 [ 1212.243198][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 1212.243209][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1212.243220][ C0] Call Trace: [ 1212.243229][ C0] [ 1212.243236][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 1212.243270][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1212.243312][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1212.243345][ C0] ? preempt_schedule_irq+0x48/0xa0 [ 1212.243385][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1212.243413][ C0] arch_stack_walk+0x11c/0x150 [ 1212.243462][ C0] ? preempt_schedule_irq+0x48/0xa0 [ 1212.243505][ C0] stack_trace_save+0x9c/0xe0 [ 1212.243534][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1212.243613][ C0] kasan_save_track+0x3e/0x80 [ 1212.243632][ C0] ? kasan_save_track+0x3e/0x80 [ 1212.243648][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1212.243664][ C0] ? kmem_cache_alloc_node_noprof+0x43c/0x720 [ 1212.243680][ C0] ? kmalloc_reserve+0xbd/0x290 [ 1212.243699][ C0] ? __alloc_skb+0x204/0x3a0 [ 1212.243715][ C0] ? new_skb+0x2f/0x2b0 [ 1212.243732][ C0] ? aoecmd_cfg+0x28b/0x7c0 [ 1212.243748][ C0] ? call_timer_fn+0x16e/0x590 [ 1212.243763][ C0] ? __run_timer_base+0x61a/0x860 [ 1212.243778][ C0] ? run_timer_softirq+0xb7/0x180 [ 1212.243793][ C0] ? handle_softirqs+0x22b/0x7c0 [ 1212.243808][ C0] ? __irq_exit_rcu+0x60/0x150 [ 1212.243823][ C0] ? irq_exit_rcu+0x9/0x30 [ 1212.243838][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1212.243855][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1212.243872][ C0] ? preempt_schedule_irq+0x48/0xa0 [ 1212.244067][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1212.244099][ C0] kmem_cache_alloc_node_noprof+0x43c/0x720 [ 1212.244126][ C0] ? kmalloc_reserve+0xbd/0x290 [ 1212.244174][ C0] kmalloc_reserve+0xbd/0x290 [ 1212.244203][ C0] ? __alloc_skb+0x198/0x3a0 [ 1212.244233][ C0] __alloc_skb+0x204/0x3a0 [ 1212.244279][ C0] new_skb+0x2f/0x2b0 [ 1212.244310][ C0] ? is_aoe_netif+0x216/0x300 [ 1212.244347][ C0] aoecmd_cfg+0x28b/0x7c0 [ 1212.244372][ C0] ? aoecmd_cfg+0xdc/0x7c0 [ 1212.244398][ C0] ? __pfx_aoecmd_cfg+0x10/0x10 [ 1212.244414][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1212.244482][ C0] ? lock_acquire+0x222/0x340 [ 1212.244533][ C0] call_timer_fn+0x16e/0x590 [ 1212.244555][ C0] ? __pfx_discover_timer+0x10/0x10 [ 1212.244576][ C0] ? call_timer_fn+0xbe/0x590 [ 1212.244599][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1212.244675][ C0] ? __pfx_discover_timer+0x10/0x10 [ 1212.244710][ C0] __run_timer_base+0x61a/0x860 [ 1212.244799][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1212.244814][ C0] ? clockevents_program_event+0x247/0x350 [ 1212.244869][ C0] ? sched_clock_cpu+0x74/0x430 [ 1212.244921][ C0] run_timer_softirq+0xb7/0x180 [ 1212.244950][ C0] handle_softirqs+0x22b/0x7c0 [ 1212.244983][ C0] ? __irq_exit_rcu+0x60/0x150 [ 1212.245042][ C0] __irq_exit_rcu+0x60/0x150 [ 1212.245062][ C0] irq_exit_rcu+0x9/0x30 [ 1212.245079][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1212.245102][ C0] [ 1212.245108][ C0] [ 1212.245122][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1212.245139][ C0] RIP: 0010:preempt_schedule_irq+0x48/0xa0 [ 1212.245155][ C0] Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 54 bf 01 00 00 00 e8 53 5b 35 f6 e8 3e 71 6d f6 fb bf 01 00 00 00 c3 a9 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 c4 72 6d f6 bf 01 [ 1212.245168][ C0] RSP: 0018:ffffc9000410ebf8 EFLAGS: 00000206 [ 1212.245182][ C0] RAX: 0000000000140c3f RBX: 0000000000000000 RCX: 0000000000000001 [ 1212.245191][ C0] RDX: 0000000000000007 RSI: ffffffff8d793871 RDI: 0000000000000001 [ 1212.245202][ C0] RBP: 0000000000000000 R08: ffffffff8f822a77 R09: 1ffffffff1f0454e [ 1212.245214][ C0] R10: dffffc0000000000 R11: fffffbfff1f0454f R12: 0000000000000000 [ 1212.245226][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1212.245313][ C0] ? preempt_schedule_irq+0x42/0xa0 [ 1212.245336][ C0] irqentry_exit+0x5e3/0x670 [ 1212.245389][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1212.245407][ C0] RIP: 0010:unwind_next_frame+0x513/0x23d0 [ 1212.245425][ C0] Code: c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 [ 1212.245437][ C0] RSP: 0018:ffffc9000410ed18 EFLAGS: 00000a02 [ 1212.245450][ C0] RAX: 0000000000000000 RBX: ffffffff8f994620 RCX: dffffc0000000000 [ 1212.245462][ C0] RDX: ffffffff8f994620 RSI: ffffffff9014e0be RDI: ffffffff8bc08a00 [ 1212.245474][ C0] RBP: ffffffff8f994620 R08: 0000000000000001 R09: ffffffff8df41aa0 [ 1212.245486][ C0] R10: ffffc9000410eac0 R11: ffffffffa0203c54 R12: ffffffff816a9eb3 [ 1212.245498][ C0] R13: ffffffff8f994620 R14: ffffc9000410ee48 R15: ffffffff8f994620 [ 1212.245521][ C0] ? arch_stack_walk+0xe3/0x150 [ 1212.245548][ C0] ? 0xffffffffa0203c54 [ 1212.245613][ C0] ? unwind_next_frame+0xd4/0x23d0 [ 1212.245663][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 1212.245690][ C0] ? arch_stack_walk+0xe4/0x150 [ 1212.245740][ C0] __unwind_start+0x5b9/0x760 [ 1212.245784][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1212.245813][ C0] arch_stack_walk+0xe4/0x150 [ 1212.245861][ C0] ? arch_stack_walk+0xe4/0x150 [ 1212.245904][ C0] stack_trace_save+0x9c/0xe0 [ 1212.245932][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1212.246006][ C0] save_stack+0xf5/0x1f0 [ 1212.246044][ C0] ? __pfx_save_stack+0x10/0x10 [ 1212.246155][ C0] ? page_ext_put+0x97/0xc0 [ 1212.246204][ C0] __reset_page_owner+0x71/0x1f0 [ 1212.246242][ C0] __free_frozen_pages+0xbc8/0xd30 [ 1212.246313][ C0] __put_partials+0x146/0x170 [ 1212.246364][ C0] __slab_free+0x294/0x320 [ 1212.246428][ C0] ? qlist_free_all+0x8c/0x100 [ 1212.246464][ C0] qlist_free_all+0x97/0x100 [ 1212.246502][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1212.246537][ C0] __kasan_slab_alloc+0x22/0x80 [ 1212.246569][ C0] __kmalloc_cache_node_noprof+0x409/0x700 [ 1212.246598][ C0] ? __get_vm_area_node+0x13f/0x300 [ 1212.246642][ C0] __get_vm_area_node+0x13f/0x300 [ 1212.246689][ C0] __vmalloc_node_range_noprof+0x371/0x16a0 [ 1212.246714][ C0] ? bpf_check+0x19b/0x1c300 [ 1212.246754][ C0] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 1212.246837][ C0] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 1212.246873][ C0] ? lruvec_stat_mod_folio+0x1f1/0x2e0 [ 1212.246895][ C0] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 1212.246934][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1212.246954][ C0] ? rcu_is_watching+0x15/0xb0 [ 1212.246988][ C0] ? rcu_is_watching+0x15/0xb0 [ 1212.247015][ C0] ? trace_kmalloc+0x1f/0xb0 [ 1212.247030][ C0] ? __kvmalloc_node_noprof+0x5f5/0x920 [ 1212.247053][ C0] ? bpf_check+0x19b/0x1c300 [ 1212.247080][ C0] vzalloc_noprof+0xb2/0xf0 [ 1212.247104][ C0] ? bpf_check+0x19b/0x1c300 [ 1212.247138][ C0] bpf_check+0x19b/0x1c300 [ 1212.247193][ C0] ? perf_trace_lock+0x18d/0x3b0 [ 1212.247220][ C0] ? perf_trace_lock+0x18d/0x3b0 [ 1212.247256][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 1212.247292][ C0] ? trace_call_bpf+0xc7/0xb60 [ 1212.247313][ C0] ? lock_acquire+0x107/0x340 [ 1212.247337][ C0] ? trace_call_bpf+0xc7/0xb60 [ 1212.247388][ C0] ? trace_call_bpf+0xc7/0xb60 [ 1212.247429][ C0] ? trace_call_bpf+0x7be/0xb60 [ 1212.247493][ C0] ? trace_call_bpf+0xc7/0xb60 [ 1212.247514][ C0] ? __pfx_trace_call_bpf+0x10/0x10 [ 1212.247529][ C0] ? trace_call_bpf+0xc7/0xb60 [ 1212.247550][ C0] ? __pfx_trace_call_bpf+0x10/0x10 [ 1212.247607][ C0] ? perf_trace_run_bpf_submit+0x100/0x170 [ 1212.247656][ C0] ? perf_trace_lock+0x2f8/0x3b0 [ 1212.247682][ C0] ? perf_trace_lock+0x2f8/0x3b0 [ 1212.247724][ C0] ? __pfx_bpf_check+0x10/0x10 [ 1212.247788][ C0] ? ktime_get_with_offset+0x93/0x2a0 [ 1212.247845][ C0] ? ktime_get_with_offset+0x93/0x2a0 [ 1212.247892][ C0] ? __asan_memset+0x22/0x50 [ 1212.247916][ C0] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 1212.247934][ C0] ? security_bpf_prog_load+0x125/0x3f0 [ 1212.247975][ C0] bpf_prog_load+0x13ba/0x1a10 [ 1212.248056][ C0] ? __pfx_bpf_prog_load+0x10/0x10 [ 1212.248082][ C0] ? irqentry_exit+0x5e8/0x670 [ 1212.248176][ C0] ? __sys_bpf+0x26a/0x8a0 [ 1212.248205][ C0] ? __sanitizer_cov_trace_switch+0x85/0x130 [ 1212.248254][ C0] __sys_bpf+0x5c3/0x8a0 [ 1212.248294][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 1212.248390][ C0] ? do_syscall_64+0xa9/0xf80 [ 1212.248421][ C0] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1212.248452][ C0] ? rcu_is_watching+0x15/0xb0 [ 1212.248512][ C0] __x64_sys_bpf+0x7c/0x90 [ 1212.248544][ C0] do_syscall_64+0xec/0xf80 [ 1212.248566][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.248585][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1212.248621][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.248638][ C0] RIP: 0033:0x7fb456f8f749 [ 1212.248659][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1212.248673][ C0] RSP: 002b:00007fb457ecf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1212.248690][ C0] RAX: ffffffffffffffda RBX: 00007fb4571e6180 RCX: 00007fb456f8f749 [ 1212.248702][ C0] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1212.248713][ C0] RBP: 00007fb457013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1212.248724][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1212.248735][ C0] R13: 00007fb4571e6218 R14: 00007fb4571e6180 R15: 00007ffeb1e29eb8 [ 1212.248823][ C0] [ 1212.248841][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1213.339085][ C1] NMI backtrace for cpu 1 [ 1213.339101][ C1] CPU: 1 UID: 0 PID: 11065 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 1213.339119][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1213.339130][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1213.339159][ C1] RIP: 0010:smp_call_function_many_cond+0xcc5/0x1260 [ 1213.339182][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 d4 97 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 7f 93 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 63 93 [ 1213.339195][ C1] RSP: 0018:ffffc90003f6f6a0 EFLAGS: 00000293 [ 1213.339208][ C1] RAX: ffffffff81b5652d RBX: 1ffff110170c856d RCX: ffff88802677bd00 [ 1213.339220][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1213.339229][ C1] RBP: ffffc90003f6f7e0 R08: ffffffff8f822a77 R09: 1ffffffff1f0454e [ 1213.339241][ C1] R10: dffffc0000000000 R11: fffffbfff1f0454f R12: ffff8880b8642b68 [ 1213.339253][ C1] R13: dffffc0000000000 R14: ffff8880b873bb00 R15: 0000000000000000 [ 1213.339264][ C1] FS: 0000000000000000(0000) GS:ffff888125f1e000(0000) knlGS:0000000000000000 [ 1213.339277][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1213.339288][ C1] CR2: 00007ffcf4c843c0 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 1213.339302][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1213.339310][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1213.339320][ C1] Call Trace: [ 1213.339329][ C1] [ 1213.339354][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1213.339399][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1213.339418][ C1] ? rcu_is_watching+0x15/0xb0 [ 1213.339440][ C1] ? kmem_cache_alloc_bulk_noprof+0xaa/0x720 [ 1213.339461][ C1] ? __pfx___text_poke+0x10/0x10 [ 1213.339493][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1213.339510][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1213.339540][ C1] smp_text_poke_batch_finish+0x5f9/0x1130 [ 1213.339562][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 1213.339595][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1213.339618][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1213.339652][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 1213.339702][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1213.339721][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 1213.339750][ C1] static_key_enable+0x1a/0x20 [ 1213.339770][ C1] toggle_allocation_gate+0xad/0x240 [ 1213.339790][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1213.339812][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 1213.339851][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 1213.339868][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 1213.339890][ C1] process_scheduled_works+0xad1/0x1770 [ 1213.339984][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1213.339997][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1213.340062][ C1] worker_thread+0x8a0/0xda0 [ 1213.340154][ C1] kthread+0x711/0x8a0 [ 1213.340185][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1213.340203][ C1] ? __pfx_kthread+0x10/0x10 [ 1213.340234][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1213.340250][ C1] ? __pfx_kthread+0x10/0x10 [ 1213.340275][ C1] ret_from_fork+0x510/0xa50 [ 1213.340301][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1213.340316][ C1] ? __switch_to+0xc9e/0x1480 [ 1213.340351][ C1] ? __pfx_kthread+0x10/0x10 [ 1213.340376][ C1] ret_from_fork_asm+0x1a/0x30 [ 1213.340443][ C1] [ 1213.671583][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 1213.678265][ C0] CPU: 0 UID: 0 PID: 26435 Comm: syz.9.6536 Tainted: G L syzkaller #0 PREEMPT(full) [ 1213.689201][ C0] Tainted: [L]=SOFTLOCKUP [ 1213.693517][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1213.703570][ C0] Call Trace: [ 1213.706852][ C0] [ 1213.709694][ C0] vpanic+0x1e0/0x670 [ 1213.713687][ C0] panic+0xb9/0xc0 [ 1213.717407][ C0] ? __pfx_panic+0x10/0x10 [ 1213.721820][ C0] ? printk_trigger_flush+0x137/0x170 [ 1213.727238][ C0] watchdog_timer_fn+0x75f/0x760 [ 1213.732182][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 1213.737641][ C0] __hrtimer_run_queues+0x4d0/0xc30 [ 1213.742839][ C0] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 1213.748867][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1213.754578][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 1213.760665][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 1213.765682][ C0] __sysvec_apic_timer_interrupt+0x102/0x3e0 [ 1213.771665][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 1213.777301][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1213.783283][ C0] RIP: 0010:unwind_next_frame+0xc2/0x23d0 [ 1213.788998][ C0] Code: 00 e8 72 b1 33 00 4c 8d 3d 00 00 00 00 48 c7 c7 a0 1a f4 8d 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 41 57 e8 9e f0 29 00 <48> 83 c4 08 e8 95 28 e6 09 85 c0 74 3a e8 ac ff 32 00 84 c0 75 31 [ 1213.808601][ C0] RSP: 0018:ffffc900000075b0 EFLAGS: 00000286 [ 1213.814675][ C0] RAX: 1bff952f3d9d9600 RBX: ffffffff8b5b5088 RCX: 0000000000000101 [ 1213.822644][ C0] RDX: 0000000054904df0 RSI: ffffffff8d97773b RDI: ffffffff8bc08a60 [ 1213.830627][ C0] RBP: dffffc0000000000 R08: ffffffff8173fdd5 R09: ffffffff8df41aa0 [ 1213.838606][ C0] R10: ffffc90000007360 R11: ffffffff81acf4b0 R12: 1ffff92000000ed1 [ 1213.846579][ C0] R13: ffffc900000076c0 R14: ffffc90000007688 R15: ffffffff8173fdd5 [ 1213.854546][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 1213.859689][ C0] ? preempt_schedule_irq+0x48/0xa0 [ 1213.864899][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1213.871068][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 1213.876210][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 1213.881336][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1213.887496][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1213.893655][ C0] ? preempt_schedule_irq+0x48/0xa0 [ 1213.898864][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1213.905030][ C0] arch_stack_walk+0x11c/0x150 [ 1213.909825][ C0] ? preempt_schedule_irq+0x48/0xa0 [ 1213.915043][ C0] stack_trace_save+0x9c/0xe0 [ 1213.919730][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1213.925155][ C0] kasan_save_track+0x3e/0x80 [ 1213.929839][ C0] ? kasan_save_track+0x3e/0x80 [ 1213.934685][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1213.939804][ C0] ? kmem_cache_alloc_node_noprof+0x43c/0x720 [ 1213.945867][ C0] ? kmalloc_reserve+0xbd/0x290 [ 1213.950713][ C0] ? __alloc_skb+0x204/0x3a0 [ 1213.955308][ C0] ? new_skb+0x2f/0x2b0 [ 1213.959461][ C0] ? aoecmd_cfg+0x28b/0x7c0 [ 1213.963957][ C0] ? call_timer_fn+0x16e/0x590 [ 1213.968713][ C0] ? __run_timer_base+0x61a/0x860 [ 1213.973729][ C0] ? run_timer_softirq+0xb7/0x180 [ 1213.978748][ C0] ? handle_softirqs+0x22b/0x7c0 [ 1213.983721][ C0] ? __irq_exit_rcu+0x60/0x150 [ 1213.988496][ C0] ? irq_exit_rcu+0x9/0x30 [ 1213.992915][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1213.998719][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1214.004869][ C0] ? preempt_schedule_irq+0x48/0xa0 [ 1214.010185][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1214.015044][ C0] kmem_cache_alloc_node_noprof+0x43c/0x720 [ 1214.020941][ C0] ? kmalloc_reserve+0xbd/0x290 [ 1214.025809][ C0] kmalloc_reserve+0xbd/0x290 [ 1214.030488][ C0] ? __alloc_skb+0x198/0x3a0 [ 1214.035076][ C0] __alloc_skb+0x204/0x3a0 [ 1214.039528][ C0] new_skb+0x2f/0x2b0 [ 1214.043510][ C0] ? is_aoe_netif+0x216/0x300 [ 1214.048196][ C0] aoecmd_cfg+0x28b/0x7c0 [ 1214.052525][ C0] ? aoecmd_cfg+0xdc/0x7c0 [ 1214.056939][ C0] ? __pfx_aoecmd_cfg+0x10/0x10 [ 1214.061805][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1214.067030][ C0] ? lock_acquire+0x222/0x340 [ 1214.071725][ C0] call_timer_fn+0x16e/0x590 [ 1214.076314][ C0] ? __pfx_discover_timer+0x10/0x10 [ 1214.081508][ C0] ? call_timer_fn+0xbe/0x590 [ 1214.086179][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1214.091324][ C0] ? __pfx_discover_timer+0x10/0x10 [ 1214.096528][ C0] __run_timer_base+0x61a/0x860 [ 1214.101425][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1214.106793][ C0] ? clockevents_program_event+0x247/0x350 [ 1214.112623][ C0] ? sched_clock_cpu+0x74/0x430 [ 1214.117504][ C0] run_timer_softirq+0xb7/0x180 [ 1214.122360][ C0] handle_softirqs+0x22b/0x7c0 [ 1214.127154][ C0] ? __irq_exit_rcu+0x60/0x150 [ 1214.131960][ C0] __irq_exit_rcu+0x60/0x150 [ 1214.136549][ C0] irq_exit_rcu+0x9/0x30 [ 1214.140788][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1214.146423][ C0] [ 1214.149347][ C0] [ 1214.152276][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1214.158257][ C0] RIP: 0010:preempt_schedule_irq+0x48/0xa0 [ 1214.164063][ C0] Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 54 bf 01 00 00 00 e8 53 5b 35 f6 e8 3e 71 6d f6 fb bf 01 00 00 00 c3 a9 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 c4 72 6d f6 bf 01 [ 1214.183670][ C0] RSP: 0018:ffffc9000410ebf8 EFLAGS: 00000206 [ 1214.189742][ C0] RAX: 0000000000140c3f RBX: 0000000000000000 RCX: 0000000000000001 [ 1214.197706][ C0] RDX: 0000000000000007 RSI: ffffffff8d793871 RDI: 0000000000000001 [ 1214.205678][ C0] RBP: 0000000000000000 R08: ffffffff8f822a77 R09: 1ffffffff1f0454e [ 1214.213653][ C0] R10: dffffc0000000000 R11: fffffbfff1f0454f R12: 0000000000000000 [ 1214.221625][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1214.229646][ C0] ? preempt_schedule_irq+0x42/0xa0 [ 1214.234847][ C0] irqentry_exit+0x5e3/0x670 [ 1214.239455][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1214.245431][ C0] RIP: 0010:unwind_next_frame+0x513/0x23d0 [ 1214.251234][ C0] Code: c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 [ 1214.270837][ C0] RSP: 0018:ffffc9000410ed18 EFLAGS: 00000a02 [ 1214.276906][ C0] RAX: 0000000000000000 RBX: ffffffff8f994620 RCX: dffffc0000000000 [ 1214.284875][ C0] RDX: ffffffff8f994620 RSI: ffffffff9014e0be RDI: ffffffff8bc08a00 [ 1214.292844][ C0] RBP: ffffffff8f994620 R08: 0000000000000001 R09: ffffffff8df41aa0 [ 1214.300812][ C0] R10: ffffc9000410eac0 R11: ffffffffa0203c54 R12: ffffffff816a9eb3 [ 1214.308778][ C0] R13: ffffffff8f994620 R14: ffffc9000410ee48 R15: ffffffff8f994620 [ 1214.316755][ C0] ? arch_stack_walk+0xe3/0x150 [ 1214.321627][ C0] ? 0xffffffffa0203c54 [ 1214.325812][ C0] ? unwind_next_frame+0xd4/0x23d0 [ 1214.330944][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 1214.336056][ C0] ? arch_stack_walk+0xe4/0x150 [ 1214.340921][ C0] __unwind_start+0x5b9/0x760 [ 1214.345616][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1214.351769][ C0] arch_stack_walk+0xe4/0x150 [ 1214.356464][ C0] ? arch_stack_walk+0xe4/0x150 [ 1214.361323][ C0] stack_trace_save+0x9c/0xe0 [ 1214.366008][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1214.371427][ C0] save_stack+0xf5/0x1f0 [ 1214.375678][ C0] ? __pfx_save_stack+0x10/0x10 [ 1214.380570][ C0] ? page_ext_put+0x97/0xc0 [ 1214.385089][ C0] __reset_page_owner+0x71/0x1f0 [ 1214.390038][ C0] __free_frozen_pages+0xbc8/0xd30 [ 1214.395189][ C0] __put_partials+0x146/0x170 [ 1214.399887][ C0] __slab_free+0x294/0x320 [ 1214.404331][ C0] ? qlist_free_all+0x8c/0x100 [ 1214.409103][ C0] qlist_free_all+0x97/0x100 [ 1214.413700][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1214.419167][ C0] __kasan_slab_alloc+0x22/0x80 [ 1214.424027][ C0] __kmalloc_cache_node_noprof+0x409/0x700 [ 1214.429842][ C0] ? __get_vm_area_node+0x13f/0x300 [ 1214.435063][ C0] __get_vm_area_node+0x13f/0x300 [ 1214.440104][ C0] __vmalloc_node_range_noprof+0x371/0x16a0 [ 1214.445996][ C0] ? bpf_check+0x19b/0x1c300 [ 1214.450601][ C0] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 1214.456013][ C0] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 1214.461391][ C0] ? lruvec_stat_mod_folio+0x1f1/0x2e0 [ 1214.466844][ C0] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 1214.472226][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1214.478547][ C0] ? rcu_is_watching+0x15/0xb0 [ 1214.483314][ C0] ? rcu_is_watching+0x15/0xb0 [ 1214.488088][ C0] ? trace_kmalloc+0x1f/0xb0 [ 1214.492669][ C0] ? __kvmalloc_node_noprof+0x5f5/0x920 [ 1214.498215][ C0] ? bpf_check+0x19b/0x1c300 [ 1214.502812][ C0] vzalloc_noprof+0xb2/0xf0 [ 1214.507321][ C0] ? bpf_check+0x19b/0x1c300 [ 1214.511917][ C0] bpf_check+0x19b/0x1c300 [ 1214.516352][ C0] ? perf_trace_lock+0x18d/0x3b0 [ 1214.521298][ C0] ? perf_trace_lock+0x18d/0x3b0 [ 1214.526244][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 1214.531543][ C0] ? trace_call_bpf+0xc7/0xb60 [ 1214.536297][ C0] ? lock_acquire+0x107/0x340 [ 1214.540972][ C0] ? trace_call_bpf+0xc7/0xb60 [ 1214.545747][ C0] ? trace_call_bpf+0xc7/0xb60 [ 1214.550518][ C0] ? trace_call_bpf+0x7be/0xb60 [ 1214.555390][ C0] ? trace_call_bpf+0xc7/0xb60 [ 1214.560147][ C0] ? __pfx_trace_call_bpf+0x10/0x10 [ 1214.565334][ C0] ? trace_call_bpf+0xc7/0xb60 [ 1214.570093][ C0] ? __pfx_trace_call_bpf+0x10/0x10 [ 1214.575315][ C0] ? perf_trace_run_bpf_submit+0x100/0x170 [ 1214.581140][ C0] ? perf_trace_lock+0x2f8/0x3b0 [ 1214.586078][ C0] ? perf_trace_lock+0x2f8/0x3b0 [ 1214.591028][ C0] ? __pfx_bpf_check+0x10/0x10 [ 1214.595815][ C0] ? ktime_get_with_offset+0x93/0x2a0 [ 1214.601206][ C0] ? ktime_get_with_offset+0x93/0x2a0 [ 1214.606588][ C0] ? __asan_memset+0x22/0x50 [ 1214.611175][ C0] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 1214.616366][ C0] ? security_bpf_prog_load+0x125/0x3f0 [ 1214.621932][ C0] bpf_prog_load+0x13ba/0x1a10 [ 1214.626749][ C0] ? __pfx_bpf_prog_load+0x10/0x10 [ 1214.631860][ C0] ? irqentry_exit+0x5e8/0x670 [ 1214.636669][ C0] ? __sys_bpf+0x26a/0x8a0 [ 1214.641084][ C0] ? __sanitizer_cov_trace_switch+0x85/0x130 [ 1214.647081][ C0] __sys_bpf+0x5c3/0x8a0 [ 1214.651333][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 1214.656142][ C0] ? do_syscall_64+0xa9/0xf80 [ 1214.660822][ C0] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1214.667412][ C0] ? rcu_is_watching+0x15/0xb0 [ 1214.672200][ C0] __x64_sys_bpf+0x7c/0x90 [ 1214.676624][ C0] do_syscall_64+0xec/0xf80 [ 1214.681126][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.687189][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1214.691895][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.697801][ C0] RIP: 0033:0x7fb456f8f749 [ 1214.702222][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1214.721828][ C0] RSP: 002b:00007fb457ecf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1214.730251][ C0] RAX: ffffffffffffffda RBX: 00007fb4571e6180 RCX: 00007fb456f8f749 [ 1214.738220][ C0] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1214.746185][ C0] RBP: 00007fb457013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1214.754150][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1214.762115][ C0] R13: 00007fb4571e6218 R14: 00007fb4571e6180 R15: 00007ffeb1e29eb8 [ 1214.770141][ C0] [ 1214.773516][ C0] Kernel Offset: disabled [ 1214.777832][ C0] Rebooting in 86400 seconds..