last executing test programs: 6.831795944s ago: executing program 0 (id=709): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14, 0x2d, 0x8c7c251b32d84713, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) socket$kcm(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1}, 0x4014) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x300, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x4, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000080)={'virt_wifi0\x00', @multicast}) sendmsg$inet(r0, 0x0, 0x44855) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x1407, 0x1, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8880) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8106, 0x0, 0x1, 0x6, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x2, 0x1, 0x84) 6.043537131s ago: executing program 0 (id=714): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000016000000080000000200", @ANYRESOCT], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f00000002c0)="468db75efeb4706248c730ad34a0b9216b4bafcd6e6eb260c830610e3d4db08b1d084dff56e4b0805a98006341bbe876a117af4a2a9e05dd9aa35d723ef2126a652ce3f663424b60e6f093fad4ff2e4df8aff6be77776a2348ec70eb4b69e4e6b894"}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e64, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61"], 0x10b8}, 0x200088c0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e03"], 0xffdd) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x3}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4894}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000202070250000000000202020db1af8ffa0000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000a0000000950000000000000023defe5de1af154d7a04d176943959f3606ea3e471b4fbb509e18118560181924528b354ce2fa0c0c6f622af613b7fab5a3ecc01979b4f9cd39a1bb9c9b135dcce9051dc35075c056e765f64f66a98b2c6d0644dd26c933a623154e535b30a2e65104a999d7fe85e5dedcbad87edc916352af4c066375567e88befda2d77a438e02b9b92ab77"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fdffffff0000000000000500180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000007a0102000600008095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44", 0x2b}], 0x1}, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext, 0x8018, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x111a, 0x7fff, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb, 0x0, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) 5.367261019s ago: executing program 2 (id=718): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3}, 0x100, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x28, 0x5, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0xffffffff, 0x0, 0xd, 0x20004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12) r2 = getpid() r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 4.547182702s ago: executing program 1 (id=720): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x64}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x4c02, 0x0) r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfdef) close(r1) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10020) socket$kcm(0x10, 0x6, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x40086602, 0x110e22fff2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x15, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000c80)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000012c0)=[{0x3, 0x40000004, 0xf, 0x9}, {0x0, 0x3, 0xf, 0x5}, {0x0, 0x4, 0x0, 0xb}], 0x10, 0x7fffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 3.739863804s ago: executing program 0 (id=722): socket$inet(0x2, 0x2, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40107446, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x10000}, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_NAME={0x7, 0x1, '(\x00\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x90) 3.739068187s ago: executing program 1 (id=723): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc0c5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81", @ANYBLOB="8f83e2"], 0xfe33) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x10520, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0x1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x2c, 0x2c, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff2, 0x9}, {0xffe0, 0xc}, {0x2a2d94f992ff4ed5, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x92}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4008020) socket$kcm(0x11, 0x200000000000002, 0x300) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x31) socket$kcm(0xf, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x46, 0x2}, 0x80, 0x0}, 0x20048840) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000300)='./file0\x00', r6}, 0x18) sendmsg$kcm(r7, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x0, 0xfffffffd}, 0x80, 0x0}, 0x20040010) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair(0x1, 0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB], 0x28}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) 3.714855215s ago: executing program 3 (id=724): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000340), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x2, @mcast1}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000080)}, 0x10002, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x6, 0x0, 0xa4ff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x1) 3.712257219s ago: executing program 4 (id=725): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000340), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x2, @mcast1}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000080)}, 0x10002, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x6, 0x0, 0xa4ff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) 3.676081949s ago: executing program 2 (id=726): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c"], 0xfe33) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000740)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, 0x0, 0x4000804) r5 = socket$kcm(0xa, 0x1, 0x106) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x17, 0x0, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x8c, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x5c, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x1, &(0x7f0000000540)=[r3, r6, r7, r2, 0x1], &(0x7f0000000580)=[{0x3, 0x1, 0x8, 0x9}], 0x10, 0x36}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000882}, 0x80) recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x6}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a381, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x9, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0xc018, r0}, 0x18) 3.528431445s ago: executing program 4 (id=727): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000016000000080000000200", @ANYRESOCT=r0], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, &(0x7f00000002c0)="468db75efeb4706248c730ad34a0b9216b4bafcd6e6eb260c830610e3d4db08b1d084dff56e4b0805a98006341bbe876a117af4a2a9e05dd9aa35d723ef2126a652ce3f663424b60e6f093fad4ff2e4df8aff6be77776a2348ec70eb4b69e4e6b894"}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="1e03"], 0xffdd) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x3}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4894}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000202070250000000000202020db1af8ffa0000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000a0000000950000000000000023defe5de1af154d7a04d176943959f3606ea3e471b4fbb509e18118560181924528b354ce2fa0c0c6f622af613b7fab5a3ecc01979b4f9cd39a1bb9c9b135dcce9051dc35075c056e765f64f66a98b2c6d0644dd26c933a623154e535b30a2e65104a999d7fe85e5dedcbad87edc916352af4c066375567e88befda2d77a438e02b9b92ab77"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fdffffff0000000000000500180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000007a0102000600008095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44", 0x2b}], 0x1}, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext, 0x8018, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x111a, 0x7fff, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb, 0x0, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) 3.374981492s ago: executing program 3 (id=728): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x5}, 0x100066, 0x2, 0xdffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000000000000000000000280000002800000003000000010000000000000c02000000000000000200000d0000000000000000000000000000000000000000006100"], 0x0, 0x43}, 0x28) sendmsg$inet(r0, 0x0, 0x2404c0c5) setsockopt$sock_attach_bpf(r0, 0x1, 0xc, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f00000017c0)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x4000) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000026000100fdff07000010b2897e00000400000004000180b4f162ed537d16ae7176b3cede"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 3.135118669s ago: executing program 0 (id=729): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000040008001240fffffffa11000300686173683a6e65742c6e657400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100700, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x11efa, 0x4, 0x98, 0x9, 0x2, 0x400, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001700010026bd7000ffdbdf250b00000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x20004010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b00)="89000000150081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) 3.084655823s ago: executing program 2 (id=730): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000340), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x2, @mcast1}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000080)}, 0x10002, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, 0x0, 0xa4ff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socket$netlink(0x10, 0x3, 0x0) 2.999870171s ago: executing program 4 (id=731): perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16000000000000000100000006"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r0, 0x0, 0x20000000}, 0x20) mount$bpf(0x200000000000, 0x0, 0x0, 0x206002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='+cpu'], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002600090123bd7008f9ffffff08000000080003004700000065b2d6306808c507502be3c6e8e541fbe9412e72065b7b1290fae13d548761be6c9130089d05f7"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 2.877226455s ago: executing program 3 (id=732): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a19, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x60, 0x400000, 0xb9, 0x0, 0x0, 0x11}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$sock(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xaa, 0x0, 0x0, 0x2, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a, 0x0, @perf_config_ext={0xffffffffffffff7f, 0xfffffffffffffffe}, 0x111311, 0xbf, 0x0, 0x1, 0x1ffff, 0x3, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0}, 0x28) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0xffffffffffffffff, 0x3e, 0xb1, 0x8}, 0x1a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8910, &(0x7f0000000080)) socket$kcm(0x11, 0xa, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[], 0xec}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000100), 0x120) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000180), 0x4bd) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x41000}, 0x80) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'i'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) 2.830833454s ago: executing program 0 (id=733): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'veth1_virt_wifi\x00', @local}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x80180, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x4000000001}, 0x0, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0x6, 0x0, 0x10000}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESHEX, @ANYRES32], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x6}, 0x100000, 0x200, 0xffffffff, 0x0, 0x9, 0x2c, 0x3, 0x0, 0x0, 0x0, 0x100000032}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0x4c800) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) recvmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x222) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 2.754616915s ago: executing program 2 (id=734): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000016000000080000000200", @ANYRESOCT=r0], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, &(0x7f00000002c0)="468db75efeb4706248c730ad34a0b9216b4bafcd6e6eb260c830610e3d4db08b1d084dff56e4b0805a98006341bbe876a117af4a2a9e05dd9aa35d723ef2126a652ce3f663424b60e6f093fad4ff2e4df8aff6be77776a2348ec70eb4b69e4e6b894"}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e64, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61"], 0x10b8}, 0x200088c0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1e03"], 0xffdd) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x3}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4894}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000202070250000000000202020db1af8ffa0000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000a0000000950000000000000023defe5de1af154d7a04d176943959f3606ea3e471b4fbb509e18118560181924528b354ce2fa0c0c6f622af613b7fab5a3ecc01979b4f9cd39a1bb9c9b135dcce9051dc35075c056e765f64f66a98b2c6d0644dd26c933a623154e535b30a2e65104a999d7fe85e5dedcbad87edc916352af4c066375567e88befda2d77a438e02b9b92ab77"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fdffffff0000000000000500180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000007a0102000600008095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44", 0x2b}], 0x1}, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext, 0x8018, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x111a, 0x7fff, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb, 0x0, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) 2.665717487s ago: executing program 1 (id=735): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x2}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xd}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff, 0x55}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 2.491601114s ago: executing program 3 (id=736): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000340), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x2, @mcast1}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000080)}, 0x10002, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, 0x0, 0xa4ff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x54da15d21c5ae7c3}, 0x0) 2.141586597s ago: executing program 3 (id=737): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3}, 0x100, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x28, 0x5, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0xffffffff, 0x0, 0xd, 0x20004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12) r2 = getpid() r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 1.966951332s ago: executing program 4 (id=738): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x2, 0x8, 0xf0, 0x9, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x4000000) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xffffffffffffffff}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="a40100001000010028bc7000fdffffffff020000000000000000000000000001ac14140d0000000000000000000000000000ecdf000000000a00000000000000e0d395eebaeab0f37e5cfa9233dd22eaa3ba59aedd777277e3dabd0cb76820a84293afeccc5bf9939ae6998a199c55a82b7105bb726dd4d0ca9d989728049dd376d42a5b73e1c6320646ac1f1822aff21f7949573a9e3ffc09fa83ebf3d6c726cc464cc249d582952c7baf37f2f9942df960222f49f3ed", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/338], 0x1a4}}, 0x44050) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_bp={0x0, 0x2}, 0x201, 0x0, 0xfffffffc, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1ce}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683", 0x99}, {&(0x7f00000015c0)="6b75b597d05d969a191023", 0xb}, {&(0x7f0000001740)="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", 0x2fa}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @generic={0x82, 0xf, "3a047e2aae56e4b9eab8f1483f"}]}}}], 0x48}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r6, &(0x7f0000000b80)="b1"}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070705000080030005000000000002004e22ac14140a0000000000000000020013"], 0x78}, 0x1, 0x7}, 0x0) 1.953684494s ago: executing program 1 (id=739): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10000, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x3, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, 0x0}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x1800}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x0, 0x0}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x80000000, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$kcm(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2fff0bb0}, 0x100586, 0x1, 0x4, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.017847108s ago: executing program 1 (id=740): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c"], 0xfe33) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000740)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, 0x0, 0x4000804) r5 = socket$kcm(0xa, 0x1, 0x106) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x17, 0x0, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x8c, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x5c, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x1, &(0x7f0000000540)=[r3, r6, r7, r2, 0x1], &(0x7f0000000580)=[{0x3, 0x1, 0x8, 0x9}], 0x10, 0x36}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000882}, 0x80) recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x6}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a381, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x9, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0xc018, r0}, 0x18) 1.016092406s ago: executing program 2 (id=741): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000002c0)="468db75efeb4706248c730ad34a0b9216b4bafcd6e6eb260c830610e3d4db08b1d084dff56e4b0805a98006341bbe876a117af4a2a9e05dd9aa35d723ef2126a652ce3f663424b60e6f093fad4ff2e4df8aff6be77776a2348ec70eb4b69e4e6b894"}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="1e03"], 0xffdd) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x3}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4894}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000202070250000000000202020db1af8ffa0000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000a0000000950000000000000023defe5de1af154d7a04d176943959f3606ea3e471b4fbb509e18118560181924528b354ce2fa0c0c6f622af613b7fab5a3ecc01979b4f9cd39a1bb9c9b135dcce9051dc35075c056e765f64f66a98b2c6d0644dd26c933a623154e535b30a2e65104a999d7fe85e5dedcbad87edc916352af4c066375567e88befda2d77a438e02b9b92ab77"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fdffffff0000000000000500180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000007a0102000600008095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44", 0x2b}], 0x1}, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext, 0x8018, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x111a, 0x7fff, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb, 0x0, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) 1.014220758s ago: executing program 0 (id=742): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x5}, 0x100066, 0x2, 0xdffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000000000000000000000280000002800000003000000010000000000000c02000000000000000200000d0000000000000000000000000000000000000000006100"], 0x0, 0x43}, 0x28) sendmsg$inet(r0, 0x0, 0x2404c0c5) setsockopt$sock_attach_bpf(r0, 0x1, 0xc, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f00000017c0)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x4000) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000026000100fdff07000010b2897e00000400000004000180b4f162ed537d16ae7176b3cede"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1.011074956s ago: executing program 4 (id=743): sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0x6, 0x2000000a}, 0x800b, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x2, &(0x7f00000000c0), 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000010000febfa30000000000000703000030feffff720af0fff8ffffff79a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000007a"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000"], 0xbc}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) sendmsg$inet(r2, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4000841) 890.432446ms ago: executing program 3 (id=744): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500), 0x50) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0x1103, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 678.723112ms ago: executing program 1 (id=745): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0xa, 0x3, 0x73) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000120001000000000000000000021304004e234e220100ffffff0100000000000000000300"/56, @ANYRES32=0x0, @ANYBLOB="050000001306000008000001000000000800030011"], 0x54}}, 0x20004010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, 0x0, 0x10000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB='\x00'/10], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="347c0000040042801800018006000600800a00000c001500faffffffffffffff04000280"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc010) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x20}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xc}, 0x8) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 12.813544ms ago: executing program 2 (id=746): r0 = getpid() r1 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x2e}, 0x1}}, 0x80, 0x0}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYBLOB='>', @ANYRES8], 0x9a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100100, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000010700000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000200003801c00008018000180140001"], 0xf4}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x5f, &(0x7f0000000000)='\x00', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000003}, 0x48) 0s ago: executing program 4 (id=747): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x2}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xd}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff, 0x55}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.155' (ED25519) to the list of known hosts. [ 71.636078][ T5615] cgroup: Unknown subsys name 'net' [ 71.762452][ T5615] cgroup: Unknown subsys name 'cpuset' [ 71.771531][ T5615] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.142022][ T5615] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.254157][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.263308][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.271306][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.282140][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.291972][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.351904][ T4946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.362764][ T4946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.372606][ T4946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.383058][ T4946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.391512][ T4946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.437031][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.447588][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.458313][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.468319][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.476727][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.501920][ T4946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.513832][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.522887][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.533002][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.541546][ T5642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.550730][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.559962][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.567641][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.579120][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.590330][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.165383][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.173590][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.181090][ T5639] bridge_slave_0: entered allmulticast mode [ 77.190284][ T5639] bridge_slave_0: entered promiscuous mode [ 77.199493][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.206693][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.214087][ T5627] bridge_slave_0: entered allmulticast mode [ 77.221014][ T5627] bridge_slave_0: entered promiscuous mode [ 77.247666][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.254851][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.262333][ T5639] bridge_slave_1: entered allmulticast mode [ 77.269742][ T5639] bridge_slave_1: entered promiscuous mode [ 77.285987][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.293306][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.300929][ T5627] bridge_slave_1: entered allmulticast mode [ 77.307873][ T5627] bridge_slave_1: entered promiscuous mode [ 77.349658][ T4946] Bluetooth: hci0: command tx timeout [ 77.351703][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.362555][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.369765][ T5631] bridge_slave_0: entered allmulticast mode [ 77.376676][ T5631] bridge_slave_0: entered promiscuous mode [ 77.405469][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.419926][ T4946] Bluetooth: hci1: command tx timeout [ 77.428298][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.435469][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.443183][ T5631] bridge_slave_1: entered allmulticast mode [ 77.450297][ T5631] bridge_slave_1: entered promiscuous mode [ 77.478182][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.490902][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.500040][ T4946] Bluetooth: hci2: command tx timeout [ 77.514823][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.522038][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.529230][ T5635] bridge_slave_0: entered allmulticast mode [ 77.536532][ T5635] bridge_slave_0: entered promiscuous mode [ 77.558597][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.576899][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.584739][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.589581][ T4946] Bluetooth: hci3: command tx timeout [ 77.592361][ T5635] bridge_slave_1: entered allmulticast mode [ 77.604482][ T5635] bridge_slave_1: entered promiscuous mode [ 77.637632][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.659261][ T4946] Bluetooth: hci4: command tx timeout [ 77.665048][ T5639] team0: Port device team_slave_0 added [ 77.679623][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.707407][ T5639] team0: Port device team_slave_1 added [ 77.725770][ T5627] team0: Port device team_slave_0 added [ 77.744366][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.755799][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.784831][ T5627] team0: Port device team_slave_1 added [ 77.807458][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.815027][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.822295][ T5640] bridge_slave_0: entered allmulticast mode [ 77.829630][ T5640] bridge_slave_0: entered promiscuous mode [ 77.838709][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.845698][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.871807][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.895372][ T5631] team0: Port device team_slave_0 added [ 77.912218][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.919470][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.926628][ T5640] bridge_slave_1: entered allmulticast mode [ 77.933891][ T5640] bridge_slave_1: entered promiscuous mode [ 77.941388][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.948340][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.974558][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.996372][ T5631] team0: Port device team_slave_1 added [ 78.020701][ T5635] team0: Port device team_slave_0 added [ 78.043161][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.050224][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.076149][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.087826][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.095085][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.121176][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.134990][ T5635] team0: Port device team_slave_1 added [ 78.152778][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.162725][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.169943][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.196106][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.207683][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.214937][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.240915][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.272562][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.306463][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.313707][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.339719][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.371619][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.378619][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.404885][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.427725][ T5640] team0: Port device team_slave_0 added [ 78.447239][ T5639] hsr_slave_0: entered promiscuous mode [ 78.453993][ T5639] hsr_slave_1: entered promiscuous mode [ 78.477464][ T5640] team0: Port device team_slave_1 added [ 78.498450][ T5627] hsr_slave_0: entered promiscuous mode [ 78.504830][ T5627] hsr_slave_1: entered promiscuous mode [ 78.511480][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 78.517266][ T5627] Cannot create hsr debugfs directory [ 78.552956][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.560161][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.586131][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.598701][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.605701][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.631791][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.648132][ T5631] hsr_slave_0: entered promiscuous mode [ 78.654649][ T5631] hsr_slave_1: entered promiscuous mode [ 78.660934][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 78.666664][ T5631] Cannot create hsr debugfs directory [ 78.768142][ T5635] hsr_slave_0: entered promiscuous mode [ 78.774595][ T5635] hsr_slave_1: entered promiscuous mode [ 78.781420][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 78.787182][ T5635] Cannot create hsr debugfs directory [ 78.879437][ T5640] hsr_slave_0: entered promiscuous mode [ 78.885830][ T5640] hsr_slave_1: entered promiscuous mode [ 78.892248][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 78.897990][ T5640] Cannot create hsr debugfs directory [ 79.285854][ T5639] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.302071][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.310780][ T5639] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.320882][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.328678][ T5639] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.338468][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.347033][ T5639] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.356405][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.420439][ T4946] Bluetooth: hci0: command tx timeout [ 79.427984][ T5631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.442249][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.450242][ T5631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.462104][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.469959][ T5631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.480795][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.490039][ T5631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.500682][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.509882][ T4946] Bluetooth: hci1: command tx timeout [ 79.584816][ T5627] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.591747][ T4946] Bluetooth: hci2: command tx timeout [ 79.600407][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.608858][ T5627] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.618250][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.626544][ T5627] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.636365][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.651615][ T5627] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.661415][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.671814][ T4946] Bluetooth: hci3: command tx timeout [ 79.739713][ T4946] Bluetooth: hci4: command tx timeout [ 79.776880][ T5635] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.787470][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.796397][ T5635] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.805431][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.814845][ T5635] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.824289][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.832842][ T5635] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.842591][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.876345][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.954926][ T5640] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.964552][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.981409][ T5640] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.991871][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.999725][ T5640] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.008350][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.016753][ T5640] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.026355][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.035329][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.073394][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.080914][ T3269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.112199][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.119573][ T3269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.189950][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.235252][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.250876][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.264818][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.288741][ T3352] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.295930][ T3352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.343234][ T3352] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.350441][ T3352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.415634][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.438874][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.446089][ T3269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.456455][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.484166][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.491327][ T3269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.500736][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.508524][ T3269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.544919][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.552130][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.642337][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.778596][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.838766][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.846064][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.885753][ T3333] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.892955][ T3333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.932116][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.167216][ T5639] veth0_vlan: entered promiscuous mode [ 81.212977][ T5639] veth1_vlan: entered promiscuous mode [ 81.336699][ T5639] veth0_macvtap: entered promiscuous mode [ 81.378689][ T5639] veth1_macvtap: entered promiscuous mode [ 81.503140][ T4946] Bluetooth: hci0: command tx timeout [ 81.508712][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.558450][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.580589][ T4946] Bluetooth: hci1: command tx timeout [ 81.615469][ T734] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.652748][ T734] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.661881][ T4946] Bluetooth: hci2: command tx timeout [ 81.724859][ T734] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.754230][ T4946] Bluetooth: hci3: command tx timeout [ 81.764060][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.799911][ T734] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.820546][ T4946] Bluetooth: hci4: command tx timeout [ 81.944739][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.057175][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.098407][ T3342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.119837][ T3342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.158889][ T5631] veth0_vlan: entered promiscuous mode [ 82.190548][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.213509][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.216368][ T5631] veth1_vlan: entered promiscuous mode [ 82.299670][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.350505][ T5639] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.367321][ T5627] veth0_vlan: entered promiscuous mode [ 82.404302][ T5627] veth1_vlan: entered promiscuous mode [ 82.452455][ T5631] veth0_macvtap: entered promiscuous mode [ 82.491981][ T5631] veth1_macvtap: entered promiscuous mode [ 82.535345][ T5817] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 82.564330][ T5627] veth0_macvtap: entered promiscuous mode [ 82.589972][ T5627] veth1_macvtap: entered promiscuous mode [ 82.616478][ T5640] veth0_vlan: entered promiscuous mode [ 82.639775][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.688895][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.706724][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.715628][ T5635] veth0_vlan: entered promiscuous mode [ 82.724382][ T5640] veth1_vlan: entered promiscuous mode [ 82.742653][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.774415][ T3342] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.796852][ T3342] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.818373][ T5635] veth1_vlan: entered promiscuous mode [ 82.827624][ T3342] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.837167][ T3342] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.859002][ T3342] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.868806][ T3342] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.895198][ T3342] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.905316][ T3342] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.993202][ T5640] veth0_macvtap: entered promiscuous mode [ 83.023704][ T5640] veth1_macvtap: entered promiscuous mode [ 83.070094][ T3352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.076684][ T5635] veth0_macvtap: entered promiscuous mode [ 83.087949][ T3352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.137672][ T5635] veth1_macvtap: entered promiscuous mode [ 83.168064][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.183881][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.186415][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.199480][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.268940][ T3333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.277357][ T3352] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.286357][ T3352] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.289660][ T3333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.305607][ T3352] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.332807][ T3352] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.362566][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.391933][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.579976][ T4946] Bluetooth: hci0: command tx timeout [ 83.659689][ T4946] Bluetooth: hci1: command tx timeout [ 83.739550][ T4946] Bluetooth: hci2: command tx timeout [ 83.819483][ T4946] Bluetooth: hci3: command tx timeout [ 83.899278][ T4946] Bluetooth: hci4: command tx timeout [ 86.246935][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.269255][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.346037][ T3333] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.359866][ T3333] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.374485][ T3333] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.403351][ T100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.565739][ T5825] netlink: 'syz.3.7': attribute type 2 has an invalid length. [ 86.586003][ T5825] netlink: 'syz.3.7': attribute type 2 has an invalid length. [ 86.610833][ T3352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.657050][ T3352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.706475][ T5831] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'. [ 86.784628][ T3342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.816937][ T3342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.940650][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.948507][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.106895][ T734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.140799][ T734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.331538][ T5842] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 87.437473][ T5844] ======================================================= [ 87.437473][ T5844] WARNING: The mand mount option has been deprecated and [ 87.437473][ T5844] and is ignored by this kernel. Remove the mand [ 87.437473][ T5844] option from the mount to silence this warning. [ 87.437473][ T5844] ======================================================= [ 88.081444][ T5854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 88.551910][ T5858] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15'. [ 88.787624][ T5866] netlink: 'syz.2.18': attribute type 4 has an invalid length. [ 88.811083][ T5866] netlink: 152 bytes leftover after parsing attributes in process `syz.2.18'. [ 88.835362][ T5866] .`: renamed from bond0 (while UP) [ 88.871997][ T5862] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16'. [ 89.260000][ T5873] netlink: 71 bytes leftover after parsing attributes in process `syz.2.20'. [ 89.424725][ T5881] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23'. [ 89.561975][ T5887] Zero length message leads to an empty skb [ 90.240459][ T5886] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23'. [ 90.253423][ T5897] netlink: 762 bytes leftover after parsing attributes in process `syz.1.24'. [ 90.422004][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26'. [ 90.515246][ T5905] hsr0: entered promiscuous mode [ 90.548878][ T5905] hsr0: entered allmulticast mode [ 90.576160][ T5905] hsr_slave_0: entered allmulticast mode [ 90.635759][ T5905] hsr_slave_1: entered allmulticast mode [ 91.748838][ T9] cfg80211: failed to load regulatory.db [ 91.756428][ T5944] __nla_validate_parse: 1 callbacks suppressed [ 91.756446][ T5944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.44'. [ 92.124947][ T5956] netlink: 24 bytes leftover after parsing attributes in process `syz.4.50'. [ 92.640463][ T5965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.55'. [ 92.859096][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 93.641050][ T5992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.64'. [ 94.097382][ T5991] netlink: 'syz.0.62': attribute type 1 has an invalid length. [ 94.176151][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 94.398455][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.66'. [ 94.445044][ T6002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.646383][ T6004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.68'. [ 95.120097][ T6018] netlink: 132 bytes leftover after parsing attributes in process `syz.0.73'. [ 95.279404][ T6024] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 6 [ 96.167745][ T6041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.82'. [ 96.806866][ T6056] __nla_validate_parse: 4 callbacks suppressed [ 96.816765][ T6056] netlink: 60 bytes leftover after parsing attributes in process `syz.0.87'. [ 97.586324][ T6079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.95'. [ 97.986966][ T6083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.96'. [ 98.217178][ T6087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.98'. [ 98.367872][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 98.595606][ T6096] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 98.637586][ T6096] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 98.696132][ T6096] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 98.764837][ T6096] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.908040][ T6096] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 99.118599][ T6100] netlink: 60 bytes leftover after parsing attributes in process `syz.2.102'. [ 99.155244][ T6100] netlink: 60 bytes leftover after parsing attributes in process `syz.2.102'. [ 99.231298][ T6100] netlink: 60 bytes leftover after parsing attributes in process `syz.2.102'. [ 99.264443][ T6088] syz.0.107 (6088) used greatest stack depth: 16880 bytes left [ 100.737866][ T6121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.111'. [ 100.763963][ T6122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.112'. [ 102.314635][ T6155] __nla_validate_parse: 2 callbacks suppressed [ 102.314670][ T6155] netlink: 24 bytes leftover after parsing attributes in process `syz.4.124'. [ 102.418438][ T6159] netlink: 60 bytes leftover after parsing attributes in process `syz.3.123'. [ 102.471346][ T6163] netlink: 60 bytes leftover after parsing attributes in process `syz.3.123'. [ 102.548483][ T6165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.126'. [ 102.587926][ T6159] netlink: 60 bytes leftover after parsing attributes in process `syz.3.123'. [ 102.962418][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'. [ 103.429666][ T6185] syzkaller1: tun_chr_ioctl cmd 1074025694 [ 103.932230][ T6196] netlink: 'syz.4.140': attribute type 16 has an invalid length. [ 103.962883][ T6196] netlink: 'syz.4.140': attribute type 17 has an invalid length. [ 104.212965][ T6203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.142'. [ 104.233813][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'. [ 104.499111][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'. [ 105.877298][ T6238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.158'. [ 106.828618][ T6254] netlink: 'syz.2.163': attribute type 9 has an invalid length. [ 107.312325][ T6267] netlink: 'syz.1.168': attribute type 10 has an invalid length. [ 107.326066][ T6265] __nla_validate_parse: 4 callbacks suppressed [ 107.326098][ T6265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.169'. [ 107.395228][ T6267] netlink: 3531 bytes leftover after parsing attributes in process `syz.1.168'. [ 108.037020][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'. [ 108.275903][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 108.426146][ T6289] macsec0: entered promiscuous mode [ 108.449054][ T6289] macsec0: entered allmulticast mode [ 108.475584][ T6289] veth1_macvtap: entered allmulticast mode [ 109.955211][ T6307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.182'. [ 110.727726][ T6323] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.191'. [ 110.784443][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'. [ 110.924755][ T6328] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.191'. [ 111.197028][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.194'. [ 111.485641][ T6342] netlink: 200 bytes leftover after parsing attributes in process `syz.2.199'. [ 112.982634][ T6362] __nla_validate_parse: 2 callbacks suppressed [ 112.982675][ T6362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.206'. [ 113.018941][ T6369] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.208'. [ 113.048820][ T6365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.207'. [ 113.072626][ T6369] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.208'. [ 113.603135][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 114.268556][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 114.569895][ T6406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.219'. [ 114.648739][ T6411] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.223'. [ 114.743360][ T6411] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.223'. [ 114.777991][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 116.915982][ T4946] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 118.292984][ T6492] __nla_validate_parse: 15 callbacks suppressed [ 118.293016][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 118.509889][ T6502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.262'. [ 118.756931][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.263'. [ 118.832246][ T6512] netlink: 24 bytes leftover after parsing attributes in process `syz.1.266'. [ 118.889933][ T6517] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.268'. [ 118.979378][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 119.003293][ T6517] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.268'. [ 120.178652][ T6558] netlink: zone id is out of range [ 120.199354][ T6558] netlink: zone id is out of range [ 120.212561][ T6558] netlink: zone id is out of range [ 120.226507][ T6558] netlink: zone id is out of range [ 120.250413][ T6558] netlink: zone id is out of range [ 120.255878][ T6558] netlink: zone id is out of range [ 120.270411][ T6558] netlink: zone id is out of range [ 120.276436][ T6558] netlink: zone id is out of range [ 120.294868][ T6558] netlink: zone id is out of range [ 120.313001][ T6558] netlink: zone id is out of range [ 120.327481][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 120.604862][ T6572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.276'. [ 120.896376][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.282'. [ 121.773395][ T4946] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 124.708508][ T6635] __nla_validate_parse: 5 callbacks suppressed [ 124.708526][ T6635] netlink: 4432 bytes leftover after parsing attributes in process `syz.3.303'. [ 124.907200][ T6643] netlink: 'syz.0.306': attribute type 4 has an invalid length. [ 124.963423][ T6648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.308'. [ 125.109631][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.309'. [ 125.194505][ T6658] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.314'. [ 125.247502][ T6658] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.314'. [ 125.431682][ T6662] netlink: 44 bytes leftover after parsing attributes in process `syz.2.312'. [ 125.464662][ T6662] netlink: 35 bytes leftover after parsing attributes in process `syz.2.312'. [ 125.505341][ T6662] netlink: 'syz.2.312': attribute type 5 has an invalid length. [ 125.549974][ T6662] netlink: 'syz.2.312': attribute type 6 has an invalid length. [ 125.604189][ T6662] netlink: 35 bytes leftover after parsing attributes in process `syz.2.312'. [ 126.109981][ T6674] netlink: 'syz.4.320': attribute type 2 has an invalid length. [ 126.185201][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.320'. [ 126.334437][ T6682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.324'. [ 129.566819][ T6717] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 129.647364][ T6717] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 129.704149][ T6717] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 129.958141][ T6725] __nla_validate_parse: 4 callbacks suppressed [ 129.958160][ T6725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.339'. [ 130.379035][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 130.916813][ T6747] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.346'. [ 130.956124][ T6747] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.346'. [ 131.254087][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'. [ 131.695370][ T6768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.354'. [ 132.195627][ T6788] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.363'. [ 132.250857][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.359'. [ 132.274676][ T6788] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.363'. [ 132.542033][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 132.741417][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.748641][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.309323][ T6805] tipc: Started in network mode [ 133.609867][ T6805] tipc: Node identity 815e0004, cluster identity 4711 [ 133.649994][ T6805] tipc: Node number set to 2170421252 [ 134.135322][ T6820] netlink: 'syz.1.373': attribute type 29 has an invalid length. [ 134.165330][ T6820] netlink: 'syz.1.373': attribute type 29 has an invalid length. [ 134.238080][ T6820] netlink: 'syz.1.373': attribute type 29 has an invalid length. [ 135.115828][ T6843] __nla_validate_parse: 6 callbacks suppressed [ 135.115848][ T6843] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.381'. [ 135.156559][ T6840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.383'. [ 135.158304][ T6843] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.381'. [ 135.201312][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 136.014440][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'. [ 136.234332][ T6874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.396'. [ 136.372005][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.397'. [ 136.378029][ T6878] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.398'. [ 136.455594][ T6878] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.398'. [ 136.618564][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.400'. [ 138.393402][ T6929] openvswitch: netlink: VXLAN extension 54 out of range max 1 [ 138.827135][ T6947] netlink: 'syz.2.426': attribute type 4 has an invalid length. [ 139.317210][ T6958] netlink: 'syz.3.431': attribute type 4 has an invalid length. [ 139.356018][ T6958] netlink: 'syz.3.431': attribute type 1 has an invalid length. [ 142.052199][ T6959] warning: `syz.2.432' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 142.659976][ T6987] syzkaller0: entered promiscuous mode [ 142.666498][ T6987] syzkaller0: entered allmulticast mode [ 143.115093][ T6993] __nla_validate_parse: 5 callbacks suppressed [ 143.115113][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'. [ 143.337584][ T7007] netlink: 60 bytes leftover after parsing attributes in process `syz.2.448'. [ 144.505593][ T6993] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 144.516159][ T6993] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 144.535052][ T6993] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 147.827604][ T7031] netlink: 24 bytes leftover after parsing attributes in process `syz.1.455'. [ 148.416170][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 148.984475][ T7055] netlink: 'syz.2.465': attribute type 10 has an invalid length. [ 149.164492][ T7055] .`: (slave geneve0): Enslaving as an active interface with an up link [ 149.403675][ T7065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.469'. [ 149.803764][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'. [ 150.108239][ T7073] netlink: 'syz.2.473': attribute type 1 has an invalid length. [ 150.206055][ T7073] netlink: 'syz.2.473': attribute type 4 has an invalid length. [ 150.253495][ T7073] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.473'. [ 151.472562][ T7106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.483'. [ 151.762648][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.484'. [ 155.091153][ T7109] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 155.116087][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 155.200295][ T7109] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 155.256887][ T7109] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 155.433526][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 155.740291][ T5725] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec [ 155.953845][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.495'. [ 156.213862][ T7148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.497'. [ 158.058063][ T7165] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.503'. [ 158.086659][ T7165] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.503'. [ 158.318499][ T7162] netlink: 40 bytes leftover after parsing attributes in process `syz.4.500'. [ 158.538266][ T7172] netlink: 5 bytes leftover after parsing attributes in process `syz.1.505'. [ 158.954046][ T7180] syzkaller0: entered promiscuous mode [ 158.968406][ T7180] syzkaller0: entered allmulticast mode [ 159.060535][ T7180] syzkaller0: tun_net_xmit 1280 [ 159.083129][ T7180] syzkaller0: create flow: hash 437403446 index 2 [ 161.733505][ T7179] syzkaller0: delete flow: hash 437403446 index 2 [ 161.770039][ T7199] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.516'. [ 161.794495][ T7201] netlink: 'syz.0.515': attribute type 10 has an invalid length. [ 162.620175][ T7200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.225226][ T7201] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 163.290887][ T7201] team0: Port device wlan0 added [ 163.294573][ T7214] netlink: 'syz.2.519': attribute type 3 has an invalid length. [ 163.307442][ T7214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.519'. [ 163.351244][ T7214] netlink: 14 bytes leftover after parsing attributes in process `syz.2.519'. [ 163.543735][ T7220] netlink: 44 bytes leftover after parsing attributes in process `syz.0.521'. [ 164.066315][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'. [ 164.222785][ T7247] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.530'. [ 164.325509][ T7247] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.530'. [ 165.298358][ T7269] netlink: 'syz.2.540': attribute type 8 has an invalid length. [ 165.444305][ T7281] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.544'. [ 165.567431][ T7281] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.544'. [ 165.670678][ T7286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.546'. [ 165.895892][ T7294] bridge_slave_1: left allmulticast mode [ 165.921065][ T7294] bridge_slave_1: left promiscuous mode [ 165.952312][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.691895][ T7294] bridge_slave_0: left allmulticast mode [ 168.707682][ T7294] bridge_slave_0: left promiscuous mode [ 168.721836][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.772317][ T7302] netlink: 'syz.2.551': attribute type 23 has an invalid length. [ 168.783308][ T7302] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.927201][ T7302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.551'. [ 169.174206][ T7312] openvswitch: netlink: Actions may not be safe on all matching packets [ 169.212788][ T7312] netlink: 64 bytes leftover after parsing attributes in process `syz.3.557'. [ 169.415542][ T7320] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.559'. [ 169.482395][ T7320] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.559'. [ 169.686463][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.560'. [ 169.846384][ T7329] syzkaller0: entered promiscuous mode [ 169.863336][ T7329] syzkaller0: entered allmulticast mode [ 169.881234][ T7332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.563'. [ 174.593161][ T7352] netlink: 'syz.1.567': attribute type 2 has an invalid length. [ 174.600928][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 174.792543][ T7364] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.573'. [ 174.913524][ T7364] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.573'. [ 175.335091][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 176.296082][ T4946] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 176.930184][ T7390] netlink: 60 bytes leftover after parsing attributes in process `syz.0.581'. [ 177.041381][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.581'. [ 177.205930][ T7402] netlink: 'syz.4.583': attribute type 1 has an invalid length. [ 177.215333][ T7402] netlink: 'syz.4.583': attribute type 3 has an invalid length. [ 177.261923][ T7402] netlink: 132 bytes leftover after parsing attributes in process `syz.4.583'. [ 177.478052][ T7407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.584'. [ 177.716055][ T7415] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.586'. [ 177.783158][ T7415] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.586'. [ 178.733521][ T7443] netlink: 'syz.1.597': attribute type 3 has an invalid length. [ 178.759957][ T7443] tc_dump_action: action bad kind [ 179.535352][ T7469] macvlan1: entered allmulticast mode [ 179.663281][ T7475] openvswitch: netlink: Flow actions attr not present in new flow. [ 179.758859][ T7475] netlink: 'syz.2.609': attribute type 21 has an invalid length. [ 179.777426][ T7475] __nla_validate_parse: 4 callbacks suppressed [ 179.777456][ T7475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.609'. [ 180.219807][ T7493] netlink: 'syz.4.614': attribute type 29 has an invalid length. [ 180.558871][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.619'. [ 180.716231][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'. [ 180.750041][ T7508] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.841806][ T7508] bridge_slave_0 (unregistering): left allmulticast mode [ 180.860211][ T7508] bridge_slave_0 (unregistering): left promiscuous mode [ 180.889872][ T7508] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.248454][ T7541] ref_ctr_offset mismatch. inode: 0x2ae offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 182.488918][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.636'. [ 182.633154][ T7555] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.639'. [ 182.760676][ T7555] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.639'. [ 182.835312][ T7560] netlink: 'syz.1.641': attribute type 1 has an invalid length. [ 183.012961][ T7560] netlink: 68 bytes leftover after parsing attributes in process `syz.1.641'. [ 184.016530][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'. [ 184.582412][ T7614] netlink: 'syz.0.648': attribute type 21 has an invalid length. [ 184.617111][ T7614] netlink: 132 bytes leftover after parsing attributes in process `syz.0.648'. [ 184.643252][ T7618] netlink: 'syz.2.650': attribute type 2 has an invalid length. [ 184.838252][ T7619] syzkaller0: entered promiscuous mode [ 184.860463][ T7619] syzkaller0: entered allmulticast mode [ 184.969035][ T7633] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.655'. [ 184.993271][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'. [ 185.074503][ T7633] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.655'. [ 185.175006][ T7637] netlink: 'syz.2.656': attribute type 49 has an invalid length. [ 185.801116][ T7640] netlink: 'syz.0.657': attribute type 61 has an invalid length. [ 185.819436][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 188.472936][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 189.551986][ T7648] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 189.585798][ T7648] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 189.619587][ T7648] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 189.765609][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 189.851564][ T7657] netlink: 'syz.4.662': attribute type 3 has an invalid length. [ 190.113349][ T7671] netlink: 36 bytes leftover after parsing attributes in process `syz.4.668'. [ 190.559750][ T7685] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.671'. [ 190.711095][ T7685] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.671'. [ 191.356265][ T7704] netlink: 104 bytes leftover after parsing attributes in process `syz.3.678'. [ 191.918058][ T7725] netlink: 32 bytes leftover after parsing attributes in process `syz.2.682'. [ 192.292178][ T7735] openvswitch: netlink: Missing valid actions attribute. [ 192.325921][ T7735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.403679][ T5292] veth0_vlan: left promiscuous mode [ 193.451847][ T3333] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.508720][ T5819] veth0_vlan: entered promiscuous mode [ 193.541526][ T7768] netlink: 'syz.4.693': attribute type 3 has an invalid length. [ 194.041532][ T7779] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 194.143511][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.151122][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.675381][ T29] audit: type=1107 audit(1785658108.317:2): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ó(ø' [ 194.769345][ T7795] netlink: 10 bytes leftover after parsing attributes in process `syz.1.700'. [ 194.953588][ T7814] netlink: 188 bytes leftover after parsing attributes in process `syz.3.703'. [ 196.794082][ T7840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.709'. [ 197.119295][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.713'. [ 197.740093][ T7870] netlink: 'syz.3.716': attribute type 61 has an invalid length. [ 197.749070][ T7873] netlink: 48 bytes leftover after parsing attributes in process `syz.4.717'. [ 197.782938][ T7870] netlink: 'syz.3.716': attribute type 3 has an invalid length. [ 197.885817][ T7873] netlink: 'syz.4.717': attribute type 10 has an invalid length. [ 197.916955][ T7873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.938528][ T7873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.027382][ T7875] netlink: 56 bytes leftover after parsing attributes in process `syz.4.717'. [ 198.064953][ T7873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.105456][ T7873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.553580][ T7896] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.726'. [ 199.678699][ T7896] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.726'. [ 200.005476][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.728'. [ 201.346145][ T7886] Bluetooth: hci1: command 0x0406 tx timeout [ 201.354155][ T7886] Bluetooth: hci3: command 0x0406 tx timeout [ 201.357437][ T7885] Bluetooth: hci4: command 0x0406 tx timeout [ 201.361253][ T7886] Bluetooth: hci0: command 0x0406 tx timeout [ 201.367272][ T7885] Bluetooth: hci2: command 0x0406 tx timeout [ 202.096159][ T7950] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.740'. [ 202.144848][ T7950] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.740'. [ 202.262586][ T7954] netlink: 32 bytes leftover after parsing attributes in process `syz.4.743'. [ 202.371601][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 203.220872][ T7960] [ 203.223237][ T7960] ============================================ [ 203.229377][ T7960] WARNING: possible recursive locking detected [ 203.235521][ T7960] syzkaller #0 Not tainted [ 203.239919][ T7960] -------------------------------------------- [ 203.246052][ T7960] syz.1.745/7960 is trying to acquire lock: [ 203.251925][ T7960] ffff88807f737038 (rhashtable_bucket){-.-.}-{0:0}, at: rht_lock+0x8b/0x180 [ 203.260648][ T7960] [ 203.260648][ T7960] but task is already holding lock: [ 203.267998][ T7960] ffff888056c4c038 (rhashtable_bucket){-.-.}-{0:0}, at: rht_lock+0x8b/0x180 [ 203.276698][ T7960] [ 203.276698][ T7960] other info that might help us debug this: [ 203.284745][ T7960] Possible unsafe locking scenario: [ 203.284745][ T7960] [ 203.292181][ T7960] CPU0 [ 203.295445][ T7960] ---- [ 203.298716][ T7960] lock(rhashtable_bucket); [ 203.303299][ T7960] lock(rhashtable_bucket); [ 203.307882][ T7960] [ 203.307882][ T7960] *** DEADLOCK *** [ 203.307882][ T7960] [ 203.316007][ T7960] May be due to missing lock nesting notation [ 203.316007][ T7960] [ 203.324310][ T7960] 5 locks held by syz.1.745/7960: [ 203.329320][ T7960] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: pidfs_add_pid+0x169/0xc50 [ 203.338644][ T7960] #1: ffff888056c4c038 (rhashtable_bucket){-.-.}-{0:0}, at: rht_lock+0x8b/0x180 [ 203.347784][ T7960] #2: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: trace_call_bpf+0xb6/0xb80 [ 203.357095][ T7960] #3: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: rhtab_map_delete_elem+0x21/0x190 [ 203.367023][ T7960] #4: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: rhtab_delete_elem+0x15c/0x1b30 [ 203.376765][ T7960] [ 203.376765][ T7960] stack backtrace: [ 203.382658][ T7960] CPU: 1 UID: 0 PID: 7960 Comm: syz.1.745 Not tainted syzkaller #0 PREEMPT(full) [ 203.382677][ T7960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.382692][ T7960] Call Trace: [ 203.382701][ T7960] [ 203.382710][ T7960] dump_stack_lvl+0xe8/0x150 [ 203.382737][ T7960] print_deadlock_bug+0x279/0x290 [ 203.382757][ T7960] __lock_acquire+0x24df/0x2cf0 [ 203.382787][ T7960] ? __lock_acquire+0x683/0x2cf0 [ 203.382809][ T7960] ? perf_swevent_get_recursion_context+0xa5/0x100 [ 203.382830][ T7960] ? perf_trace_buf_alloc+0x11b/0x280 [ 203.382854][ T7960] ? rht_lock+0x8b/0x180 [ 203.382868][ T7960] lock_acquire+0x106/0x350 [ 203.382889][ T7960] ? rht_lock+0x8b/0x180 [ 203.382908][ T7960] ? rhtab_delete_elem+0x15c/0x1b30 [ 203.382931][ T7960] rht_lock+0xa3/0x180 [ 203.382945][ T7960] ? rht_lock+0x8b/0x180 [ 203.382963][ T7960] rhtab_delete_elem+0x404/0x1b30 [ 203.382980][ T7960] ? rhtab_lookup_elem+0x29/0xd90 [ 203.383000][ T7960] ? rhtab_delete_elem+0x15c/0x1b30 [ 203.383017][ T7960] ? rhtab_map_delete_elem+0x21/0x190 [ 203.383038][ T7960] ? rhtab_map_delete_elem+0x21/0x190 [ 203.383063][ T7960] rhtab_map_delete_elem+0xe2/0x190 [ 203.383088][ T7960] bpf_prog_a4f1e23443ac9f8e+0x4e/0x56 [ 203.383109][ T7960] trace_call_bpf+0x3f0/0xb80 [ 203.383125][ T7960] ? trace_call_bpf+0xb6/0xb80 [ 203.383142][ T7960] ? trace_call_bpf+0x7d1/0xb80 [ 203.383159][ T7960] ? __pfx_trace_call_bpf+0x10/0x10 [ 203.383176][ T7960] ? __lock_acquire+0x683/0x2cf0 [ 203.383205][ T7960] perf_trace_run_bpf_submit+0x78/0x170 [ 203.383227][ T7960] perf_trace_lock+0x32d/0x410 [ 203.383258][ T7960] ? __pfx_perf_trace_lock+0x10/0x10 [ 203.383281][ T7960] ? lock_acquire+0x106/0x350 [ 203.383303][ T7960] ? rht_lock+0x8b/0x180 [ 203.383326][ T7960] ? pidfs_add_pid+0x169/0xc50 [ 203.383347][ T7960] ? pidfs_add_pid+0x169/0xc50 [ 203.383371][ T7960] ? pidfs_add_pid+0x169/0xc50 [ 203.383391][ T7960] lock_release+0x38e/0x3c0 [ 203.383420][ T7960] pidfs_add_pid+0x650/0xc50 [ 203.383442][ T7960] ? pidfs_add_pid+0x169/0xc50 [ 203.383467][ T7960] alloc_pid+0xe7a/0x1310 [ 203.383497][ T7960] ? __pfx_alloc_pid+0x10/0x10 [ 203.383530][ T7960] ? fpu_clone+0x340/0xaf0 [ 203.383549][ T7960] ? fpu_clone+0x340/0xaf0 [ 203.383567][ T7960] ? __local_bh_enable_ip+0xd0/0x130 [ 203.383601][ T7960] ? copy_thread+0x636/0x970 [ 203.383632][ T7960] copy_process+0x20ea/0x4390 [ 203.383650][ T7960] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 203.383675][ T7960] ? copy_process+0xd3c/0x4390 [ 203.383710][ T7960] ? __pfx_copy_process+0x10/0x10 [ 203.383740][ T7960] kernel_clone+0x2d7/0x940 [ 203.383766][ T7960] ? __pfx_kernel_clone+0x10/0x10 [ 203.383795][ T7960] ? perf_trace_lock+0x32d/0x410 [ 203.383826][ T7960] __se_sys_clone3+0x33c/0x360 [ 203.383847][ T7960] ? __might_fault+0xaf/0x130 [ 203.383867][ T7960] ? __pfx___se_sys_clone3+0x10/0x10 [ 203.383902][ T7960] ? _copy_to_user+0x8a/0xb0 [ 203.383932][ T7960] ? do_user_addr_fault+0xc4a/0x1340 [ 203.383963][ T7960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.383981][ T7960] do_syscall_64+0x174/0x580 [ 203.384000][ T7960] ? trace_irq_disable+0x3b/0x140 [ 203.384021][ T7960] ? clear_bhb_loop+0x40/0x90 [ 203.384042][ T7960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.384058][ T7960] RIP: 0033:0x7fee86b9ee09 [ 203.384074][ T7960] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 203.384087][ T7960] RSP: 002b:00007ffca2c0a5c8 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 203.384103][ T7960] RAX: ffffffffffffffda RBX: 00007fee86b5a3a0 RCX: 00007fee86b9ee09 [ 203.384115][ T7960] RDX: 00007fee86b5a3a0 RSI: 0000000000000058 RDI: 00007ffca2c0a620 [ 203.384126][ T7960] RBP: 00007fee87b0b6c0 R08: 00007fee87b0b6c0 R09: 00007ffca2c0a707 [ 203.384137][ T7960] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffe8 [ 203.384148][ T7960] R13: 000000000000006e R14: 00007ffca2c0a620 R15: 00007ffca2c0a708 [ 203.384174][ T7960] [ 203.884813][ T7966] netlink: 36 bytes leftover after parsing attributes in process `syz.2.746'.