last executing test programs: 8m37.490268902s ago: executing program 32 (id=47): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x6, 0x804, 0x0, 0x7}, {0x10400002, 0x2, 0x0, 0x5}], 0x10, 0xfffffffd}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f00000001c0)=r3, 0x4) 8m37.028020952s ago: executing program 33 (id=44): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000000500000000000000000000000100000a58000000060a0b040000000000000000020000022c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a32000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a32343a90d5e49dfe44092830282b44d11932cc1caadad16f9505fd889cb4bcbfdda896cfc5f6a60eaac2604f8e3601e9701bf60f0d3ad9fafd386c828947b74852e0e1fa13c5d2700be01b03a5ee420348128d898260a56dd90c17c980ac705a07bdc2d2213cb9624cd982d907f7ea"], 0x80}}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, 0x0, 0xa4ff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f00000001c0)=r6, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f00000001c0)=r4, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x67, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x69, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000001980)={0x1060, 0x0, 0x5, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x7}, 0x2, 0xff, 0x2008, 0x4, 0x4, 'syz0\x00', "6792f32c93517ad8de6287b225d0b01ffc1ae0e53c5fa4732eacfbaf6279cffa", "690d0d26b5a26e0d4f48925f685fd4668f271e2fe29e94a5546bcac39cf202ad", [{0x0, 0x401, {0x1, 0x8556}}, {0x7, 0x3, {0x2, 0x1}}, {0xe1ca, 0x100, {0x0, 0x1}}, {0x5, 0x6, {0x2, 0x6}}, {0x0, 0x401, {0x0, 0x7ff}}, {0x200, 0x4, {0x2}}, {0x0, 0x5, {0x3, 0x251}}, {0xfffd, 0xfff9, {0x0, 0x1000}}, {0x2, 0x0, {0x0, 0x5}}, {0x81, 0xa9, {0x0, 0x5}}, {0x1, 0x1, {0x0, 0x3d}}, {0x9, 0x9, {0x1, 0x7}}, {0x200, 0x2, {0x3, 0x6}}, {0x7fff, 0x8, {0x1, 0xf4}}, {0x86, 0x9, {0x1, 0x1}}, {0x0, 0xffff, {0x1, 0x6}}, {0x8, 0x4, {0x1, 0x7}}, {0x7fff, 0xfff, {0x1, 0xb8}}, {0x7f, 0xc, {0x3, 0xa1e9}}, {0xea1c, 0x4, {0x1}}, {0x200, 0x80, {0x2, 0x2}}, {0x7, 0xffde, {0x2, 0xfffffffe}}, {0x3f, 0x3, {0x1, 0x5504152a}}, {0xf, 0x0, {0x0, 0x6}}, {0xe601, 0x14, {0x1, 0x9}}, {0x800, 0x8, {0x2, 0x2}}, {0xd6, 0x895, {0x0, 0x2389c0}}, {0x4, 0x3, {0x0, 0x6}}, {0x7, 0x8, {0x1, 0x5}}, {0x7, 0x2, {0x2, 0x4}}, {0x4, 0x10, {0x3, 0xe}}, {0x4, 0x9, {0x1, 0x5}}, {0xd057, 0x2, {0x2, 0xc}}, {0xc0, 0xc, {0x2, 0x8}}, {0x5, 0x1ff, {0x2, 0x6}}, {0x2, 0x7fff, {0x2, 0x3}}, {0x0, 0x4, {0x1, 0x8}}, {0x7fff, 0x6969, {0x3, 0x4}}, {0x6, 0x8, {0x3, 0x6}}, {0x200, 0xc, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0x800}, 0x5, 0x4, 0x9c, 0xfc01, 0x18, 'syz1\x00', "524447c160500549234ea55854e062e1335c8a7bf807baf625aa8ea6429d9c73", "f9ebafe3be784ecb13da6c69b289f3b6cdf04feafb7e0a505208e386dc0651d1", [{0x3, 0xff, {0x0, 0x5}}, {0x7f, 0x4, {0x3, 0x8}}, {0x9, 0x9, {0x0, 0x1}}, {0x4, 0x27c, {0x2, 0x5}}, {0x2, 0xe000, {0x3, 0x7fff}}, {0x2, 0x5, {0x0, 0xa}}, {0x800, 0xd, {0x3, 0xffffff1b}}, {0x14, 0x1, {0x3, 0x3}}, {0x7fff, 0x9, {0x2, 0x1}}, {0x2, 0xf, {0x1, 0xe}}, {0x5, 0x0, {0x1, 0xce}}, {0x461e, 0x3, {0x0, 0x7}}, {0x473, 0xfffb, {0x3, 0x7}}, {0x9, 0x8, {0x3, 0xc}}, {0x3, 0xcac9, {0x2, 0x16634}}, {0x9, 0x6, {0x3, 0x3}}, {0x4, 0x2e, {0x3}}, {0x4, 0x0, {0x2}}, {0xfff9, 0x2, {0x1, 0xfffffe01}}, {0x1, 0x7, {0x1, 0x5}}, {0x8, 0x5, {0x5c179fbfa6ff3608, 0x7}}, {0x7, 0x4, {0x1, 0x80}}, {0x800, 0x9, {0x3, 0x80}}, {0x4, 0xd8c7, {0x3, 0xad}}, {0x8, 0x0, {0x1, 0x6e}}, {0xf001, 0x6, {0x1, 0x9}}, {0x3, 0xcb9, {0x0, 0x4}}, {0xae15, 0x9, {0x2, 0x569f}}, {0x3, 0x800, {0x1, 0xfffffffb}}, {0x2, 0x634, {0x2}}, {0x0, 0x2b9b, {0x3, 0x1}}, {0x9, 0x1, {0x3, 0x9}}, {0x80, 0x0, {0x0, 0x7}}, {0x1, 0x1, {0x3, 0x4d}}, {0x2, 0xc620, {0x2, 0x40b3}}, {0x7, 0x5, {0x0, 0xfffff703}}, {0xff, 0x80, {0x2, 0x6}}, {0xf, 0x1, {0x1, 0x6b}}, {0x2, 0x0, {0x3, 0x10000}}, {0x1, 0x1, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0x2}, 0x0, 0x6, 0x4, 0x3, 0x20, 'syz1\x00', "93a04dbc1c70da1f2826d5c8b9ae34ad8f1d24798f50ac5eda37d6f05d934ad2", "ee05b8ddb86feb40cc71c0a10fb1dfaf42e05c978702df1319eef8e716ef68f4", [{0x22, 0x4, {0x2, 0x7}}, {0x9, 0x7, {0x0, 0x1000}}, {0x9, 0x4, {0x1, 0x2}}, {0x9, 0x1, {0x2, 0xa}}, {0xf5, 0x7, {0x0, 0xffffffdf}}, {0x3, 0x0, {0x1, 0x663b}}, {0x0, 0x1, {0x0, 0x3}}, {0x1, 0x4, {0x2, 0x9}}, {0x0, 0x81, {0x3, 0x4}}, {0x43, 0x6, {0x1, 0x9}}, {0x0, 0x0, {0x3, 0x3}}, {0xb7, 0x1000, {0x3, 0x7fffffff}}, {0x5, 0x101, {0x3, 0x4}}, {0x800, 0x3, {0x2}}, {0x2e, 0x7fff, {0x1, 0xc618}}, {0x9, 0x45, {0x3, 0x92b}}, {0x3, 0x9, {0x3, 0x10001}}, {0x0, 0x0, {0x1, 0x1}}, {0x873, 0x0, {0x0, 0x4}}, {0x1, 0x4, {0x2, 0x3}}, {0x2, 0xc142, {0x1, 0x4b}}, {0x6, 0x2, {0x0, 0x5}}, {0x7, 0x7f, {0x0, 0xead}}, {0xfffa, 0xfffd, {0x2, 0x9}}, {0x81, 0x0, {0x2, 0x40}}, {0xa, 0x7, {0x3, 0x5}}, {0x1, 0xc, {0x0, 0xe7}}, {0x695, 0x4b72, {0x2, 0xfffffff7}}, {0x2, 0x5, {0x1, 0x7f}}, {0x4, 0x0, {0x3, 0x7}}, {0xfff, 0x200, {0x0, 0x40}}, {0x9, 0x0, {0x3, 0x2}}, {0x0, 0x0, {0x3, 0x8d}}, {0xffff, 0xfcc, {0x0, 0x8}}, {0x48ff, 0x7fff, {0x3, 0x1}}, {0x4, 0x2, {0x3, 0x3}}, {0xcfa1, 0x80, {0x3, 0x4}}, {0x1, 0x6, {0x0, 0x7}}, {0x8, 0xd, {0x0, 0x8}}, {0x5, 0x8, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x7, 0x6, 0x7, 0x2, 0xa, 'syz0\x00', "d9e9eb410592a744b5081e5b61045d0ed60bfdffa38ef3ba0f049c29ab8268b5", "a683d7ac7a4f9be9f1106346b7c12afc42ae9e66f0b075bd8564da31a1639622", [{0x40, 0x6, {0x0, 0x6}}, {0x5, 0x5, {0x0, 0x5}}, {0x1, 0x0, {0x0, 0x137717a5}}, {0x11, 0x401, {0x0, 0x5}}, {0x1, 0x401, {0x2, 0x8}}, {0x1, 0x7f, {0x1, 0x8}}, {0xfffc, 0x0, {0x2, 0x8c}}, {0x8, 0x5, {0x2, 0x4}}, {0x1, 0x6, {0x2, 0x1}}, {0x3, 0x7, {0x0, 0x7}}, {0x1f, 0x5, {0x2, 0x7}}, {0x9, 0x0, {0x3, 0x7}}, {0xfff3, 0x4, {0x1, 0x8}}, {0x8, 0x3, {0x2, 0x4}}, {0x5, 0x7f, {0x3, 0x4}}, {0x0, 0x3, {0x2, 0x40}}, {0x40, 0x99b, {0x3, 0x7f}}, {0x7, 0x8, {0x3, 0xffff}}, {0x5, 0x5, {0x1, 0x2}}, {0xf, 0x7ff, {0x1, 0x5}}, {0xd7, 0x8, {0x2, 0x1ff}}, {0x3, 0x2, {0x2, 0x4}}, {0x0, 0x80, {0x0, 0x7}}, {0x1000, 0x4, {0x2, 0x247}}, {0xfff7, 0xf, {0x2, 0x5}}, {0xde6, 0x6, {0x2, 0xbe}}, {0x101, 0xf4, {0x0, 0x4}}, {0x0, 0x3, {0x3, 0x8}}, {0x0, 0x6, {0x0, 0x1fc00}}, {0x8000, 0x7ff, {0x3, 0x9}}, {0x2, 0x1, {0x0, 0x5}}, {0x9, 0x9, {0x3}}, {0x1, 0x0, {0x3, 0x6}}, {0x3, 0x101, {0x0, 0x3}}, {0x2, 0x2, {0x3, 0x2}}, {0x7, 0x3, {0x3, 0x65}}, {0x4, 0x18, {0x2, 0x4}}, {0x7, 0x3ff, {0x1, 0x4}}, {0x8, 0x9, {0x2, 0x5}}, {0x1ff, 0x3, {0x1, 0x10}}]}}}, {{0x254, 0x1, {{}, 0xd, 0x96, 0x0, 0xe, 0x4, 'syz1\x00', "78566ba2d0f4cd1556b5f36b8cb111943bf514b86a95947323a55f6b5fe8e5a2", "e197ddc0bf39a69e2b7aad44936f12173ac00aa4a025e18ba7867f70136a5543", [{0xffff, 0xbf38, {0x0, 0xe6}}, {0x5, 0x7fff, {0x0, 0x80000000}}, {0x6, 0xffff, {0x2, 0x1}}, {0x3ff, 0xe, {0x2, 0x3}}, {0x1000, 0x1000, {0x3, 0x4}}, {0x2, 0x7, {0x0, 0x6}}, {0x0, 0x2, {0x1, 0x6}}, {0x1400, 0x7fff, {0x0, 0x10}}, {0xbade, 0x4, {0x3, 0x51}}, {0x1, 0xff, {0x1, 0xc3a}}, {0x8, 0x81, {0x0, 0x9}}, {0x50df, 0xfffc, {0x2, 0x2f4e}}, {0x8, 0xff, {0x2}}, {0x0, 0xe, {0x0, 0x7}}, {0xb, 0x0, {0x3}}, {0x1ff, 0xfff9, {0x2, 0xd}}, {0x2, 0x5, {0x0, 0x8}}, {0xd, 0x6, {0x2, 0x5}}, {0x0, 0x6, {0x0, 0x5}}, {0x6, 0x5, {0x3, 0xaa58}}, {0x0, 0x4, {0x2, 0x8}}, {0x8, 0x2, {0x3, 0x2e9}}, {0x3, 0xe55b, {0x3, 0x6}}, {0x401, 0x7, {0x3, 0x3677}}, {0x8, 0x7cb, {0x0, 0xffff}}, {0x800, 0x7, {0x3}}, {0x3, 0x5, {0x2, 0x101}}, {0x5, 0x5, {0x3, 0x80000000}}, {0x95, 0x2, {0x1, 0x2}}, {0x2, 0x7, {0x0, 0x5}}, {0x7, 0x0, {0x1, 0x266}}, {0x7, 0x7, {0x0, 0x400}}, {0x7ff, 0xbb5d, {0x3, 0x4}}, {0xc47, 0x4, {0x0, 0x7}}, {0x6, 0x1, {0x3, 0x5}}, {0x2, 0x200, {0x1, 0x2}}, {0x9, 0x8, {0x0, 0xfffffffe}}, {0x143, 0xf7f, {0x1, 0xbf}}, {0x1, 0x1, {0x1, 0x1000}}, {0x3, 0xbf9, {0x2}}]}}}, {{0x254, 0x1, {{0x1}, 0x0, 0x5, 0xb0, 0x4, 0x7, 'syz1\x00', "6be924427e8e457e9778d890c7289aac6e84a4717aa2dcd392a668468e3740ba", "75d83eff00347872c2dc20a622fa1bca1b9e5317f63a27c0732314ea10a40796", [{0x0, 0x8, {0x3, 0x8}}, {0xf67c, 0x7, {0x2, 0xfffffffe}}, {0x5, 0x6, {0x3, 0x1}}, {0xfff, 0x9, {0x2, 0x37f}}, {0x5533, 0x1, {0x3, 0xfffffffc}}, {0x1000, 0x831, {0x0, 0x7}}, {0x6, 0x200, {0x0, 0xe}}, {0xfff0, 0x8000, {0x2, 0x5}}, {0x667c, 0x6, {0x1, 0x8}}, {0x800, 0x100, {0x3, 0xd19d}}, {0x5, 0x4, {0x2, 0x6}}, {0x200, 0x4, {0x1, 0x40}}, {0x6, 0x4, {0x0, 0x200}}, {0x3, 0x8000, {0x1, 0x200}}, {0x401, 0x8000, {0x3, 0x8}}, {0xbbb, 0x400, {0x1, 0x7ff}}, {0x400, 0x5, {0x2, 0x3}}, {0xad2a, 0x3, {0x2, 0x8}}, {0x6, 0x1, {0x2, 0x2f1}}, {0x20, 0x3, {0x1, 0x80}}, {0xfff, 0x7862, {0x2, 0x8}}, {0x6, 0x7, {0x0, 0x56}}, {0xfffe, 0xf2, {0x3, 0x7}}, {0x0, 0x62, {0x3, 0x127e}}, {0x629, 0x263, {0x0, 0x1}}, {0x1aa7, 0x9, {0x1, 0x7}}, {0x0, 0xa, {0x2, 0x2f72}}, {0x3, 0x7, {0x2, 0x8}}, {0xfffe, 0xfc00}, {0xd, 0x2, {0x2, 0xe}}, {0x2, 0x101, {0x1, 0xf}}, {0x7, 0x101, {0x0, 0x751a}}, {0x880a, 0xfffc, {0x2, 0x4e99e765}}, {0x0, 0x56, {0x0, 0xbe}}, {0x8, 0x1000, {0x0, 0xf}}, {0x5, 0x1, {0x1, 0xf805}}, {0x0, 0xfffc, {0x3, 0x6}}, {0x49, 0x5b, {0x2, 0x7}}, {0xa2d1, 0xaaa5, {0x1, 0x94d2}}, {0xcb, 0x6, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0xffffff01}, 0x4, 0x25, 0x6, 0x4, 0x17, 'syz0\x00', "cb731035f09aeb19d60561c033a2e39e906a482bb781dbe9e8300b4172ccfa49", "291a6ebedc5570cf26f5a8ae9796cfd3875fb9ecdb68b793006dcf2ed350c340", [{0x6, 0x8, {0x3, 0x7}}, {0x101, 0x7, {0x3, 0xfffffffb}}, {0x9, 0x9159, {0x3, 0x6}}, {0x6, 0x4, {0x2, 0x5}}, {0x9, 0x4, {0x1, 0xffff3f2f}}, {0x9, 0x9, {0x0, 0x10}}, {0x6, 0xfff, {0x0, 0x1}}, {0x5, 0x3, {0x2, 0xfffffff6}}, {0x6, 0xfeff, {0x2, 0x6}}, {0x6, 0x1, {0x3, 0x3}}, {0x3, 0x2cc0, {0x1, 0xa84}}, {0x2, 0x9, {0x2, 0x6fc}}, {0x7, 0xfffc, {0x3, 0xff}}, {0x101, 0x5, {0x1, 0x2}}, {0x81, 0x100, {0x1}}, {0x6, 0x3ff, {0x3, 0x8}}, {0x584a, 0x6, {0x1, 0x10000}}, {0x5, 0x3ff, {0x2, 0x3}}, {0x3, 0x630b, {0x3, 0xe}}, {0x81, 0x2, {0x3, 0x2800}}, {0x1, 0x4, {0x0, 0x2}}, {0x85b5, 0x9, {0x0, 0xabe3}}, {0x3, 0x1, {0x3, 0xe8}}, {0x8, 0x524c, {0x0, 0x3}}, {0x8, 0xfffc, {0x0, 0x7ff}}, {0x6, 0xa6dd, {0x0, 0x7fff}}, {0x9, 0xff81, {0x2, 0x8}}, {0x10, 0x7, {0x0, 0x7fffffff}}, {0x2, 0x3, {0x3, 0x5}}, {0x6c5, 0x1c00, {0x2, 0x9b}}, {0x7, 0x1, {0x3, 0x1}}, {0x0, 0x0, {0x1, 0x40}}, {0x3800, 0x100, {0x3, 0x6}}, {0x4, 0x1, {0x3, 0x3}}, {0x3, 0x59d, {0x3, 0x101}}, {0x9, 0x10, {0x2, 0x8}}, {0x4, 0x1, {0x3, 0x1}}, {0x1, 0x4, {0x1, 0x5}}, {0x42ce, 0x5, {0x3, 0x8}}, {0x6, 0x7, {0x0, 0xd}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x40004}, 0x40800) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40305829, &(0x7f0000000040)=0x12800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001000000148f0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 8m37.027919606s ago: executing program 34 (id=45): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000500)=@newtaction={0x48, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x8, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0) 7m52.81409151s ago: executing program 35 (id=112): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)=r1, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x68, 0x19, 0x1, 0x70bd2c, 0x25dfdbfb, {0x6}, [@generic="1b833cbf12d3e85170030fe7005536e6da4b28d3b78f21cdfc88e91e71e0753deaa439bc5503f9ee2b61004b4f49826363ec854c1f30558c1246d007a54bcf31fb23e11d8dc7cf60d85a1e292fe80609658a06"]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = socket$kcm(0x2, 0x922000000001, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10540, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002940)=""/4077, 0xfed}, {&(0x7f0000000140)=""/117, 0x75}, {&(0x7f0000003940)=""/4117, 0x1015}], 0x3}, 0x0) recvmsg$kcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x9, 0x2}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000a071f6100180000000200000000000000390000030000000004000000feffffffe4c100000035a489ac9a00eb756182182f6d7bc48393cf30840fcca2d29d013ca220ff569aedaae962702f4ae4b519504a2cb850ba9ad0bf688cafc12e4ced4ec18c8d9bf8df3f79200b54cd4f5fa017d05c6464339aed463ab143494ce18fbde7e053cb348ad1c85fcf394dc9ef534c2d3bf18207d979229f7b285728e2235a549a76bad7c2"], 0x0, 0x32, 0x0, 0x1, 0x282}, 0x28) setsockopt$sock_attach_bpf(r2, 0x1, 0x12, &(0x7f0000000000), 0x4) r6 = socket$kcm(0x2, 0x5, 0x84) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r8 = getpid() r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000020000780050003001f0000000c0001800800014000000000080006000000021c05000500020000000500010006"], 0x68}}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x8, 0x0, 0x8, 0x2, 0x0, 0x0, 0x180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x283, 0xe}, 0x802, 0x6, 0x9, 0x1, 0xffff, 0x8, 0x8, 0x0, 0x100, 0x0, 0x6}, r8, 0xe, r7, 0x1) setsockopt$sock_attach_bpf(r6, 0x84, 0x7c, &(0x7f0000000000)=r7, 0x62) openat$cgroup_int(r7, &(0x7f00000000c0)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x2, 0x4e21, @remote}, 0x10, 0x0}, 0x404c045) 3m15.485041921s ago: executing program 36 (id=2169): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x4c00, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffff08"], 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3m0.651624733s ago: executing program 37 (id=2171): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0xfff, 0x301, 0x0, 0x4}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m41.419264219s ago: executing program 38 (id=2313): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x4, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001900030002000600030000800000000056a705251e638294ff0051f60a84c9f4d4938037e786a6d072c6c95300000000000000000000d1", 0x5d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m5.264226236s ago: executing program 39 (id=2735): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x74, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfb, {}, [{0x60, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x17}, {0xffffffffffffffcf}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x40002000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x11a0ab, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x70, 0x80}, 0x100010, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x52) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0x22, 0x0, 0x700) 1m52.632210705s ago: executing program 6 (id=2843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1m52.285650661s ago: executing program 6 (id=2851): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x74, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfb, {}, [{0x60, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x17}, {0xffffffffffffffcf}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x40002000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x11a0ab, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x70, 0x80}, 0x100010, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x52) r5 = getpid() r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="9134b51f79c23ed829307e3fbe0360a892c4c44ce85a300602584b00000000fe00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, 0x0) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x20000084}, 0x40880) r8 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x6, 0x22, 0x0, 0x700) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x82, &(0x7f0000000180)={0x0, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES16=r10, @ANYBLOB="7f00000000000000000000007b1373a27f9e4334836434b4b093e7c70000000000000000", @ANYRESHEX=r9, @ANYRES8=0x0, @ANYRESDEC=r9], 0x50) 1m51.732540656s ago: executing program 6 (id=2860): r0 = socket$kcm(0x2, 0x5, 0x84) close(0x3) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x10, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0x0, 0x0, 0xfffc}, 0x80d1) 1m51.656253248s ago: executing program 9 (id=2861): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8008, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)={0x20, 0x3c, 0x301, 0x74bd25, 0x25dfdbff, {0xc}, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0xe}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044093}, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000004c0)={0x1, 0x3, [@random="990f3140f0f8", @broadcast, @empty]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r5 = socket$kcm(0x1e, 0x4, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00800000000000000000000000008dcc9d"], 0x50) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001500)=""/4098, 0x1002}, {&(0x7f0000000680)=""/240}], 0x221}, 0x1c1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r6, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=@getqdisc={0x2c, 0x26, 0x300, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x6, 0x7}, {0xa, 0x1}, {0x2, 0xf}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008058}, 0x80) 1m51.519110408s ago: executing program 6 (id=2863): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x76, 0xfb4}, 0x11deee, 0x4, 0x98, 0x9, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x10, 0x1409, 0x211, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 1m51.195384354s ago: executing program 9 (id=2867): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)={0x478, 0x3b, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2}, [@nested={0x1c4, 0x3a, 0x0, 0x1, [@nested={0x4, 0x20}, @nested={0x1b9, 0x129, 0x0, 0x1, [@typed={0x8, 0xa3, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @generic="4e54d6cb0b08b90ac85ca6cc353d4247c1386042f9d5dbe9c648b46c158d8ddeb2d00d83194de7bdc6f54241576b9afd8c8c74879e52175f6ebeaaea57998082d578c80289", @nested={0xc, 0x111, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @uid}]}, @nested={0x154, 0x7c, 0x0, 0x1, [@generic="9d3c7b0cf7bb9f00474614a4d618334af66221a214a310529f2e12c35f53c95816394579441f97b17cfb2f4e3575e03a37fccb84af041e4bbafb27b7a35631549ede79833b548ff77b9dd52c6484d3520f8a38a882199d9853a8aab6c9bb71a91f4d39f522aacb9309f8073ff907186d1feb97a38d20", @typed={0x4, 0x20}, @generic="92d4c8b86620e0b6667e9d4216966bae51f089626d2f47873ca3994bc567adf90f0fd7eb674eb6e9ebcdf65d5ce3d99109feb8198a639a4f9988cd033d2a4b1906c5953c3804bc4cfe3b0987fb8449bb35c5e44e317ea79edf528d27e9e6468589521d398e21db39e4ab8564a3c7070ad6b74c29b6a4ce248713695a842059d33d8ff0ce70ab4e6ddf643748279eaaaf7acb430bd4372d568f1001dca00a0b68f535640e44c7d77e178430528ceb5127f2b130f71c42bda1ea1ec322330d1255915c4f5138cb8d18c8d647a0d24d8a6a4bacaa78c987"]}, @typed={0x8, 0x142, 0x0, 0x0, @u32=0x6}]}]}, @typed={0x8, 0x5, 0x0, 0x0, @pid}, @nested={0x298, 0x93, 0x0, 0x1, [@nested={0x40, 0x44, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x18, 0x4e, 0x0, 0x0, @str='\xff\xff\xff\xffg\xb3:wq\xd1%\xf8\xd1\xb7Amt7\xff\xff'}, @nested={0x4, 0x15b}, @typed={0x8, 0xe3, 0x0, 0x0, @u32}, @typed={0x8, 0x9b, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xda}]}, @generic="e1e308de2a47df724182bde8dbc6314cab9317dca94f9d91fdeb691d6dfc945f4e4337225ac7f62a3a5ebd10a2078f06443a0f48e61fe156aa3c5708e3c975be8e457a9086a6ecee990bac92b2f4dbcbfcc4bf92573d5cc50a7a7f68f6c5e5e3c5e03203782a4d2c1a1947720c085bffb3fcecf4872b0ae38b2568896350721095551014eac19781a9c158c94e16bcb52fdaf45be58cb7fe3750e4c7e49a9cdf1d297b4107fcd0c355ea81639b296d70ce4cd9cb437a6106307b91f9d96aa8c74c70b09d0ea0f0251e939240d4fb39a5d2637cc8a8448dacc04e54f3", @nested={0x178, 0xcd, 0x0, 0x1, [@nested={0x174, 0x102, 0x0, 0x1, [@nested={0x16f, 0x3b, 0x0, 0x1, [@typed={0x4, 0x64}, @generic="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", @typed={0x8, 0x145, 0x0, 0x0, @uid}, @typed={0x6, 0xbe, 0x0, 0x0, @str='/\x00'}, @typed={0x8, 0x14b, 0x0, 0x0, @uid}, @nested={0x4, 0x41}]}]}]}]}]}, 0x478}, 0x1, 0x0, 0x0, 0x8084}, 0x4000014) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1, @ANYRES8=r3, @ANYRES16=r2, @ANYRESHEX=r1], 0xfe33) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=r3], 0x7c}}, 0xc1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0xc, 0xe4, &(0x7f00000000c0)=""/228, 0x40f00, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x23) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2fafb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x3, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @broadcast}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1m50.983868588s ago: executing program 6 (id=2869): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) (async) close(r2) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x46, 0x107, 0x70bd28, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x5, 0x3, 0x0, 0x1, [@generic="ae"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000280)=""/238, 0xee}], 0x1}, 0x0) 1m50.70002771s ago: executing program 9 (id=2874): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) socketpair(0x8, 0x1, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8983, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x240000c0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x5, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000), 0xc) syz_clone(0xab009500, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8400) 1m50.603171729s ago: executing program 6 (id=2875): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) 1m50.31868632s ago: executing program 40 (id=2875): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) 1m50.309335978s ago: executing program 9 (id=2880): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x76, 0xfb4}, 0x11deee, 0x4, 0x98, 0x9, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x10, 0x1409, 0x211, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 1m49.392283932s ago: executing program 9 (id=2884): perf_event_open(&(0x7f0000000180)={0x2, 0x42, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a0, 0x0, @perf_config_ext={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000004000000ffff010000180000", @ANYRES32=0x1, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000"], 0x48) 1m49.343353354s ago: executing program 3 (id=2885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000040) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004840}, 0x20008000) 1m49.161498501s ago: executing program 3 (id=2886): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m48.948124463s ago: executing program 3 (id=2889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db67dc983134d04ef2fd6fa7a9b857b72abaca100af1ba23d69883c073ec10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b950600009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079229c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b858b7b67aa0b28d69a74ffdea61be892f0f9ff9468e42aea53ee0cb83ff180aa18b625d1667459c7cba77cedca0bff6d8370c33e2bd9cebd29c152ff9dc8c2772fe552fecfcd1778b08381000000c0b8e14631d521207e7423d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c1779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9400010000ca11d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31044c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d7d714ff3a85586b9b452301f5470d0e0ae5d7f82f178f0c7c9c8f44c390c8a2c5be9e24a125420912ec9a3149f87b35ef1169f05e49164a4944e7b4da2097f57020dd4f1f4f15edd7a0b1e24c6f79e1ea72a29c773f40f5bd9a6d7926c5c741f5aa85405273c7967d2c1a14efe0d5322cdcf2bc058ff9aab481926312f04008b1044e8c1c17d8c562edf69f4db96e059c49ec69a6086b5a3d24f4c7810ab5f6a9f9eb5c881883e5671bbca4614df48103ca6e408910000000000f784583b63fcd46293e1ea56bd87915783a144d41669cd2c52dbb03e2b7384f100000000000000000090bd4fa6a2d30dafd3a04d373eaf151dfbbb744f0f1ce962217b32ad159f41671f002c3a25b4efbc3b193e0954f71c7f240a7cdc5bf9be12ca0e82d2a408c8f882760331612a7c3d74786b3268e0c2a95396f6d16b8309cc192295fea2d0ce983baef6deecca6b6268b6cc965f2623bac861e31026a6aba7ebf78a614092257e3a4e52b7b1628dc33a425dce56fc939b96fbb66e131ba7651b542c86650336735d315c26bae977ff5a619b2534a5d1479e9090447aa860b81b905ded2f52ab9c741fc3a05030476b159690a811416d59f9d92c84fcbf0146be0330e1127cc4bb4e4c94d603f449279874e44113e9de94fbc14891af08e20a4701f0f8788b357815cf4ca3da2066ee6604ac6ab6ec54a111bd5b1887e74eb854010cc2dc95b06ceddfbc1b914be267fc29e6cf2301291ca8de0eed796d9e5e356861349b0fc217592e962360e714bb93a2e936f70873e773b9b6c056f28a36185bb8ecdcd3332528ab2d05be93bc69a373ac9d20fa087015481cfba74612d93104db153f89d03d6ce620f1f25be68b9cb2d225711c1b288ec64641"], &(0x7f0000000140)='GPL\x00'}, 0x94) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4010) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d087c06007c06e8fe55a1bc0015400600142603600e120800060000000201a80016", 0x33}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0x194, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x3507, 0x2, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(twofish)\x00'}, 0x80, 'n\x00\v\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00'}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x194}}, 0x44050) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, &(0x7f00000006c0)="6137380db5c47c3904186cce57b08c722c4fd219117d32dedfe9ba8efd7b5a57f872322847f3027dff3ec7820f9ce810d7b6e97f04f37f80e007cb612086c006d0f4913b96f5acf7d8985c37cdf026f92af805d03161d88ea197b4650e24f2113ca9f300e220d1e77b1a74f57b018ae279b03176499ffa7d18dfb20cfa7a3faaa52ffb7dcec6ec875bb0924279343e3b17f94e32758279b9b2a9637bae13ab432b3e8a44eb4a1bf24ef2bf8a2748c3bdc2ae48bb0cb31f83515188a2dd6e00fe8a752afd9dada0963cc2859db8191ca218c566dce4a58b71943221ece5bd69ceebca023b48401556dc24ea95639ffbf5", &(0x7f0000000300)=""/131}, 0x20) 1m48.846434875s ago: executing program 9 (id=2891): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB='<'], 0x23c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x3c00, 0x20000000000000c4}}, 0x40) 1m48.476170201s ago: executing program 41 (id=2891): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB='<'], 0x23c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x3c00, 0x20000000000000c4}}, 0x40) 1m48.470732352s ago: executing program 3 (id=2893): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x76, 0xfb4}, 0x11deee, 0x4, 0x98, 0x9, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_rdma(0x10, 0x3, 0x14) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 1m48.041974827s ago: executing program 3 (id=2898): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m47.853935097s ago: executing program 2 (id=2900): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x802}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, r2, {0xc3}, {0x0, 0x4}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x7, 0x4}}}}]}, 0x40}, 0x1, 0x300, 0x0, 0x8800}, 0x0) 1m47.767125867s ago: executing program 3 (id=2901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x200006}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2, 0x9, 0xfff8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m47.428953654s ago: executing program 42 (id=2901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x200006}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2, 0x9, 0xfff8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m47.413328133s ago: executing program 2 (id=2904): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) socketpair(0x8, 0x1, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8983, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x240000c0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x5, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000), 0xc) syz_clone(0xab009500, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8400) 1m47.10418217s ago: executing program 2 (id=2905): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000320007012bbd700080dbdf250a7c0000080001800400dd80100003800c0001"], 0x2c}, 0x1, 0x0, 0x0, 0x10000004}, 0x4890) 1m46.971455839s ago: executing program 2 (id=2906): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x76, 0xfb4}, 0x11deee, 0x4, 0x98, 0x9, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 1m46.788959046s ago: executing program 2 (id=2907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xd132}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x5, 0x7, 0x2, 0xfffffc88}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0x8) 1m46.122721174s ago: executing program 2 (id=2908): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) (async) r0 = socket$kcm(0x10, 0x2, 0x4) (async) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r1], 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe63, 0x0, 0x0, 0x0}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x1c0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x5, 0x1, 0x8, 0x2, 0x4, 0xfffffffffffffff8, 0xfffffffffffffffc}]}, 0x0, 0x3, 0x58, &(0x7f00000001c0)=""/88, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0x2, 0x4, 0x2}, 0x10, 0x0, r3, 0x1, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0x3, 0x9}], 0x10, 0x9}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async) socket$kcm(0x11, 0x2, 0x0) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66", 0xe}], 0x1}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 1m45.807453015s ago: executing program 43 (id=2908): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) (async) r0 = socket$kcm(0x10, 0x2, 0x4) (async) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r1], 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe63, 0x0, 0x0, 0x0}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x1c0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x5, 0x1, 0x8, 0x2, 0x4, 0xfffffffffffffff8, 0xfffffffffffffffc}]}, 0x0, 0x3, 0x58, &(0x7f00000001c0)=""/88, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0x2, 0x4, 0x2}, 0x10, 0x0, r3, 0x1, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0x3, 0x9}], 0x10, 0x9}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async) socket$kcm(0x11, 0x2, 0x0) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66", 0xe}], 0x1}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 1m26.976823617s ago: executing program 5 (id=3019): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000000000000000, &(0x7f00000000c0)=[0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0xee, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x5a, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffefff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xad8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x18, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_clone(0x88002800, &(0x7f0000000400)="923fde5c8a51e0ff5ca2b7f2d2b741103db3b58897c28f7f05f7e87cf4481dc66619d47a6675c37dfa3a90d60adc4041b7bce39cd8b04a849ed89a457605d21f14a7bb39ebe27e65b7445dd081ff8216809900ebebfb234efe405dbc5264ddf42e373e20156e4bca2c0a6f6b78533468a5c325eb8d58517a588f15c921c9abf9b43779ee9d914a197359b7817ae83be8805fe49b453cd3516a68ed99f4cabb3fe885db38785bae35e5582a75255e2107031eb9a2ca1306617dbf414dd15beb015a2a166c2457818197f30d073f20c86e72f209f5", 0xd4, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="33e7999de39275e591ef985a364b1f53ae14060b0db44ef930f96a06394c90df56bdbc024c6fc48c7b7e61c8503a0385f888ab9c283c5363c746ba243f1bbd733c48a767c3e9385b08ffd6e1b26811882beb8493c608ed2a7e0073d87eaac4ba2a161513eeadb631763ee3c5c3a5d78bc13a3b9a5c571dfe4541d71a4a17b25c152e4832725efe5a4d2ccdac63020faeed142b2d7e5f41dc47705402a99ce9217d9a8f4636305990480d75e7163ce5e170f069969780c74f3707f4a302fb6804f206d4dc558dd088b371da8687ad33585b54235a03309b112a75a4fdf0abce57cf9bf40f52f835a34f0c925816cb50") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001f00)={&(0x7f0000001dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x7, [@restrict, @type_tag={0x3, 0x0, 0x0, 0x12, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0xd}}, @enum={0xe, 0x6, 0x0, 0x6, 0x4, [{0x2, 0x4}, {0x6, 0xfffffffa}, {0xe, 0x3}, {0x8, 0xc}, {0xb, 0x6}, {0xb, 0x80000000}]}, @restrict={0x3, 0x0, 0x0, 0xb, 0x2}, @typedef={0x2, 0x0, 0x0, 0x8, 0x4}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x30, 0x61, 0x61, 0x61, 0x61]}}, &(0x7f0000001e80)=""/65, 0xaf, 0x41, 0x1, 0xfa, 0x10000}, 0x28) (async) sendmsg$nl_generic(r5, &(0x7f0000001d80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001d40)={&(0x7f0000000800)={0x1504, 0x12, 0x20, 0x70bd27, 0x25dfdbfc, {0xb}, [@generic="e3ec90ed5a4984d5bcf8f0100d695a032812ea176f97a777573ce99bc2304cd8182a5e2622666c6c63f979ca7f9ec9874b9b5b9b7ee0bb949974ea33009fce8b7e0575ffe75d60dacce3d8fe7d6bdc1676641728ae0f9aeeb69d0e98ae315907fd6a3b023b2f27fc2c820ac61e9d4d9d877b19a36d8eebc9722fa59b6e77b570972a4625ba08044561a43c92e7f5c00271bba1e14c4f0b8f7749aac4635e199834956260b8fba21fa45c91f0ddf12a348a88a0d5be23644954adf60b83f651c66021edf110aaa5a698cbeffe1c81b6ba4ac60b4569cc78dc5388564f38a3ea54dcdb401873c177308239a8b2860de0e9baf6f7", @nested={0x1115, 0x8, 0x0, 0x1, [@typed={0x4, 0x91}, @typed={0xa2, 0xd1, 0x0, 0x0, @binary="3295b26c0cf089391b9abb92d202304f5e80efe29ff9848daf9d529f9ea958b6bd39befd6743c5994874a4f7f5440e6104a3c2174885d73b3e9e12e23a45bc84fd54f0a8f6e93bb347e9ea308a7bc7cecc4ef61a7739e335470b8359eec35a3898dc01709c1834be12e3d72342a374a3386584290fb9594db37bd43c3bc89abe4b49715a83e8e7ec5d325aee3be735eb22990d87b6b6f98064046ef41d77"}, @nested={0x4, 0x143}, @nested={0x4, 0x13}, @generic="9df6510b702500f9499079b7d3580a90a85154e1188130b5df2eba862a9d210f641969146e228a8e5afde09e0cd012daa0a98dfdabe9d5daa52ddd762fa134fe77b6c165b237e0847049e8cb5eaa799159", @generic, @generic="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", @typed={0x4, 0x122}, @typed={0xc, 0x45, 0x0, 0x0, @u64=0xffffffff}]}, @nested={0x3e, 0xe5, 0x0, 0x1, [@nested={0x4, 0x152}, @generic="513fe121a411739a10f2518245bfd486c4e2f3886b8871f73934df37be807e0f5c2c8b299a7b868596e89e44157edfaeb1aad0cfe2b4"]}, @typed={0x4, 0xd9}, @typed={0x8, 0x7d, 0x0, 0x0, @str='GPL\x00'}, @nested={0x205, 0x22, 0x0, 0x1, [@typed={0x14, 0x16, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x30, 0x0, 0x0, @pid=r6}, @generic="2ff2fffc74f43a09bda79c41561eb8f0fac78c51e0692b3dd54fadb466a9fa101e9e800d751df11fe963682cf3b4bdb8851ddbe47cf70dbb25df242b2003214b8fda95866dc7d0249c8be3e673d5a5708f65da8176461490f7420809a4f2c4b58d8441b034a570fd7e1067bbf00836dabd90b145b26ae077a66d7b2e0981799233", @typed={0xc, 0xd5, 0x0, 0x0, @u64=0x5}, @generic="b576d469935c71d1ff244516406a8bdf8235fbc49f2ef30b13a973a85fa3ad89297c0f11ac9e78d5201d410c99d100c95883efec2f650fc903dc0e859a6f4caeafddeddde76aa94a31acd78c539e340ada7172a957a7599481175595790559ade31e06191a22fba6637aca4b690bf5cfb743a323a289d273307d324adbecb433", @generic="9b08c10f9a0e9f33d836b00cb0c4057179a9a0171d5442eedad9de699251566a7a98994e851e2ae216a724df033699d7cf2b41a1eb6250f3a67adcefb08433f57b1e0d7bda80dde59058d34c74803c2c802a2aa2a687843a9b1e73da0b6af090502d256dc7fdbd84d3ed891b4becb77156fd2a383156f13e1eae844fc50d02945442262f59eca62cf4ea0d8dfcc0d13448a6db03d994e85ca01e40416c92eb4783f08ab286d21b979e265f168607d341ca3bc2b48bc3cdd37383d8b5c68cfe5a7aad6aa1aa265bf90ccbdb4666f9c69049f315b2dbbd90ab"]}, @generic="dd8121966cd38613e05832dde95a5b567f072797b4b141dc93d45a947780dce6f429849492f2690ab1458282e3e05735e94bdc8d0e95ecf09b70bb8ca78a93377239cad4fdc4722085deff054e836782fc24c14a348d5dd7175f8566b3b7371901eae6490f5c55fce380e6a67751", @nested={0x20, 0x7c, 0x0, 0x1, [@typed={0x8, 0x112, 0x0, 0x0, @uid}, @typed={0x8, 0x10b, 0x0, 0x0, @u32}, @typed={0xc, 0x134, 0x0, 0x0, @u64=0x82bb}]}]}, 0x1504}, 0x1, 0x0, 0x0, 0x840}, 0x34000884) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', r3}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000bf00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m26.739007996s ago: executing program 5 (id=3020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0xc090}, 0x24008040) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str=':*b\xc3{\x00'}, @typed={0x8, 0x1f, 0x0, 0x0, @fd}]}, 0x24}], 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x402, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010c0002806b7abdd4980000003c0003800c00028005000100890000002c00018014000300fe80000000000000000000000000002a14000400ff0100000000000000000000000000013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffff7f0000010c000280050001"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'macvtap0\x00', 0x200}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0x8) 1m25.987236413s ago: executing program 5 (id=3024): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') recvmsg$unix(r0, 0x0, 0x40002000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x11a0ab, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x70, 0x80}, 0x100010, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = getpid() r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x20000084}, 0x40880) 1m25.858482001s ago: executing program 5 (id=3026): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x76, 0xfb4}, 0x11deee, 0x4, 0x98, 0x9, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 1m25.610012975s ago: executing program 5 (id=3029): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480400000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x2}, 0x10, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000001160007538e486dd630ace2211057300fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) 1m25.124942836s ago: executing program 5 (id=3033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1m24.772558009s ago: executing program 44 (id=3033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 57.703386515s ago: executing program 8 (id=3305): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x6f}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="180200008677000000000000000000008500000028000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="36f71f958cd192c0c27227085d92", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b63d2", 0x9}, {&(0x7f00000000c0)="06081833d0062d04944103", 0xb}], 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x37}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0xfffffffe}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r6, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101040, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0x4f, 0x7}]}) fstat(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1100800, &(0x7f0000000180)={[{@mode={'mode', 0x3d, 0x4}}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x31, 0x66, 0x63, 0x37, 0x66, 0x64, 0x61], 0x2d, [0x39, 0x54, 0x39, 0x65], 0x2d, [0x37, 0x66, 0x61, 0x39], 0x2d, [0x30, 0x37, 0x0, 0x64], 0x2d, [0x62, 0x36, 0x39, 0x64, 0x34, 0x0, 0x34, 0x4b]}}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@euid_eq={'euid', 0x3d, r8}}, {@appraise}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@subj_user={'subj_user', 0x3d, '('}}, {@obj_type={'obj_type', 0x3d, '#]]#!)'}}, {@audit}]}) 57.70281777s ago: executing program 0 (id=3306): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b46b6e0000000000cc011100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff0000000000000000000000003c040000053500000a00020000000000000000000000000000000000ac"], 0x27c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000020e26c9bd1a6361b"], 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="6dba00a4a14bbc9d67f7016440009424a419c654eff1bd1d2d5549cf54", 0x1d}, {&(0x7f0000000080)="817f9297e5c9b719122a5d0cdfb7ae1feeb9c2a53d8ee6f1dfdd18f6", 0x1c}, {&(0x7f00000000c0)="be2f05fd78500b7da2a95acdf2f468d7fa1562fa941b083f4b51217dc2296f3d4235f395f9f41ef21f3ad144f5a86f21e5395ac4fc604c2918eca74862078d6e50029b11c6d3a470dd3ed2570f04a6edb63d11a891baa6d151753d944887f5215ae558aaa91bfae0a410f9ab289adccff9f5d4951f77557f7a5a0522a0de89358ee7ade4da6b82fd582f4d9d4fee4abe44e22056aa2793abcfd0b75a4f1dd54d9abc584413caa27d324fcf3abaae6559b4ac0102ca7a55112c69d4385df072543a0e0096e4ecf7f15382f0b06d", 0xcd}, {&(0x7f00000001c0)="bb7df4d0de23041abc4c5a5a935c20a28c9d918582233e8f22ef1a2bfe8f54", 0x1f}], 0x4}, 0x40) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20000050) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB='\x00 \x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00p\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x3, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500090122bd7000dcffffff590000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0xc001) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d80)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x401}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)="de4f6a", 0x3}, 0x1, 0x0, 0x0, 0x184}, 0x800) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910069cdfb5cc682e02e0a"], 0xfe33) 56.971960092s ago: executing program 7 (id=3310): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x9, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a81400002a00070127bd700000000000017c00030c00028005007c8028000000040007000c0003"], 0x14a8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 56.853746601s ago: executing program 1 (id=3311): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) r1 = socket(0x840000000002, 0x3, 0xff) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(r1, &(0x7f0000002800)={&(0x7f0000001680)=@in={0x2, 0x4a20, @remote}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)="ebb2000000000000000b0000000000000000b7324f098ccb2fd26359a76604537dc7a722d256cb15c2503b", 0x2b}, {&(0x7f0000000600)='\f', 0x1}], 0x2}, 0x8000) 56.138978815s ago: executing program 4 (id=3312): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3, 0x201}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 56.074728407s ago: executing program 7 (id=3313): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x50) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x11a0ab, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x70, 0x80}, 0x100010, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x52) r3 = getpid() r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="9134b51f79c23ed829307e3fbe0360a892c4c44ce85a300602584b00000000fe00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20000084}, 0x40880) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x22, 0x0, 0x700) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r7, 0x82, &(0x7f0000000180)={0x0, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES16=r8, @ANYBLOB="7f00000000000000000000007b1373a27f9e4334836434b4b093e7c70000000000000000", @ANYRESHEX=r7, @ANYRES8=0x0, @ANYRESDEC=r7], 0x50) 56.044688942s ago: executing program 1 (id=3314): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x82, 0x0, &(0x7f0000000240)="abcebe9ebb517b2baf1a1497ee32ffd8d79a3baedc1cbe154676fa32f3aeaab29bba371f981336f21f4a2c8aa1500bcf91b95b706689c94b6c924101a140ddeb9cd5710ce826441ee69af67543e1515accb44c5a49b42f3473234343ceff455775d9158247600581468e441dbfb1358fc2432a80a12bf5515f4614095ed29d4f3470", 0x0, 0x3, 0x0, 0x81}, 0x50) (async, rerun: 32) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) (async, rerun: 64) r1 = socket$kcm(0x10, 0x2, 0x4) (async, rerun: 64) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xf}, 0x400, 0x5, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000004000070127bd7000f6dbdf25037c00000400c2800c00018008000300", @ANYRES32, @ANYBLOB="040008"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb8}}, 0x20008000) (async, rerun: 32) r4 = socket$kcm(0x29, 0x2, 0x0) (rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) sendmsg(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)='e', 0x1}], 0x1}, 0x40040) (async, rerun: 32) r6 = socket$kcm(0x2, 0x1, 0x0) (rerun: 32) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) sendmsg$kcm(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="c0", 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000000000073113700000000008510000002000000850000000200000095000000000000009500a5050000000047be19b06fc166357e1aba95fe48d2389849ef4bc1b2989ab32060ee4c370be83d92bea955302d82d0bd96609cf65cb758e8e90b6f6a8765af9091f9f7655188e09e7da1ba6a54224b9ab561ca9bfe0b4acf8822bee49361a8b303eccac3038835e3f240027036ae5c5e03e7d90a4e35b8f60e0adb4f124d8830cb8c8ffbcbc11916eb4d7dfd78355bba07af269e9b12a26151b6404601bd5da7a3"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) (async) socket$pppoe(0x18, 0x1, 0x0) 55.99173943s ago: executing program 4 (id=3315): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@newsa={0x118, 0x10, 0x7, 0x0, 0x25dfdbfb, {{@in6=@mcast2, @in=@multicast2, 0x4e1f, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@rand_addr=' \x01\x00', {0xff, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x0, 0x8000000}, {0x0, 0x5, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@mcast2}, @srcaddr={0x14, 0xd, @in=@local}]}, 0x118}}, 0x800) 55.991267462s ago: executing program 8 (id=3316): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000600000000000000fc00000000000000000000000000000000000000000000000a00", @ANYRESOCT], 0xb8}}, 0x4000) 55.914372246s ago: executing program 8 (id=3317): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 55.856283792s ago: executing program 4 (id=3318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x7, 0x2, 0x20}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe24, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00), 0x18) ioctl$TUNSETIFINDEX(r0, 0x5450, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0xbd, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@newchain={0x34, 0x64, 0x8, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x9, 0xd}, {0xffff, 0xffff}, {0xc, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x4008000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000100)=r3) 55.844384729s ago: executing program 0 (id=3319): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0xa4}}, {{0x6, 0x0, 0x2}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}, {0x95, 0x0, 0x0, 0x2000000}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 55.806057627s ago: executing program 7 (id=3320): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="2000000003010500000000000000000005000006440002800600124000020000"], 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='rdma.max\x00', 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0f"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)={0x2c, 0x38, 0x825, 0x70bd2b, 0x25dfdbfb, {0x14}, [@nested={0x15, 0x7, 0x0, 0x1, [@nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0xdf, 0x0, 0x0, @u64=0x12}]}, @generic='x']}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4054}, 0x40010) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12) 55.726671627s ago: executing program 4 (id=3321): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4af, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0xbd, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x41, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x592, '\x00', r2, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)={[{0x2d, 'pids'}, {0x2b, 'cpuset'}]}, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xe8, 0x2, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x42b}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xe54}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x2000c000}, 0x85) r6 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r6, &(0x7f0000000bc0)={&(0x7f0000000680)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000700)="9e1d3f05a5522baecf21a7e30c0ff2d0be7be1f4e12bdca991b2590caa45e512d0072d81cd532e9f19aa0f9d7ec674458f6685", 0x33}, {&(0x7f0000000740)="737a3bea24a6a00767037aad04e3f050ac6bb64ca47e4cd8b5235c11503a07081a66a23fdabe9386895246", 0x2b}, {&(0x7f0000000780)="aac52fa450eb15fca2ff6718b1058adbe4523bb3893fb6d627e15ea9a820f780d193fb1f8763ac3e7ef4f5e75da9dba9970cd016a77ce55028b27bbee5a6a469e19fb2b7c438ffa9163b2bdbfc81b06fe3581c1b697e91a354f9c586deabd02cbd33cb212c626c143c03cdc121ef4dcab94fa37eba7e9afabc6312792770e528c864279ae476b8330d5c10c58a7f5f718f8f4498741d4aee1e1c", 0x9a}, {&(0x7f0000000840)="8811fa8a9c24cd9492be123b91d259026bd6d9552484742959ebc66faf6aaa712895d5a77a273faa02738fb4ae865f0a8da50544d30a361347863e715bec88c33f12d954f4302441d18a0cfeafaf74342ec6616139a4b65e5ffb7ca8d7136d299109bb9232a2bd46e6e8ff847f10e9684c15e5c86cbfc6c4f4423cb1ba788a6dc7b939211e944aec29eea2b8956436f2ee184d701e", 0x95}, {&(0x7f0000000900)="fea3b47bf0fb127f35f1f9515dfa52adfbe41038c4980404fbe0c9a0e9a608f883b9f6ddb6977e5d51f00f9678cb33f6cb4447655b0cd3a7c89c5679ad4feff56d70730bb7e6ba4086f045569c1fa407635d", 0x52}, {&(0x7f0000000980)="40d70e5e64368adf587a2179e0d5d965f6a626bcde199392e2f9e730cbb9688f14bcd37ccda4f02f9a611cf49dc0b4290fb0a95e24cb63b766be05b0222f474b2205bafda83f7ef8d5095e3f58de8945ffcb058b4a9278870db7668b6ea6ba02034aab5124867cb321530a8d3277b727e24d9173336cb48de774d70643088b9ba7d2e90b85eae76edb34709ff393446a91e0f195cee339f70bd970d392c102260007f0f2d3a9659499cf3510cf8faa1f98dee3f6d1099e1c8aeabff77def8d30145724cf6ff9016cc39c9187b97797c116de798b958b8ecf8df7f30e7f5cf544ce4884e82cd562", 0xe7}, {&(0x7f0000000a80)="72ada16c29c404b5f39f486eea75cdd753a2acef68019f43641c2f885227b3c621ecb4869b98a5267eb2c746d53d971db32122f7100541f327d62bc172afae4b7879d41fb32e15f267a3a98ad8bb51c7c48909dac4", 0x55}, {&(0x7f0000000b00)="a0f629dd1b0735213d9fabdf9359c449759f2670a3a693ba7f1773663b9a0b8a4a64fcd922bd2081d5b0798dc2108d98", 0x30}], 0x8}, 0x8004) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000c00), 0x8) write$cgroup_subtree(r7, &(0x7f0000000c40)={[{0x2d, 'hugetlb'}, {0x2d, 'net_prio'}, {0x2b, 'hugetlb'}, {0x2d, 'pids'}, {0x2d, 'io'}, {0x2b, 'pids'}, {0x7d, 'hugetlb'}]}, 0x35) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) close(r8) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000c80)={0xffffffffffffffff}) (async) openat$cgroup_procs(r7, &(0x7f0000000cc0)='cgroup.procs\x00', 0x2, 0x0) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r7, 0xc008240a, &(0x7f0000000d00)={0x1, 0x0, [0x0]}) (async) r10 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r10, &(0x7f00000014c0)={&(0x7f0000000d40), 0x6e, &(0x7f0000001340)=[{&(0x7f0000000dc0)=""/121, 0x79}, {&(0x7f0000000e40)=""/6, 0x6}, {&(0x7f0000000e80)=""/74, 0x4a}, {&(0x7f0000000f00)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/124, 0x7c}, {&(0x7f0000001040)=""/123, 0x7b}, {&(0x7f00000010c0)=""/160, 0xa0}, {&(0x7f0000001180)=""/255, 0xff}, {&(0x7f0000001280)=""/131, 0x83}], 0x9, &(0x7f0000001400)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}, 0x40000120) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000001500)=r13, 0x4) socket$rxrpc(0x21, 0x2, 0x2) write$cgroup_subtree(r11, &(0x7f0000001540)={[{0x2d, 'perf_event'}, {0x2b, 'net_prio'}, {0x2b, 'pids'}, {0x2b, 'net_cls'}]}, 0x25) recvmsg$qrtr(r19, &(0x7f0000002d80)={&(0x7f0000001580), 0xc, &(0x7f00000019c0)=[{&(0x7f00000015c0)=""/31, 0x1f}, {&(0x7f0000001600)=""/20, 0x14}, {&(0x7f0000001640)=""/72, 0x48}, {&(0x7f00000016c0)=""/233, 0xe9}, {&(0x7f00000017c0)=""/211, 0xd3}, {&(0x7f00000018c0)=""/245, 0xf5}], 0x6, &(0x7f0000001a40)=[{0x58, 0x0, 0x0, ""/65}, {0x1010, 0x0, 0x0, ""/4096}, {0x40, 0x0, 0x0, ""/41}, {0xc0, 0x0, 0x0, ""/170}, {0xa0, 0x0, 0x0, ""/141}, {0x110, 0x0, 0x0, ""/254}], 0x1318, 0x82f4ab6e6db5e653}, 0x38, 0x1) (async) r20 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003100)={0x18, 0xd, &(0x7f0000002ec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0xb, 0x1, 0x0, r19}, @exit, @map_fd={0x18, 0x2, 0x1, 0x0, r1}, @alu={0x4, 0x1, 0x2, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @map_val={0x18, 0x5, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000002f40)='syzkaller\x00', 0xe, 0x5f, &(0x7f0000002f80)=""/95, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003000)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000003040)={0x2, 0x9, 0x5, 0x401}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000003080)=[r16, r19, r12, r15, r7], &(0x7f00000030c0)=[{0x4, 0x5, 0x10}, {0x5, 0x1, 0xa, 0x1}, {0x0, 0x3, 0x7, 0x5}, {0x3, 0x4, 0x7, 0x4}], 0x10, 0xb}, 0x94) r21 = bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0xe, 0x15, &(0x7f00000031c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r17}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x80000001}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0xc8}, @call={0x85, 0x0, 0x0, 0x8e}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003280)='GPL\x00', 0x5, 0xf, &(0x7f00000032c0)=""/15, 0x0, 0x13, '\x00', r2, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000003300)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, r3, r7, 0x4, 0x0, &(0x7f0000003340)=[{0x1, 0x1, 0x3, 0x4}, {0x4, 0x2, 0x3, 0x5}, {0x4, 0x5, 0xf, 0x9}, {0x0, 0x4, 0x10, 0x8}], 0x10, 0x8}, 0x94) sendmsg$unix(r9, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002dc0)="2ee3e687e28dc652294ef0f9789a6cdeed75158bd61709a61753e6e358f4ba38efe94f17eda9e90ae87b7d94ae60121634b7eb0a37bc73389d1fc90d447bef078770ed489564945552b829e9fe7f75f55d0372e49806fffee9e124641631efa149e6198fa62d01cd29382025606bf9b0866e21abeee719d4d65557fc510d24680872eaf13f1a502f8187c01c1032c83404bf2a3af83085c626b35d4ed68349db216cba4fb8751734a66ccf856dc42271a03d136106b8f4982537f5fe52f8cbe1", 0xc0}], 0x1, &(0x7f0000003440)=[@rights={{0x34, 0x1, 0x1, [r18, r4, r20, r19, r17, r9, r13, r21, r8]}}], 0x38, 0x80}, 0x1) r22 = openat$tun(0xffffffffffffff9c, &(0x7f00000034c0), 0x22080, 0x0) ioctl$TUNSETIFF(r22, 0x400454ca, &(0x7f0000003500)={'vlan0\x00', 0x1}) 55.719890246s ago: executing program 1 (id=3322): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="dbaa00fea0000000711096000000000095e91986ddeea1fba891c69b3235e077cdd088268a1cec37d368b47e5fe7f0d01cbce9895a12b3b5b8297b21fc0f78e5195174b332bd2bc5410f559dab0e501e2d7a6a6339a5aa3bf033dc9e8675001e1237c4349a258e07a0c98431cb1f733e5a0e349774ebe2d40a12af7aecf8dfa7f67a20c90496f380caca82cfb89be5210f1eb00faefc18d1bd159dcd84f728d2"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xffffffeb, 0x3}, 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) 55.678695677s ago: executing program 8 (id=3323): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) socketpair(0x8, 0x1, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8983, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x240000c0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000), 0xc) syz_clone(0xab009500, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8400) 55.543323992s ago: executing program 0 (id=3324): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000004080000000000000", @ANYRES32, @ANYBLOB="0000002986c84400000942b6cca80d71e9244844", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 55.54241984s ago: executing program 4 (id=3325): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0xfffffffd, 0x1, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0xa}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x1003f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) 55.541547139s ago: executing program 1 (id=3326): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4008010) 55.539391687s ago: executing program 7 (id=3327): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ff, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x8000, 0x0, 0x80000, 0x35b734065750c7bd, 0x0, 0x0, 0x7ff, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) (async, rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x17) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x26c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x23c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffff7, 0x9, 0xffffffff, 0x17, 0x5, 0x7, 0x8}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x86}, @TCA_CHOKE_STAB={0xffffffffffffffec, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xff, 0x1, 0x10000, 0xe, 0x8f, 0xf, 0x1}}]}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x8000101}, 0x0) (async, rerun: 32) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 32) r6 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000040)=r5, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x1, 0x2, 0x0, {0xa, 0x4e24, 0xa57, @mcast2, 0x800}}}, 0x80, 0x0}, 0x0) 55.313833474s ago: executing program 0 (id=3328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000220000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) 55.306065892s ago: executing program 1 (id=3329): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x4, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000004000000080000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r1, &(0x7f00000000c0), &(0x7f0000000200)=""/71}, 0x20) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe75, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000070000009500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x636bda9f}}, &(0x7f0000000040)='GPL\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xbddd, r10, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 55.274101333s ago: executing program 7 (id=3330): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x6002, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080003000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 55.272263908s ago: executing program 8 (id=3331): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 55.101958496s ago: executing program 4 (id=3332): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffde4, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x34, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000015000000000000000018000000e5020001000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000900000092000000000305000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000040) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r1) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000280)={'geneve1\x00', 0x200}) 55.096994432s ago: executing program 0 (id=3333): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 55.086281714s ago: executing program 8 (id=3334): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, 0x0, 0x404d0c4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, 0x0, 0x24000050) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c00410000006113100000000000bfa000000000000007000000ee00160e5e0301000000000016050000000000006916340000000000bf07000000000000260507000fff0720670500003f000000150600000ee60060bf50000000000000ae650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000ff0100000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095000000000000002f81c461b3fea834ceb0e17d802cfb227e656a3698c792bd22555161b0010095448e9f7024b45ffcd2ce278009682dc8f7c867b177ed5bd50b92aedef35b6cd87b56690b4c96f63ab02174911d5e51b76d2c31b8bece7b0f841f393c401d8f51383f0f28d4c00fa2149870f1779f204103dbebff2a0e292b42f01b0bb114fa6e1889a6437285a0c9f00c4245e4d3524af00636736e812558294430bf4b365e0a9c468c9eb4977fb1311404a36503e63d66ddcf9b8e1035383b90de09d000c223ffb7f13639e3ac52b248f92d041959c1f7985eb94aad8c0adf4e8730313d1b02662c6847a9851f40a969486ebbe7bfcb5b28fc7dbe1bb80c4a2c18a53fecc51e51de59049b0400000000000000394000000000000000d27022ca2e6e8190f483d0da08eef67837ed671c2154513111dbc0ee58c70889a1c6306b98300a49147242d3f8a6e4aea9b51d0e182153e1283089"], 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0x2d, 0x0, &(0x7f0000001180)="b9ff03316844268cb89e14c57ee0040000ef0000300d810000000000000c5d624e56071948074001000000b382", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8001}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 54.996926631s ago: executing program 0 (id=3335): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000250001002cbd700002dcdf251f00a800"], 0x14}, 0x1, 0x0, 0x0, 0x4040003}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0xb, 0x5}, {0x1, 0x4, 0xb, 0x5}], 0x10, 0x3}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r3 = getpid() r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x9, 0x1, 0x10000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004814) syz_clone(0x1000, &(0x7f00000005c0), 0x0, &(0x7f00000015c0), 0x0, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 54.930398642s ago: executing program 1 (id=3336): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x7}, 0x0, 0x94a8, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x410}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x24000000) sendmsg$NFT_BATCH(r2, 0x0, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x6002, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d02409819180179714ed0a6e1f0f755d8583da60f27c162dbba0706002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cece48c38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5ff01000000000000b69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b4073f300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b87234a30900000000000068133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf11211"], 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4, 0x0, 0x0, 0x10000000}, 0x0) 54.89673903s ago: executing program 7 (id=3337): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 5.32383773s ago: executing program 45 (id=3334): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, 0x0, 0x404d0c4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, 0x0, 0x24000050) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0x2d, 0x0, &(0x7f0000001180)="b9ff03316844268cb89e14c57ee0040000ef0000300d810000000000000c5d624e56071948074001000000b382", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8001}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 4.498600996s ago: executing program 46 (id=3335): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000250001002cbd700002dcdf251f00a800"], 0x14}, 0x1, 0x0, 0x0, 0x4040003}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0xb, 0x5}, {0x1, 0x4, 0xb, 0x5}], 0x10, 0x3}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r3 = getpid() r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x9, 0x1, 0x10000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004814) syz_clone(0x1000, &(0x7f00000005c0), 0x0, &(0x7f00000015c0), 0x0, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 1.957928797s ago: executing program 47 (id=3332): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffde4, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x34, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000015000000000000000018000000e5020001000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000900000092000000000305000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000040) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r1) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000280)={'geneve1\x00', 0x200}) 1.233030515s ago: executing program 48 (id=3337): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 49 (id=3336): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x7}, 0x0, 0x94a8, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x410}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x24000000) sendmsg$NFT_BATCH(r2, 0x0, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x6002, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4, 0x0, 0x0, 0x10000000}, 0x0) kernel console output (not intermixed with test programs): tlink: 61203 bytes leftover after parsing attributes in process `syz.7.1614'. [ 415.758775][T12275] netlink: 'syz.6.1615': attribute type 10 has an invalid length. [ 415.810275][ T8972] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.817545][ T8972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.850211][ T8312] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.857415][ T8312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.529224][T12074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.625304][ T5143] Bluetooth: hci2: command tx timeout [ 417.166450][T12333] netlink: 244 bytes leftover after parsing attributes in process `syz.7.1623'. [ 417.324372][T12339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.358559][T12074] veth0_vlan: entered promiscuous mode [ 417.399157][T12074] veth1_vlan: entered promiscuous mode [ 417.426548][T12343] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1627'. [ 417.479306][T12074] veth0_macvtap: entered promiscuous mode [ 417.525898][T12348] netlink: 'syz.6.1628': attribute type 3 has an invalid length. [ 417.541502][T12074] veth1_macvtap: entered promiscuous mode [ 417.555494][T12348] netlink: 61155 bytes leftover after parsing attributes in process `syz.6.1628'. [ 417.608361][T12074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.650595][T12074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.834728][T12367] netlink: 'syz.8.1630': attribute type 10 has an invalid length. [ 417.916226][T12367] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1630'. [ 417.939873][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.955293][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.017428][T12367] ipvlan1: entered promiscuous mode [ 418.043375][T12367] ipvlan1: entered allmulticast mode [ 418.051139][T12367] veth0_vlan: entered allmulticast mode [ 418.074786][T12367] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 418.129375][T12358] hsr0 speed is unknown, defaulting to 1000 [ 418.143819][T12358] lo speed is unknown, defaulting to 1000 [ 418.177053][ T8312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.201900][ T8312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.705197][ T5143] Bluetooth: hci2: command tx timeout [ 420.350432][T12427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1646'. [ 420.474658][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1648'. [ 420.725360][T12442] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1651'. [ 421.150569][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1658'. [ 421.867672][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1668'. [ 421.894233][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1668'. [ 421.923618][T12498] netlink: 19 bytes leftover after parsing attributes in process `syz.6.1668'. [ 423.536627][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1677'. [ 424.357793][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1679'. [ 426.498629][T12581] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1685'. [ 426.535219][T12581] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1685'. [ 429.960185][T12612] netlink: 'syz.4.1691': attribute type 5 has an invalid length. [ 430.096039][T12617] netlink: 416 bytes leftover after parsing attributes in process `syz.7.1690'. [ 431.220303][T12625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1693'. [ 432.525471][T12639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1698'. [ 432.646405][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1699'. [ 432.707993][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1699'. [ 432.835967][T12641] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1699'. [ 433.092751][T12647] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1697'. [ 433.212234][T12647] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1697'. [ 433.291558][T12647] netlink: 19 bytes leftover after parsing attributes in process `syz.8.1697'. [ 437.907971][T12705] delete_channel: no stack [ 438.891161][T12729] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1715'. [ 438.968230][T12731] netlink: 'syz.7.1715': attribute type 33 has an invalid length. [ 439.049083][T12731] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1715'. [ 439.106008][T12731] `: renamed from ip6tnl0 (while UP) [ 439.155366][T12731] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 440.001115][T12741] netlink: 'syz.2.1718': attribute type 4 has an invalid length. [ 442.736010][ T29] audit: type=1107 audit(1771945123.773:6): pid=12775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 443.651723][T12792] hsr0 speed is unknown, defaulting to 1000 [ 443.674590][T12792] lo speed is unknown, defaulting to 1000 [ 443.742431][T12807] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1737'. [ 444.461643][T12830] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1743'. [ 444.779767][T12839] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1745'. [ 444.809777][T12839] veth1_macvtap: left promiscuous mode [ 445.059568][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.067160][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.101307][T12850] openvswitch: netlink: Message has 716 unknown bytes. [ 445.522475][T12860] netlink: 'syz.2.1751': attribute type 25 has an invalid length. [ 445.543457][T12860] netlink: 'syz.2.1751': attribute type 3 has an invalid length. [ 446.052615][T12893] netlink: 'syz.4.1759': attribute type 29 has an invalid length. [ 446.076902][T12896] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1761'. [ 446.077342][T12893] netlink: 'syz.4.1759': attribute type 29 has an invalid length. [ 446.290001][T12892] delete_channel: no stack [ 446.307690][ T1141] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 446.340645][T12905] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1764'. [ 446.407466][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1764'. [ 446.502155][T12905] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1764'. [ 447.120444][T12941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1779'. [ 447.155183][T12941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1779'. [ 447.345490][T12950] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1784'. [ 447.527256][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1784'. [ 447.902045][T12980] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 451.654777][T13036] __nla_validate_parse: 5 callbacks suppressed [ 451.654797][T13036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1815'. [ 451.752130][T13037] netlink: 388 bytes leftover after parsing attributes in process `syz.7.1814'. [ 451.762199][T13040] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1817'. [ 451.797672][T13043] netlink: 'syz.6.1818': attribute type 6 has an invalid length. [ 451.816603][T13043] netlink: 3936 bytes leftover after parsing attributes in process `syz.6.1818'. [ 451.839386][T13043] netlink: 'syz.6.1818': attribute type 1 has an invalid length. [ 451.849492][T13043] block nbd0: Unsupported socket: should be TCP or UNIX. [ 452.244147][T13070] netlink: 'syz.4.1825': attribute type 1 has an invalid length. [ 452.294041][T13070] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1825'. [ 452.831025][T13087] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1829'. [ 453.182934][T13092] netlink: 'syz.4.1831': attribute type 2 has an invalid length. [ 453.208109][T13092] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1831'. [ 453.246130][T13104] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1834'. [ 453.261673][T13104] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1834'. [ 453.414714][T13117] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1839'. [ 453.441174][T13114] hsr0 speed is unknown, defaulting to 1000 [ 453.450953][T13114] lo speed is unknown, defaulting to 1000 [ 454.848164][T13143] : port 1(erspan0) entered blocking state [ 454.854244][T13143] : port 1(erspan0) entered disabled state [ 454.891726][T13143] erspan0: entered allmulticast mode [ 454.909790][T13143] erspan0: entered promiscuous mode [ 455.662426][T13171] netlink: 'syz.8.1859': attribute type 10 has an invalid length. [ 456.523209][T13196] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 456.548949][T13196] dvmrp1: ignored: set checksum disabled [ 456.864480][T13204] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 457.307275][T13221] syzkaller0: entered promiscuous mode [ 457.376360][T13221] syzkaller0: entered allmulticast mode [ 457.599399][T13235] __nla_validate_parse: 11 callbacks suppressed [ 457.599417][T13235] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1882'. [ 457.601358][T13233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1883'. [ 457.627830][T13235] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1882'. [ 457.658001][T13235] netlink: 19 bytes leftover after parsing attributes in process `syz.7.1882'. [ 458.330345][T13232] delete_channel: no stack [ 458.337327][T13245] netlink: 'syz.6.1886': attribute type 25 has an invalid length. [ 458.365256][T13245] netlink: 'syz.6.1886': attribute type 1 has an invalid length. [ 458.391222][T13245] bridge0: port 1(bridge_slave_0) entered learning state [ 458.599669][T13251] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1889'. [ 458.615989][T13251] netlink: 'syz.6.1889': attribute type 1 has an invalid length. [ 458.762517][T13255] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1890'. [ 458.780848][T13255] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1890'. [ 459.159300][T13267] netlink: 416 bytes leftover after parsing attributes in process `syz.2.1895'. [ 459.688236][T13280] netlink: 'syz.2.1901': attribute type 10 has an invalid length. [ 459.717531][T13280] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1901'. [ 459.761853][T13280] dummy0: entered promiscuous mode [ 459.791084][T13280] dummy0: entered allmulticast mode [ 459.812166][T13280] bridge0: port 3(dummy0) entered blocking state [ 459.847785][T13280] bridge0: port 3(dummy0) entered disabled state [ 459.888268][T13280] bridge0: port 3(dummy0) entered blocking state [ 459.894805][T13280] bridge0: port 3(dummy0) entered forwarding state [ 460.019796][T13289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1905'. [ 462.220665][T13328] netlink: 'syz.7.1919': attribute type 10 has an invalid length. [ 463.190486][T13348] __nla_validate_parse: 5 callbacks suppressed [ 463.190506][T13348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1927'. [ 463.222190][T13348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1927'. [ 463.301828][T13348] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1927'. [ 463.513706][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1924'. [ 463.597607][T13356] netlink: 'syz.6.1930': attribute type 10 has an invalid length. [ 463.653327][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1924'. [ 463.656921][T13356] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1930'. [ 464.530606][T13358] syzkaller0: entered promiscuous mode [ 464.556788][T13358] syzkaller0: entered allmulticast mode [ 464.628981][T13382] netlink: 'syz.2.1933': attribute type 29 has an invalid length. [ 465.018168][T13380] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1933'. [ 465.288762][T13383] netlink: 'syz.2.1933': attribute type 29 has an invalid length. [ 465.873122][T13415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1944'. [ 466.036091][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1944'. [ 467.896434][T13450] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1952'. [ 467.946396][T13450] netlink: 'syz.6.1952': attribute type 4 has an invalid length. [ 469.344680][T13406] tun0: tun_chr_ioctl cmd 1074025681 [ 469.363933][T13450] .`: renamed from bond0 (while UP) [ 469.721587][T13467] siw: device registration error -23 [ 469.804436][T13473] __nla_validate_parse: 1 callbacks suppressed [ 469.804455][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1960'. [ 469.914090][T13465] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1960'. [ 470.051084][T13479] sch_fq: defrate 6 ignored. [ 470.055566][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1963'. [ 470.090091][T13479] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1964'. [ 470.126292][T13479] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1964'. [ 470.314970][T13487] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1967'. [ 471.435876][T13510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1976'. [ 471.527778][T13510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1976'. [ 471.588098][T13511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.740006][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1979'. [ 471.777034][T13515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.899047][T13526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1982'. [ 474.969755][T13573] __nla_validate_parse: 6 callbacks suppressed [ 474.969775][T13573] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1999'. [ 475.090150][T13576] netlink: 'syz.4.2000': attribute type 9 has an invalid length. [ 475.100353][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2002'. [ 475.113651][T13576] netlink: 'syz.4.2000': attribute type 11 has an invalid length. [ 475.149714][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2002'. [ 475.150370][T13576] netlink: 'syz.4.2000': attribute type 12 has an invalid length. [ 475.170379][T13579] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2002'. [ 475.177154][T13576] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.2000'. [ 475.218986][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2000'. [ 475.856337][T13584] delete_channel: no stack [ 477.199875][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2025'. [ 477.246335][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2025'. [ 477.275328][T13639] netlink: 19 bytes leftover after parsing attributes in process `syz.7.2025'. [ 477.507456][ T5143] Bluetooth: hci7: unexpected event 0x06 length: 15 > 3 [ 477.591099][T13660] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2033'. [ 477.785005][T13669] netlink: 'syz.6.2037': attribute type 6 has an invalid length. [ 477.812953][T13669] netlink: 'syz.6.2037': attribute type 1 has an invalid length. [ 478.059889][ T5143] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 478.309274][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 478.760241][ T5143] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 478.817483][T13716] netlink: 'syz.8.2057': attribute type 40 has an invalid length. [ 479.429784][ T5143] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 482.753644][T13783] __nla_validate_parse: 15 callbacks suppressed [ 482.753664][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2075'. [ 482.773588][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2075'. [ 482.791869][T13783] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2075'. [ 482.804094][T13785] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2076'. [ 482.818280][T13785] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2076'. [ 482.862789][T13785] netlink: 19 bytes leftover after parsing attributes in process `syz.8.2076'. [ 483.091206][T13800] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2079'. [ 483.106544][ T5143] Bluetooth: hci7: unexpected event 0x07 length: 15 < 255 [ 483.140212][T13802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2083'. [ 483.158787][T13803] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2079'. [ 483.197107][T13800] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2079'. [ 484.148722][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 484.269235][ T5827] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 484.298030][T13832] mac80211_hwsim hwsim58 wlan1: entered promiscuous mode [ 484.306084][T13832] mac80211_hwsim hwsim58 wlan1: entered allmulticast mode [ 485.052172][ T5827] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 485.266404][T13885] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 485.935706][T13881] hsr0 speed is unknown, defaulting to 1000 [ 485.947605][T13881] lo speed is unknown, defaulting to 1000 [ 486.068473][T13896] netlink: 'syz.8.2113': attribute type 28 has an invalid length. [ 486.078484][T13896] netlink: 'syz.8.2113': attribute type 29 has an invalid length. [ 487.414739][T13939] netlink: 'syz.7.2127': attribute type 5 has an invalid length. [ 488.047705][T13944] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 488.054675][T13944] dvmrp1: ignored: set checksum disabled [ 488.472179][T13975] netlink: 'syz.7.2140': attribute type 2 has an invalid length. [ 489.476341][T13990] __nla_validate_parse: 18 callbacks suppressed [ 489.476359][T13990] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2142'. [ 489.543144][T13993] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2143'. [ 489.554895][T13993] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2143'. [ 489.564802][T13993] netlink: 19 bytes leftover after parsing attributes in process `syz.8.2143'. [ 489.575303][T13990] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2142'. [ 489.663911][T13996] xt_socket: unknown flags 0x4 [ 489.711292][T14000] netlink: 'syz.7.2145': attribute type 2 has an invalid length. [ 489.720246][T14000] netlink: 'syz.7.2145': attribute type 2 has an invalid length. [ 489.919415][ T5827] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 489.977271][T14017] netlink: 'syz.4.2150': attribute type 12 has an invalid length. [ 489.995224][T14017] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2150'. [ 490.075445][T14021] netlink: 'syz.6.2152': attribute type 4 has an invalid length. [ 490.319409][T14033] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.2158'. [ 490.806929][ T5827] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 493.946452][ T5827] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 494.160536][T14088] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2176'. [ 494.178466][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 494.190093][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 494.203234][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 494.213607][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 494.221424][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 494.230825][T14088] netlink: 'syz.4.2176': attribute type 10 has an invalid length. [ 494.420139][T14088] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 494.547550][T14089] hsr0 speed is unknown, defaulting to 1000 [ 494.579425][T14089] lo speed is unknown, defaulting to 1000 [ 494.600797][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2179'. [ 494.643905][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2179'. [ 494.666373][T14099] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2179'. [ 494.709110][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2180'. [ 494.726680][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2180'. [ 494.775691][T14102] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2180'. [ 495.238252][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2183'. [ 495.247446][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2183'. [ 495.252266][T14089] chnl_net:caif_netlink_parms(): no params data found [ 495.498383][T14089] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.514602][T14089] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.532004][T14089] bridge_slave_0: entered allmulticast mode [ 495.548538][T14089] bridge_slave_0: entered promiscuous mode [ 495.647204][T14138] IPv6: NLM_F_CREATE should be specified when creating new route [ 495.662753][ T5827] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 495.827668][T14089] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.841722][T14089] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.849106][T14089] bridge_slave_1: entered allmulticast mode [ 495.878008][T14089] bridge_slave_1: entered promiscuous mode [ 495.950419][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2187'. [ 496.015126][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2187'. [ 496.062375][T14089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.097336][T14089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.247077][T14089] team0: Port device team_slave_0 added [ 496.273667][T14089] team0: Port device team_slave_1 added [ 496.307959][ T5827] Bluetooth: hci1: command tx timeout [ 496.429768][T14089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.458489][T14089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.518402][T14089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.555254][T14089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.569990][T14089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.630878][T14089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.878745][ T5827] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 496.943248][T14089] hsr_slave_0: entered promiscuous mode [ 496.951876][T14089] hsr_slave_1: entered promiscuous mode [ 496.958411][T14089] debugfs: 'hsr0' already exists in 'hsr' [ 496.964422][T14089] Cannot create hsr debugfs directory [ 497.949204][T14089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.002687][T14089] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.027150][ T7770] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.034328][ T7770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.143846][ T7790] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.151213][ T7790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.395435][ T5827] Bluetooth: hci1: command tx timeout [ 498.616535][T14089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 499.084978][ T5827] Bluetooth: hci7: unexpected event 0x07 length: 15 < 255 [ 499.116563][T14089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.689523][T14089] veth0_vlan: entered promiscuous mode [ 499.713136][T14089] veth1_vlan: entered promiscuous mode [ 499.792978][T14089] veth0_macvtap: entered promiscuous mode [ 499.826387][T14089] veth1_macvtap: entered promiscuous mode [ 499.944510][T14089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.977324][T14089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.228754][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.247394][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.345852][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.376182][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.468040][ T5827] Bluetooth: hci1: command tx timeout [ 500.977265][T14288] __nla_validate_parse: 5 callbacks suppressed [ 500.977284][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2223'. [ 501.094599][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2223'. [ 501.125245][T14288] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2223'. [ 501.191860][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2225'. [ 501.220852][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2225'. [ 501.306611][T14296] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2225'. [ 501.369572][ T13] bridge_slave_1: left allmulticast mode [ 501.375509][ T13] bridge_slave_1: left promiscuous mode [ 501.398136][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.431965][ T13] bridge_slave_0: left allmulticast mode [ 501.458104][ T13] bridge_slave_0: left promiscuous mode [ 501.468409][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.545199][ T5827] Bluetooth: hci1: command tx timeout [ 502.912958][ T13] team0: Port device geneve1 removed [ 503.094823][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.129762][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.169289][ T13] bond0 (unregistering): Released all slaves [ 503.236610][T14333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2240'. [ 503.275245][T14333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2240'. [ 503.315298][T14333] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2240'. [ 503.464882][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2245'. [ 504.822885][T14414] netlink: 'syz.2.2260': attribute type 6 has an invalid length. [ 504.857266][ T13] hsr_slave_0: left promiscuous mode [ 504.863101][T14414] netlink: 'syz.2.2260': attribute type 1 has an invalid length. [ 504.890326][ T13] hsr_slave_1: left promiscuous mode [ 504.906484][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.916913][T14417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.936007][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.968749][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.998086][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.040581][ T13] batman_adv: batadv0: Interface deactivated: vlan1 [ 505.059349][ T13] batman_adv: batadv0: Removing interface: vlan1 [ 505.127563][ T13] veth1_macvtap: left promiscuous mode [ 505.143275][ T13] veth0_macvtap: left promiscuous mode [ 505.157621][T14422] openvswitch: netlink: IP tunnel dst address not specified [ 505.167686][ T13] veth1_vlan: left promiscuous mode [ 505.187713][ T13] veth0_vlan: left promiscuous mode [ 506.151559][ T13] team0 (unregistering): Port device team_slave_1 removed [ 506.194410][ T13] team0 (unregistering): Port device team_slave_0 removed [ 506.301364][T14441] netlink: 'syz.2.2270': attribute type 10 has an invalid length. [ 506.472737][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.481575][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.615626][T14413] __nla_validate_parse: 8 callbacks suppressed [ 506.615645][T14413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2261'. [ 506.631318][T14413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2261'. [ 506.655124][T14413] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2261'. [ 506.669633][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2267'. [ 506.705148][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2267'. [ 506.745452][T14429] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2267'. [ 506.963941][T14452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2273'. [ 508.152477][T14483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2283'. [ 508.192290][T14483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2283'. [ 508.256706][T14483] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2283'. [ 508.372971][T14486] netlink: 'syz.2.2282': attribute type 10 has an invalid length. [ 508.434712][T14486] dummy0: left allmulticast mode [ 508.465740][T14486] bridge0: port 3(dummy0) entered disabled state [ 508.579753][T14486] team0: Device dummy0 is up. Set it down before adding it as a team port [ 509.271513][ T5143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 509.282897][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 509.292742][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 509.313277][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 509.322098][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 509.490228][T14519] hsr0 speed is unknown, defaulting to 1000 [ 509.667547][T14519] lo speed is unknown, defaulting to 1000 [ 510.306310][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 510.342167][T14519] chnl_net:caif_netlink_parms(): no params data found [ 510.492695][T14549] netlink: 'syz.6.2303': attribute type 3 has an invalid length. [ 510.614119][T14519] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.621555][T14519] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.629087][T14519] bridge_slave_0: entered allmulticast mode [ 510.638296][T14519] bridge_slave_0: entered promiscuous mode [ 510.648875][T14519] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.656246][T14519] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.663608][T14519] bridge_slave_1: entered allmulticast mode [ 510.686706][T14519] bridge_slave_1: entered promiscuous mode [ 510.838207][T14519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.894430][T14519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.129590][T14519] team0: Port device team_slave_0 added [ 511.169259][T14519] team0: Port device team_slave_1 added [ 511.281272][T14519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.300866][T14519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.425238][ T5827] Bluetooth: hci4: command tx timeout [ 511.435427][T14519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.466972][T14519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.473941][T14519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.579767][T14519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.630585][T14562] netlink: 'syz.9.2309': attribute type 1 has an invalid length. [ 511.675697][T14519] hsr_slave_0: entered promiscuous mode [ 511.682589][T14519] hsr_slave_1: entered promiscuous mode [ 511.695911][T14519] debugfs: 'hsr0' already exists in 'hsr' [ 511.701897][T14519] Cannot create hsr debugfs directory [ 511.734227][T14562] __nla_validate_parse: 4 callbacks suppressed [ 511.734248][T14562] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2309'. [ 512.910184][T14519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.934356][T14519] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.149454][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.156689][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.167591][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.174768][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.506569][ T5143] Bluetooth: hci4: command tx timeout [ 513.665432][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 513.746775][T14519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.422842][T14627] cgroup: fork rejected by pids controller in /syz6 [ 514.459045][T14519] veth0_vlan: entered promiscuous mode [ 514.512095][T14519] veth1_vlan: entered promiscuous mode [ 514.619180][T14519] veth0_macvtap: entered promiscuous mode [ 514.636157][ T5827] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 514.644844][T14519] veth1_macvtap: entered promiscuous mode [ 514.671552][T14519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.685426][T14519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.108982][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.123799][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.298878][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.343128][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.361254][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.464584][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.585775][ T5827] Bluetooth: hci4: command tx timeout [ 515.636679][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.750634][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 515.761600][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 515.771608][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 515.780943][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 515.790614][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 515.828207][ T5827] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 516.044382][T14670] netlink: 'syz.0.2346': attribute type 21 has an invalid length. [ 516.095194][T14670] IPv6: NLM_F_CREATE should be specified when creating new route [ 516.124047][T14670] IPv6: Can't replace route, no match found [ 516.347044][T14661] hsr0 speed is unknown, defaulting to 1000 [ 516.398228][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.502198][T14661] lo speed is unknown, defaulting to 1000 [ 516.859441][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2353'. [ 516.904536][T14684] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 517.105131][T14684] dvmrp1: ignored: set checksum disabled [ 517.132253][ T5827] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 517.424809][ T12] bridge_slave_1: left allmulticast mode [ 517.457562][ T12] bridge_slave_1: left promiscuous mode [ 517.485577][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.526617][T14704] xt_socket: unknown flags 0x4 [ 517.538077][ T12] bridge_slave_0: left promiscuous mode [ 517.543877][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.653549][ T12] erspan0: left allmulticast mode [ 517.672686][ T5827] Bluetooth: hci4: command tx timeout [ 517.689506][ T12] erspan0: left promiscuous mode [ 517.694688][ T12] : port 1(erspan0) entered disabled state [ 517.825375][ T5827] Bluetooth: hci0: command tx timeout [ 518.920226][T14737] FAULT_INJECTION: forcing a failure. [ 518.920226][T14737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.944628][T14737] CPU: 1 UID: 0 PID: 14737 Comm: syz.0.2367 Not tainted syzkaller #0 PREEMPT(full) [ 518.944651][T14737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 518.944662][T14737] Call Trace: [ 518.944669][T14737] [ 518.944677][T14737] dump_stack_lvl+0xe8/0x150 [ 518.944709][T14737] should_fail_ex+0x412/0x560 [ 518.944736][T14737] _copy_from_user+0x2d/0xb0 [ 518.944762][T14737] ___sys_sendmsg+0x1c6/0x360 [ 518.944794][T14737] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.944846][T14737] ? __fget_files+0x2a/0x420 [ 518.944871][T14737] ? __fget_files+0x3a0/0x420 [ 518.944903][T14737] __x64_sys_sendmsg+0x1bd/0x2a0 [ 518.944939][T14737] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 518.944974][T14737] ? __pfx_ksys_write+0x10/0x10 [ 518.945000][T14737] do_syscall_64+0x14d/0xf80 [ 518.945027][T14737] ? trace_irq_disable+0x3b/0x150 [ 518.945051][T14737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.945070][T14737] ? clear_bhb_loop+0x40/0x90 [ 518.945092][T14737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.945111][T14737] RIP: 0033:0x7f0e3199c629 [ 518.945131][T14737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.945148][T14737] RSP: 002b:00007f0e327cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.945168][T14737] RAX: ffffffffffffffda RBX: 00007f0e31c15fa0 RCX: 00007f0e3199c629 [ 518.945182][T14737] RDX: 000000000000fc00 RSI: 0000200000001180 RDI: 0000000000000004 [ 518.945195][T14737] RBP: 00007f0e327cf090 R08: 0000000000000000 R09: 0000000000000000 [ 518.945208][T14737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.945219][T14737] R13: 00007f0e31c16038 R14: 00007f0e31c15fa0 R15: 00007ffe17119438 [ 518.945248][T14737] [ 519.147359][T14738] netlink: 416 bytes leftover after parsing attributes in process `syz.2.2366'. [ 519.350422][ T12] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.396796][ T12] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.421973][ T12] .` (unregistering): Released all slaves [ 519.781525][T14661] chnl_net:caif_netlink_parms(): no params data found [ 519.905196][ T5827] Bluetooth: hci0: command tx timeout [ 520.115533][T14777] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2376'. [ 521.313297][T14661] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.375136][T14661] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.382633][T14661] bridge_slave_0: entered allmulticast mode [ 521.419207][T14661] bridge_slave_0: entered promiscuous mode [ 521.444537][T14798] netlink: 'syz.2.2382': attribute type 29 has an invalid length. [ 521.532601][T14661] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.558121][T14661] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.566025][T14798] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2382'. [ 521.596615][T14661] bridge_slave_1: entered allmulticast mode [ 521.627816][T14661] bridge_slave_1: entered promiscuous mode [ 521.685216][T14797] netlink: 'syz.2.2382': attribute type 29 has an invalid length. [ 521.832717][T14804] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2384'. [ 521.958193][T14804] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2384'. [ 521.985131][ T5827] Bluetooth: hci0: command tx timeout [ 521.997047][T14661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.067853][T14661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.276462][T14816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2387'. [ 522.429232][T14661] team0: Port device team_slave_0 added [ 522.447132][T14661] team0: Port device team_slave_1 added [ 523.590684][T14842] sch_fq: defrate 6 ignored. [ 523.608494][T14661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.627635][T14842] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2393'. [ 523.637154][T14661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.686564][T14842] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2393'. [ 523.715206][T14661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.737114][T14661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.744090][T14661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.795798][T14661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.072589][ T5827] Bluetooth: hci0: command tx timeout [ 524.563654][T14661] hsr_slave_0: entered promiscuous mode [ 524.581809][T14661] hsr_slave_1: entered promiscuous mode [ 524.614556][T14661] debugfs: 'hsr0' already exists in 'hsr' [ 524.641691][T14661] Cannot create hsr debugfs directory [ 524.750195][T14854] veth1_macvtap: left promiscuous mode [ 524.889910][ T12] hsr_slave_0: left promiscuous mode [ 524.946943][ T12] hsr_slave_1: left promiscuous mode [ 524.959196][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.032343][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.070010][T14875] netlink: 'syz.9.2402': attribute type 6 has an invalid length. [ 525.153754][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.197770][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.318678][ T12] batman_adv: batadv0: Interface deactivated: vlan1 [ 525.416888][ T12] batman_adv: batadv0: Removing interface: vlan1 [ 526.088088][ T12] veth0_macvtap: left promiscuous mode [ 526.093748][ T12] veth1_vlan: left promiscuous mode [ 526.117072][ T12] veth0_vlan: left promiscuous mode [ 526.117567][T14872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.150611][T14881] delete_channel: no stack [ 526.605282][ T12] team0 (unregistering): Port device team_slave_1 removed [ 526.631999][ T12] team0 (unregistering): Port device team_slave_0 removed [ 526.919172][T14877] netlink: 'syz.0.2403': attribute type 25 has an invalid length. [ 526.931717][T14877] netlink: 'syz.0.2403': attribute type 1 has an invalid length. [ 526.977784][T14894] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2405'. [ 527.005120][T14894] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2405'. [ 527.038820][T14894] netlink: 19 bytes leftover after parsing attributes in process `syz.9.2405'. [ 527.065360][ T5916] lo speed is unknown, defaulting to 1000 [ 527.080881][ T5916] infiniband syz1: ib_query_port failed (-19) [ 528.456979][T14925] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2411'. [ 529.091612][ T5143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 529.166119][ T5143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 529.174699][ T5143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 529.184574][ T5143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 529.200343][ T5143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 529.391135][T14661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.583615][T14661] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.679286][T14951] netlink: 67 bytes leftover after parsing attributes in process `syz.9.2418'. [ 529.737576][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.744777][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.811749][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.818950][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.963672][T14949] netlink: 'syz.0.2417': attribute type 10 has an invalid length. [ 529.972581][T14949] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2417'. [ 530.003990][T14949] batadv_slave_1: entered promiscuous mode [ 530.038521][T14949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.065671][T14949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.081044][T14949] bridge0: port 3(batadv_slave_1) entered blocking state [ 530.104394][T14949] bridge0: port 3(batadv_slave_1) entered disabled state [ 530.129291][T14949] batadv_slave_1: entered allmulticast mode [ 530.169473][T14949] bridge0: port 3(batadv_slave_1) entered blocking state [ 530.177236][T14949] bridge0: port 3(batadv_slave_1) entered forwarding state [ 530.534789][T14932] chnl_net:caif_netlink_parms(): no params data found [ 530.718696][T14661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.729697][T14988] netlink: 5240 bytes leftover after parsing attributes in process `syz.9.2428'. [ 530.771628][T14932] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.778995][T14932] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.786791][T14932] bridge_slave_0: entered allmulticast mode [ 530.794645][T14932] bridge_slave_0: entered promiscuous mode [ 530.803271][T14932] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.810591][T14932] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.818197][T14932] bridge_slave_1: entered allmulticast mode [ 530.826448][T14932] bridge_slave_1: entered promiscuous mode [ 530.869698][T14932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.886390][T14932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.989298][T14932] team0: Port device team_slave_0 added [ 531.008205][T14932] team0: Port device team_slave_1 added [ 531.160312][T14932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.185102][T14932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.258228][T14932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.281480][T14932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.311788][T14932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.342295][T14932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.355258][ T5143] Bluetooth: hci5: command tx timeout [ 531.416385][T14932] hsr_slave_0: entered promiscuous mode [ 531.423115][T14932] hsr_slave_1: entered promiscuous mode [ 531.431156][T14932] debugfs: 'hsr0' already exists in 'hsr' [ 531.437233][T14932] Cannot create hsr debugfs directory [ 531.993441][T15014] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2434'. [ 532.176639][T14661] veth0_vlan: entered promiscuous mode [ 532.208432][T14661] veth1_vlan: entered promiscuous mode [ 532.350203][T14661] veth0_macvtap: entered promiscuous mode [ 532.375498][T14661] veth1_macvtap: entered promiscuous mode [ 532.450189][T14661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.497007][T14661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.553667][T14932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.649475][T14932] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.725879][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2447'. [ 532.959685][ T7770] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.966916][ T7770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.037850][ T7778] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.045074][ T7778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.186159][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.194020][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.336944][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.344793][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.427334][ T5827] Bluetooth: hci5: command tx timeout [ 533.485245][T15066] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2451'. [ 533.739434][T14932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.995471][T15091] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2460'. [ 534.145407][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 534.358720][T14932] veth0_vlan: entered promiscuous mode [ 534.390702][T14932] veth1_vlan: entered promiscuous mode [ 534.489529][T14932] veth0_macvtap: entered promiscuous mode [ 534.519277][T14932] veth1_macvtap: entered promiscuous mode [ 534.578582][T14932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.609467][T14932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.853240][T15112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2464'. [ 534.883585][T15112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2464'. [ 534.916508][T15112] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2464'. [ 535.004999][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.020341][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.103344][ T7790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.145245][ T7790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.393021][T15131] FAULT_INJECTION: forcing a failure. [ 535.393021][T15131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.411449][T15135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2473'. [ 535.435246][T15135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2473'. [ 535.455998][T15135] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2473'. [ 535.469357][T15131] CPU: 0 UID: 0 PID: 15131 Comm: syz.6.2472 Not tainted syzkaller #0 PREEMPT(full) [ 535.469382][T15131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 535.469393][T15131] Call Trace: [ 535.469399][T15131] [ 535.469407][T15131] dump_stack_lvl+0xe8/0x150 [ 535.469435][T15131] should_fail_ex+0x412/0x560 [ 535.469460][T15131] _copy_from_user+0x2d/0xb0 [ 535.469483][T15131] ___sys_sendmsg+0x1c6/0x360 [ 535.469513][T15131] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.469564][T15131] ? __fget_files+0x2a/0x420 [ 535.469588][T15131] ? __fget_files+0x3a0/0x420 [ 535.469619][T15131] __x64_sys_sendmsg+0x1bd/0x2a0 [ 535.469646][T15131] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 535.469679][T15131] ? __pfx_ksys_write+0x10/0x10 [ 535.469707][T15131] do_syscall_64+0x14d/0xf80 [ 535.469732][T15131] ? trace_irq_disable+0x3b/0x150 [ 535.469755][T15131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.469773][T15131] ? clear_bhb_loop+0x40/0x90 [ 535.469795][T15131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.469813][T15131] RIP: 0033:0x7f9f1cb9c629 [ 535.469829][T15131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.469845][T15131] RSP: 002b:00007f9f1da6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.469865][T15131] RAX: ffffffffffffffda RBX: 00007f9f1ce15fa0 RCX: 00007f9f1cb9c629 [ 535.469879][T15131] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 535.469890][T15131] RBP: 00007f9f1da6f090 R08: 0000000000000000 R09: 0000000000000000 [ 535.469901][T15131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.469911][T15131] R13: 00007f9f1ce16038 R14: 00007f9f1ce15fa0 R15: 00007ffd32f8b4b8 [ 535.469938][T15131] [ 535.507160][ T5143] Bluetooth: hci5: command tx timeout [ 535.923414][T15152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 536.592054][T15171] lo: entered allmulticast mode [ 536.746856][T15168] lo: entered promiscuous mode [ 536.751668][T15168] lo: left allmulticast mode [ 537.238177][T15201] __nla_validate_parse: 7 callbacks suppressed [ 537.238196][T15201] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2498'. [ 537.253687][T15198] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2497'. [ 537.306107][T15201] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2498'. [ 537.337902][T15201] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2498'. [ 537.667688][ T5143] Bluetooth: hci5: command tx timeout [ 537.922572][T15218] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2504'. [ 538.110034][T15224] netlink: 'syz.1.2504': attribute type 26 has an invalid length. [ 538.200613][T15223] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 538.221167][T15223] dvmrp1: ignored: set checksum disabled [ 538.239689][T15221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2504'. [ 538.529783][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2512'. [ 538.541688][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2512'. [ 538.555560][T15248] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2512'. [ 538.752320][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2516'. [ 539.157828][T15274] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.404687][T15274] bridge_slave_0 (unregistering): left allmulticast mode [ 539.429634][T15274] bridge_slave_0 (unregistering): left promiscuous mode [ 539.467841][T15274] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.133735][T15307] netlink: 'syz.6.2531': attribute type 4 has an invalid length. [ 540.266475][T15310] delete_channel: no stack [ 541.998324][T15361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.241454][T15371] netlink: 'syz.6.2548': attribute type 10 has an invalid length. [ 542.278198][T15371] __nla_validate_parse: 9 callbacks suppressed [ 542.278232][T15371] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2548'. [ 542.331211][ T7770] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 542.631737][T15375] pim6reg1: entered promiscuous mode [ 542.660222][T15375] pim6reg1: entered allmulticast mode [ 542.734302][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2554'. [ 542.759685][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2554'. [ 542.799990][T15391] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2554'. [ 542.977483][T15402] netlink: 'syz.2.2557': attribute type 6 has an invalid length. [ 543.021397][T15402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2557'. [ 544.252873][T15445] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2568'. [ 544.411547][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2570'. [ 544.437963][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2570'. [ 544.458667][T15447] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2570'. [ 545.360299][T15486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.512678][T15492] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2586'. [ 546.587469][T15502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.473461][T15537] __nla_validate_parse: 6 callbacks suppressed [ 547.473480][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2598'. [ 547.555120][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2598'. [ 547.564050][T15537] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2598'. [ 548.294554][T15578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2612'. [ 548.325087][T15578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2612'. [ 548.333978][T15578] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2612'. [ 548.433813][T15580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.713046][T15593] netlink: 'syz.6.2618': attribute type 4 has an invalid length. [ 548.723139][T15591] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 548.754271][T15593] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2618'. [ 548.779130][T15596] netlink: 'syz.6.2618': attribute type 6 has an invalid length. [ 549.939970][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2632'. [ 549.963084][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2632'. [ 549.976812][T15635] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2632'. [ 550.804994][T15670] netlink: 'syz.2.2645': attribute type 6 has an invalid length. [ 550.813882][T15670] netlink: 'syz.2.2645': attribute type 1 has an invalid length. [ 550.822268][T15670] block nbd0: Unsupported socket: should be TCP or UNIX. [ 552.530869][T15722] __nla_validate_parse: 8 callbacks suppressed [ 552.530891][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2660'. [ 552.559409][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2660'. [ 552.600254][T15722] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2660'. [ 552.645727][T15720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 553.162670][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.212265][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.273349][ T1141] bond0 (unregistering): (slave wlan0): Releasing backup interface [ 553.344272][ T1141] bond0 (unregistering): Released all slaves [ 553.562791][T15734] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2664'. [ 553.689486][T15741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2666'. [ 553.701948][T15741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2666'. [ 553.748756][T15741] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2666'. [ 554.123254][T15757] netlink: 'syz.1.2673': attribute type 3 has an invalid length. [ 554.198193][T15757] netlink: 'syz.1.2673': attribute type 1 has an invalid length. [ 554.228858][T15757] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2673'. [ 554.346023][T15764] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2675'. [ 554.823476][T15776] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2678'. [ 555.413735][T15806] FAULT_INJECTION: forcing a failure. [ 555.413735][T15806] name failslab, interval 1, probability 0, space 0, times 0 [ 555.442941][T15806] CPU: 1 UID: 0 PID: 15806 Comm: syz.6.2686 Not tainted syzkaller #0 PREEMPT(full) [ 555.442966][T15806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 555.442977][T15806] Call Trace: [ 555.442985][T15806] [ 555.442993][T15806] dump_stack_lvl+0xe8/0x150 [ 555.443022][T15806] should_fail_ex+0x412/0x560 [ 555.443047][T15806] should_failslab+0xa8/0x100 [ 555.443069][T15806] __kmalloc_noprof+0xe8/0x760 [ 555.443089][T15806] ? tomoyo_encode+0x28b/0x550 [ 555.443114][T15806] tomoyo_encode+0x28b/0x550 [ 555.443140][T15806] tomoyo_realpath_from_path+0x58d/0x5d0 [ 555.443172][T15806] ? tomoyo_path_number_perm+0x219/0x630 [ 555.443190][T15806] tomoyo_path_number_perm+0x246/0x630 [ 555.443211][T15806] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 555.443232][T15806] ? __lock_acquire+0x6b5/0x2cf0 [ 555.443264][T15806] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 555.443309][T15806] ? __fget_files+0x2a/0x420 [ 555.443336][T15806] ? __fget_files+0x2a/0x420 [ 555.443360][T15806] ? __fget_files+0x3a0/0x420 [ 555.443391][T15806] ? __fget_files+0x2a/0x420 [ 555.443418][T15806] security_file_ioctl+0xc3/0x2a0 [ 555.443448][T15806] __se_sys_ioctl+0x47/0x170 [ 555.443472][T15806] do_syscall_64+0x14d/0xf80 [ 555.443497][T15806] ? trace_irq_disable+0x3b/0x150 [ 555.443521][T15806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.443540][T15806] ? clear_bhb_loop+0x40/0x90 [ 555.443562][T15806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.443580][T15806] RIP: 0033:0x7f9f1cb9c629 [ 555.443598][T15806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.443614][T15806] RSP: 002b:00007f9f1da6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 555.443634][T15806] RAX: ffffffffffffffda RBX: 00007f9f1ce15fa0 RCX: 00007f9f1cb9c629 [ 555.443647][T15806] RDX: 00002000000000c0 RSI: 000000000000541b RDI: 0000000000000004 [ 555.443658][T15806] RBP: 00007f9f1da6f090 R08: 0000000000000000 R09: 0000000000000000 [ 555.443669][T15806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.443680][T15806] R13: 00007f9f1ce16038 R14: 00007f9f1ce15fa0 R15: 00007ffd32f8b4b8 [ 555.443708][T15806] [ 555.443727][T15806] ERROR: Out of memory at tomoyo_realpath_from_path. [ 555.716248][T15813] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 555.818270][ T1141] hsr_slave_0: left promiscuous mode [ 555.846430][ T1141] hsr_slave_1: left promiscuous mode [ 555.874050][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.934028][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.968985][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.988846][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.080884][ T1141] veth1_vlan: left promiscuous mode [ 556.120166][ T1141] veth0_vlan: left promiscuous mode [ 557.333904][T15845] sctp: [Deprecated]: syz.6.2698 (pid 15845) Use of int in max_burst socket option deprecated. [ 557.333904][T15845] Use struct sctp_assoc_value instead [ 558.057402][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 560.079246][T15881] __nla_validate_parse: 7 callbacks suppressed [ 560.079269][T15881] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2709'. [ 560.113218][ T1141] team0 (unregistering): Port device C removed [ 560.964741][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2693'. [ 560.984115][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2693'. [ 560.993167][T15817] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2693'. [ 561.271388][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2702'. [ 561.284520][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2702'. [ 561.346961][T15854] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2702'. [ 562.050400][T15904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2714'. [ 562.224929][T15906] xt_socket: unknown flags 0x4 [ 562.768341][T15921] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2722'. [ 562.797937][T15921] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2722'. [ 564.127865][T15957] sch_fq: defrate 6 ignored. [ 564.404512][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 564.425389][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 564.434765][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 564.446326][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 564.453973][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 564.688777][T15970] netlink: 'syz.1.2739': attribute type 1 has an invalid length. [ 564.751225][T15962] chnl_net:caif_netlink_parms(): no params data found [ 564.903319][T15984] netlink: 'syz.2.2740': attribute type 10 has an invalid length. [ 565.146702][T15962] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.162582][T15962] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.171767][T15962] bridge_slave_0: entered allmulticast mode [ 565.182493][T15962] bridge_slave_0: entered promiscuous mode [ 565.216253][T15962] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.285225][T15962] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.292513][T15962] bridge_slave_1: entered allmulticast mode [ 565.367028][T15962] bridge_slave_1: entered promiscuous mode [ 565.478305][T16001] netlink: 'syz.2.2744': attribute type 10 has an invalid length. [ 565.499367][T15962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.512785][T16001] mac80211_hwsim hwsim57 wlan0: entered promiscuous mode [ 565.538358][T15962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.641888][T15962] team0: Port device team_slave_0 added [ 565.712307][T15962] team0: Port device team_slave_1 added [ 565.857001][T15962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.864783][T15962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.893026][T15962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.904775][T16024] __nla_validate_parse: 10 callbacks suppressed [ 565.904805][T16024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2751'. [ 566.007188][T15962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.014222][T15962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.063937][T16030] netlink: 'syz.6.2754': attribute type 10 has an invalid length. [ 566.102876][T15962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.106911][T16030] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2754'. [ 566.126105][T16026] netlink: 'syz.9.2753': attribute type 25 has an invalid length. [ 566.182270][T16030] bridge0: port 3(ipvlan1) entered blocking state [ 566.189386][T16030] bridge0: port 3(ipvlan1) entered disabled state [ 566.196134][T16030] ipvlan1: entered allmulticast mode [ 566.201589][T16030] veth0_vlan: entered allmulticast mode [ 566.225983][T16030] ipvlan1: left allmulticast mode [ 566.245105][T16030] veth0_vlan: left allmulticast mode [ 566.250967][T16030] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 566.378933][ T5827] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 566.433618][T15962] hsr_slave_0: entered promiscuous mode [ 566.446581][T16039] netlink: 'syz.1.2756': attribute type 1 has an invalid length. [ 566.476289][T15962] hsr_slave_1: entered promiscuous mode [ 566.545616][ T5827] Bluetooth: hci3: command tx timeout [ 567.919047][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.935583][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.625524][ T5827] Bluetooth: hci3: command tx timeout [ 569.907917][T16097] delete_channel: no stack [ 569.941009][T15962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.993853][T16120] netlink: 'syz.9.2772': attribute type 4 has an invalid length. [ 569.998039][T15962] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.012008][T16120] netlink: 'syz.9.2772': attribute type 2 has an invalid length. [ 570.020513][ T7787] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.027709][ T7787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.041981][T16120] netlink: 5156 bytes leftover after parsing attributes in process `syz.9.2772'. [ 570.059919][ T7787] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.067103][ T7787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.536213][T15962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.705618][ T5827] Bluetooth: hci3: command tx timeout [ 571.108854][T16182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2788'. [ 571.238011][T15962] veth0_vlan: entered promiscuous mode [ 571.251108][T15962] veth1_vlan: entered promiscuous mode [ 571.354420][T15962] veth0_macvtap: entered promiscuous mode [ 571.383822][T15962] veth1_macvtap: entered promiscuous mode [ 571.409300][T15962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.453278][T15962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.678675][ T7770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.712324][ T7770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.797145][ T7770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.818773][ T7770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.833931][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2801'. [ 572.150541][T16219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2736'. [ 572.162679][T16221] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2803'. [ 572.182987][T16219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2736'. [ 572.212786][T16219] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2736'. [ 572.226242][T16224] netlink: 'syz.2.2805': attribute type 1 has an invalid length. [ 572.234090][T16224] netlink: 'syz.2.2805': attribute type 1 has an invalid length. [ 572.785374][ T5827] Bluetooth: hci3: command tx timeout [ 573.554903][T16251] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2813'. [ 573.665062][T16254] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.677021][T16254] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.727720][T16254] bridge0: entered allmulticast mode [ 573.795210][T16262] bridge_slave_1: left allmulticast mode [ 573.805181][T16262] bridge_slave_1: left promiscuous mode [ 573.855284][T16262] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.937879][T16254] netlink: 'syz.3.2812': attribute type 1 has an invalid length. [ 573.983151][T16262] bridge_slave_0: left allmulticast mode [ 574.011498][T16262] bridge_slave_0: left promiscuous mode [ 574.056850][T16262] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.194285][T16268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2821'. [ 574.207771][T16268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2821'. [ 574.218184][T16268] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2821'. [ 574.298405][T16253] delete_channel: no stack [ 575.531575][T16323] netlink: 'syz.1.2832': attribute type 12 has an invalid length. [ 575.667550][T16326] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 575.673157][T16326] dvmrp1: ignored: set checksum disabled [ 576.641188][T16350] __nla_validate_parse: 8 callbacks suppressed [ 576.641206][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2841'. [ 576.879405][T16355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2845'. [ 576.920638][T16355] : entered promiscuous mode [ 577.018596][T16367] netlink: 416 bytes leftover after parsing attributes in process `syz.3.2848'. [ 577.164108][T16368] delete_channel: no stack [ 577.212666][T16373] netlink: 'syz.2.2852': attribute type 5 has an invalid length. [ 577.222069][T16378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2851'. [ 577.222096][T16378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2851'. [ 577.222111][T16378] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2851'. [ 577.833870][T16400] hsr0 speed is unknown, defaulting to 1000 [ 577.850635][T16400] hsr0 speed is unknown, defaulting to 1000 [ 577.870130][T16400] hsr0 speed is unknown, defaulting to 1000 [ 577.889519][T16401] IPv6: NLM_F_CREATE should be specified when creating new route [ 577.937144][T16401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 577.944425][T16401] IPv6: NLM_F_CREATE should be set when creating new route [ 578.017814][T16400] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 578.124241][T16400] hsr0 speed is unknown, defaulting to 1000 [ 578.151458][T16400] hsr0 speed is unknown, defaulting to 1000 [ 578.177978][T16400] hsr0 speed is unknown, defaulting to 1000 [ 578.202174][T16400] hsr0 speed is unknown, defaulting to 1000 [ 578.214707][T16414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2866'. [ 578.224547][T16400] hsr0 speed is unknown, defaulting to 1000 [ 578.282956][T16414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2866'. [ 578.291385][T16400] hsr0 speed is unknown, defaulting to 1000 [ 578.344399][T16400] hsr0 speed is unknown, defaulting to 1000 [ 578.629429][T16423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2872'. [ 578.666309][T16423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2872'. [ 579.259773][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 579.276972][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 579.298151][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 579.311568][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 579.319338][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 579.375811][T16451] hsr0 speed is unknown, defaulting to 1000 [ 579.624406][T16451] chnl_net:caif_netlink_parms(): no params data found [ 579.780822][T16451] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.789539][T16451] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.801215][T16451] bridge_slave_0: entered allmulticast mode [ 579.810164][T16451] bridge_slave_0: entered promiscuous mode [ 579.820112][T16451] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.828876][T16451] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.837933][T16451] bridge_slave_1: entered allmulticast mode [ 579.848109][T16451] bridge_slave_1: entered promiscuous mode [ 579.984457][T16451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.011910][T16451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.056885][T16451] team0: Port device team_slave_0 added [ 580.065958][T16466] netlink: 'syz.1.2883': attribute type 10 has an invalid length. [ 580.077355][T16466] batman_adv: batadv0: Adding interface: vlan1 [ 580.083528][T16466] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.115434][T16466] batman_adv: batadv0: Interface activated: vlan1 [ 580.124860][T16451] team0: Port device team_slave_1 added [ 580.175641][T16451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.182615][T16451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.209322][T16451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.221766][T16451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.228858][T16451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.255541][T16451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.547171][T16451] hsr_slave_0: entered promiscuous mode [ 580.574273][T16451] hsr_slave_1: entered promiscuous mode [ 580.596030][T16451] debugfs: 'hsr0' already exists in 'hsr' [ 580.601799][T16451] Cannot create hsr debugfs directory [ 581.100641][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 581.123108][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 581.131640][T16451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.138733][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 581.152288][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 581.161683][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 581.246819][T16451] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.257308][T16500] netlink: 'syz.2.2897': attribute type 10 has an invalid length. [ 581.277698][ T7787] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.284870][ T7787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.297471][T16500] geneve0: entered promiscuous mode [ 581.350019][ T5827] Bluetooth: hci0: command tx timeout [ 581.362979][T16500] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 581.407349][ T7787] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.414539][ T7787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.439255][T16497] hsr0 speed is unknown, defaulting to 1000 [ 581.564690][T16508] netlink: 'syz.2.2900': attribute type 4 has an invalid length. [ 581.674567][T16511] netlink: 'syz.1.2902': attribute type 1 has an invalid length. [ 581.727945][T16511] __nla_validate_parse: 4 callbacks suppressed [ 581.727964][T16511] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2902'. [ 581.911231][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.925393][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.938527][ T1152] bond0 (unregistering): Released all slaves [ 582.177801][T16511] hsr0 speed is unknown, defaulting to 1000 [ 582.282735][ T5143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 582.293379][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 582.302262][ T5143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 582.313315][T16523] netlink: 'syz.2.2905': attribute type 1 has an invalid length. [ 582.321553][ T5143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 582.330217][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 582.529143][T16520] hsr0 speed is unknown, defaulting to 1000 [ 582.588776][ T1152] hsr_slave_0: left promiscuous mode [ 582.611117][ T1152] hsr_slave_1: left promiscuous mode [ 582.628986][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.637311][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.647799][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.658885][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.679849][ T1152] veth1_macvtap: left promiscuous mode [ 582.687155][ T1152] veth0_macvtap: left promiscuous mode [ 582.692730][ T1152] veth1_vlan: left promiscuous mode [ 582.698024][ T1152] veth0_vlan: left promiscuous mode [ 582.890551][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 582.904524][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 583.118779][T16497] chnl_net:caif_netlink_parms(): no params data found [ 583.238577][T16451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.275792][ T5143] Bluetooth: hci1: command tx timeout [ 583.427509][ T5143] Bluetooth: hci0: command tx timeout [ 583.493331][T16497] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.515735][T16497] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.523002][T16497] bridge_slave_0: entered allmulticast mode [ 583.547401][T16497] bridge_slave_0: entered promiscuous mode [ 583.638812][T16497] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.653373][T16497] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.693638][T16497] bridge_slave_1: entered allmulticast mode [ 583.701793][T16497] bridge_slave_1: entered promiscuous mode [ 583.708849][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 583.717943][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 583.732216][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 583.748520][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 583.758040][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 583.970759][T16497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.001390][T16497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.040340][T16520] chnl_net:caif_netlink_parms(): no params data found [ 584.069746][T16541] hsr0 speed is unknown, defaulting to 1000 [ 584.129826][T16497] team0: Port device team_slave_0 added [ 584.144861][T16497] team0: Port device team_slave_1 added [ 584.250679][T16497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.257889][T16497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.284537][T16497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.297857][T16497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.304808][T16497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.335948][T16497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.386616][ T5827] Bluetooth: hci3: command tx timeout [ 584.412746][T16520] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.420085][T16520] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.427761][T16520] bridge_slave_0: entered allmulticast mode [ 584.436902][T16520] bridge_slave_0: entered promiscuous mode [ 584.470534][T16520] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.480939][T16520] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.488826][T16520] bridge_slave_1: entered allmulticast mode [ 584.494520][T16557] netlink: 'syz.1.2913': attribute type 1 has an invalid length. [ 584.496881][T16520] bridge_slave_1: entered promiscuous mode [ 584.579379][T16451] veth0_vlan: entered promiscuous mode [ 584.602709][T16497] hsr_slave_0: entered promiscuous mode [ 584.613352][T16497] hsr_slave_1: entered promiscuous mode [ 584.645295][T16520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.658421][T16520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.750517][T16520] team0: Port device team_slave_0 added [ 584.759346][T16520] team0: Port device team_slave_1 added [ 584.812966][T16451] veth1_vlan: entered promiscuous mode [ 584.869853][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2917'. [ 584.881163][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2917'. [ 584.891232][T16567] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2917'. [ 584.920548][T16520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.939441][T16520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.966076][T16520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.980144][T16520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.990521][T16520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.017242][T16520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.040876][T16541] chnl_net:caif_netlink_parms(): no params data found [ 585.181042][T16520] hsr_slave_0: entered promiscuous mode [ 585.189833][T16520] hsr_slave_1: entered promiscuous mode [ 585.196389][T16520] debugfs: 'hsr0' already exists in 'hsr' [ 585.202183][T16520] Cannot create hsr debugfs directory [ 585.345458][ T5827] Bluetooth: hci1: command tx timeout [ 585.417981][T16541] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.433816][T16541] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.441766][T16541] bridge_slave_0: entered allmulticast mode [ 585.450863][T16541] bridge_slave_0: entered promiscuous mode [ 585.474108][T16541] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.486213][T16541] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.493537][T16541] bridge_slave_1: entered allmulticast mode [ 585.502295][T16541] bridge_slave_1: entered promiscuous mode [ 585.514303][ T5827] Bluetooth: hci0: command tx timeout [ 585.527956][T16451] veth0_macvtap: entered promiscuous mode [ 585.630083][T16451] veth1_macvtap: entered promiscuous mode [ 585.639821][T16541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.689644][T16541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.722921][T16592] netlink: 5240 bytes leftover after parsing attributes in process `syz.1.2920'. [ 585.734162][T16592] nbd: must specify a device to reconfigure [ 585.754369][T16451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.767362][T16541] team0: Port device team_slave_0 added [ 585.797442][T16541] team0: Port device team_slave_1 added [ 585.825313][ T5827] Bluetooth: hci2: command tx timeout [ 585.846352][T16541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.853326][T16541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.880152][T16541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.893154][T16451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.913298][T16541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.922353][T16541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.949287][T16541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.061341][T16541] hsr_slave_0: entered promiscuous mode [ 586.070380][T16541] hsr_slave_1: entered promiscuous mode [ 586.077945][T16541] debugfs: 'hsr0' already exists in 'hsr' [ 586.084008][T16541] Cannot create hsr debugfs directory [ 586.186854][T16497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.259579][T16497] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.350540][ T7778] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.357729][ T7778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.369317][ T7778] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.376495][ T7778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.416781][T16608] netlink: 'syz.1.2925': attribute type 6 has an invalid length. [ 586.424571][T16608] netlink: 3936 bytes leftover after parsing attributes in process `syz.1.2925'. [ 586.434070][T16608] netlink: 'syz.1.2925': attribute type 1 has an invalid length. [ 586.446836][T16608] block nbd0: Unsupported socket: should be TCP or UNIX. [ 586.465628][ T5827] Bluetooth: hci3: command tx timeout [ 586.483810][ T7778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.501890][ T7778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.586953][T16520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.640711][ T7778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.673869][ T7778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.691205][T16520] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.730403][ T7778] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.737855][ T7778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.833538][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.840767][ T7770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.031278][T16541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.116610][T16541] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.154265][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.161453][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.209749][T16497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.223633][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.230814][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.453697][T16650] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2928'. [ 587.517605][ T5827] Bluetooth: hci1: command tx timeout [ 587.595922][ T5827] Bluetooth: hci0: command tx timeout [ 587.945760][ T5827] Bluetooth: hci2: command tx timeout [ 587.982522][T16520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.228419][T16541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.406240][T16497] veth0_vlan: entered promiscuous mode [ 588.478309][T16497] veth1_vlan: entered promiscuous mode [ 588.520708][T16666] delete_channel: no stack [ 588.551112][ T5827] Bluetooth: hci3: command tx timeout [ 588.619209][T16497] veth0_macvtap: entered promiscuous mode [ 588.674367][T16497] veth1_macvtap: entered promiscuous mode [ 588.749092][T16497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.791615][T16497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.818077][T16520] veth0_vlan: entered promiscuous mode [ 588.843777][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2932'. [ 588.859871][T16682] netlink: 'syz.5.2933': attribute type 1 has an invalid length. [ 588.869700][T16682] netlink: 'syz.5.2933': attribute type 2 has an invalid length. [ 588.875159][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2932'. [ 588.890961][T16680] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2932'. [ 588.932681][T16520] veth1_vlan: entered promiscuous mode [ 589.053042][T16520] veth0_macvtap: entered promiscuous mode [ 589.101664][T16520] veth1_macvtap: entered promiscuous mode [ 589.168013][T16541] veth0_vlan: entered promiscuous mode [ 589.220372][T16520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.341813][T16541] veth1_vlan: entered promiscuous mode [ 589.377880][T16520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.460991][ T7787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.472369][ T7787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.572351][ T7778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.581675][ T7778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.591330][ T5827] Bluetooth: hci1: command tx timeout [ 589.602461][T16541] veth0_macvtap: entered promiscuous mode [ 589.625305][T16706] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2940'. [ 589.643138][T16541] veth1_macvtap: entered promiscuous mode [ 589.689202][ T8974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.706229][ T8974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.771551][T16541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.823223][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2942'. [ 589.845778][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2942'. [ 589.856537][T16712] netlink: 19 bytes leftover after parsing attributes in process `syz.5.2942'. [ 589.900130][T16541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.933270][ T8974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.946686][ T8974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.986290][ T5827] Bluetooth: hci2: command tx timeout [ 590.183731][ T8974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.224129][ T8974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.338684][T16728] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2947'. [ 590.358311][T16728] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2947'. [ 590.403626][ T7787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.470577][ T7787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.625280][ T5827] Bluetooth: hci3: command tx timeout [ 591.878617][ T29] audit: type=1107 audit(1771945272.933:7): pid=16780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='‹©' [ 591.991552][T16781] hsr0 speed is unknown, defaulting to 1000 [ 592.066937][ T5827] Bluetooth: hci2: command tx timeout [ 592.079864][ T5827] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 592.146691][T16788] cgroup: fork rejected by pids controller in /syz7 [ 592.277713][T16801] netlink: 'syz.4.2975': attribute type 13 has an invalid length. [ 592.699238][T16808] __nla_validate_parse: 5 callbacks suppressed [ 592.699270][T16808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2977'. [ 592.992271][T16813] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2980'. [ 593.806681][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 593.815798][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 593.825481][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 593.834231][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 593.843733][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 595.906015][ T5827] Bluetooth: hci1: command tx timeout [ 596.031704][T16836] hsr0 speed is unknown, defaulting to 1000 [ 596.193703][T16840] lo speed is unknown, defaulting to 1000 [ 596.223130][T16840] lo speed is unknown, defaulting to 1000 [ 596.351502][T16840] lo speed is unknown, defaulting to 1000 [ 596.375385][ T8966] bridge_slave_1: left allmulticast mode [ 596.424632][ T8966] bridge_slave_1: left promiscuous mode [ 596.450426][ T8966] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.555687][T16840] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 596.575484][ T8966] bridge_slave_0: left allmulticast mode [ 596.613924][ T8966] bridge_slave_0: left promiscuous mode [ 596.657261][ T8966] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.434577][T16865] delete_channel: no stack [ 597.704411][ T8966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.719337][ T8966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.730895][ T8966] bond0 (unregistering): Released all slaves [ 597.743603][T16840] lo speed is unknown, defaulting to 1000 [ 597.743839][T16867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2996'. [ 597.784337][T16840] lo speed is unknown, defaulting to 1000 [ 597.791372][T16836] chnl_net:caif_netlink_parms(): no params data found [ 597.806244][T16840] lo speed is unknown, defaulting to 1000 [ 597.858299][T16840] lo speed is unknown, defaulting to 1000 [ 597.872842][T16840] lo speed is unknown, defaulting to 1000 [ 597.972917][T16840] lo speed is unknown, defaulting to 1000 [ 597.989076][ T5827] Bluetooth: hci1: command tx timeout [ 598.055122][T16840] lo speed is unknown, defaulting to 1000 [ 598.090962][T16840] lo speed is unknown, defaulting to 1000 [ 599.083706][T16840] lo speed is unknown, defaulting to 1000 [ 599.133804][T16840] lo speed is unknown, defaulting to 1000 [ 599.140767][T16836] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.164304][T16836] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.175197][T16836] bridge_slave_0: entered allmulticast mode [ 599.196925][T16836] bridge_slave_0: entered promiscuous mode [ 599.209934][T16836] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.217266][T16836] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.236528][T16836] bridge_slave_1: entered allmulticast mode [ 599.251529][T16836] bridge_slave_1: entered promiscuous mode [ 599.280616][T16840] lo speed is unknown, defaulting to 1000 [ 599.492908][ T8966] hsr_slave_0: left promiscuous mode [ 599.517974][ T8966] hsr_slave_1: left promiscuous mode [ 599.524362][ T8966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.533677][ T8966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.543630][ T8966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.553215][ T8966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.574254][ T8966] veth1_macvtap: left promiscuous mode [ 599.583780][ T8966] veth0_macvtap: left promiscuous mode [ 599.591287][ T8966] veth1_vlan: left promiscuous mode [ 599.605332][ T8966] veth0_vlan: left promiscuous mode [ 600.056712][T16918] netlink: 'syz.1.3013': attribute type 1 has an invalid length. [ 600.080266][ T5827] Bluetooth: hci1: command tx timeout [ 601.654822][T16931] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3015'. [ 601.664374][T16931] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3015'. [ 601.738056][T16915] delete_channel: no stack [ 601.931130][ T8966] team0 (unregistering): Port device team_slave_1 removed [ 601.948470][ T8966] team0 (unregistering): Port device team_slave_0 removed [ 602.130705][T16921] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.138588][T16921] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.147337][ T5827] Bluetooth: hci1: command tx timeout [ 602.156461][T16921] bridge0: entered allmulticast mode [ 602.183266][T16930] sch_fq: defrate 6 ignored. [ 602.202881][T16836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.242718][T16899] hsr0 speed is unknown, defaulting to 1000 [ 602.271476][T16836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.292313][T16899] lo speed is unknown, defaulting to 1000 [ 602.546798][T16836] team0: Port device team_slave_0 added [ 602.611753][T16836] team0: Port device team_slave_1 added [ 602.720717][T16950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3020'. [ 602.797786][T16939] hsr0 speed is unknown, defaulting to 1000 [ 603.061116][T16939] lo speed is unknown, defaulting to 1000 [ 603.064924][T16836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.083217][T16836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.137735][T16836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.181422][T16836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.188776][T16836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.220760][T16836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.377116][T16836] hsr_slave_0: entered promiscuous mode [ 603.383961][T16836] hsr_slave_1: entered promiscuous mode [ 603.604204][T16969] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3027'. [ 604.308592][T16985] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3032'. [ 604.405457][ T8966] bridge_slave_1: left allmulticast mode [ 604.413293][ T8966] bridge_slave_1: left promiscuous mode [ 604.419515][ T8966] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.457921][ T8966] bridge_slave_0: left allmulticast mode [ 604.463612][ T8966] bridge_slave_0: left promiscuous mode [ 604.489964][ T8966] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.834215][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 604.852416][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 604.860602][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 604.869914][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 604.888584][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 605.233400][ T8966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.287940][ T8966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.315775][ T8966] bond0 (unregistering): Released all slaves [ 605.957812][T16994] hsr0 speed is unknown, defaulting to 1000 [ 605.990606][T16994] lo speed is unknown, defaulting to 1000 [ 606.085971][T16836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.524009][T16836] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.780571][T17042] netlink: 7 bytes leftover after parsing attributes in process `syz.8.3054'. [ 606.916761][T17042] netlink: 7 bytes leftover after parsing attributes in process `syz.8.3054'. [ 606.943838][ T8966] hsr_slave_0: left promiscuous mode [ 606.955188][ T5827] Bluetooth: hci0: command tx timeout [ 606.963337][ T8966] hsr_slave_1: left promiscuous mode [ 606.975853][ T8966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.983257][ T8966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.023141][ T8966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.058092][ T8966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.109674][ T8966] veth1_macvtap: left promiscuous mode [ 607.116895][ T8966] veth0_macvtap: left promiscuous mode [ 607.122663][ T8966] veth1_vlan: left promiscuous mode [ 607.138574][ T8966] veth0_vlan: left promiscuous mode [ 607.153785][T17052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3058'. [ 607.831147][ T8966] team0 (unregistering): Port device team_slave_1 removed [ 607.864507][ T8966] team0 (unregistering): Port device team_slave_0 removed [ 608.169199][ T8974] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.176457][ T8974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.197539][ T8974] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.204738][ T8974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.335770][T17082] netlink: 'syz.1.3069': attribute type 6 has an invalid length. [ 608.346487][T17082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3069'. [ 608.393124][T16836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 608.447172][T16836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 608.501628][T16994] chnl_net:caif_netlink_parms(): no params data found [ 608.725608][T16994] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.735211][T16994] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.742478][T16994] bridge_slave_0: entered allmulticast mode [ 608.756791][T16994] bridge_slave_0: entered promiscuous mode [ 608.770160][T16994] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.777484][T16994] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.784733][T16994] bridge_slave_1: entered allmulticast mode [ 608.797380][T16994] bridge_slave_1: entered promiscuous mode [ 608.904689][T16994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.918099][T16994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.028226][ T5827] Bluetooth: hci0: command tx timeout [ 609.069909][T16994] team0: Port device team_slave_0 added [ 609.152808][T16994] team0: Port device team_slave_1 added [ 609.333448][T16994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.342946][T16994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.371213][T16994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.393378][T16994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.402163][T16994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.445979][T16994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.490229][T17116] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3078'. [ 609.524304][T17116] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3078'. [ 609.590937][T16836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.852855][T17131] netlink: 'syz.8.3081': attribute type 1 has an invalid length. [ 609.990798][T17126] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.009097][T17126] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.070878][T17126] bridge0: entered allmulticast mode [ 610.348493][T17129] bridge_slave_1: left allmulticast mode [ 610.354365][T17129] bridge_slave_1: left promiscuous mode [ 610.360429][T17129] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.371072][T17129] bridge_slave_0: left allmulticast mode [ 610.377129][T17129] bridge_slave_0: left promiscuous mode [ 610.383356][T17129] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.431601][T16994] hsr_slave_0: entered promiscuous mode [ 610.438207][T16994] hsr_slave_1: entered promiscuous mode [ 610.444448][T16994] debugfs: 'hsr0' already exists in 'hsr' [ 610.451754][T16994] Cannot create hsr debugfs directory [ 610.461837][ T8966] bridge_slave_1: left allmulticast mode [ 610.470069][ T8966] bridge_slave_1: left promiscuous mode [ 610.476038][ T8966] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.486045][ T8966] bridge_slave_0: left allmulticast mode [ 610.491677][ T8966] bridge_slave_0: left promiscuous mode [ 610.499835][ T8966] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.501122][T17125] delete_channel: no stack [ 610.749371][ T8966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.770797][ T8966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.784902][T17152] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3090'. [ 610.797535][ T8966] bond0 (unregistering): (slave wlan0): Releasing backup interface [ 610.810633][ T8966] bond0 (unregistering): Released all slaves [ 610.892215][T17151] delete_channel: no stack [ 611.107497][ T5827] Bluetooth: hci0: command tx timeout [ 611.127327][T17161] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3093'. [ 612.125767][T16836] veth0_vlan: entered promiscuous mode [ 612.325388][ T8966] hsr_slave_0: left promiscuous mode [ 612.339319][ T8966] hsr_slave_1: left promiscuous mode [ 612.347371][ T8966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.375117][ T8966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.414905][ T8966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.441882][ T8966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.488648][ T8966] veth1_macvtap: left promiscuous mode [ 612.494208][ T8966] veth0_macvtap: left promiscuous mode [ 612.577971][ T8966] veth1_vlan: left promiscuous mode [ 612.595157][ T8966] veth0_vlan: left promiscuous mode [ 612.748445][T17189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.910340][ T8966] team0 (unregistering): Port device team_slave_1 removed [ 612.927323][ T8966] team0 (unregistering): Port device team_slave_0 removed [ 613.143517][T16836] veth1_vlan: entered promiscuous mode [ 613.188248][ T5827] Bluetooth: hci0: command tx timeout [ 613.259676][T17201] netlink: 774 bytes leftover after parsing attributes in process `syz.8.3105'. [ 613.374401][T16836] veth0_macvtap: entered promiscuous mode [ 613.403473][T16836] veth1_macvtap: entered promiscuous mode [ 613.442327][T16994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.488419][T16994] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.529164][T16836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.588335][ T7778] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.595550][ T7778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.619937][T16836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.663516][ T7778] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.670732][ T7778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.811099][T17217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3111'. [ 613.833592][T17217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3111'. [ 613.898122][T16994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 613.994435][ T7778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.012632][ T7778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.093498][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.157197][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.414180][T16994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.198434][T16994] veth0_vlan: entered promiscuous mode [ 615.213995][T16994] veth1_vlan: entered promiscuous mode [ 615.316360][T16994] veth0_macvtap: entered promiscuous mode [ 615.328227][T16994] veth1_macvtap: entered promiscuous mode [ 615.362389][T16994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.380752][T16994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.674485][ T8966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.679903][T17294] netlink: 'syz.8.3133': attribute type 10 has an invalid length. [ 615.698076][ T8966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.705880][T17294] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3133'. [ 615.750050][ T5827] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 615.863189][ T7778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.900094][ T7778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.913357][T17299] xt_socket: unknown flags 0x4 [ 616.482989][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3142'. [ 617.708605][T17347] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.719515][T17347] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.744454][T17349] netlink: 'syz.7.3150': attribute type 10 has an invalid length. [ 617.762940][T17349] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3150'. [ 617.777670][T17347] bridge0: entered allmulticast mode [ 617.833609][T17349] batman_adv: batadv0: Adding interface: vlan1 [ 617.860550][T17349] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.908931][T17347] netlink: 'syz.0.3152': attribute type 1 has an invalid length. [ 617.912540][T17349] batman_adv: batadv0: Interface activated: vlan1 [ 617.946283][T17344] bridge_slave_1: left allmulticast mode [ 617.952058][T17344] bridge_slave_1: left promiscuous mode [ 617.968172][T17344] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.016773][T17344] bridge_slave_0: left allmulticast mode [ 618.023146][T17344] bridge_slave_0: left promiscuous mode [ 618.042653][T17344] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.131342][T17362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3159'. [ 618.149303][T17362] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 618.241117][T17343] delete_channel: no stack [ 619.457629][T17385] netlink: 'syz.4.3168': attribute type 4 has an invalid length. [ 619.581777][ T5827] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 619.606677][T17378] hsr0: entered promiscuous mode [ 619.617877][T17378] hsr0: entered allmulticast mode [ 619.635613][T17378] hsr_slave_0: entered allmulticast mode [ 619.642693][T17378] hsr_slave_1: entered allmulticast mode [ 619.782329][T17393] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.793599][T17393] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.857778][T17393] bridge0: entered allmulticast mode [ 619.921679][T17394] bridge_slave_1: left allmulticast mode [ 619.941816][T17393] netlink: 'syz.4.3171': attribute type 1 has an invalid length. [ 619.956164][T17394] bridge_slave_1: left promiscuous mode [ 619.956464][T17394] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.018243][T17394] bridge_slave_0: left allmulticast mode [ 620.023931][T17394] bridge_slave_0: left promiscuous mode [ 620.055409][T17394] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.090945][T17399] netlink: 112 bytes leftover after parsing attributes in process `syz.8.3173'. [ 620.112964][T17399] netlink: 112 bytes leftover after parsing attributes in process `syz.8.3173'. [ 620.162816][T17396] sch_fq: defrate 6 ignored. [ 620.242879][T17391] delete_channel: no stack [ 620.433276][T17412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.514652][T17414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3181'. [ 620.592085][T17418] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3182'. [ 620.650202][T17422] netlink: 5240 bytes leftover after parsing attributes in process `syz.1.3183'. [ 620.671574][T17418] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3182'. [ 620.825998][T17429] netlink: 'syz.8.3187': attribute type 6 has an invalid length. [ 620.834673][T17429] netlink: 3936 bytes leftover after parsing attributes in process `syz.8.3187'. [ 620.844529][T17429] netlink: 'syz.8.3187': attribute type 1 has an invalid length. [ 620.895240][T17429] block nbd0: Unsupported socket: should be TCP or UNIX. [ 621.295206][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3195'. [ 621.357839][T17450] netlink: 'syz.4.3195': attribute type 10 has an invalid length. [ 621.499420][T17455] netlink: 'syz.0.3197': attribute type 3 has an invalid length. [ 621.500993][T17450] team0: Port device wlan0 added [ 621.516944][T17455] netlink: 'syz.0.3197': attribute type 1 has an invalid length. [ 621.524697][T17455] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3197'. [ 621.607355][T17458] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3198'. [ 621.616743][T17458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3198'. [ 621.821381][T17464] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3201'. [ 621.938052][T17469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3202'. [ 621.974133][T17474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3202'. [ 622.426486][T17490] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 622.593819][T17490] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3211'. [ 622.692551][T17501] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3215'. [ 623.760134][T17506] netlink: 'syz.4.3217': attribute type 1 has an invalid length. [ 623.944483][T17505] delete_channel: no stack [ 623.981404][T17515] netlink: 'syz.7.3220': attribute type 6 has an invalid length. [ 624.008946][T17515] netlink: 'syz.7.3220': attribute type 1 has an invalid length. [ 625.890728][T17581] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 625.896716][T17581] dvmrp1: ignored: set checksum disabled [ 625.902587][T17583] netlink: 'syz.8.3246': attribute type 5 has an invalid length. [ 625.978396][T17587] __nla_validate_parse: 6 callbacks suppressed [ 625.978413][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3248'. [ 626.312188][T17601] siw: device registration error -23 [ 626.721703][T17617] netlink: 830 bytes leftover after parsing attributes in process `syz.7.3259'. [ 626.851412][ T5827] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 626.922821][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3262'. [ 627.138886][ T5143] Bluetooth: hci5: unexpected event 0x08 length: 15 > 4 [ 627.417551][ T5143] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 627.714566][T17662] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3276'. [ 627.784725][T17664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3277'. [ 627.810921][T17664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3277'. [ 627.846091][T17644] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 628.865120][T17644] Bluetooth: hci2: command 0x0406 tx timeout [ 629.185267][T17644] Bluetooth: hci5: command 0x0406 tx timeout [ 629.350890][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.358207][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.506305][T17644] Bluetooth: hci3: command 0x0406 tx timeout [ 630.615249][T17718] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3289'. [ 630.825696][ T5143] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 630.907095][T17716] delete_channel: no stack [ 630.949646][T17731] netlink: 'syz.1.3294': attribute type 25 has an invalid length. [ 630.957559][T17731] netlink: 'syz.1.3294': attribute type 1 has an invalid length. [ 630.965457][T17731] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.981805][T17736] netlink: 'syz.0.3295': attribute type 10 has an invalid length. [ 630.992086][T17736] veth1_macvtap: left promiscuous mode [ 631.122826][T17740] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3297'. [ 631.138324][T17740] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3297'. [ 631.180743][T17733] hsr0 speed is unknown, defaulting to 1000 [ 631.192325][T17733] lo speed is unknown, defaulting to 1000 [ 631.283065][T17748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.578314][T17763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3304'. [ 631.775620][T17769] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3306'. [ 632.905871][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 632.989645][T17781] netlink: 'syz.0.3306': attribute type 27 has an invalid length. [ 633.054634][T17783] netlink: 5240 bytes leftover after parsing attributes in process `syz.7.3310'. [ 633.109652][T17781] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.3306'. [ 633.471104][T17801] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3317'. [ 633.634310][T17806] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3320'. [ 633.706931][T17806] netlink: 'syz.7.3320': attribute type 2 has an invalid length. [ 633.715207][T17806] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3320'. [ 633.861832][T17820] netlink: 'syz.4.3325': attribute type 3 has an invalid length. [ 633.878515][T17820] netlink: 'syz.4.3325': attribute type 1 has an invalid length. [ 633.903705][T17820] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.3325'. [ 633.956454][T17823] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 650.035141][ C1] sched: DL replenish lagged too much [ 685.758412][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 686.309823][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 686.345704][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 686.358247][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 686.367936][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 686.377779][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 687.857288][T17644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 687.867708][T17644] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 687.876592][T17644] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 687.887927][T17644] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 687.897406][T17644] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 689.039691][T17876] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 689.051636][T17876] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 689.069206][T17876] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 689.078897][T17876] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 689.096491][T17876] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 689.226475][T17879] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 689.236335][T17879] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 689.244635][T17879] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 689.263397][T17879] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 689.273887][T17879] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 690.193531][T17882] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 690.204795][T17882] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 690.214884][T17882] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 690.224648][T17882] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 690.283321][T17882] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 690.815689][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.822108][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 708.315249][T17884] Bluetooth: hci2: command 0x0406 tx timeout [ 718.545275][T17885] Bluetooth: hci1: command 0x0406 tx timeout [ 728.875556][T17886] Bluetooth: hci0: command 0x0406 tx timeout [ 748.406577][T17892] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 748.426004][T17892] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 748.439446][T17892] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 748.452586][T17892] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 748.462827][T17892] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 749.597593][ T5832] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 749.609288][ T5832] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 749.618696][ T5832] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 749.639983][ T5832] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 749.649626][ T5832] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 750.473366][T17901] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 750.495897][T17901] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 750.504755][T17901] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 750.515213][T17901] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 750.525905][T17901] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 751.527384][T17905] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 751.546006][T17905] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 751.560712][T17905] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 751.578058][T17905] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 751.606813][T17905] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 752.171445][T17907] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 752.199301][T17907] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 752.209725][T17907] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 752.255178][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.261608][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.288661][T17907] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 752.304223][T17907] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 772.190845][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 144s! [syz.4.3332:17839] [ 772.190884][ C0] Modules linked in: [ 772.190904][ C0] irq event stamp: 10952177 [ 772.190912][ C0] hardirqs last enabled at (10952176): [] irqentry_exit+0x59e/0x620 [ 772.190953][ C0] hardirqs last disabled at (10952177): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 772.190987][ C0] softirqs last enabled at (4308464): [] __irq_exit_rcu+0x5f/0x150 [ 772.191019][ C0] softirqs last disabled at (4308467): [] __irq_exit_rcu+0x5f/0x150 [ 772.191057][ C0] CPU: 0 UID: 0 PID: 17839 Comm: syz.4.3332 Not tainted syzkaller #0 PREEMPT(full) [ 772.191077][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 772.191095][ C0] RIP: 0010:unwind_next_frame+0x513/0x23c0 [ 772.191127][ C0] Code: c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 [ 772.191144][ C0] RSP: 0018:ffffc90000006a98 EFLAGS: 00000a02 [ 772.191160][ C0] RAX: 0000000000000000 RBX: ffffffff902a5448 RCX: dffffc0000000000 [ 772.191173][ C0] RDX: ffffffff902a5448 RSI: ffffffff90a6a942 RDI: ffffffff8c27a820 [ 772.191187][ C0] RBP: ffffffff902a5448 R08: 0000000000000001 R09: ffffffff8e7602e0 [ 772.191200][ C0] R10: ffffc90000006820 R11: ffffffffa02030d8 R12: ffffffff81881149 [ 772.191214][ C0] R13: ffffffff902a5448 R14: ffffc90000006b68 R15: ffffffff902a5448 [ 772.191228][ C0] FS: 00007f26795826c0(0000) GS:ffff888125467000(0000) knlGS:0000000000000000 [ 772.191244][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 772.191257][ C0] CR2: 0000555571ce4a28 CR3: 000000003558e000 CR4: 00000000003526f0 [ 772.191273][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 772.191284][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 772.191296][ C0] Call Trace: [ 772.191304][ C0] [ 772.191349][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 772.191389][ C0] ? tasklet_action_common+0x2da/0x4b0 [ 772.191420][ C0] ? tasklet_action_common+0x2da/0x4b0 [ 772.191467][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 772.191497][ C0] arch_stack_walk+0x11b/0x150 [ 772.191560][ C0] ? tasklet_action_common+0x2da/0x4b0 [ 772.191616][ C0] stack_trace_save+0xa9/0x100 [ 772.191645][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 772.191680][ C0] ? read_tsc+0x9/0x20 [ 772.191702][ C0] ? ktime_get+0x1d2/0x200 [ 772.191739][ C0] ? lapic_next_event+0x11/0x20 [ 772.191788][ C0] kasan_save_track+0x3e/0x80 [ 772.191810][ C0] ? kasan_save_track+0x3e/0x80 [ 772.191829][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 772.191850][ C0] ? __kmalloc_noprof+0x35c/0x760 [ 772.191870][ C0] ? ieee802_11_parse_elems_full+0x159/0x2ab0 [ 772.191898][ C0] ? ieee80211_inform_bss+0x161/0x1160 [ 772.191920][ C0] ? cfg80211_inform_single_bss_data+0xd08/0x1b70 [ 772.191942][ C0] ? cfg80211_inform_bss_data+0x266/0x3c40 [ 772.191963][ C0] ? cfg80211_inform_bss_frame_data+0x3c7/0x760 [ 772.191985][ C0] ? ieee80211_bss_info_update+0x794/0xa40 [ 772.192007][ C0] ? ieee80211_scan_rx+0x552/0xa40 [ 772.192028][ C0] ? ieee80211_rx_list+0x29e5/0x3710 [ 772.192052][ C0] ? ieee80211_rx_napi+0x1b1/0x3e0 [ 772.192075][ C0] ? ieee80211_handle_queued_frames+0xe8/0x1e0 [ 772.192102][ C0] ? tasklet_action_common+0x2da/0x4b0 [ 772.192310][ C0] ? kasan_poison+0x11/0x60 [ 772.192353][ C0] __kasan_kmalloc+0x93/0xb0 [ 772.192390][ C0] __kmalloc_noprof+0x35c/0x760 [ 772.192422][ C0] ? ieee802_11_parse_elems_full+0x159/0x2ab0 [ 772.192448][ C0] ? __kmalloc_noprof+0x1b8/0x760 [ 772.192496][ C0] ieee802_11_parse_elems_full+0x159/0x2ab0 [ 772.192549][ C0] ? ktime_get+0x45/0x200 [ 772.192585][ C0] ? ktime_get+0x45/0x200 [ 772.192610][ C0] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 772.192638][ C0] ? read_tsc+0x9/0x20 [ 772.192660][ C0] ? ktime_get+0x1d2/0x200 [ 772.192695][ C0] ? lapic_next_event+0x11/0x20 [ 772.192750][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 772.192777][ C0] ? sched_clock+0x3f/0x60 [ 772.192805][ C0] ? sched_clock_cpu+0x74/0x440 [ 772.192865][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 772.192948][ C0] ieee80211_inform_bss+0x161/0x1160 [ 772.192978][ C0] ? irqentry_exit+0x59e/0x620 [ 772.193046][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 772.193141][ C0] ? rcu_is_watching+0x26/0xb0 [ 772.193172][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 772.193211][ C0] cfg80211_inform_single_bss_data+0xd08/0x1b70 [ 772.193284][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 772.193475][ C0] cfg80211_inform_bss_data+0x266/0x3c40 [ 772.193533][ C0] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 772.193568][ C0] ? timerqueue_add+0x1d0/0x200 [ 772.193675][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 772.193696][ C0] ? ktime_get+0x45/0x200 [ 772.193732][ C0] ? ktime_get+0x45/0x200 [ 772.193757][ C0] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 772.193785][ C0] ? read_tsc+0x9/0x20 [ 772.193807][ C0] ? ktime_get+0x1d2/0x200 [ 772.193842][ C0] ? lapic_next_event+0x11/0x20 [ 772.193869][ C0] ? clockevents_program_event+0x247/0x350 [ 772.193920][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 772.193948][ C0] ? sched_clock+0x3f/0x60 [ 772.193975][ C0] ? sched_clock_cpu+0x74/0x440 [ 772.194036][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 772.194112][ C0] ? irqentry_exit+0x59e/0x620 [ 772.194148][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 772.194290][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x760 [ 772.194345][ C0] ? ieee80211_bss_info_update+0x316/0xa40 [ 772.194395][ C0] ieee80211_bss_info_update+0x794/0xa40 [ 772.194454][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 772.194557][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 772.194608][ C0] ieee80211_scan_rx+0x552/0xa40 [ 772.194677][ C0] ieee80211_rx_list+0x29e5/0x3710 [ 772.194702][ C0] ? sched_clock+0x3f/0x60 [ 772.194768][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 772.194843][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 772.194861][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 772.194963][ C0] ? 0xffffffffa02030d8 [ 772.194994][ C0] ? ieee80211_rx_napi+0xd3/0x3e0 [ 772.195034][ C0] ? lock_acquire+0x20b/0x2e0 [ 772.195090][ C0] ? ieee80211_rx_napi+0xd3/0x3e0 [ 772.195115][ C0] ieee80211_rx_napi+0x1b1/0x3e0 [ 772.195156][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 772.195180][ C0] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 772.195232][ C0] ? skb_dequeue+0x124/0x160 [ 772.195278][ C0] ieee80211_handle_queued_frames+0xe8/0x1e0 [ 772.195333][ C0] tasklet_action_common+0x2da/0x4b0 [ 772.195403][ C0] handle_softirqs+0x22a/0x870 [ 772.195452][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 772.195523][ C0] __irq_exit_rcu+0x5f/0x150 [ 772.195554][ C0] irq_exit_rcu+0x9/0x30 [ 772.195580][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 772.195615][ C0] [ 772.195621][ C0] [ 772.195634][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 772.195664][ C0] RIP: 0010:preempt_schedule_irq+0x48/0xa0 [ 772.195694][ C0] Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 93 90 e5 f5 e8 ee 1a 1f f6 fb bf 01 00 00 00 53 a6 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 c4 1c 1f f6 bf 01 [ 772.195710][ C0] RSP: 0018:ffffc900052079b0 EFLAGS: 00000202 [ 772.195726][ C0] RAX: 000000000001eee5 RBX: 0000000000000000 RCX: 0000000000000001 [ 772.195736][ C0] RDX: 0000000000000000 RSI: ffffffff8def225c RDI: 0000000000000001 [ 772.195747][ C0] RBP: 0000000000000000 R08: ffffffff90117db7 R09: 1ffffffff2022fb6 [ 772.195756][ C0] R10: dffffc0000000000 R11: fffffbfff2022fb7 R12: 0000000000000000 [ 772.195767][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 772.195856][ C0] irqentry_exit+0x599/0x620 [ 772.195892][ C0] ? trace_irq_disable+0x3b/0x150 [ 772.195952][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 772.195976][ C0] RIP: 0010:xa_load+0x11b/0x210 [ 772.195996][ C0] Code: 20 c6 08 8d e8 26 55 f6 f5 49 89 e7 45 31 e4 eb 0e e8 99 1b 1a f6 48 c7 44 24 18 03 00 00 00 4c 89 ff e8 c8 48 ff ff 49 89 c6 <48> 3d 06 04 00 00 4d 0f 44 f4 4c 89 f7 48 c7 c6 00 a2 f8 8f e8 ec [ 772.196011][ C0] RSP: 0018:ffffc90005207ad0 EFLAGS: 00000282 [ 772.196025][ C0] RAX: ffff88805eae8800 RBX: ffffffff8bab6f40 RCX: 0000000000080000 [ 772.196039][ C0] RDX: ffffc90015a0f000 RSI: 0000000000000216 RDI: 0000000000000217 [ 772.196051][ C0] RBP: 0000000000000001 R08: ffffffff8bab6f40 R09: ffffffff8e7602e0 [ 772.196064][ C0] R10: ffffc90005207860 R11: ffffffffa02030d8 R12: 0000000000000000 [ 772.196077][ C0] R13: dffffc0000000000 R14: ffff88805eae8800 R15: ffffc90005207ad0 [ 772.196116][ C0] ? xa_load+0x60/0x210 [ 772.196137][ C0] ? 0xffffffffa02030d8 [ 772.196167][ C0] ? xa_load+0x60/0x210 [ 772.196268][ C0] memcg_list_lru_alloc+0x14c/0x800 [ 772.196302][ C0] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 772.196369][ C0] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 772.196393][ C0] ? percpu_ref_tryget+0x15/0x180 [ 772.196473][ C0] ? __memcg_slab_post_alloc_hook+0x13b/0xa80 [ 772.196532][ C0] __memcg_slab_post_alloc_hook+0x312/0xa80 [ 772.196574][ C0] ? __memcg_slab_post_alloc_hook+0x13b/0xa80 [ 772.196636][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 772.196675][ C0] ? sock_alloc_inode+0x28/0xc0 [ 772.196708][ C0] kmem_cache_alloc_lru_noprof+0x346/0x640 [ 772.196741][ C0] ? sock_alloc_inode+0x28/0xc0 [ 772.196770][ C0] ? kmem_cache_alloc_lru_noprof+0x15c/0x640 [ 772.196825][ C0] ? __pfx_sock_alloc_inode+0x10/0x10 [ 772.196849][ C0] sock_alloc_inode+0x28/0xc0 [ 772.196876][ C0] alloc_inode+0x6a/0x1b0 [ 772.196920][ C0] __sock_create+0x12d/0x9d0 [ 772.196997][ C0] __sys_socket+0xd6/0x1b0 [ 772.197050][ C0] __x64_sys_socket+0x7a/0x90 [ 772.197094][ C0] do_syscall_64+0x14d/0xf80 [ 772.197129][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.197153][ C0] ? clear_bhb_loop+0x40/0x90 [ 772.197197][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.197220][ C0] RIP: 0033:0x7f267879c629 [ 772.197245][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.197260][ C0] RSP: 002b:00007f2679582028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 772.197278][ C0] RAX: ffffffffffffffda RBX: 00007f2678a15fa0 RCX: 00007f267879c629 [ 772.197292][ C0] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 772.197303][ C0] RBP: 00007f2678832b39 R08: 0000000000000000 R09: 0000000000000000 [ 772.197315][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.197326][ C0] R13: 00007f2678a16038 R14: 00007f2678a15fa0 R15: 00007fff95010d98 [ 772.197421][ C0] [ 772.197438][ C0] Sending NMI from CPU 0 to CPUs 1: [ 773.242500][ C1] NMI backtrace for cpu 1 [ 773.242516][ C1] CPU: 1 UID: 0 PID: 58 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 773.242535][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 773.242546][ C1] Workqueue: events_unbound toggle_allocation_gate [ 773.242574][ C1] RIP: 0010:smp_call_function_many_cond+0xce5/0x12c0 [ 773.242597][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 74 e2 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 1f de 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 03 de [ 773.242612][ C1] RSP: 0018:ffffc900015f7720 EFLAGS: 00000293 [ 773.242625][ C1] RAX: ffffffff81b9ad7d RBX: 1ffff110170c8515 RCX: ffff88801b7abc80 [ 773.242638][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 773.242648][ C1] RBP: ffffc900015f7860 R08: ffffffff90117db7 R09: 1ffffffff2022fb6 [ 773.242661][ C1] R10: dffffc0000000000 R11: fffffbfff2022fb7 R12: ffff8880b86428a8 [ 773.242673][ C1] R13: dffffc0000000000 R14: ffff8880b873bf80 R15: 0000000000000000 [ 773.242685][ C1] FS: 0000000000000000(0000) GS:ffff888125567000(0000) knlGS:0000000000000000 [ 773.242699][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 773.242711][ C1] CR2: 00007fc4262d3a78 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 773.242725][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 773.242741][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 773.242752][ C1] Call Trace: [ 773.242760][ C1] [ 773.242787][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 773.242837][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 773.242865][ C1] ? kmem_cache_alloc_bulk_noprof+0xae/0x7e0 [ 773.242892][ C1] ? __pfx___text_poke+0x10/0x10 [ 773.242926][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 773.242946][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 773.242977][ C1] smp_text_poke_batch_finish+0x5f5/0x1160 [ 773.243021][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 773.243045][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 773.243083][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 773.243139][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 773.243162][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 773.243198][ C1] static_key_disable+0x1a/0x20 [ 773.243225][ C1] toggle_allocation_gate+0x1fe/0x290 [ 773.243251][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 773.243278][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 773.243325][ C1] ? process_scheduled_works+0xa25/0x1830 [ 773.243353][ C1] ? process_scheduled_works+0xa25/0x1830 [ 773.243391][ C1] process_scheduled_works+0xb02/0x1830 [ 773.243503][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 773.243551][ C1] ? assign_work+0x3d5/0x5e0 [ 773.243597][ C1] worker_thread+0xa50/0xfc0 [ 773.243707][ C1] kthread+0x388/0x470 [ 773.243735][ C1] ? __pfx_worker_thread+0x10/0x10 [ 773.243758][ C1] ? __pfx_kthread+0x10/0x10 [ 773.243785][ C1] ret_from_fork+0x51e/0xb90 [ 773.243822][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 773.243846][ C1] ? __switch_to+0xc7d/0x1450 [ 773.243885][ C1] ? __pfx_kthread+0x10/0x10 [ 773.243913][ C1] ret_from_fork_asm+0x1a/0x30 [ 773.243993][ C1] [ 773.553872][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 773.560547][ C0] CPU: 0 UID: 0 PID: 17839 Comm: syz.4.3332 Tainted: G L syzkaller #0 PREEMPT(full) [ 773.571478][ C0] Tainted: [L]=SOFTLOCKUP [ 773.575794][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 773.585844][ C0] Call Trace: [ 773.589122][ C0] [ 773.591973][ C0] vpanic+0x56c/0xa60 [ 773.595985][ C0] ? __pfx_vpanic+0x10/0x10 [ 773.600498][ C0] ? __pfx_console_unlock+0x10/0x10 [ 773.605791][ C0] ? _raw_spin_unlock+0x10/0x50 [ 773.610667][ C0] panic+0xc5/0xd0 [ 773.614398][ C0] ? __pfx_panic+0x10/0x10 [ 773.618815][ C0] ? printk_trigger_flush+0x13d/0x180 [ 773.624239][ C0] watchdog_timer_fn+0x785/0x790 [ 773.629185][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 773.634645][ C0] __hrtimer_run_queues+0x4e7/0xcc0 [ 773.639917][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 773.645650][ C0] ? read_tsc+0x9/0x20 [ 773.649909][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 773.656017][ C0] hrtimer_interrupt+0x42b/0x1010 [ 773.661142][ C0] __sysvec_apic_timer_interrupt+0x102/0x460 [ 773.667136][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 773.672787][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 773.678768][ C0] RIP: 0010:unwind_next_frame+0x513/0x23c0 [ 773.684579][ C0] Code: c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 [ 773.704179][ C0] RSP: 0018:ffffc90000006a98 EFLAGS: 00000a02 [ 773.710256][ C0] RAX: 0000000000000000 RBX: ffffffff902a5448 RCX: dffffc0000000000 [ 773.718224][ C0] RDX: ffffffff902a5448 RSI: ffffffff90a6a942 RDI: ffffffff8c27a820 [ 773.726193][ C0] RBP: ffffffff902a5448 R08: 0000000000000001 R09: ffffffff8e7602e0 [ 773.734162][ C0] R10: ffffc90000006820 R11: ffffffffa02030d8 R12: ffffffff81881149 [ 773.742144][ C0] R13: ffffffff902a5448 R14: ffffc90000006b68 R15: ffffffff902a5448 [ 773.750126][ C0] ? tasklet_action_common+0x2d9/0x4b0 [ 773.755599][ C0] ? 0xffffffffa02030d8 [ 773.759788][ C0] ? unwind_next_frame+0xd4/0x23c0 [ 773.764926][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 773.770052][ C0] ? tasklet_action_common+0x2da/0x4b0 [ 773.775518][ C0] ? tasklet_action_common+0x2da/0x4b0 [ 773.780991][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 773.787144][ C0] arch_stack_walk+0x11b/0x150 [ 773.791943][ C0] ? tasklet_action_common+0x2da/0x4b0 [ 773.797422][ C0] stack_trace_save+0xa9/0x100 [ 773.802188][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 773.807570][ C0] ? read_tsc+0x9/0x20 [ 773.811638][ C0] ? ktime_get+0x1d2/0x200 [ 773.816060][ C0] ? lapic_next_event+0x11/0x20 [ 773.820953][ C0] kasan_save_track+0x3e/0x80 [ 773.825646][ C0] ? kasan_save_track+0x3e/0x80 [ 773.830527][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 773.835294][ C0] ? __kmalloc_noprof+0x35c/0x760 [ 773.840326][ C0] ? ieee802_11_parse_elems_full+0x159/0x2ab0 [ 773.846405][ C0] ? ieee80211_inform_bss+0x161/0x1160 [ 773.851878][ C0] ? cfg80211_inform_single_bss_data+0xd08/0x1b70 [ 773.858292][ C0] ? cfg80211_inform_bss_data+0x266/0x3c40 [ 773.864097][ C0] ? cfg80211_inform_bss_frame_data+0x3c7/0x760 [ 773.870422][ C0] ? ieee80211_bss_info_update+0x794/0xa40 [ 773.876226][ C0] ? ieee80211_scan_rx+0x552/0xa40 [ 773.881341][ C0] ? ieee80211_rx_list+0x29e5/0x3710 [ 773.886628][ C0] ? ieee80211_rx_napi+0x1b1/0x3e0 [ 773.891739][ C0] ? ieee80211_handle_queued_frames+0xe8/0x1e0 [ 773.897890][ C0] ? tasklet_action_common+0x2da/0x4b0 [ 773.903489][ C0] ? kasan_poison+0x11/0x60 [ 773.908014][ C0] __kasan_kmalloc+0x93/0xb0 [ 773.912614][ C0] __kmalloc_noprof+0x35c/0x760 [ 773.917473][ C0] ? ieee802_11_parse_elems_full+0x159/0x2ab0 [ 773.923542][ C0] ? __kmalloc_noprof+0x1b8/0x760 [ 773.928582][ C0] ieee802_11_parse_elems_full+0x159/0x2ab0 [ 773.934495][ C0] ? ktime_get+0x45/0x200 [ 773.938881][ C0] ? ktime_get+0x45/0x200 [ 773.943226][ C0] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 773.949395][ C0] ? read_tsc+0x9/0x20 [ 773.953472][ C0] ? ktime_get+0x1d2/0x200 [ 773.957901][ C0] ? lapic_next_event+0x11/0x20 [ 773.962779][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 773.967978][ C0] ? sched_clock+0x3f/0x60 [ 773.972395][ C0] ? sched_clock_cpu+0x74/0x440 [ 773.977274][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 773.983645][ C0] ieee80211_inform_bss+0x161/0x1160 [ 773.988940][ C0] ? irqentry_exit+0x59e/0x620 [ 773.993736][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 773.999494][ C0] ? rcu_is_watching+0x26/0xb0 [ 774.004263][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 774.009993][ C0] cfg80211_inform_single_bss_data+0xd08/0x1b70 [ 774.016272][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 774.023070][ C0] cfg80211_inform_bss_data+0x266/0x3c40 [ 774.028726][ C0] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 774.034719][ C0] ? timerqueue_add+0x1d0/0x200 [ 774.039629][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 774.045700][ C0] ? ktime_get+0x45/0x200 [ 774.050058][ C0] ? ktime_get+0x45/0x200 [ 774.054387][ C0] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 774.060545][ C0] ? read_tsc+0x9/0x20 [ 774.064619][ C0] ? ktime_get+0x1d2/0x200 [ 774.069044][ C0] ? lapic_next_event+0x11/0x20 [ 774.073897][ C0] ? clockevents_program_event+0x247/0x350 [ 774.079733][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 774.084935][ C0] ? sched_clock+0x3f/0x60 [ 774.089355][ C0] ? sched_clock_cpu+0x74/0x440 [ 774.094232][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 774.099559][ C0] ? irqentry_exit+0x59e/0x620 [ 774.104333][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 774.109618][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x760 [ 774.115709][ C0] ? ieee80211_bss_info_update+0x316/0xa40 [ 774.121556][ C0] ieee80211_bss_info_update+0x794/0xa40 [ 774.127236][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 774.133457][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 774.139292][ C0] ieee80211_scan_rx+0x552/0xa40 [ 774.144284][ C0] ieee80211_rx_list+0x29e5/0x3710 [ 774.149428][ C0] ? sched_clock+0x3f/0x60 [ 774.153906][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 774.159245][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 774.164718][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 774.169990][ C0] ? 0xffffffffa02030d8 [ 774.174151][ C0] ? ieee80211_rx_napi+0xd3/0x3e0 [ 774.179190][ C0] ? lock_acquire+0x20b/0x2e0 [ 774.183922][ C0] ? ieee80211_rx_napi+0xd3/0x3e0 [ 774.188970][ C0] ieee80211_rx_napi+0x1b1/0x3e0 [ 774.193936][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 774.199399][ C0] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 774.205228][ C0] ? skb_dequeue+0x124/0x160 [ 774.209846][ C0] ieee80211_handle_queued_frames+0xe8/0x1e0 [ 774.215860][ C0] tasklet_action_common+0x2da/0x4b0 [ 774.221275][ C0] handle_softirqs+0x22a/0x870 [ 774.226054][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 774.230850][ C0] __irq_exit_rcu+0x5f/0x150 [ 774.235455][ C0] irq_exit_rcu+0x9/0x30 [ 774.239710][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 774.245353][ C0] [ 774.248291][ C0] [ 774.251232][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 774.257245][ C0] RIP: 0010:preempt_schedule_irq+0x48/0xa0 [ 774.263060][ C0] Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 93 90 e5 f5 e8 ee 1a 1f f6 fb bf 01 00 00 00 53 a6 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 c4 1c 1f f6 bf 01 [ 774.282664][ C0] RSP: 0018:ffffc900052079b0 EFLAGS: 00000202 [ 774.288742][ C0] RAX: 000000000001eee5 RBX: 0000000000000000 RCX: 0000000000000001 [ 774.297144][ C0] RDX: 0000000000000000 RSI: ffffffff8def225c RDI: 0000000000000001 [ 774.305113][ C0] RBP: 0000000000000000 R08: ffffffff90117db7 R09: 1ffffffff2022fb6 [ 774.313100][ C0] R10: dffffc0000000000 R11: fffffbfff2022fb7 R12: 0000000000000000 [ 774.321090][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 774.329128][ C0] irqentry_exit+0x599/0x620 [ 774.333759][ C0] ? trace_irq_disable+0x3b/0x150 [ 774.338813][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 774.344833][ C0] RIP: 0010:xa_load+0x11b/0x210 [ 774.349699][ C0] Code: 20 c6 08 8d e8 26 55 f6 f5 49 89 e7 45 31 e4 eb 0e e8 99 1b 1a f6 48 c7 44 24 18 03 00 00 00 4c 89 ff e8 c8 48 ff ff 49 89 c6 <48> 3d 06 04 00 00 4d 0f 44 f4 4c 89 f7 48 c7 c6 00 a2 f8 8f e8 ec [ 774.369318][ C0] RSP: 0018:ffffc90005207ad0 EFLAGS: 00000282 [ 774.375396][ C0] RAX: ffff88805eae8800 RBX: ffffffff8bab6f40 RCX: 0000000000080000 [ 774.383457][ C0] RDX: ffffc90015a0f000 RSI: 0000000000000216 RDI: 0000000000000217 [ 774.391426][ C0] RBP: 0000000000000001 R08: ffffffff8bab6f40 R09: ffffffff8e7602e0 [ 774.399396][ C0] R10: ffffc90005207860 R11: ffffffffa02030d8 R12: 0000000000000000 [ 774.407365][ C0] R13: dffffc0000000000 R14: ffff88805eae8800 R15: ffffc90005207ad0 [ 774.415350][ C0] ? xa_load+0x60/0x210 [ 774.419514][ C0] ? 0xffffffffa02030d8 [ 774.423676][ C0] ? xa_load+0x60/0x210 [ 774.427896][ C0] memcg_list_lru_alloc+0x14c/0x800 [ 774.433104][ C0] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 774.439115][ C0] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 774.444932][ C0] ? percpu_ref_tryget+0x15/0x180 [ 774.450002][ C0] ? __memcg_slab_post_alloc_hook+0x13b/0xa80 [ 774.456100][ C0] __memcg_slab_post_alloc_hook+0x312/0xa80 [ 774.462010][ C0] ? __memcg_slab_post_alloc_hook+0x13b/0xa80 [ 774.468105][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 774.473139][ C0] ? sock_alloc_inode+0x28/0xc0 [ 774.478017][ C0] kmem_cache_alloc_lru_noprof+0x346/0x640 [ 774.483850][ C0] ? sock_alloc_inode+0x28/0xc0 [ 774.488725][ C0] ? kmem_cache_alloc_lru_noprof+0x15c/0x640 [ 774.494745][ C0] ? __pfx_sock_alloc_inode+0x10/0x10 [ 774.500143][ C0] sock_alloc_inode+0x28/0xc0 [ 774.504850][ C0] alloc_inode+0x6a/0x1b0 [ 774.509220][ C0] __sock_create+0x12d/0x9d0 [ 774.513867][ C0] __sys_socket+0xd6/0x1b0 [ 774.518316][ C0] __x64_sys_socket+0x7a/0x90 [ 774.523006][ C0] do_syscall_64+0x14d/0xf80 [ 774.527607][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.533676][ C0] ? clear_bhb_loop+0x40/0x90 [ 774.538368][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.544263][ C0] RIP: 0033:0x7f267879c629 [ 774.548684][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.568298][ C0] RSP: 002b:00007f2679582028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 774.576728][ C0] RAX: ffffffffffffffda RBX: 00007f2678a15fa0 RCX: 00007f267879c629 [ 774.584699][ C0] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 774.592664][ C0] RBP: 00007f2678832b39 R08: 0000000000000000 R09: 0000000000000000 [ 774.600632][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.608608][ C0] R13: 00007f2678a16038 R14: 00007f2678a15fa0 R15: 00007fff95010d98 [ 774.616640][ C0] [ 774.620034][ C0] Kernel Offset: disabled [ 774.624350][ C0] Rebooting in 86400 seconds..