last executing test programs: 7m32.517918729s ago: executing program 32 (id=133): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="1fe0b9547ed362c29917fadd44b5", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m39.750166256s ago: executing program 0 (id=442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (rerun: 32) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) (async, rerun: 32) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES16=r2, @ANYRESOCT=r3, @ANYRES64=r4], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0xfffffffffffffd50, 0x0, 0x0, 0x64}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f00000004000000040000001200080000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000ba6de89329c4f500"/28], 0x50) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="0801000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000400000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000fcca0d0bb2da43bf0000000000000000000000000000000000000000000000b86b6e00000002000000000044000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff000000000000000000000000000000000000000007000000a8000000000000000c0008"], 0x108}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r8 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x19, 0xa, 0xb, 0xfb, 0x0, 0x4b, 0x8a01e, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x1ee42, 0x20000, 0x7fffffff, 0x9, 0x9, 0x41, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) close(r8) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x5}, 0x104101, 0x4, 0x8, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x64004084) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 6m39.347292421s ago: executing program 0 (id=448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c003000000000000000000000000000002000002ac0001800c000280050001002100000006ff0340000000001400018008000100e000000208000200ac1414aa0c000280050001003a0000001400018008002a929f09ba7329c5fe9b0100e000000108000200eaea3e2452ac1414362c000180140003000000000000000000000000000000000114540400ff020000000000001000000000000106000340000300002c0001800d00030000000000000000000000000000000001140004000000"], 0xc0}, 0x1, 0x0, 0x0, 0x20800}, 0x20000000) 6m39.197500796s ago: executing program 0 (id=450): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) mount$bpf(0x0, 0x0, 0xfffffffffffffffe, 0x801800, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a0001", 0x37}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0xb, &(0x7f0000000740)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x8000009, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000050000000000ee000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114604, 0x0, 0xafe8, 0x4, 0x8000, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00"], 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffeeb, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40010000100013070000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000033000000640101000000000000000000000000ddd2592b0000000000000000000000000000000000000073b26b7d000000000000000000000000000000000000000000002200000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd3af21d000200000002000000000000000000000050001400636d6163286165732900000000000000000000000000ed0000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000093"], 0x140}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x8450, 0xac5d, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000002e00"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xffffff7f}, 0x94) 6m38.650209505s ago: executing program 0 (id=455): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40085) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, 0x0, 0x40040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02040002080000002cbd7000fcdbdf25030006000000000002004e219c1414bb0000000000000000030005000000000002004e22ac1e00010000000000000000"], 0x40}, 0x1, 0x7}, 0x8014) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002500090122bd7000fcffffff5c000000080003004700000008006b800a"], 0x24}, 0x1, 0x0, 0x0, 0x40449d7}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r2, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, 0x0, 0x0, 0x4}, 0x53) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x824}}, 0x2004c000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x2c, 0x3, 0x0) 6m38.226793931s ago: executing program 0 (id=457): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9f8fd46094ae67b, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x3}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r3, 0x1e, 0x0, @void}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0xa06042, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) 6m38.026540591s ago: executing program 0 (id=458): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x6, 0xffffffffffffffff}, 0x5828, 0x3, 0x0, 0xa, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) (async) socket$kcm(0x2c, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 6m22.562349786s ago: executing program 33 (id=458): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x6, 0xffffffffffffffff}, 0x5828, 0x3, 0x0, 0xa, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) (async) socket$kcm(0x2c, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 6m1.693132339s ago: executing program 1 (id=614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cfce1e090000001fb791643a5ee4ce1b14d6d930ede1d9d322fe7c9f8775730d165ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3f09ad809d5e1cace81ed0bffece0b42a9ecbee5dd6e4edef3d93452a92954b4337000000008af26c8b7b55f4d2cb1df0966736a1dfe444c65ac5b348eac7c2ea475327557ba566236ceb0000000000", 0xd8}], 0x1}, 0x44004) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xd}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x88}, 0x1, 0x0, 0x0, 0x40880}, 0x1c0) (async, rerun: 32) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async, rerun: 32) socket$l2tp6(0xa, 0x2, 0x73) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001140)=@newtaction={0x90, 0x30, 0x200, 0xffe4}, 0x90}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x6, 0x201, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c011}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$pppl2tp(0x18, 0x1, 0x1) recvmsg(r8, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x60) (async, rerun: 32) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) (rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001ac0)={r9, 0x20, &(0x7f0000001a80)={&(0x7f00000009c0)=""/4096, 0x1000, 0x0, &(0x7f00000019c0)=""/174, 0xae}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000800)={0x0, r5}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 64) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x153, 0x153, 0x7, [@datasec={0xb, 0x3, 0x0, 0xf, 0x3, [{0x5, 0x4, 0x5}, {0x4, 0x6, 0xe}, {0x1, 0x0, 0x4}], "44e1ad"}, @func={0x10, 0x0, 0x0, 0xc, 0x1}, @enum64={0x9, 0x0, 0x0, 0x13, 0x0, 0x2}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x5}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x5, 0x1}, @float={0x3, 0x0, 0x0, 0x10, 0x8}, @enum64={0xb, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x10, 0x231, 0x9}]}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xd, 0x4}, {0xd, 0x2}, {0x0, 0x1}, {0xa, 0x3}, {0x6, 0x3}, {0xc, 0x1}, {0x8, 0x3}, {0xd, 0x4}]}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xc}, {0x6, 0x2}, {0x3, 0x5}, {0x8, 0x3}, {0x1}, {0xf}, {0x0, 0x2}, {0x8, 0x1}]}, @struct={0x7, 0x3, 0x0, 0x4, 0x0, 0x3ff, [{0x6, 0x3, 0x1}, {0xe, 0x0, 0xecd}, {0x5, 0x4}]}]}, {0x0, [0x30, 0x2e, 0x5f, 0x61, 0x2e]}}, &(0x7f0000000880)=""/86, 0x173, 0x56, 0x0, 0x6, 0x10000, @value=r0}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x3a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x13, 0x8, &(0x7f0000000200)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x3ffffffe, 0x71, 0x10, 0x67}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 6m1.384230139s ago: executing program 1 (id=618): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x7}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x139b031, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000300142603600e1208000f0000000401a8001600a400014005000200036010fab94dcf5c0461c1d67f6f94007134cf6e", 0x50}], 0x1}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000040)='./file0/../file0\x00', r0, 0x4000, r1}, 0x18) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x202021, 0x0) 6m1.219582474s ago: executing program 1 (id=620): r0 = gettid() perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x10000, 0x8, 0x0, 0x3, 0xc2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)=@get={0xe0, 0x13, 0x701, 0x70bd2d, 0x25dfdbff, {{'gcm(aes)\x00'}, '\x00', '\x00', 0x4400, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x44000}, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a410, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xc, 0x2}, 0x104141, 0x4, 0x0, 0x7, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x3) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x26, 0x301, 0x270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x0) 6m0.727010537s ago: executing program 1 (id=626): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x20000000, 0x100, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000004, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xfffffffffffffe79, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x8, 0x3fb, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x400c4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x80008, 0x830b}, 0x8400, 0x2, 0xfffffffe, 0x9, 0x2, 0x0, 0x3, 0x0, 0x1, 0x0, 0x6}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0xc800}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92y.c_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}^\x00\x00'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}, {}, 0x5}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, 0x0, 0x0) 5m50.898233496s ago: executing program 6 (id=676): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000640), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1f, 0x4, 0x0, 0x2, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200000}, 0x50) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f0000003700)=""/4087, 0xff7}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f0000000800)=""/4082, 0xff2}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f0000000640)=""/225, 0xe1}], 0x7}, 0x32120) sendmsg$unix(r1, &(0x7f0000000640)={&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e21}, 0x5f, 0x0}, 0x24004044) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x20, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0xfffffffffffffd00}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x84000) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xec, 0x9, 0x0, 0x0, 0x0, 0x9, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0xf, 0x4000003, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b40500000000000079104b00000000000500"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000001880)=""/195, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', r2}, 0x18) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x40004) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x40000000, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000009c0)={0x2c, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x25}}, {0x8, 0x2, @multicast2}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) 5m47.250795608s ago: executing program 6 (id=686): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x6022, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2400000064006bcd9e3fe3dc6e48aa31086b8703130000001f0000000000000004001400", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7f, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0xf, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0001000010000100"], 0x100}, 0x1, 0x0, 0x0, 0x20004090}, 0x20004000) 5m45.969005787s ago: executing program 6 (id=689): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x7) sendmsg$inet6(r3, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c, 0x0, 0x0, 0x0, 0x40}, 0x20044084) r4 = socket$kcm(0x2d, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000280)={0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x2, 0x5, 0x84) r6 = socket(0x2b, 0x6, 0x10000002) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000005304010000000000000000050500000a0d000000f603010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x140d, 0x300, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20008841) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x71, &(0x7f0000000000), 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="7000389cfcdbdf2508003e0001000000080001000000020000000040000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000981}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x32, 0x0, 0x1}, 0x28) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x44050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) close(r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8913, &(0x7f0000000000)={'veth1_virt_wifi\x00', @random}) 5m45.124606997s ago: executing program 6 (id=694): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002a00)=ANY=[@ANYBLOB="1400000038000109000000000000002518"], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x8000) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x398d0ce, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) recvmsg(r4, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)}, 0x32120) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24008c14) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180600002bfcffffffffffffff00000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x10, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9f}, {0x85, 0x0, 0x0, 0x2d}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x6a, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000c0534256ed167fb702e25d5d", @ANYRES32=r7, @ANYBLOB="000000000000000081000000000000009500000000000000"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 5m44.609240792s ago: executing program 6 (id=699): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10101) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x50, 0x1, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x940) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x28040) socket$key(0xf, 0x3, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x20004450) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000010a01030000000000000007030000010c00044000000000000000030900010073797a300000000051a0863b68f7977782b8ca2236b897b1ea9fe35582f214e60ab7025cd6"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000840) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_config_ext={0x2, 0xbfffffffffffffff}, 0x100c, 0x0, 0x9, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 5m44.179896733s ago: executing program 5 (id=702): bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$qrtr(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000280)="8db7a239e502945eb2d19f9803096edd42641afb8e1bd5f578f3233e302717632692fb91c4c2acc8c14449bd3addd15b3eb4b0b2765bf176e548b13d540192ae1dcb16b8372eb43912e67177e44654c9", 0x50}], 0x1}, 0x38) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, r1, 0x0) 5m44.045595781s ago: executing program 6 (id=703): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40085) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, 0x0, 0x40040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02040002080000002cbd7000fcdbdf25030006000000000002004e219c1414bb0000000000000000030005000000000002004e22ac1e00010000000000000000"], 0x40}, 0x1, 0x7}, 0x8014) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002500090122bd7000fcffffff5c000000080003004700000008006b800a"], 0x24}, 0x1, 0x0, 0x0, 0x40449d7}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x8c108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x1, 0x2}, 0x1302, 0x2, 0xfffffffe, 0x1, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, 0x0, 0x0, 0x4}, 0x53) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x824}}, 0x2004c000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x2c, 0x3, 0x0) 5m43.610409764s ago: executing program 34 (id=703): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40085) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, 0x0, 0x40040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02040002080000002cbd7000fcdbdf25030006000000000002004e219c1414bb0000000000000000030005000000000002004e22ac1e00010000000000000000"], 0x40}, 0x1, 0x7}, 0x8014) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002500090122bd7000fcffffff5c000000080003004700000008006b800a"], 0x24}, 0x1, 0x0, 0x0, 0x40449d7}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x8c108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x1, 0x2}, 0x1302, 0x2, 0xfffffffe, 0x1, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, 0x0, 0x0, 0x4}, 0x53) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x824}}, 0x2004c000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x2c, 0x3, 0x0) 5m43.592312774s ago: executing program 5 (id=707): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x45, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x40000) sendmsg$NFT_BATCH(r3, 0x0, 0x4000800) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000006fe00000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 5m42.078743823s ago: executing program 5 (id=711): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000002f31670b36465a878b0000000100000000000000ac1e00011300"/59, @ANYRESOCT], 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x24040804) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffffd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a", 0x35}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x0, 0x0) sendmsg(r3, &(0x7f0000000140)={&(0x7f0000000040)=@hci={0x1f, 0x4, 0x2}, 0x80, 0x0, 0xfffffffffffffd7c}, 0x44) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) 5m41.468867256s ago: executing program 5 (id=714): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x5006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/ipc\x00') ioctl$TUNSETCARRIER(r1, 0x400454e2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x2000c010) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x66}, 0x4000, 0x5, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x10000, 0x8, 0x0, 0x3, 0xc2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) ioctl$TUNSETPERSIST(r6, 0x400454c9, 0xfffffffffffffff9) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000021c0)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0xfffffffd, 0x1000, &(0x7f00000010c0)=""/4096, 0x41100, 0x12, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002100)={0x1, 0xa, 0x2, 0x101}, 0x10, 0xb3b1, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000002180)=[{0x0, 0x5, 0x9, 0xb}], 0x10, 0x87}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000022c0)={{r0}, &(0x7f0000000440), &(0x7f0000002280)=r7}, 0x20) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x5) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20040000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x1, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0x9}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x50) r8 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @empty}, 0x80, &(0x7f0000000340)=[{0x0}, {&(0x7f00000002c0)="5c3f15befee1209b8d992f80e65e995e1da694faa34b", 0x16}, {&(0x7f0000000300)="cdfc7c87b2fa9cb8de34cfaecac37680ba", 0x11}], 0x3, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14}}], 0x30}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003003e00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 5m39.892282488s ago: executing program 5 (id=718): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x4, &(0x7f0000001140)=ANY=[@ANYBLOB="1800000004000095000000000000009500000000000000ca3d498f778620abcc35908f88f41fe17369e95d1e005a71a4d3c69a3241c735020a8cc4dba40af4a69ea9ce4b9bd4d70bfa6e030d328e746cf9eb06703f999e22ed89796acd93d8320d09edd7f5bc41ae3642da5036fe667068c96ee18c0b0d58e25acd1191172b369a10421a4f15deca056c47790045cb47b2e805954e82f4f6c13859886da0b0e4f380b80387969ece48eff7f573ffcc987038"], &(0x7f0000000040)='GPL\x00', 0x7, 0x9f, &(0x7f0000000080)=""/159, 0x41000, 0x63, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x5, 0x8, 0xc0e2}, 0x10, 0xf428, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000300)=[{0x3, 0x4, 0x0, 0x2}, {0x4, 0x2, 0x3, 0x9}], 0x10, 0xfff}, 0x94) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x201, 0x4, 0x0, 0x4, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x19, 0xa, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x11ac4b, 0x0, 0x7fffffff, 0x7, 0x9, 0x41, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x84, 0x1, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xffffff61}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x3f8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x9}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000040}, 0x40004) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="010000000500ee0000000000ffff000005"], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1032025, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x4, &(0x7f0000001140)=ANY=[@ANYBLOB="1800000004000095000000000000009500000000000000ca3d498f778620abcc35908f88f41fe17369e95d1e005a71a4d3c69a3241c735020a8cc4dba40af4a69ea9ce4b9bd4d70bfa6e030d328e746cf9eb06703f999e22ed89796acd93d8320d09edd7f5bc41ae3642da5036fe667068c96ee18c0b0d58e25acd1191172b369a10421a4f15deca056c47790045cb47b2e805954e82f4f6c13859886da0b0e4f380b80387969ece48eff7f573ffcc987038"], &(0x7f0000000040)='GPL\x00', 0x7, 0x9f, &(0x7f0000000080)=""/159, 0x41000, 0x63, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x5, 0x8, 0xc0e2}, 0x10, 0xf428, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000300)=[{0x3, 0x4, 0x0, 0x2}, {0x4, 0x2, 0x3, 0x9}], 0x10, 0xfff}, 0x94) (async) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x201, 0x4, 0x0, 0x4, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x19, 0xa, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x11ac4b, 0x0, 0x7fffffff, 0x7, 0x9, 0x41, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x84, 0x1, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xffffff61}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x3f8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x9}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000040}, 0x40004) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="010000000500ee0000000000ffff000005"], 0x48) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1032025, 0x0) (async) 5m32.720609073s ago: executing program 5 (id=736): r0 = socket$kcm(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x44054) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000}, 0x7, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0x0, @in=@empty, 0x3503, 0x1, 0x0, 0x0, 0x0, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000e000000100000000000000000000000000000000f7fb20000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000e000000100000000000000000000000000000000f7fb20000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$inet(r4, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote}}}], 0x20}, 0x20000004) close(r2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) (async) sendmsg$inet6(r6, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911065000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$inet(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="001c", 0x480}], 0x1}, 0x4000841) (async) sendmsg$inet(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="001c", 0x480}], 0x1}, 0x4000841) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a80016", 0x33}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 5m30.283687162s ago: executing program 1 (id=626): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x20000000, 0x100, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000004, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xfffffffffffffe79, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x8, 0x3fb, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x400c4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x80008, 0x830b}, 0x8400, 0x2, 0xfffffffe, 0x9, 0x2, 0x0, 0x3, 0x0, 0x1, 0x0, 0x6}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0xc800}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92y.c_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}^\x00\x00'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}, {}, 0x5}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, 0x0, 0x0) 5m29.658311511s ago: executing program 1 (id=749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x13, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) 5m17.512259389s ago: executing program 35 (id=736): r0 = socket$kcm(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x44054) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000}, 0x7, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0x0, @in=@empty, 0x3503, 0x1, 0x0, 0x0, 0x0, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000e000000100000000000000000000000000000000f7fb20000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000080000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020000300000000000000090000000000000080000000000000000000000000000000000000000000000000010003000000008401050064010102000000000000000000000000000004d43200000000000000fc02000000000000000000000000000106350000000002000000000000000000000000007f000001000000000000000000000000000000042b00000000000000fe8000000000000000000000000000000000000000000000000800000000000000000000fe80000000000000000000000000000e000004d4320000000a000000fe8000000000000000000000000000aa0000800003000000000000000000000000000000fe8000000000000000000000000000bb0000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fc010000000000000000000000000001000004d42b000000"], 0x23c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000e000000100000000000000000000000000000000f7fb20000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$inet(r4, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote}}}], 0x20}, 0x20000004) close(r2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) (async) sendmsg$inet6(r6, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911065000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$inet(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="001c", 0x480}], 0x1}, 0x4000841) (async) sendmsg$inet(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="001c", 0x480}], 0x1}, 0x4000841) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a80016", 0x33}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 5m14.510838712s ago: executing program 36 (id=749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x13, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) 3m9.252214s ago: executing program 8 (id=1427): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)) (async) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_bp={0x0, 0x6}, 0x10000, 0x0, 0xfffffffd, 0x4, 0x6, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)}, 0x22) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c8568660", 0x10}], 0x1}, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socket$netlink(0x10, 0x3, 0x0) (async) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x8) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x3, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21) 3m9.000879159s ago: executing program 8 (id=1430): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x83240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0xc02, 0x6, 0x0, 0x9, 0x4, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000980)={r1, &(0x7f0000000840)="1d97ed573cac5abec4bf77ffc67190cba9aa0f6315e883d82189dc4e13781a472a3c1783f70b06ef6733210b06d8bec7619f9482250766daa53e11b96892f68554bcc898c48fee31302af9cb8ff72e79492643672375b00ce116c138dcaf40031035063e3b397967d09d171664bb11b96b7902b9db12a20367587fc3ce9c2935547adb09de55d87aa539771505f6bf12789b0628534d3e6517daee69f032546561668209a4cc054b147c207a35e4f9d4ea9415cd5b35353ad43f570ed63e29a9432d3d1acc6851a8985d65e5d91ea626", &(0x7f0000000940)=""/64}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001830000000000000000000000805000000040000000100000003000000040000000000000c030000000000000000000003000000000100000002000000ff010000030000000000000604000000002e615f5f00"], 0x0, 0x72, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xac}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797ab91f14f0bf059e3100000000080005400000000208000a40fffffffc0c000980080001400000000108000840000000016272be6a030914000000110001000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='Z\b55\xd5A\xa8S\xa5\xf2\xd3\xf6}F{c\x00\x00\x00\x00\x00\x00\x00\b\xf7\xd80*i\x95\x8a\r\xbcu\xf8[\x1bl\xdb-\x9a+\xd4\xdc%u!\x00\xa2\xf4Z\xdb\xb0\xa7\xc5\x8fix\xa3I\xf8\xc2\x1fQ\xfe\x81\xa4\xc3ev\xfd\x04\x1e\x19\x80K\xfa\xe4\x19\x9d\x96\xfb\xd9M\xa09\x97P#\x9aR') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3c000001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) sendmsg$nl_generic(r5, 0x0, 0x0) 3m7.865827562s ago: executing program 8 (id=1435): perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x23, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x880) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={r2, 0xffffffffffffff90, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1e, 0x5, 0x3, 0x3, 0x421, r2, 0x1, '\x00', r3, r1, 0x0, 0x1, 0x5}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f001600060005", 0x2f}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc040) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000020101020000000000000000030000011400188008000340a9a5865208000140388a2a1704"], 0x2c}}, 0x24000881) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x40001}, 0x11) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400bf"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) r8 = socket$kcm(0x10, 0x400000002, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r10, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r11, {0x0, 0x7}, {0xffff, 0xffff}, {0x7, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0x0, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x18014005}, 0x800) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) 3m7.448307245s ago: executing program 8 (id=1436): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfddf28ae) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0xa, 0x1, 0x106) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x14, 0x35, 0x107, 0xffffffff, 0xfffffffe, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x12, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) fstat(0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000000) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc8, 0x17, 0x2, 0x70bd2c, 0x25dfdbff, {0x4}, [@typed={0xc, 0x70, 0x0, 0x0, @u64=0xd}, @generic="2046e7aef816e9833c07941d17e98a31a13d70c348c86e7dbb8129e4db69fa9363f96ffcfd3dff5c7863245cb372696270782a67907b46f1a723a2650b99ce2e8bef4c2fdec93ad2b84d80a125c8b54e284fe0a7a8c4f2e39ad559d01d9cb54a399e95edd012d9a702d0dc43278ee1f6eb5bc616398538a8dc0fbb6757d6db345da6b397b801146aa9d3f9242be00ee794877e77a6635ed86901ffc72b01a9980433", @typed={0x4, 0x14b}]}, 0xc8}, 0x1, 0x0, 0x0, 0x810}, 0x44001) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, 0x0) 3m6.289043087s ago: executing program 8 (id=1441): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001680)=@generic={0x0, 0x27, 0x10}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92y.c_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}^\x00\x00'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000806010100000000000000000000000905000100070000000900020073797a3100000000267034db2e49dd3ce1e3bdbc8ee39b358dcec45ec5587614dde15f35e24d1e23698e89e4db2a5f08c4afcc2688d2e1c9767be9583255a0d83556b96f21fecfc021f871df921f9104d64729a32251d36429543a3628bba92d0b4b8778fe8442d0cc27218789bb"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) r2 = syz_clone(0x10000, &(0x7f00000005c0)="8e03f59b33c4fd38d0ddd64b00bad7e59e31d27e666aba037d", 0x19, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="b9eb704b01e757d223a6f8b10aedb9c18e7631e4fbacf6c9b791b092473b9df5e46922129da8b86adad3e453db4e") r3 = perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0x9, 0xa7, 0xfd, 0x2, 0x0, 0x3, 0x1000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa4, 0x2, @perf_config_ext={0x7, 0x4}, 0x111900, 0xffffffffffffffff, 0x1ff, 0x9, 0x1, 0x8634, 0x9, 0x0, 0xa, 0x0, 0x2}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x37, 0x4, 0x5, 0x3, 0x0, 0x6, 0x5922, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xa15, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x6044, 0x8, 0x8001, 0x9, 0x7, 0x3, 0x0, 0x0, 0x1, 0x0, 0x8}, r2, 0x8, r3, 0x3) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x3000000c, @loopback={0x2001001000000000}, 0x7}, 0x80, 0x0}, 0x2000c805) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002740)={&(0x7f0000000380)="d50a3d33bb20fa4631a003a872a02fdcc483c19071a9f2678930ed4c475a45f18d907081e3546d3e85ed02f39f071a0b0a58c7eadbf89c6c58f1a71313595161db54afc3f8fa4b2c546853fc9b76559dc0459cbc4dd551a128ca2a1523063751e4c569f046b8e99dcfcdf28ad1e735eee077dff07254258b42191718066b3785214ec3cd97e935dd709d60a992f51fba103a23a491e94c40b1b45f42663c732a54a6bb09b577048c671c5ccd416c908009810f00cebf217c83458435424fbc", &(0x7f00000016c0)=""/4096, &(0x7f00000026c0)="7dbed4ec8306515efd208d85ddf194066963c27b626804a0c7a09f464f391dec6b4c3a2a7e29d45c83", &(0x7f0000002700)="45ed6f96ef06", 0x9, r0, 0x4}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r6}) sendmsg$nl_generic(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, 0x38, 0x825, 0x70b92d, 0x25dfdbfe, {0x17}, [@nested={0x8, 0x6, 0x0, 0x1, [@generic="5f8586da"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c050}, 0x90) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) 3m5.492051164s ago: executing program 8 (id=1447): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9376, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x4, 0x0, 0x20}, 0x0, 0x9, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10ff"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xffc0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2100060, &(0x7f00000002c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x9, 0xfa, &(0x7f0000000580)=""/250, 0x41100}, 0x94) 2m50.133050714s ago: executing program 37 (id=1447): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9376, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x4, 0x0, 0x20}, 0x0, 0x9, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10ff"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xffc0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2100060, &(0x7f00000002c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x9, 0xfa, &(0x7f0000000580)=""/250, 0x41100}, 0x94) 12.924348228s ago: executing program 4 (id=2469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r1 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) setsockopt$sock_attach_bpf(r1, 0x29, 0x2f, &(0x7f0000000100), 0x120) close(0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0xca281, 0x0) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r3, 0x0, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xb, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000500)={'macvlan1\x00', @broadcast}) 8.985921075s ago: executing program 9 (id=2475): r0 = perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xbd9ddb11bfb6c30d}, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x4, 0x5}, {0x2, 0x3, 0xffffffff}]}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) close(r2) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x275a, 0x408) 8.90309208s ago: executing program 4 (id=2477): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000240)={r1, 0x0, 0x0}, 0xd) 8.854764729s ago: executing program 9 (id=2478): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="180200008100000000000000d17e00008500000020000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.721002288s ago: executing program 4 (id=2480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r2, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0xfc) r3 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89ed, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r4, &(0x7f0000000540)="16fbcf917a49b2", &(0x7f00000005c0)=""/40, 0x4}, 0x20) socket$kcm(0x2, 0x3, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) 8.607856307s ago: executing program 2 (id=2482): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6d01, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="c29f45", 0x3}], 0x1}, 0x80d1) 8.45891938s ago: executing program 7 (id=2485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1e030600bc"], 0xffdd) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0306"], 0xffdd) 8.311962507s ago: executing program 4 (id=2486): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 8.224738594s ago: executing program 2 (id=2487): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0xc8, 0x9, 0x7, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x8, 0x0, 0x200000000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), 0x0}, 0x20) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 8.192607106s ago: executing program 4 (id=2488): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) 8.133033994s ago: executing program 2 (id=2489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 8.049298174s ago: executing program 4 (id=2490): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0xfffffdef) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r2, 0x0, 0xfdef) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r3, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}) 7.877510426s ago: executing program 9 (id=2491): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0xa9, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffff80}], &(0x7f0000000100)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xb, 0x5, 0xfffffffd}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000200), 0x10, 0x3ff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 7.711531057s ago: executing program 3 (id=2493): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x6, 0x7fe2, 0x1}, 0x96) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x110051, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@initr0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) 7.521398122s ago: executing program 3 (id=2494): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10) 7.464705524s ago: executing program 3 (id=2495): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00'}, 0x94) 7.356819826s ago: executing program 3 (id=2496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 3.864885905s ago: executing program 7 (id=2497): r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000001d40)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r3, &(0x7f0000000340), 0x0}, 0x20) 3.740691658s ago: executing program 7 (id=2498): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x11, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x4, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680), 0x7}, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0xfffffff7, 0xfffe, 0x0, 0xffffffff, 0x0, 0x101}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x1000003, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0xfdef) 3.680541586s ago: executing program 7 (id=2499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x189001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88ca", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x100200, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x13) 316.541158ms ago: executing program 9 (id=2500): socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0xffffff9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x94) socket$kcm(0x10, 0x2, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x4d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4220, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 303.700768ms ago: executing program 2 (id=2501): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 250.595651ms ago: executing program 2 (id=2502): close(0xffffffffffffffff) socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) 157.370486ms ago: executing program 3 (id=2503): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 157.112318ms ago: executing program 2 (id=2504): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x8000, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xfff0000000000001, 0xffffffffffffffff, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 156.835173ms ago: executing program 7 (id=2505): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x19, 0x0, 0x2) 147.455795ms ago: executing program 9 (id=2506): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00'}, 0x94) 26.084954ms ago: executing program 7 (id=2507): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.620074ms ago: executing program 3 (id=2508): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000440), 0xdf12, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 0s ago: executing program 9 (id=2509): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r0, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): ter parsing attributes in process `syz.6.663'. [ 222.905411][ T8858] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.935732][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.969219][ T8858] bridge_slave_0: entered allmulticast mode [ 222.998921][ T8858] bridge_slave_0: entered promiscuous mode [ 223.030175][ T8858] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.051484][ T50] Bluetooth: hci0: command tx timeout [ 223.060404][ T8858] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.079983][ T8858] bridge_slave_1: entered allmulticast mode [ 223.200798][ T8858] bridge_slave_1: entered promiscuous mode [ 223.404727][ T9092] netlink: 'syz.6.673': attribute type 32 has an invalid length. [ 223.427245][ T8858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.435625][ T9092] netlink: 28 bytes leftover after parsing attributes in process `syz.6.673'. [ 223.479818][ T8858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.603576][ T8858] team0: Port device team_slave_0 added [ 223.627802][ T8858] team0: Port device team_slave_1 added [ 223.648882][ T5296] 8021q: adding VLAN 0 to HW filter on device eth11 [ 223.766778][ T8858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.796290][ T8858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.820584][ T9103] netlink: 36 bytes leftover after parsing attributes in process `syz.5.675'. [ 223.878147][ T8858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.977853][ T8858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.993323][ T8858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.023175][ T8858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.043890][ T9080] lo speed is unknown, defaulting to 1000 [ 224.162269][ T8858] hsr_slave_0: entered promiscuous mode [ 224.173605][ T8858] hsr_slave_1: entered promiscuous mode [ 224.174078][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.678'. [ 224.180136][ T8858] debugfs: 'hsr0' already exists in 'hsr' [ 224.196336][ T8858] Cannot create hsr debugfs directory [ 224.344504][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 227.362806][ T9126] netlink: 830 bytes leftover after parsing attributes in process `syz.3.683'. [ 227.658350][ T9139] netlink: 28 bytes leftover after parsing attributes in process `syz.6.686'. [ 228.820577][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'. [ 229.181789][ T9168] net_ratelimit: 158 callbacks suppressed [ 229.181825][ T9168] netlink: zone id is out of range [ 229.212049][ T9168] netlink: zone id is out of range [ 229.224653][ T9168] netlink: zone id is out of range [ 229.236983][ T9168] netlink: zone id is out of range [ 229.249054][ T9168] netlink: zone id is out of range [ 229.260883][ T9168] netlink: zone id is out of range [ 229.274552][ T9168] netlink: zone id is out of range [ 229.286988][ T9168] netlink: zone id is out of range [ 229.297339][ T9168] netlink: zone id is out of range [ 229.310413][ T9168] netlink: zone id is out of range [ 230.802980][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.702'. [ 230.966029][ T6092] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.190474][ T9230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.705'. [ 231.229910][ T9230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.705'. [ 231.248135][ T6092] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.496890][ T9230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.705'. [ 231.529685][ T9230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.705'. [ 231.596036][ T5645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.609489][ T5645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.619808][ T5645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.635000][ T5645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.643053][ T5645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.751288][ T9249] block nbd0: not configured, cannot reconfigure [ 231.776082][ T9249] netlink: 'syz.3.708': attribute type 7 has an invalid length. [ 231.982194][ T9230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.705'. [ 232.016220][ T9230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.705'. [ 232.025500][ T6092] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.189567][ T8858] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 232.259595][ T8858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 232.287340][ T8858] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 232.334584][ T8858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 232.366474][ T8858] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 232.415496][ T8858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 232.574645][ T6092] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.644410][ T8858] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 232.685483][ T8858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 233.323215][ T9244] lo speed is unknown, defaulting to 1000 [ 233.438285][ T6092] bridge_slave_1: left allmulticast mode [ 233.449590][ T6092] bridge_slave_1: left promiscuous mode [ 233.460108][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.508508][ T6092] bridge_slave_0: left allmulticast mode [ 233.523179][ T6092] bridge_slave_0: left promiscuous mode [ 233.541534][ T6092] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.690485][ T50] Bluetooth: hci1: command tx timeout [ 234.126166][ T6092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.154415][ T6092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.174086][ T6092] bond0 (unregistering): Released all slaves [ 234.299494][ T9304] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 234.557022][ T50] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 234.773752][ T8858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.761539][ T50] Bluetooth: hci1: command tx timeout [ 235.797324][ T6092] hsr_slave_0: left promiscuous mode [ 235.828407][ T6092] hsr_slave_1: left promiscuous mode [ 235.903050][ T6092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.927315][ T6092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.947612][ T6092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.959253][ T6092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.990485][ T6092] veth1_macvtap: left promiscuous mode [ 235.999718][ T6092] veth0_macvtap: left promiscuous mode [ 236.010372][ T6092] veth1_vlan: left promiscuous mode [ 236.022114][ T6092] veth0_vlan: left promiscuous mode [ 236.085816][ T9347] netlink: 'syz.2.722': attribute type 28 has an invalid length. [ 236.117408][ T9347] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.722'. [ 236.758817][ T6092] team0 (unregistering): Port device team_slave_1 removed [ 236.780739][ T9359] netlink: 104 bytes leftover after parsing attributes in process `syz.2.726'. [ 236.833236][ T6092] team0 (unregistering): Port device team_slave_0 removed [ 237.131671][ T8858] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.212546][ T6095] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.219964][ T6095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.284577][ T6095] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.291799][ T6095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.841572][ T50] Bluetooth: hci1: command tx timeout [ 237.968085][ T9244] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.991579][ T9244] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.000036][ T9244] bridge_slave_0: entered allmulticast mode [ 238.023766][ T9244] bridge_slave_0: entered promiscuous mode [ 238.053754][ T9244] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.076772][ T9244] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.100658][ T9244] bridge_slave_1: entered allmulticast mode [ 238.132969][ T9244] bridge_slave_1: entered promiscuous mode [ 238.338854][ T9244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.372773][ T9244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.509648][ T9244] team0: Port device team_slave_0 added [ 238.806560][ T9244] team0: Port device team_slave_1 added [ 238.960499][ T9244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.001260][ T9244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.111368][ T9244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.145490][ T9244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.175791][ T9244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.280462][ T9244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.547401][ T9244] hsr_slave_0: entered promiscuous mode [ 239.574737][ T9244] hsr_slave_1: entered promiscuous mode [ 239.601929][ T9244] debugfs: 'hsr0' already exists in 'hsr' [ 239.631291][ T9244] Cannot create hsr debugfs directory [ 239.921550][ T50] Bluetooth: hci1: command tx timeout [ 240.060901][ T8858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.460648][ T9480] netlink: 'syz.3.737': attribute type 16 has an invalid length. [ 242.468730][ T8858] veth0_vlan: entered promiscuous mode [ 242.485594][ T9480] IPv6: NLM_F_CREATE should be specified when creating new route [ 242.583630][ T8858] veth1_vlan: entered promiscuous mode [ 242.625996][ T9244] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 242.688308][ T9244] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 242.713619][ T9244] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 242.727399][ T9483] netlink: 'syz.2.738': attribute type 1 has an invalid length. [ 242.744191][ T9244] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 242.762773][ T9483] net_ratelimit: 46 callbacks suppressed [ 242.762805][ T9483] openvswitch: netlink: Missing valid actions attribute. [ 242.797059][ T9244] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 242.813156][ T9483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.837257][ T9244] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 242.871012][ T9244] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 242.919386][ T9244] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 243.013538][ T8858] veth0_macvtap: entered promiscuous mode [ 243.056559][ T8858] veth1_macvtap: entered promiscuous mode [ 243.146258][ T8858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.205167][ T8858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.279177][ T6085] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.318685][ T9508] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 243.318685][ T9508] Please contact the netfilter-devel mailing list or update your nftables rules. [ 243.339090][ T6085] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.360739][ T6085] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.422913][ T6085] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.750540][ T3387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.787469][ T9244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.805355][ T3387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.966321][ T9522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.007854][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.040149][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.094925][ T9244] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.166863][ T6095] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.174126][ T6095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.338042][ T6095] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.345282][ T6095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.576251][ T5296] 8021q: adding VLAN 0 to HW filter on device eth9 [ 244.933112][ T9540] netlink: 72 bytes leftover after parsing attributes in process `syz.3.748'. [ 244.955145][ T9542] tun0: tun_chr_ioctl cmd 1074025672 [ 244.960616][ T9542] tun0: ignored: set checksum enabled [ 244.979833][ T9540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.748'. [ 244.999847][ T9540] netlink: 40 bytes leftover after parsing attributes in process `syz.3.748'. [ 245.009550][ T9542] tun0: tun_chr_ioctl cmd 1074025675 [ 245.038526][ T9542] tun0: persist disabled [ 245.045912][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 245.079000][ T9545] openvswitch: netlink: Missing key (keys=200040, expected=2000) [ 245.123853][ T9542] netlink: 'syz.2.747': attribute type 4 has an invalid length. [ 245.161432][ T9542] netlink: 152 bytes leftover after parsing attributes in process `syz.2.747'. [ 246.406077][ T9244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.468051][ T5296] 8021q: adding VLAN 0 to HW filter on device eth10 [ 246.495247][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.753'. [ 246.519053][ T9574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.753'. [ 246.647347][ T9579] netlink: 48 bytes leftover after parsing attributes in process `syz.3.754'. [ 246.687861][ T9579] netlink: 'syz.3.754': attribute type 8 has an invalid length. [ 247.245034][ T9244] veth0_vlan: entered promiscuous mode [ 247.321998][ T9244] veth1_vlan: entered promiscuous mode [ 247.438038][ T9244] veth0_macvtap: entered promiscuous mode [ 247.456468][ T9244] veth1_macvtap: entered promiscuous mode [ 247.510192][ T9244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.523917][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 247.564373][ T9244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.578610][ T3387] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.589008][ T3387] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.606292][ T3387] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.620671][ T3387] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.867795][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.904183][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.032369][ T6085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.068453][ T6085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.292512][ T9632] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.764'. [ 248.445204][ T5296] 8021q: adding VLAN 0 to HW filter on device eth11 [ 248.815374][ T5645] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 248.815438][ T5645] Bluetooth: hci1: Malformed LE Event: 0x0d [ 249.143294][ T9653] netlink: 'syz.2.765': attribute type 1 has an invalid length. [ 249.152662][ T9652] netlink: 132 bytes leftover after parsing attributes in process `syz.3.766'. [ 250.035987][ T5296] 8021q: adding VLAN 0 to HW filter on device eth12 [ 251.181248][ T9697] netlink: 'syz.7.774': attribute type 10 has an invalid length. [ 251.443380][ T9697] team0: Device wg2 is of different type [ 251.739083][ T9735] __nla_validate_parse: 3 callbacks suppressed [ 251.739104][ T9735] netlink: 20 bytes leftover after parsing attributes in process `syz.7.778'. [ 251.787285][ T9735] netlink: 16 bytes leftover after parsing attributes in process `syz.7.778'. [ 251.936626][ T9735] tap0: tun_chr_ioctl cmd 1074025675 [ 251.966273][ T9735] tap0: persist enabled [ 252.313655][ T9743] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.782'. [ 252.459477][ T9742] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 252.502039][ T9742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.742668][ T9777] netlink: 36 bytes leftover after parsing attributes in process `syz.7.792'. [ 255.693909][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.702591][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.287185][ T9799] sctp: [Deprecated]: syz.7.796 (pid 9799) Use of int in maxseg socket option. [ 257.287185][ T9799] Use struct sctp_assoc_value instead [ 257.513832][ T9806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.663541][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.677663][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.687097][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.704925][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.715560][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.528157][ T9811] lo speed is unknown, defaulting to 1000 [ 259.479713][ T9811] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.509992][ T9811] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.541516][ T9811] bridge_slave_0: entered allmulticast mode [ 259.554009][ T9811] bridge_slave_0: entered promiscuous mode [ 259.590391][ T9811] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.602087][ T9811] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.619658][ T9811] bridge_slave_1: entered allmulticast mode [ 259.634867][ T9811] bridge_slave_1: entered promiscuous mode [ 259.762681][ T50] Bluetooth: hci2: command tx timeout [ 259.786409][ T9811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.811917][ T9811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.942341][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.811'. [ 259.987339][ T9811] team0: Port device team_slave_0 added [ 260.019586][ T9811] team0: Port device team_slave_1 added [ 260.189658][ T9811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.217141][ T9811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.309466][ T9811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.422161][ T9811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.669443][ T9811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.792309][ T9811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.936976][ T5645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 260.956141][ T5645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 260.967890][ T5645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 260.975954][ T5645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 260.986504][ T5645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 261.287653][ T9811] hsr_slave_0: entered promiscuous mode [ 261.313635][ T9811] hsr_slave_1: entered promiscuous mode [ 261.335398][ T9811] debugfs: 'hsr0' already exists in 'hsr' [ 261.356027][ T9811] Cannot create hsr debugfs directory [ 261.841602][ T5645] Bluetooth: hci2: command tx timeout [ 262.959579][ T9907] netlink: 'syz.2.818': attribute type 29 has an invalid length. [ 263.017282][ T9866] lo speed is unknown, defaulting to 1000 [ 263.051899][ T5645] Bluetooth: hci5: command tx timeout [ 263.199935][ T9811] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 263.931337][ T5645] Bluetooth: hci2: command tx timeout [ 265.121354][ T5645] Bluetooth: hci5: command tx timeout [ 265.914518][ T9811] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 266.001593][ T5645] Bluetooth: hci2: command tx timeout [ 266.163187][ T9940] netlink: 'syz.7.826': attribute type 10 has an invalid length. [ 266.188795][ T6081] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.215893][ T9938] netlink: 'syz.3.825': attribute type 1 has an invalid length. [ 266.279689][ T9811] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 266.315781][ T9811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 266.334114][ T9940] veth1_virt_wifi: entered promiscuous mode [ 266.794196][ T9811] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 266.830956][ T9811] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 266.862530][ T9811] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 266.884985][ T9811] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 266.953369][ T6081] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.212612][ T5645] Bluetooth: hci5: command tx timeout [ 267.216981][ T6081] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.434036][ T6081] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.495052][ T9985] netlink: 168 bytes leftover after parsing attributes in process `syz.2.831'. [ 267.677794][ T9989] netlink: zone id is out of range [ 267.740567][ T9989] netlink: zone id is out of range [ 267.769445][ T9989] netlink: zone id is out of range [ 267.823392][ T9989] netlink: zone id is out of range [ 267.874540][ T9989] netlink: zone id is out of range [ 267.920719][ T9989] netlink: zone id is out of range [ 267.942353][ T9989] netlink: zone id is out of range [ 267.984199][ T9989] netlink: zone id is out of range [ 268.020276][ T9989] netlink: zone id is out of range [ 268.043772][ T9989] netlink: zone id is out of range [ 268.454661][T10002] netlink: 763 bytes leftover after parsing attributes in process `syz.7.836'. [ 269.292033][ T5645] Bluetooth: hci5: command tx timeout [ 269.500773][ T9811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.559763][ T6081] bridge_slave_1: left allmulticast mode [ 269.574606][ T6081] bridge_slave_1: left promiscuous mode [ 269.584811][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.619835][ T6081] bridge_slave_0: left allmulticast mode [ 269.637428][ T6081] bridge_slave_0: left promiscuous mode [ 269.652179][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.791044][T10044] netlink: 'syz.3.844': attribute type 10 has an invalid length. [ 269.810120][T10044] netlink: 40 bytes leftover after parsing attributes in process `syz.3.844'. [ 269.883491][T10045] netlink: 'syz.2.843': attribute type 1 has an invalid length. [ 270.035890][ T6081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.050794][ T6081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.063901][ T6081] bond0 (unregistering): Released all slaves [ 270.083755][ T9866] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.090967][ T9866] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.098648][ T9866] bridge_slave_0: entered allmulticast mode [ 270.107597][ T9866] bridge_slave_0: entered promiscuous mode [ 270.118146][ T9866] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.129218][ T9866] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.137763][ T9866] bridge_slave_1: entered allmulticast mode [ 270.146144][ T9866] bridge_slave_1: entered promiscuous mode [ 270.195087][T10041] netlink: 'syz.7.842': attribute type 29 has an invalid length. [ 270.206455][T10044] team0: entered promiscuous mode [ 270.211977][T10044] team_slave_0: entered promiscuous mode [ 270.218210][T10044] team_slave_1: entered promiscuous mode [ 270.230516][T10044] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 270.243953][T10044] team0: entered allmulticast mode [ 270.252650][T10044] team_slave_0: entered allmulticast mode [ 270.258866][T10044] team_slave_1: entered allmulticast mode [ 270.268082][T10044] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 270.278581][T10044] bridge0: port 3(team0) entered blocking state [ 270.286775][T10044] bridge0: port 3(team0) entered disabled state [ 270.305397][T10050] netlink: 763 bytes leftover after parsing attributes in process `syz.7.842'. [ 270.319735][T10055] netlink: 'syz.2.846': attribute type 6 has an invalid length. [ 270.348447][T10049] netlink: 'syz.7.842': attribute type 29 has an invalid length. [ 270.525040][ T9811] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.540860][ T9866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.569999][ T9866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.680011][ T6081] hsr_slave_0: left promiscuous mode [ 270.707397][ T6081] hsr_slave_1: left promiscuous mode [ 270.723835][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.743729][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.757075][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.785327][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.813715][ T6081] veth1_macvtap: left promiscuous mode [ 270.820627][ T6081] veth0_macvtap: left promiscuous mode [ 270.829659][ T6081] veth1_vlan: left promiscuous mode [ 270.835131][ T6081] veth0_vlan: left promiscuous mode [ 271.472795][ T6081] team0 (unregistering): Port device team_slave_1 removed [ 271.498822][ T6081] team0 (unregistering): Port device team_slave_0 removed [ 271.716275][ T9866] team0: Port device team_slave_0 added [ 271.719835][T10071] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1”ÎÜr$åG—•µt:‹uÂJ˺ [ 271.744969][T10076] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 271.766681][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.773928][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.785593][ T5296] 8021q: adding VLAN 0 to HW filter on device eth13 [ 271.803348][ T9866] team0: Port device team_slave_1 added [ 271.916585][ T9866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.924146][ T9866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.950514][ T9866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.979222][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.986511][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.027583][ T9866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.037399][ T9866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.063835][ T9866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.156562][T10120] netlink: 12 bytes leftover after parsing attributes in process `syz.7.860'. [ 272.363177][ T9866] hsr_slave_0: entered promiscuous mode [ 272.391568][ T9866] hsr_slave_1: entered promiscuous mode [ 272.406738][ T9866] debugfs: 'hsr0' already exists in 'hsr' [ 272.422072][ T9866] Cannot create hsr debugfs directory [ 272.639578][T10139] netlink: 'syz.3.864': attribute type 27 has an invalid length. [ 272.670640][T10139] netlink: 164 bytes leftover after parsing attributes in process `syz.3.864'. [ 273.154173][T10162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'. [ 273.283928][T10161] netlink: 132 bytes leftover after parsing attributes in process `syz.3.868'. [ 273.289006][T10166] netlink: 132 bytes leftover after parsing attributes in process `syz.3.868'. [ 273.874121][ T5296] 8021q: adding VLAN 0 to HW filter on device eth14 [ 273.903804][ T9866] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 273.964735][ T9866] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 273.999794][ T9866] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 274.133484][ T9866] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 274.365214][ T9866] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 274.462282][ T9866] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 274.514484][ T9866] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 274.552548][ T9866] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 274.585947][ T9811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.621046][T10194] sit0: entered allmulticast mode [ 274.659417][T10194] sit0: entered promiscuous mode [ 274.760454][T10204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.957396][ T9866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.005876][ T9866] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.078985][ T6092] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.086484][ T6092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.225153][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.232653][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.877866][ T9811] veth0_vlan: entered promiscuous mode [ 275.927926][ T9811] veth1_vlan: entered promiscuous mode [ 276.064013][ T9811] veth0_macvtap: entered promiscuous mode [ 276.123665][ T9811] veth1_macvtap: entered promiscuous mode [ 276.192255][ T9811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.284879][ T9811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.307158][ T13] bridge_slave_1: left allmulticast mode [ 276.320462][ T13] bridge_slave_1: left promiscuous mode [ 276.338681][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.359893][ T13] bridge_slave_0: left allmulticast mode [ 276.389270][ T13] bridge_slave_0: left promiscuous mode [ 276.393303][T10244] net_ratelimit: 8 callbacks suppressed [ 276.393339][T10244] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 276.408855][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.780152][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.793486][ T13] bond0 (unregistering): Released all slaves [ 276.824698][ T5296] 8021q: adding VLAN 0 to HW filter on device eth15 [ 276.888139][T10227] lo speed is unknown, defaulting to 1000 [ 276.897109][ T6081] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.926066][ T6081] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.002441][T10255] netlink: 'syz.3.883': attribute type 3 has an invalid length. [ 277.017207][ T6081] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.036779][ T6081] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.467341][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.490198][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.517882][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.535101][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.569817][ T13] veth1_macvtap: left promiscuous mode [ 277.581802][ T13] veth0_macvtap: left promiscuous mode [ 277.590028][ T13] veth1_vlan: left promiscuous mode [ 277.595754][ T13] veth0_vlan: left promiscuous mode [ 277.909280][ T13] team0 (unregistering): Port device vlan0 removed [ 278.060459][ T13] team0 (unregistering): Port device team_slave_1 removed [ 278.096583][ T13] team0 (unregistering): Port device team_slave_0 removed [ 278.391113][ T5296] 8021q: adding VLAN 0 to HW filter on device eth16 [ 278.414001][ T9866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.430873][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.465432][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.592126][ T6095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.616574][ T6095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.992478][T10313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.023177][ T29] audit: type=1107 audit(1781508714.745:3): pid=10312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 279.371964][ T9866] veth0_vlan: entered promiscuous mode [ 279.400707][T10330] netlink: 738 bytes leftover after parsing attributes in process `syz.7.895'. [ 279.467476][ T9866] veth1_vlan: entered promiscuous mode [ 279.547504][ T9866] veth0_macvtap: entered promiscuous mode [ 279.562174][ T9866] veth1_macvtap: entered promiscuous mode [ 279.588669][ T9866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.619134][ T9866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.637038][ T6081] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.663142][ T6081] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.211724][ T6081] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.275672][ T6081] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.305889][ T6081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.330345][ T6081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.439677][ T6092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.480706][ T6092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.918953][T10417] netlink: 212348 bytes leftover after parsing attributes in process `syz.9.813'. [ 283.089420][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.907'. [ 283.111853][T10423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.691263][T10441] syzkaller0: entered promiscuous mode [ 284.697538][T10441] syzkaller0: entered allmulticast mode [ 288.420470][T10478] netlink: 12 bytes leftover after parsing attributes in process `syz.9.915'. [ 288.581556][T10483] openvswitch: netlink: IP tunnel dst address not specified [ 291.339773][T10488] netlink: 132 bytes leftover after parsing attributes in process `syz.3.920'. [ 291.590166][T10494] lo speed is unknown, defaulting to 1000 [ 291.798036][T10495] lo speed is unknown, defaulting to 1000 [ 294.412946][T10536] netlink: 'syz.3.932': attribute type 4 has an invalid length. [ 296.369873][T10601] netlink: 'syz.2.940': attribute type 10 has an invalid length. [ 296.695829][T10619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.807056][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 296.928685][T10629] lo speed is unknown, defaulting to 1000 [ 297.201576][T10648] netlink: 45 bytes leftover after parsing attributes in process `syz.8.950'. [ 297.269044][T10640] netlink: 'syz.8.950': attribute type 12 has an invalid length. [ 297.280251][T10640] netlink: 132 bytes leftover after parsing attributes in process `syz.8.950'. [ 297.636548][T10659] netlink: 80 bytes leftover after parsing attributes in process `syz.2.955'. [ 297.671701][T10664] áÿ: renamed from bond_slave_1 (while UP) [ 299.018558][T10693] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 299.047989][T10695] netlink: 'syz.7.964': attribute type 4 has an invalid length. [ 299.065631][T10695] netlink: 212 bytes leftover after parsing attributes in process `syz.7.964'. [ 299.092208][T10695] netlink: 20 bytes leftover after parsing attributes in process `syz.7.964'. [ 301.953590][T10699] lo speed is unknown, defaulting to 1000 [ 302.798136][T10752] netlink: 'syz.9.974': attribute type 29 has an invalid length. [ 303.136927][T10755] netlink: 'syz.9.974': attribute type 29 has an invalid length. [ 303.292832][T10752] netlink: 'syz.9.974': attribute type 29 has an invalid length. [ 303.308323][T10756] netlink: 'syz.9.974': attribute type 29 has an invalid length. [ 304.371851][T10778] netlink: 7064 bytes leftover after parsing attributes in process `syz.9.980'. [ 304.408277][T10781] netlink: 64 bytes leftover after parsing attributes in process `syz.3.979'. [ 304.427552][T10778] openvswitch: netlink: Missing key (keys=40, expected=100) [ 305.078825][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.7.985'. [ 305.089691][T10800] netlink: 'syz.2.983': attribute type 21 has an invalid length. [ 305.098409][T10800] netlink: 'syz.2.983': attribute type 22 has an invalid length. [ 305.143121][T10800] netlink: 14372 bytes leftover after parsing attributes in process `syz.2.983'. [ 305.280875][T10794] macsec0: entered promiscuous mode [ 305.305848][T10809] netlink: 24 bytes leftover after parsing attributes in process `syz.3.987'. [ 305.318816][T10794] macsec0: entered allmulticast mode [ 305.324821][T10794] veth1_macvtap: entered allmulticast mode [ 305.503097][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.987'. [ 305.542434][T10818] netlink: 'syz.8.990': attribute type 21 has an invalid length. [ 305.579211][T10818] netlink: 164 bytes leftover after parsing attributes in process `syz.8.990'. [ 305.719680][T10825] netlink: 52 bytes leftover after parsing attributes in process `syz.3.987'. [ 305.916298][T10816] netlink: 'syz.9.989': attribute type 27 has an invalid length. [ 305.935879][T10816] netlink: 164 bytes leftover after parsing attributes in process `syz.9.989'. [ 306.172777][T10838] netlink: 'syz.3.996': attribute type 2 has an invalid length. [ 306.194885][T10838] netlink: 119 bytes leftover after parsing attributes in process `syz.3.996'. [ 307.562206][T10868] lo speed is unknown, defaulting to 1000 [ 308.360242][T10909] netlink: 'syz.7.1017': attribute type 21 has an invalid length. [ 308.800077][T10918] netlink: 'syz.2.1023': attribute type 29 has an invalid length. [ 308.827811][T10929] netlink: 'syz.2.1023': attribute type 29 has an invalid length. [ 308.838925][T10924] netlink: 'syz.2.1023': attribute type 29 has an invalid length. [ 309.291508][T10922] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 309.327057][T10922] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 309.402336][T10922] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 309.564975][T10922] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 309.921987][T10954] bridge0: entered allmulticast mode [ 309.965088][T10958] __nla_validate_parse: 5 callbacks suppressed [ 309.965111][T10958] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1030'. [ 310.266280][T10967] netlink: 'syz.8.1034': attribute type 39 has an invalid length. [ 310.684424][T10977] netlink: 'syz.2.1036': attribute type 6 has an invalid length. [ 310.986813][T10981] Cannot find del_set index 14804 as target [ 311.484437][T11000] netlink: 212348 bytes leftover after parsing attributes in process `syz.9.1040'. [ 311.514669][T11000] netlink: Conntrack attr has 4 unknown bytes [ 311.544298][T10998] lo speed is unknown, defaulting to 1000 [ 311.922691][T11005] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.943253][T11005] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.050824][T11030] netlink: 'syz.7.1049': attribute type 10 has an invalid length. [ 313.100019][T11030] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1049'. [ 313.349318][T11040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1050'. [ 313.401816][T11030] bond0: entered promiscuous mode [ 313.407177][T11030] bond_slave_0: entered promiscuous mode [ 313.414214][T11030] bond_slave_1: entered promiscuous mode [ 313.425981][T11030] bridge0: port 3(bond0) entered blocking state [ 313.452505][T11030] bridge0: port 3(bond0) entered disabled state [ 313.460330][T11030] bond0: entered allmulticast mode [ 313.471400][T11030] bond_slave_0: entered allmulticast mode [ 313.488161][T11030] bond_slave_1: entered allmulticast mode [ 313.684949][T11036] lo speed is unknown, defaulting to 1000 [ 314.470897][T11056] netlink: 17279 bytes leftover after parsing attributes in process `syz.8.1055'. [ 314.659370][T11059] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 314.766752][T11068] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 315.767649][T11103] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1066'. [ 316.915771][T11115] netlink: 'syz.8.1070': attribute type 21 has an invalid length. [ 316.937191][T11119] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.1069'. [ 317.126433][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.133090][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.135199][T11131] netlink: 'syz.9.1074': attribute type 1 has an invalid length. [ 321.150320][T11102] macvlan1: entered promiscuous mode [ 321.156605][T11102] macvlan1: entered allmulticast mode [ 321.162195][T11102] veth1_vlan: entered allmulticast mode [ 321.169141][T11147] netlink: 212912 bytes leftover after parsing attributes in process `syz.9.1076'. [ 321.169768][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1070'. [ 321.388115][T11152] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1079'. [ 321.431600][T11152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.496907][T11152] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1079'. [ 321.677476][T11168] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1082'. [ 321.716098][T11168] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1082'. [ 321.896994][T11176] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1085'. [ 322.165380][T11179] sctp: [Deprecated]: syz.8.1087 (pid 11179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.165380][T11179] Use struct sctp_sack_info instead [ 322.323482][T11194] netlink: 'syz.3.1091': attribute type 2 has an invalid length. [ 322.381895][T11195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.515326][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1093'. [ 323.372640][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1097'. [ 323.381591][T11210] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 323.451052][T11208] lo speed is unknown, defaulting to 1000 [ 323.578937][T11208] lo speed is unknown, defaulting to 1000 [ 323.637504][T11208] lo speed is unknown, defaulting to 1000 [ 323.889208][T11223] netlink: 'syz.9.1099': attribute type 10 has an invalid length. [ 323.910139][T11218] xt_policy: neither incoming nor outgoing policy selected [ 323.939964][T11223] veth0_macvtap: left promiscuous mode [ 323.960087][T11229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1101'. [ 324.177711][T11232] žÿ: renamed from team_slave_1 [ 324.499682][ T5754] lo speed is unknown, defaulting to 1000 [ 324.515390][T11208] infiniband syz2: set active [ 324.541828][T11208] infiniband syz2: added lo [ 324.593159][T11208] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 324.605737][T11208] infiniband syz2: Couldn't open port 1 [ 324.713385][T11208] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 324.780178][T11208] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 324.834279][T11208] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 324.980513][T11208] RDS/IB: syz2: added [ 325.000553][T11208] smc: adding ib device syz2 with port count 1 [ 325.010753][T11208] smc: ib device syz2 port 1 has no pnetid [ 325.038519][ T5754] lo speed is unknown, defaulting to 1000 [ 325.068080][T11208] lo speed is unknown, defaulting to 1000 [ 325.679829][T11208] lo speed is unknown, defaulting to 1000 [ 325.963029][T11208] lo speed is unknown, defaulting to 1000 [ 326.277767][T11208] lo speed is unknown, defaulting to 1000 [ 326.528670][T11208] lo speed is unknown, defaulting to 1000 [ 326.771243][T11208] lo speed is unknown, defaulting to 1000 [ 327.500263][T11300] netlink: 'syz.2.1113': attribute type 6 has an invalid length. [ 327.510966][T11300] __nla_validate_parse: 1 callbacks suppressed [ 327.510987][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'. [ 327.946527][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1115'. [ 327.975368][T11306] netlink: 'syz.8.1115': attribute type 1 has an invalid length. [ 328.204440][T11317] bridge0: port 4(gretap0) entered blocking state [ 328.211899][T11317] bridge0: port 4(gretap0) entered disabled state [ 328.220779][T11317] gretap0: entered allmulticast mode [ 328.230290][T11317] gretap0: entered promiscuous mode [ 330.825519][T11320] netlink: 'syz.8.1119': attribute type 2 has an invalid length. [ 330.857737][T11320] tipc: Started in network mode [ 330.875967][T11320] tipc: Node identity 1340008, cluster identity 4711 [ 330.898590][T11327] netlink: 'syz.7.1122': attribute type 10 has an invalid length. [ 330.901323][T11320] tipc: Node number set to 20185096 [ 330.906945][T11324] netlink: 'syz.7.1122': attribute type 10 has an invalid length. [ 331.011846][T11327] veth0_vlan: left promiscuous mode [ 331.046577][T11327] veth0_vlan: entered promiscuous mode [ 331.095093][T11327] team0: Device veth0_vlan failed to register rx_handler [ 331.147228][T11324] veth0_vlan: left promiscuous mode [ 331.163116][T11324] veth0_vlan: entered promiscuous mode [ 331.190974][T11324] team0: Device veth0_vlan failed to register rx_handler [ 331.303814][T11351] xt_l2tp: v2 tid > 0xffff: 327812 [ 331.523261][T11341] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1126'. [ 331.562569][T11341] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1126'. [ 331.919734][T11365] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1131'. [ 332.390614][T11407] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1141'. [ 332.411314][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1141'. [ 332.430297][T11407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1141'. [ 332.463183][T11410] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1137'. [ 333.085867][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1149'. [ 333.315397][T11431] syzkaller0: entered promiscuous mode [ 333.350565][T11431] syzkaller0: entered allmulticast mode [ 333.594706][T11440] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1153'. [ 333.610120][T11440] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1153'. [ 333.958014][T11447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.039847][T11447] netlink: 'syz.3.1154': attribute type 29 has an invalid length. [ 334.061062][T11447] netlink: 'syz.3.1154': attribute type 29 has an invalid length. [ 334.093255][T11447] netlink: 482 bytes leftover after parsing attributes in process `syz.3.1154'. [ 334.127922][T11447] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1154'. [ 334.169488][T11452] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1156'. [ 335.836767][T11492] : entered promiscuous mode [ 336.252887][T11511] netlink: 'syz.3.1175': attribute type 4 has an invalid length. [ 336.381371][T11511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1175'. [ 336.498806][T11514] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1173'. [ 336.733187][T11519] lo speed is unknown, defaulting to 1000 [ 336.969256][T11529] netlink: 5240 bytes leftover after parsing attributes in process `syz.8.1177'. [ 337.750997][T11535] netlink: 'syz.2.1180': attribute type 5 has an invalid length. [ 340.351926][T11570] openvswitch: netlink: Unknown nsh attribute 0 [ 340.374924][T11575] netlink: 'syz.7.1188': attribute type 1 has an invalid length. [ 340.438282][T11575] netlink: 'syz.7.1188': attribute type 4 has an invalid length. [ 340.487132][T11575] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1188'. [ 340.764278][T11583] netlink: 'syz.2.1191': attribute type 10 has an invalid length. [ 340.789689][T11583] geneve1: entered promiscuous mode [ 341.103992][T11583] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 341.113452][ T3387] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.125300][ T3387] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.169594][ T3387] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.199484][ T3387] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.364277][T11595] syzkaller0: entered promiscuous mode [ 341.384063][T11595] syzkaller0: entered allmulticast mode [ 341.797531][T11617] netlink: 5252 bytes leftover after parsing attributes in process `syz.3.1200'. [ 341.840074][T11617] block nbd0: not configured, cannot reconfigure [ 342.577328][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1207'. [ 347.720502][T11665] netlink: 5192 bytes leftover after parsing attributes in process `syz.3.1214'. [ 347.748133][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1214'. [ 347.901360][T11665] nbd0: detected capacity change from 0 to 339754496 [ 348.008735][ T5645] block nbd0: Receive control failed (result -104) [ 348.075310][T11681] netlink: 'syz.2.1220': attribute type 39 has an invalid length. [ 348.119996][ T3387] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.194572][T11682] nftables ruleset with unbound chain [ 348.498147][T11681] bond0: (slave syz_tun): Releasing backup interface [ 348.565968][T11689] netlink: 'syz.7.1223': attribute type 1 has an invalid length. [ 348.579067][T11689] netlink: 'syz.7.1223': attribute type 21 has an invalid length. [ 348.587442][T11689] IPv6: NLM_F_CREATE should be specified when creating new route [ 348.604307][T11689] IPv6: Can't replace route, no match found [ 348.896089][T11704] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1227'. [ 348.954946][T11708] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1227'. [ 348.973865][T11707] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1229'. [ 349.205380][ T3387] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.320831][T11707] bond0 (unregistering): left allmulticast mode [ 349.346777][T11707] bond_slave_0: left allmulticast mode [ 349.365234][T11707] bond_slave_1: left allmulticast mode [ 349.377584][T11707] bridge0: port 3(bond0) entered disabled state [ 349.433500][T11707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.453206][T11707] bond_slave_0: left promiscuous mode [ 349.483412][T11707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.515747][T11707] bond_slave_1: left promiscuous mode [ 349.536760][T11707] bond0 (unregistering): Released all slaves [ 349.711106][ T3387] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.827371][ T3387] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.894357][T11739] lo speed is unknown, defaulting to 1000 [ 352.912350][T11739] lo speed is unknown, defaulting to 1000 [ 354.006412][T11778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 354.460770][ T3387] bridge_slave_1: left allmulticast mode [ 354.493737][ T3387] bridge_slave_1: left promiscuous mode [ 354.509059][ T3387] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.617423][ T3387] bridge_slave_0: left allmulticast mode [ 354.655285][ T3387] bridge_slave_0: left promiscuous mode [ 354.691244][ T3387] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.022177][T11782] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1250'. [ 355.043555][ T5645] Bluetooth: hci1: command 0x0406 tx timeout [ 356.422655][ T3387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.434019][ T3387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.444364][ T3387] bond0 (unregistering): Released all slaves [ 356.463183][T11784] netlink: 'syz.7.1250': attribute type 6 has an invalid length. [ 356.470955][T11784] netlink: 'syz.7.1250': attribute type 7 has an invalid length. [ 356.479058][T11784] netlink: 'syz.7.1250': attribute type 8 has an invalid length. [ 356.494848][ T5296] 8021q: adding VLAN 0 to HW filter on device eth17 [ 356.572625][T11826] netlink: 'syz.2.1258': attribute type 39 has an invalid length. [ 356.747495][T11835] netlink: 'syz.3.1259': attribute type 1 has an invalid length. [ 356.840925][T11835] netlink: 'syz.3.1259': attribute type 27 has an invalid length. [ 356.879818][T11835] netlink: 'syz.3.1259': attribute type 4 has an invalid length. [ 356.928367][T11835] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1259'. [ 357.485909][T11831] lo speed is unknown, defaulting to 1000 [ 357.575014][T11831] lo speed is unknown, defaulting to 1000 [ 357.812871][T11865] netlink: 'syz.3.1264': attribute type 21 has an invalid length. [ 357.869742][T11865] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1264'. [ 357.888936][T11865] netlink: 'syz.3.1264': attribute type 4 has an invalid length. [ 357.907390][T11865] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1264'. [ 358.136139][ T5296] 8021q: adding VLAN 0 to HW filter on device eth18 [ 358.205733][T11879] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1268'. [ 358.362486][T11884] netlink: 'syz.7.1269': attribute type 1 has an invalid length. [ 358.681024][T11891] netlink: 165104 bytes leftover after parsing attributes in process `syz.9.1271'. [ 359.907590][T11920] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1277'. [ 360.173074][ T3387] hsr_slave_0: left promiscuous mode [ 360.186435][ T3387] hsr_slave_1: left promiscuous mode [ 360.205392][ T3387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.214282][ T3387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.232311][ T3387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.242827][ T3387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.298562][ T3387] veth1_vlan: left promiscuous mode [ 360.321685][ T3387] veth0_vlan: left promiscuous mode [ 360.688667][ T3387] team0 (unregistering): Port device team_slave_1 removed [ 360.725846][ T3387] team0 (unregistering): Port device team_slave_0 removed [ 361.052534][ T5296] 8021q: adding VLAN 0 to HW filter on device eth19 [ 361.358146][T11945] mac80211_hwsim hwsim3 ..ãc¤±: renamed from wlan1 [ 362.683998][T11969] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1288'. [ 362.702685][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1288'. [ 362.730976][T11969] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1288'. [ 363.155432][T11974] validate_nla: 2 callbacks suppressed [ 363.155453][T11974] netlink: 'syz.3.1289': attribute type 7 has an invalid length. [ 363.225399][T11974] netlink: 208720 bytes leftover after parsing attributes in process `syz.3.1289'. [ 363.298161][T11974] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1289'. [ 363.558268][ T5296] 8021q: adding VLAN 0 to HW filter on device eth20 [ 363.979266][T12000] netlink: 10 bytes leftover after parsing attributes in process `syz.9.1295'. [ 364.346977][T12018] netlink: 'syz.3.1298': attribute type 10 has an invalid length. [ 364.380635][T12018] bridge0: left allmulticast mode [ 364.430929][T12018] bridge0: port 4(gretap0) entered blocking state [ 364.437641][T12018] bridge0: port 4(gretap0) entered forwarding state [ 364.444686][T12018] bridge0: port 3(team0) entered blocking state [ 364.451123][T12018] bridge0: port 3(team0) entered forwarding state [ 364.457907][T12018] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.465265][T12018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.472860][T12018] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.480097][T12018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.651032][T12026] netlink: 'syz.2.1302': attribute type 7 has an invalid length. [ 364.708182][T12018] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 365.614001][T12049] netlink: 'syz.7.1306': attribute type 2 has an invalid length. [ 365.636775][T12057] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.1309'. [ 365.654516][T12049] netlink: 'syz.7.1306': attribute type 2 has an invalid length. [ 365.755226][T12045] syzkaller0: entered promiscuous mode [ 365.768565][T12045] syzkaller0: entered allmulticast mode [ 366.117541][T12068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.799744][T12089] netlink: 'syz.2.1317': attribute type 39 has an invalid length. [ 370.459354][T12116] netlink: 65031 bytes leftover after parsing attributes in process `syz.7.1321'. [ 370.495364][T12116] netlink: 'syz.7.1321': attribute type 1 has an invalid length. [ 370.517098][T12117] netlink: 'syz.7.1321': attribute type 1 has an invalid length. [ 370.546603][T12116] netlink: 'syz.7.1321': attribute type 2 has an invalid length. [ 370.575095][T12117] netlink: 'syz.7.1321': attribute type 2 has an invalid length. [ 370.597745][T12117] netlink: 'syz.7.1321': attribute type 1 has an invalid length. [ 370.637325][T12116] netlink: 'syz.7.1321': attribute type 1 has an invalid length. [ 370.661943][T12117] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1321'. [ 370.681657][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1321'. [ 370.738961][T12130] netlink: 'syz.2.1326': attribute type 6 has an invalid length. [ 370.771552][T12130] netlink: 1048 bytes leftover after parsing attributes in process `syz.2.1326'. [ 370.838496][T12130] netlink: 'syz.2.1326': attribute type 1 has an invalid length. [ 370.979339][T12137] netlink: 'syz.7.1328': attribute type 4 has an invalid length. [ 371.007448][T12137] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1328'. [ 371.171124][T12146] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 371.280656][T12150] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1329'. [ 371.338758][T12148] netlink: 'syz.7.1329': attribute type 20 has an invalid length. [ 371.563164][T12155] smc: removing ib device syz2 [ 371.589374][T12163] FAULT_INJECTION: forcing a failure. [ 371.589374][T12163] name failslab, interval 1, probability 0, space 0, times 0 [ 371.629092][T12163] CPU: 1 UID: 0 PID: 12163 Comm: syz.3.1333 Not tainted syzkaller #0 PREEMPT(full) [ 371.629122][T12163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 371.629145][T12163] Call Trace: [ 371.629158][T12163] [ 371.629171][T12163] dump_stack_lvl+0xe8/0x150 [ 371.629209][T12163] should_fail_ex+0x40c/0x560 [ 371.629259][T12163] should_failslab+0xa8/0x100 [ 371.629296][T12163] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 371.629327][T12163] ? __alloc_skb+0x189/0x7a0 [ 371.629352][T12163] ? __alloc_skb+0x1d7/0x7a0 [ 371.629373][T12163] ? __local_bh_enable_ip+0xd0/0x130 [ 371.629412][T12163] __alloc_skb+0x1d7/0x7a0 [ 371.629452][T12163] netlink_sendmsg+0x5d4/0xb40 [ 371.629512][T12163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.629552][T12163] ? aa_sock_msg_perm+0xf1/0x1b0 [ 371.629587][T12163] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 371.629611][T12163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.629645][T12163] ____sys_sendmsg+0x9b9/0xa20 [ 371.629676][T12163] ? __pfx_perf_trace_lock+0x10/0x10 [ 371.629723][T12163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.629782][T12163] ? import_iovec+0x73/0xa0 [ 371.629819][T12163] ___sys_sendmsg+0x2a5/0x360 [ 371.629850][T12163] ? perf_trace_run_bpf_submit+0xee/0x170 [ 371.629888][T12163] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.629986][T12163] ? __fget_files+0x2a/0x420 [ 371.630043][T12163] ? __fget_files+0x2a/0x420 [ 371.630065][T12163] ? __fget_files+0x3a2/0x420 [ 371.630121][T12163] __x64_sys_sendmsg+0x1bd/0x2a0 [ 371.630167][T12163] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.630193][T12163] ? perf_trace_preemptirq_template+0xb2/0x350 [ 371.630252][T12163] ? __pfx_ksys_write+0x10/0x10 [ 371.630308][T12163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.630336][T12163] do_syscall_64+0x174/0x580 [ 371.630362][T12163] ? trace_irq_disable+0x3b/0x140 [ 371.630393][T12163] ? clear_bhb_loop+0x40/0x90 [ 371.630427][T12163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.630448][T12163] RIP: 0033:0x7f18cd59ce59 [ 371.630471][T12163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.630487][T12163] RSP: 002b:00007f18ce4c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.630507][T12163] RAX: ffffffffffffffda RBX: 00007f18cd815fa0 RCX: 00007f18cd59ce59 [ 371.630520][T12163] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 371.630532][T12163] RBP: 00007f18ce4c2090 R08: 0000000000000000 R09: 0000000000000000 [ 371.630543][T12163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.630554][T12163] R13: 00007f18cd816038 R14: 00007f18cd815fa0 R15: 00007ffd8d5fad68 [ 371.630620][T12163] [ 371.934991][T12155] smbdirect: ib_dev[syz2] removed [ 373.069413][T12178] macvlan1: entered allmulticast mode [ 373.190995][T12178] veth1_vlan: entered allmulticast mode [ 373.220454][T12178] macvlan1: left allmulticast mode [ 373.245635][T12178] veth1_vlan: left allmulticast mode [ 374.083691][T12208] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.092877][T12208] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.124172][T12208] bridge0: entered allmulticast mode [ 374.557500][T12227] netlink: 1048 bytes leftover after parsing attributes in process `syz.3.1349'. [ 374.572660][T12226] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.1348'. [ 375.598907][T12265] validate_nla: 4 callbacks suppressed [ 375.598926][T12265] netlink: 'syz.3.1356': attribute type 10 has an invalid length. [ 375.948455][T12265] nlmon0: entered promiscuous mode [ 375.988952][T12265] nlmon0: entered allmulticast mode [ 376.077860][T12265] team0: Device nlmon0 is of different type [ 377.906301][T12296] : entered promiscuous mode [ 378.587571][ T2217] block nbd0: Possible stuck request ffff888027057000: control (read@0,4096B). Runtime 30 seconds [ 378.594987][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.610910][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.631102][T12342] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1373'. [ 379.391126][T12369] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1380'. [ 379.706985][T12378] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1380'. [ 380.641760][ T5645] Bluetooth: hci2: command 0x0406 tx timeout [ 381.070404][T12409] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1387'. [ 381.120122][T12409] netlink: 'syz.9.1387': attribute type 1 has an invalid length. [ 381.335671][T12421] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1391'. [ 381.399121][T12421] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1391'. [ 382.373449][T12460] netlink: 'syz.7.1400': attribute type 10 has an invalid length. [ 382.383527][T12454] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1399'. [ 382.423999][T12460] veth0_vlan: left promiscuous mode [ 382.492268][T12460] veth0_vlan: entered promiscuous mode [ 382.653886][T12454] can: request_module (can-proto-0) failed. [ 382.666354][T12460] team0: Device veth0_vlan failed to register rx_handler [ 383.345757][T12484] netlink: 'syz.9.1405': attribute type 10 has an invalid length. [ 383.421862][T12492] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1405'. [ 383.465130][T12484] team0: Port device veth0 added [ 383.839509][T12497] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1409'. [ 383.894805][T12497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.012042][T12505] netlink: 'syz.8.1412': attribute type 29 has an invalid length. [ 384.032851][T12506] netlink: 'syz.8.1412': attribute type 29 has an invalid length. [ 384.182172][T12516] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1415'. [ 384.216891][T12516] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1415'. [ 384.255447][T12516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1415'. [ 384.438467][T12508] netlink: 'syz.8.1412': attribute type 29 has an invalid length. [ 384.537435][T12522] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1416'. [ 384.930233][T12537] netlink: 'syz.7.1420': attribute type 21 has an invalid length. [ 385.771573][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 386.916525][T12589] xt_l2tp: v2 tid > 0xffff: 327812 [ 386.989369][T12593] netlink: 762 bytes leftover after parsing attributes in process `syz.8.1435'. [ 388.148958][T12601] siw: device registration error -23 [ 388.400489][T12607] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1438'. [ 388.470606][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1438'. [ 388.520943][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1438'. [ 388.567428][T12607] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1438'. [ 388.655104][T12607] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 389.390431][T12630] __nla_validate_parse: 1 callbacks suppressed [ 389.390468][T12630] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1445'. [ 390.191572][T12647] netlink: 'syz.2.1450': attribute type 2 has an invalid length. [ 390.236585][T12647] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1450'. [ 392.729995][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1457'. [ 396.993374][T12703] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1465'. [ 397.059417][T12711] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1466'. [ 398.232857][T12722] netlink: 'syz.7.1470': attribute type 1 has an invalid length. [ 400.648131][T12776] netlink: 'syz.3.1483': attribute type 33 has an invalid length. [ 400.679791][T12776] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1483'. [ 401.192884][T12770] syzkaller0: entered promiscuous mode [ 401.198809][T12770] syzkaller0: entered allmulticast mode [ 404.827117][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 404.857804][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 404.869843][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 404.907356][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 404.915363][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 405.641892][T12795] lo speed is unknown, defaulting to 1000 [ 405.935379][ T6097] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.138380][T12806] lo speed is unknown, defaulting to 1000 [ 406.452883][T12800] lo speed is unknown, defaulting to 1000 [ 406.978565][ T6097] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.041373][ T50] Bluetooth: hci0: command tx timeout [ 407.274051][ T6097] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.416009][T12836] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1492'. [ 407.709420][ T6097] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.739479][T12800] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.747814][T12800] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.756036][T12800] bridge_slave_0: entered allmulticast mode [ 407.790824][T12800] bridge_slave_0: entered promiscuous mode [ 407.812690][T12800] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.825940][T12853] netlink: 'syz.2.1496': attribute type 5 has an invalid length. [ 407.850729][T12856] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1497'. [ 407.856804][T12800] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.881435][T12800] bridge_slave_1: entered allmulticast mode [ 407.901939][T12800] bridge_slave_1: entered promiscuous mode [ 407.926797][T12858] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1498'. [ 407.972807][T12858] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1498'. [ 407.985720][T12800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.999217][T12800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.107963][T12800] team0: Port device team_slave_0 added [ 408.133292][T12800] team0: Port device team_slave_1 added [ 408.161611][T12865] netlink: 'syz.2.1501': attribute type 39 has an invalid length. [ 408.239403][T12867] openvswitch: netlink: IPv4 tunnel dst address is zero [ 408.286457][T12865] hsr_slave_0: left promiscuous mode [ 408.294427][T12865] hsr_slave_1: left promiscuous mode [ 408.349710][T12868] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1500'. [ 408.412748][T12800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.422557][T12800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.485713][T12800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.519850][T12800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.542738][T12800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.596403][T12800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.652875][ T2217] block nbd0: Possible stuck request ffff888027057000: control (read@0,4096B). Runtime 60 seconds [ 409.051788][T12800] hsr_slave_0: entered promiscuous mode [ 409.073293][T12800] hsr_slave_1: entered promiscuous mode [ 409.082950][T12800] debugfs: 'hsr0' already exists in 'hsr' [ 409.095665][T12800] Cannot create hsr debugfs directory [ 409.121375][ T50] Bluetooth: hci0: command tx timeout [ 409.300935][ T6097] bridge_slave_1: left allmulticast mode [ 409.321547][ T6097] bridge_slave_1: left promiscuous mode [ 409.337408][ T6097] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.379859][ T6097] bridge_slave_0: left allmulticast mode [ 409.389167][ T6097] bridge_slave_0: left promiscuous mode [ 409.396046][ T6097] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.617627][T12897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1508'. [ 410.081074][ T6097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.104155][ T6097] bond0 (unregistering): (slave 7áÿ): Releasing backup interface [ 410.124152][ T6097] bond0 (unregistering): Released all slaves [ 410.132285][T12917] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1511'. [ 410.255095][ T5296] 8021q: adding VLAN 0 to HW filter on device eth21 [ 410.304765][ T6097] tipc: Left network mode [ 410.361702][T12920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1512'. [ 411.058637][T12951] netlink: 'syz.3.1520': attribute type 12 has an invalid length. [ 411.080788][T12951] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1520'. [ 411.211454][ T50] Bluetooth: hci0: command tx timeout [ 411.366242][T12953] netlink: 'syz.7.1521': attribute type 29 has an invalid length. [ 411.387968][T12968] netlink: 'syz.2.1522': attribute type 10 has an invalid length. [ 411.457248][T12964] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1524'. [ 411.482719][T12956] netlink: 'syz.7.1521': attribute type 29 has an invalid length. [ 411.536955][ T6097] hsr_slave_0: left promiscuous mode [ 411.569634][ T6097] hsr_slave_1: left promiscuous mode [ 411.603061][ T6097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.641023][ T6097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.674693][ T6097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.698367][ T6097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.737807][ T6097] veth1_macvtap: left promiscuous mode [ 411.747839][ T6097] veth0_macvtap: left promiscuous mode [ 411.753981][ T6097] veth1_vlan: left promiscuous mode [ 411.759639][ T6097] veth0_vlan: left promiscuous mode [ 413.153432][ T6097] team0 (unregistering): Port device team_slave_1 removed [ 413.205185][ T6097] team0 (unregistering): Port device team_slave_0 removed [ 413.291538][ T50] Bluetooth: hci0: command tx timeout [ 413.343192][ T145] smbdirect: ib_dev[syz1] removed [ 413.546266][T13030] openvswitch: netlink: Key 22 has unexpected len 231 expected 4 [ 413.638990][T13034] netlink: 'syz.2.1541': attribute type 2 has an invalid length. [ 413.678880][ T5296] 8021q: adding VLAN 0 to HW filter on device eth22 [ 413.689264][T13034] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1541'. [ 413.713190][ T42] infiniband syz1: ib_query_port failed (-19) [ 414.335102][T13034] bridge0: port 3(dummy0) entered disabled state [ 415.065073][T13058] netlink: 'syz.7.1547': attribute type 10 has an invalid length. [ 415.175808][T13058] ipvlan0: entered allmulticast mode [ 415.213917][T13058] veth0_vlan: entered allmulticast mode [ 415.246967][T13058] team0: Device ipvlan0 failed to register rx_handler [ 415.737961][T13087] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 418.525032][T12800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 418.577281][T12800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 418.602150][ T5296] 8021q: adding VLAN 0 to HW filter on device eth23 [ 418.652835][T12800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 418.700835][T12800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 418.729360][T13097] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1555'. [ 418.791632][T13097] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 418.879051][T12800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 418.936164][T12800] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 418.979508][T12800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 419.091678][T12800] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 419.147115][ T6089] bridge0: port 3(team0) entered disabled state [ 419.474921][T12800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.533542][T12800] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.569000][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.576300][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.657398][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.664610][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.951094][ T5296] 8021q: adding VLAN 0 to HW filter on device eth24 [ 421.174597][T12800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.143628][T13242] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1585'. [ 422.309435][T13252] netlink: 'syz.7.1589': attribute type 21 has an invalid length. [ 422.341466][T13252] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1589'. [ 422.399350][T13252] netlink: 'syz.7.1589': attribute type 4 has an invalid length. [ 422.457724][T13241] can: request_module (can-proto-0) failed. [ 422.467065][T13252] netlink: 'syz.7.1589': attribute type 5 has an invalid length. [ 422.489662][T13252] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1589'. [ 422.550553][T12800] veth0_vlan: entered promiscuous mode [ 422.579694][T12800] veth1_vlan: entered promiscuous mode [ 422.707106][T12800] veth0_macvtap: entered promiscuous mode [ 422.756116][T12800] veth1_macvtap: entered promiscuous mode [ 422.806955][T13267] mac80211_hwsim hwsim37 ..ãc¤±: renamed from wlan1 (while UP) [ 422.942427][T12800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.008816][T12800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.093283][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.125710][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.173083][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.199221][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.382508][T13279] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1594'. [ 423.531716][ T6097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.564034][ T6097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.709669][ T6089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.728013][ T6089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.014610][T13300] netlink: 'syz.3.1600': attribute type 21 has an invalid length. [ 425.163722][T13339] netlink: 1735 bytes leftover after parsing attributes in process `syz.7.1608'. [ 425.188470][T13341] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1607'. [ 425.243012][T13343] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1609'. [ 425.333471][T13343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.377961][T13343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.443934][T13343] bond0 (unregistering): Released all slaves [ 425.755352][T13366] netlink: 'syz.7.1614': attribute type 2 has an invalid length. [ 425.786713][T13366] netlink: 55 bytes leftover after parsing attributes in process `syz.7.1614'. [ 425.810315][T13366] netlink: 'syz.7.1614': attribute type 2 has an invalid length. [ 425.845980][T13366] netlink: 55 bytes leftover after parsing attributes in process `syz.7.1614'. [ 426.076999][T13368] netlink: 'syz.3.1613': attribute type 10 has an invalid length. [ 426.206237][T13368] bond0: (slave dummy0): Releasing backup interface [ 426.582396][T13368] batman_adv: batadv0: Adding interface: dummy0 [ 426.588729][T13368] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.696211][T13378] netlink: 'syz.7.1617': attribute type 2 has an invalid length. [ 426.763764][T13368] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 426.908643][T13391] netlink: 'syz.4.1616': attribute type 4 has an invalid length. [ 427.380532][T13408] tun0: tun_chr_ioctl cmd 1074025673 [ 427.405155][T13410] tun0: tun_chr_ioctl cmd 1074025675 [ 427.426392][T13410] tun0: persist enabled [ 427.455981][T13408] tun0: tun_chr_ioctl cmd 1074025675 [ 427.480726][T13408] tun0: persist enabled [ 428.022761][T13416] netlink: 'syz.2.1625': attribute type 1 has an invalid length. [ 430.272664][T13422] sch_tbf: burst 2 is lower than device veth0_to_bond mtu (1514) ! [ 431.195292][T13472] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1636'. [ 431.228449][T13472] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1636'. [ 431.294153][T13480] netlink: 400 bytes leftover after parsing attributes in process `syz.9.1636'. [ 431.903783][T13504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1643'. [ 432.624338][T13527] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1649'. [ 432.715274][T13536] netlink: 'syz.3.1650': attribute type 21 has an invalid length. [ 432.760138][T13536] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1650'. [ 432.797753][T13536] netlink: 'syz.3.1650': attribute type 4 has an invalid length. [ 434.823628][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1660'. [ 434.924235][T13592] lo speed is unknown, defaulting to 1000 [ 435.556846][T13622] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1666'. [ 435.605260][T13622] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1666'. [ 435.720139][T13620] netlink: 'syz.9.1666': attribute type 10 has an invalid length. [ 436.674562][T13646] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1672'. [ 436.689255][T13648] veth1_to_bond: entered allmulticast mode [ 436.708177][T13646] netlink: 'syz.7.1672': attribute type 10 has an invalid length. [ 436.819003][T13646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 436.870424][T13646] team0: Port device netdevsim1 added [ 437.523365][T13680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'. [ 437.755186][ T50] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 437.777835][ T50] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 438.727128][ T2217] block nbd0: Possible stuck request ffff888027057000: control (read@0,4096B). Runtime 90 seconds [ 438.796504][T13701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1679'. [ 438.909518][T13710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.932698][T13709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.660365][T13736] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1686'. [ 439.690911][T13738] netlink: 'syz.4.1687': attribute type 6 has an invalid length. [ 439.720325][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'. [ 440.005959][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.015622][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.221099][T13749] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1689'. [ 440.611446][T13762] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1691'. [ 440.960176][T13769] netlink: 5 bytes leftover after parsing attributes in process `syz.9.1694'. [ 442.478382][T13799] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1699'. [ 442.845743][T13814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.846410][T13816] openvswitch: netlink: Invalid VLAN frame [ 442.934771][T13818] netlink: 'syz.2.1701': attribute type 1 has an invalid length. [ 442.982189][T13818] netlink: 'syz.2.1701': attribute type 2 has an invalid length. [ 443.095190][T13812] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1702'. [ 443.141626][T13812] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1702'. [ 443.224262][T13812] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1702'. [ 443.511665][T13814] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1701'. [ 444.310780][T13844] sctp: [Deprecated]: syz.9.1709 (pid 13844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.310780][T13844] Use struct sctp_sack_info instead [ 446.605913][T13864] netlink: 5192 bytes leftover after parsing attributes in process `syz.3.1714'. [ 446.634815][T13864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1714'. [ 446.645693][T13864] block nbd1: Unsupported socket: should be TCP or UNIX. [ 447.255994][T13869] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1715'. [ 447.274824][T13869] unsupported nlmsg_type 40 [ 449.658459][T13867] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 449.693154][T13867] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 449.722201][T13867] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 449.877160][T13875] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1717'. [ 450.100078][T13889] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1717'. [ 451.209619][T13915] netlink: 'syz.3.1726': attribute type 13 has an invalid length. [ 451.582413][T13915] bridge0: port 4(gretap0) entered disabled state [ 451.882416][T13915] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.889726][T13915] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.957901][T13915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.969015][T13915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.013314][T13915] veth1_vlan: left allmulticast mode [ 452.083094][T13920] ¨à'©ÿˆ: renamed from hsr0 (while UP) [ 452.116865][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.150114][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.186581][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.218055][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.264851][T13944] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1730'. [ 452.276667][T13943] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1730'. [ 452.460577][T13952] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.1733'. [ 453.010786][T13966] netlink: 7064 bytes leftover after parsing attributes in process `syz.7.1738'. [ 453.032477][T13966] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 453.254242][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1741'. [ 453.315928][T13982] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1742'. [ 453.332424][T13982] openvswitch: netlink: Flow key attr not present in new flow. [ 453.687049][T14001] openvswitch: netlink: IP tunnel dst address not specified [ 454.415298][T14015] netlink: 'syz.4.1746': attribute type 1 has an invalid length. [ 454.899214][T14038] netlink: 'syz.2.1758': attribute type 21 has an invalid length. [ 454.977756][T14044] netlink: 'syz.2.1758': attribute type 23 has an invalid length. [ 455.007211][T14044] netlink: 'syz.2.1758': attribute type 21 has an invalid length. [ 455.023092][T14044] IPv6: NLM_F_CREATE should be specified when creating new route [ 455.946094][T14073] netlink: 5204 bytes leftover after parsing attributes in process `syz.3.1765'. [ 456.120206][T14071] syzkaller0: entered promiscuous mode [ 456.133436][T14071] syzkaller0: entered allmulticast mode [ 456.155880][T14071] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 456.236703][T14079] netlink: 'syz.3.1768': attribute type 11 has an invalid length. [ 456.292533][T14085] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1771'. [ 456.525922][T14093] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1775'. [ 456.576256][T14093] netlink: 'syz.7.1775': attribute type 10 has an invalid length. [ 456.947341][T14114] netlink: 'syz.4.1778': attribute type 10 has an invalid length. [ 456.985772][T14114] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.994525][T14114] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.088403][T14114] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.096041][T14114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.104417][T14114] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.111908][T14114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.238488][T14114] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 457.503724][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1782'. [ 457.639254][T14143] netlink: 'syz.4.1784': attribute type 6 has an invalid length. [ 457.741383][T14143] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1784'. [ 458.010081][T14147] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1786'. [ 458.060788][T14147] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1786'. [ 458.289298][T14166] netlink: 'syz.3.1789': attribute type 21 has an invalid length. [ 458.353119][ T50] Bluetooth: hci4: ISO packet for unknown connection handle 62 [ 458.353373][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1789'. [ 458.450026][T14166] netlink: 'syz.3.1789': attribute type 6 has an invalid length. [ 458.543775][T14166] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1789'. [ 459.028326][T14184] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1792'. [ 459.888445][T14224] netlink: 'syz.7.1800': attribute type 274 has an invalid length. [ 459.977037][T14224] netlink: 'syz.7.1800': attribute type 1 has an invalid length. [ 460.257844][T14237] netlink: 'syz.9.1801': attribute type 16 has an invalid length. [ 460.294076][T14237] netlink: 'syz.9.1801': attribute type 17 has an invalid length. [ 461.040486][T14273] __nla_validate_parse: 3 callbacks suppressed [ 461.040508][T14273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1808'. [ 461.411765][T14275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1809'. [ 463.540574][T14345] syzkaller0: entered promiscuous mode [ 463.566256][T14345] syzkaller0: entered allmulticast mode [ 463.580466][T14348] validate_nla: 1 callbacks suppressed [ 463.580484][T14348] netlink: 'syz.7.1822': attribute type 1 has an invalid length. [ 463.641724][T14348] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1822'. [ 463.698486][T14362] netlink: 'syz.7.1822': attribute type 39 has an invalid length. [ 463.731081][T14348] netlink: 658 bytes leftover after parsing attributes in process `syz.7.1822'. [ 463.844200][T14366] netlink: 'syz.4.1825': attribute type 28 has an invalid length. [ 463.889654][T14366] netlink: 'syz.4.1825': attribute type 29 has an invalid length. [ 463.953149][T14366] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1825'. [ 464.160673][T14362] hsr_slave_0: left promiscuous mode [ 464.178829][T14362] hsr_slave_1: left promiscuous mode [ 464.267455][T14386] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1829'. [ 464.743033][T14398] netlink: 'syz.4.1833': attribute type 39 has an invalid length. [ 467.957197][ T5001] udevd[5001]: worker [5635] /devices/virtual/block/nbd0 is taking a long time [ 468.820806][ T2217] block nbd0: Possible stuck request ffff888027057000: control (read@0,4096B). Runtime 120 seconds [ 471.332094][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1838'. [ 471.534007][T14431] netlink: 1175 bytes leftover after parsing attributes in process `syz.4.1840'. [ 471.590179][T14432] netlink: 1175 bytes leftover after parsing attributes in process `syz.4.1840'. [ 471.945624][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1843'. [ 472.162030][T14450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1847'. [ 472.280727][T14454] lo speed is unknown, defaulting to 1000 [ 472.369058][T14450] netlink: 'syz.3.1847': attribute type 10 has an invalid length. [ 472.401898][T14450] geneve1: entered promiscuous mode [ 472.432678][T14450] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 472.461533][ T6081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.494735][ T6081] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.533547][ T6081] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.542891][ T6081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.404892][T14490] netlink: zone id is out of range [ 473.429770][T14490] netlink: zone id is out of range [ 473.445873][T14500] nbd: must specify a device to reconfigure [ 473.459752][T14490] netlink: zone id is out of range [ 473.489078][T14490] netlink: zone id is out of range [ 473.526776][T14490] netlink: zone id is out of range [ 473.545324][T14490] netlink: zone id is out of range [ 473.567834][T14490] netlink: zone id is out of range [ 473.602020][T14490] netlink: zone id is out of range [ 473.631768][T14490] netlink: zone id is out of range [ 473.650016][T14490] netlink: zone id is out of range [ 474.325642][T14511] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1862'. [ 474.696825][T14523] netlink: 'syz.3.1865': attribute type 1 has an invalid length. [ 476.721296][T14545] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1869'. [ 477.779558][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1882'. [ 477.876259][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1882'. [ 477.929118][T14600] é: renamed from bond_slave_0 [ 477.976549][T14615] IPv6: NLM_F_CREATE should be specified when creating new route [ 478.922412][T14635] netlink: 'syz.9.1891': attribute type 1 has an invalid length. [ 479.398450][T14644] netlink: 'syz.3.1893': attribute type 2 has an invalid length. [ 479.500230][T14650] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1896'. [ 480.773917][T14685] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1903'. [ 481.149487][T14695] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1908'. [ 481.162791][T14696] netlink: 4864 bytes leftover after parsing attributes in process `syz.2.1907'. [ 481.200752][T14696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1907'. [ 482.288124][T14709] netlink: 'syz.9.1912': attribute type 10 has an invalid length. [ 482.301301][T14709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.322451][T14711] net_ratelimit: 733 callbacks suppressed [ 482.322471][T14711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.355216][T14710] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1912'. [ 482.378135][T14709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.612715][T14709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.623906][T14709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.999594][T14716] openvswitch: netlink: Unknown nsh attribute 0 [ 483.357519][T14727] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1916'. [ 483.390631][T14727] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1916'. [ 483.936013][T14749] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.1920'. [ 487.624116][T14803] option changes via remount are deprecated (pid=14800 comm=syz.2.1928) [ 487.758169][T14804] netlink: 16174 bytes leftover after parsing attributes in process `syz.9.1929'. [ 487.846304][T14810] netlink: 268 bytes leftover after parsing attributes in process `syz.7.1930'. [ 488.794853][T14829] netlink: 'syz.3.1936': attribute type 10 has an invalid length. [ 488.804427][T14831] netlink: 'syz.3.1936': attribute type 10 has an invalid length. [ 488.812858][T14831] team0: Device bond0 is already an upper device of the team interface [ 488.821589][T14829] team0: Device bond0 is already an upper device of the team interface [ 489.584394][T14865] netlink: 'syz.3.1946': attribute type 4 has an invalid length. [ 489.598383][T14865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1946'. [ 489.627545][T14865] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1946'. [ 490.547239][T14878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1950'. [ 490.594702][T14878] netlink: 'syz.3.1950': attribute type 2 has an invalid length. [ 490.609303][T14878] netlink: 119 bytes leftover after parsing attributes in process `syz.3.1950'. [ 490.699614][T14887] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1953'. [ 490.737555][T14886] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1952'. [ 491.073200][T14912] netlink: 'syz.7.1958': attribute type 33 has an invalid length. [ 491.110164][T14912] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1958'. [ 491.135404][T14911] netlink: 188 bytes leftover after parsing attributes in process `syz.9.1959'. [ 491.170763][T14912] `: renamed from syz_tun (while UP) [ 491.612828][T14928] netlink: 'syz.3.1964': attribute type 1 has an invalid length. [ 491.627884][T14928] netlink: 'syz.3.1964': attribute type 2 has an invalid length. [ 491.641049][T14915] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 492.227526][T14955] FAULT_INJECTION: forcing a failure. [ 492.227526][T14955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.267592][T14955] CPU: 0 UID: 0 PID: 14955 Comm: syz.9.1973 Not tainted syzkaller #0 PREEMPT(full) [ 492.267621][T14955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 492.267632][T14955] Call Trace: [ 492.267640][T14955] [ 492.267648][T14955] dump_stack_lvl+0xe8/0x150 [ 492.267681][T14955] should_fail_ex+0x40c/0x560 [ 492.267714][T14955] _copy_from_user+0x2d/0xb0 [ 492.267737][T14955] ___sys_sendmsg+0x1c6/0x360 [ 492.267762][T14955] ? __lock_acquire+0x683/0x2cd0 [ 492.267786][T14955] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.267845][T14955] ? __fget_files+0x2a/0x420 [ 492.267865][T14955] ? __fget_files+0x3a2/0x420 [ 492.267893][T14955] __x64_sys_sendmsg+0x1bd/0x2a0 [ 492.267929][T14955] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 492.267963][T14955] ? __pfx_ksys_write+0x10/0x10 [ 492.267992][T14955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.268013][T14955] do_syscall_64+0x174/0x580 [ 492.268041][T14955] ? clear_bhb_loop+0x40/0x90 [ 492.268064][T14955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.268082][T14955] RIP: 0033:0x7f3c7659ce59 [ 492.268100][T14955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.268116][T14955] RSP: 002b:00007f3c77393028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.268135][T14955] RAX: ffffffffffffffda RBX: 00007f3c76815fa0 RCX: 00007f3c7659ce59 [ 492.268148][T14955] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 492.268160][T14955] RBP: 00007f3c77393090 R08: 0000000000000000 R09: 0000000000000000 [ 492.268169][T14955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.268179][T14955] R13: 00007f3c76816038 R14: 00007f3c76815fa0 R15: 00007ffef3442628 [ 492.268215][T14955] [ 495.312562][T14965] __nla_validate_parse: 2 callbacks suppressed [ 495.312582][T14965] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1978'. [ 495.477307][T14977] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1980'. [ 495.524134][T14977] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1980'. [ 495.799536][T14992] FAULT_INJECTION: forcing a failure. [ 495.799536][T14992] name failslab, interval 1, probability 0, space 0, times 0 [ 495.835592][T14992] CPU: 0 UID: 0 PID: 14992 Comm: syz.2.1984 Not tainted syzkaller #0 PREEMPT(full) [ 495.835619][T14992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 495.835629][T14992] Call Trace: [ 495.835637][T14992] [ 495.835645][T14992] dump_stack_lvl+0xe8/0x150 [ 495.835672][T14992] should_fail_ex+0x40c/0x560 [ 495.835705][T14992] should_failslab+0xa8/0x100 [ 495.835734][T14992] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 495.835759][T14992] ? __alloc_skb+0x189/0x7a0 [ 495.835780][T14992] ? __alloc_skb+0x1d7/0x7a0 [ 495.835800][T14992] ? __local_bh_enable_ip+0xd0/0x130 [ 495.835824][T14992] __alloc_skb+0x1d7/0x7a0 [ 495.835850][T14992] netlink_sendmsg+0x5d4/0xb40 [ 495.835884][T14992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.835911][T14992] ? aa_sock_msg_perm+0xf1/0x1b0 [ 495.835938][T14992] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.835960][T14992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.835986][T14992] ____sys_sendmsg+0x9b9/0xa20 [ 495.836011][T14992] ? __might_fault+0xaf/0x130 [ 495.836039][T14992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.836078][T14992] ? import_iovec+0x73/0xa0 [ 495.836102][T14992] ___sys_sendmsg+0x2a5/0x360 [ 495.836137][T14992] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.836168][T14992] ? irqentry_exit+0x218/0x8e0 [ 495.836192][T14992] ? trace_irq_disable+0x3b/0x140 [ 495.836248][T14992] ? __fget_files+0x2a/0x420 [ 495.836271][T14992] ? __fget_files+0x3a2/0x420 [ 495.836302][T14992] __x64_sys_sendmsg+0x1bd/0x2a0 [ 495.836330][T14992] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.836364][T14992] ? rcu_is_watching+0x15/0xb0 [ 495.836395][T14992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.836416][T14992] do_syscall_64+0x174/0x580 [ 495.836442][T14992] ? clear_bhb_loop+0x40/0x90 [ 495.836465][T14992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.836484][T14992] RIP: 0033:0x7f1f7539ce59 [ 495.836502][T14992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.836518][T14992] RSP: 002b:00007f1f735f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.836544][T14992] RAX: ffffffffffffffda RBX: 00007f1f75615fa0 RCX: 00007f1f7539ce59 [ 495.836559][T14992] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 495.836570][T14992] RBP: 00007f1f735f6090 R08: 0000000000000000 R09: 0000000000000000 [ 495.836582][T14992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.836593][T14992] R13: 00007f1f75616038 R14: 00007f1f75615fa0 R15: 00007ffce7a5e9e8 [ 495.836622][T14992] [ 496.296259][T15004] netlink: 'syz.9.1988': attribute type 14 has an invalid length. [ 496.448509][T15004] tmpfs: Bad value for 'uid' [ 496.461344][T15004] tmpfs: Bad value for 'uid' [ 496.808227][T15026] netlink: 124 bytes leftover after parsing attributes in process `syz.9.1996'. [ 496.857622][T15026] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1996'. [ 496.918423][T15028] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1995'. [ 497.140398][T15018] lo speed is unknown, defaulting to 1000 [ 497.982451][T15054] netlink: 'syz.3.2005': attribute type 1 has an invalid length. [ 498.091205][T15058] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2006'. [ 498.151088][T15059] netlink: 'syz.9.2006': attribute type 21 has an invalid length. [ 498.185582][T15059] netlink: 128 bytes leftover after parsing attributes in process `syz.9.2006'. [ 498.529212][T15059] netlink: 35 bytes leftover after parsing attributes in process `syz.9.2006'. [ 498.741002][T15067] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2009'. [ 498.885953][ T2217] block nbd0: Possible stuck request ffff888027057000: control (read@0,4096B). Runtime 150 seconds [ 499.731480][T15097] netlink: 'syz.2.2017': attribute type 21 has an invalid length. [ 499.798162][T15097] IPv6: NLM_F_CREATE should be specified when creating new route [ 500.543486][T15097] __nla_validate_parse: 4 callbacks suppressed [ 500.543509][T15097] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2017'. [ 500.878492][T15119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.249663][T15134] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2026'. [ 501.446055][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.457645][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.974884][T15154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.047093][T15156] hmaÓ: entered promiscuous mode [ 503.810362][T15180] netlink: 'syz.2.2036': attribute type 4 has an invalid length. [ 503.843405][T15180] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2036'. [ 503.892441][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2036'. [ 503.967911][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2036'. [ 505.387193][T15249] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2054'. [ 505.418641][T15249] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2054'. [ 505.660940][T15256] netlink: 'syz.7.2057': attribute type 7 has an invalid length. [ 505.707080][T15256] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2057'. [ 505.723840][T15254] nicvf0: tun_chr_ioctl cmd 1074025677 [ 505.746731][T15254] nicvf0: linktype set to 776 [ 506.007147][T15264] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2059'. [ 506.146539][T15268] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2060'. [ 506.353246][T15275] syzkaller0: create flow: hash 90098287 index 1 [ 506.856050][T15274] syzkaller0: entered promiscuous mode [ 506.865021][T15274] syzkaller0: entered allmulticast mode [ 506.886725][ T6097] syzkaller0: tun_net_xmit 48 [ 507.225332][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2067'. [ 507.302093][T15295] openvswitch: netlink: Flow actions attr not present in new flow. [ 507.441782][T15273] syzkaller0: delete flow: hash 90098287 index 1 [ 514.951901][T15301] netlink: 'syz.7.2070': attribute type 15 has an invalid length. [ 515.110050][ T50] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 515.255761][T15323] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2079'. [ 515.926233][T15348] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2085'. [ 515.962719][T15349] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2085'. [ 516.264355][T15365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2089'. [ 516.880449][T15381] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2092'. [ 517.702840][T15428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.769350][T15420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.013216][T15432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.154658][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'. [ 518.415789][T15453] nbd: socks must be embedded in a SOCK_ITEM attr [ 518.462147][T15456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2106'. [ 519.035023][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2108'. [ 519.125849][T15470] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2108'. [ 519.312763][T15489] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2111'. [ 521.006760][T15548] netlink: 'syz.4.2130': attribute type 10 has an invalid length. [ 521.027440][T15548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.057545][T15548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.123913][T15548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.148665][T15548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.315898][T15559] netlink: 'syz.9.2133': attribute type 29 has an invalid length. [ 521.354735][T15559] netlink: 'syz.9.2133': attribute type 29 has an invalid length. [ 521.379268][T15559] netlink: 'syz.9.2133': attribute type 29 has an invalid length. [ 521.927639][T15574] __nla_validate_parse: 2 callbacks suppressed [ 521.927683][T15574] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2138'. [ 522.146340][T15583] netlink: 'syz.4.2140': attribute type 2 has an invalid length. [ 522.186579][T15583] netlink: 'syz.4.2140': attribute type 2 has an invalid length. [ 522.211079][T15583] netlink: 'syz.4.2140': attribute type 1 has an invalid length. [ 522.233041][T15583] netlink: 'syz.4.2140': attribute type 1 has an invalid length. [ 522.258720][T15583] netlink: 'syz.4.2140': attribute type 1 has an invalid length. [ 522.944482][T15595] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2144'. [ 523.068317][T15597] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2145'. [ 523.481961][T15612] netlink: 92 bytes leftover after parsing attributes in process `syz.9.2149'. [ 523.750807][T15620] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2152'. [ 523.989639][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2156'. [ 524.030304][T15629] netlink: 'syz.2.2155': attribute type 2 has an invalid length. [ 524.068360][T15629] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2155'. [ 524.081608][T15625] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.2152'. [ 524.126554][T15634] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2156'. [ 524.153931][T15634] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2156'. [ 526.553313][T15706] FAULT_INJECTION: forcing a failure. [ 526.553313][T15706] name failslab, interval 1, probability 0, space 0, times 0 [ 526.644862][T15706] CPU: 1 UID: 0 PID: 15706 Comm: syz.2.2175 Not tainted syzkaller #0 PREEMPT(full) [ 526.644889][T15706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 526.644901][T15706] Call Trace: [ 526.644909][T15706] [ 526.644919][T15706] dump_stack_lvl+0xe8/0x150 [ 526.644949][T15706] should_fail_ex+0x40c/0x560 [ 526.644986][T15706] should_failslab+0xa8/0x100 [ 526.645014][T15706] ? do_getname+0x2e/0x250 [ 526.645040][T15706] kmem_cache_alloc_noprof+0x87/0x650 [ 526.645079][T15706] do_getname+0x2e/0x250 [ 526.645097][T15706] ? user_path_at+0x1e/0x160 [ 526.645125][T15706] user_path_at+0x2a/0x160 [ 526.645161][T15706] __se_sys_mount+0x2dc/0x420 [ 526.645193][T15706] ? __pfx___se_sys_mount+0x10/0x10 [ 526.645225][T15706] ? __x64_sys_mount+0x20/0xc0 [ 526.645247][T15706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.645269][T15706] do_syscall_64+0x174/0x580 [ 526.645295][T15706] ? trace_irq_disable+0x3b/0x140 [ 526.645323][T15706] ? clear_bhb_loop+0x40/0x90 [ 526.645358][T15706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.645378][T15706] RIP: 0033:0x7f1f7539ce59 [ 526.645396][T15706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.645413][T15706] RSP: 002b:00007f1f735d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 526.645432][T15706] RAX: ffffffffffffffda RBX: 00007f1f75616090 RCX: 00007f1f7539ce59 [ 526.645447][T15706] RDX: 00002000000002c0 RSI: 0000200000000240 RDI: 0000000000000000 [ 526.645459][T15706] RBP: 00007f1f735d5090 R08: 0000000000000000 R09: 0000000000000000 [ 526.645471][T15706] R10: 0000000002000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.645483][T15706] R13: 00007f1f75616128 R14: 00007f1f75616090 R15: 00007ffce7a5e9e8 [ 526.645520][T15706] [ 527.163693][T15709] FAULT_INJECTION: forcing a failure. [ 527.163693][T15709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.207844][T15709] CPU: 0 UID: 0 PID: 15709 Comm: syz.3.2177 Not tainted syzkaller #0 PREEMPT(full) [ 527.207872][T15709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 527.207883][T15709] Call Trace: [ 527.207891][T15709] [ 527.207900][T15709] dump_stack_lvl+0xe8/0x150 [ 527.207929][T15709] should_fail_ex+0x40c/0x560 [ 527.207966][T15709] _copy_to_user+0x31/0xb0 [ 527.208001][T15709] simple_read_from_buffer+0xe1/0x170 [ 527.208037][T15709] proc_fail_nth_read+0x1bb/0x230 [ 527.208064][T15709] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 527.208091][T15709] ? rw_verify_area+0x24a/0x4c0 [ 527.208127][T15709] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 527.208154][T15709] vfs_read+0x213/0xa80 [ 527.208187][T15709] ? __pfx___mutex_lock+0x10/0x10 [ 527.208222][T15709] ? __pfx_vfs_read+0x10/0x10 [ 527.208247][T15709] ? __fget_files+0x2a/0x420 [ 527.208272][T15709] ? __fget_files+0x3a2/0x420 [ 527.208292][T15709] ? __fget_files+0x2a/0x420 [ 527.208325][T15709] ksys_read+0x150/0x270 [ 527.208354][T15709] ? __pfx_ksys_read+0x10/0x10 [ 527.208390][T15709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.208411][T15709] do_syscall_64+0x174/0x580 [ 527.208434][T15709] ? trace_irq_disable+0x3b/0x140 [ 527.208463][T15709] ? clear_bhb_loop+0x40/0x90 [ 527.208489][T15709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.208508][T15709] RIP: 0033:0x7f18cd55d68e [ 527.208536][T15709] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 527.208552][T15709] RSP: 002b:00007f18ce4c1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 527.208572][T15709] RAX: ffffffffffffffda RBX: 00007f18ce4c26c0 RCX: 00007f18cd55d68e [ 527.208585][T15709] RDX: 000000000000000f RSI: 00007f18ce4c20a0 RDI: 0000000000000005 [ 527.208597][T15709] RBP: 00007f18ce4c2090 R08: 0000000000000000 R09: 0000000000000000 [ 527.208609][T15709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.208619][T15709] R13: 00007f18cd816038 R14: 00007f18cd815fa0 R15: 00007ffd8d5fad68 [ 527.208661][T15709] [ 527.903549][T15727] netlink: 'syz.2.2183': attribute type 29 has an invalid length. [ 527.996127][T15735] __nla_validate_parse: 9 callbacks suppressed [ 527.996161][T15735] netlink: 1484 bytes leftover after parsing attributes in process `syz.7.2184'. [ 528.463360][T15752] FAULT_INJECTION: forcing a failure. [ 528.463360][T15752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.523665][T15752] CPU: 1 UID: 0 PID: 15752 Comm: syz.2.2189 Not tainted syzkaller #0 PREEMPT(full) [ 528.523692][T15752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 528.523702][T15752] Call Trace: [ 528.523710][T15752] [ 528.523718][T15752] dump_stack_lvl+0xe8/0x150 [ 528.523746][T15752] should_fail_ex+0x40c/0x560 [ 528.523782][T15752] strncpy_from_user+0x36/0x2c0 [ 528.523815][T15752] do_getname+0x77/0x250 [ 528.523840][T15752] user_path_at+0x2a/0x160 [ 528.523866][T15752] __se_sys_mount+0x2dc/0x420 [ 528.523896][T15752] ? __pfx___se_sys_mount+0x10/0x10 [ 528.523926][T15752] ? __x64_sys_mount+0x20/0xc0 [ 528.523946][T15752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.523968][T15752] do_syscall_64+0x174/0x580 [ 528.523994][T15752] ? trace_irq_disable+0x3b/0x140 [ 528.524021][T15752] ? clear_bhb_loop+0x40/0x90 [ 528.524048][T15752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.524066][T15752] RIP: 0033:0x7f1f7539ce59 [ 528.524085][T15752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.524100][T15752] RSP: 002b:00007f1f735f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 528.524118][T15752] RAX: ffffffffffffffda RBX: 00007f1f75615fa0 RCX: 00007f1f7539ce59 [ 528.524131][T15752] RDX: 00002000000002c0 RSI: 0000200000000240 RDI: 0000000000000000 [ 528.524142][T15752] RBP: 00007f1f735f6090 R08: 0000000000000000 R09: 0000000000000000 [ 528.524151][T15752] R10: 0000000002000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.524161][T15752] R13: 00007f1f75616038 R14: 00007f1f75615fa0 R15: 00007ffce7a5e9e8 [ 528.524195][T15752] [ 528.992115][ T2217] block nbd0: Possible stuck request ffff888027057000: control (read@0,4096B). Runtime 180 seconds [ 529.122838][T15708] Bluetooth: hci0: command 0x0406 tx timeout [ 531.870182][T15779] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2194'. [ 532.073876][T15789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2200'. [ 532.284312][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2202'. [ 532.474366][T15807] netlink: 'syz.3.2206': attribute type 32 has an invalid length. [ 532.491688][T15807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2206'. [ 532.609460][T15803] netlink: 'syz.2.2205': attribute type 3 has an invalid length. [ 532.667438][T15803] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2205'. [ 532.718899][T15803] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2205'. [ 532.795385][T15803] netlink: 'syz.2.2205': attribute type 6 has an invalid length. [ 532.827733][T15803] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2205'. [ 533.467602][T15826] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2210'. [ 533.491465][T15826] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 533.607263][T15823] netlink: 'syz.3.2210': attribute type 10 has an invalid length. [ 533.648256][T15823] bridge0: port 3(team0) entered disabled state [ 533.729018][T15823] team_slave_0: left promiscuous mode [ 533.754001][T15823] team_slave_0: left allmulticast mode [ 533.777659][T15823] team0 (unregistering): Port device team_slave_0 removed [ 533.823766][T15823] team_slave_1: left promiscuous mode [ 533.844952][T15823] team_slave_1: left allmulticast mode [ 534.179136][T15823] team0 (unregistering): Port device team_slave_1 removed [ 534.210003][T15823] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 534.226540][T15823] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 534.246023][T15823] team0 (unregistering): Port device netdevsim0 removed [ 534.728381][T15861] netlink: 'syz.9.2220': attribute type 2 has an invalid length. [ 534.768295][T15861] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2220'. [ 535.004487][T15859] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 535.172706][T15879] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2225'. [ 535.395380][T15881] netlink: 4108 bytes leftover after parsing attributes in process `syz.4.2227'. [ 535.546380][T15894] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2231'. [ 535.815678][T15904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2232'. [ 535.990996][T15911] netlink: 'syz.2.2238': attribute type 1 has an invalid length. [ 536.050471][T15914] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.058306][T15914] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.072818][T15914] bridge0: entered allmulticast mode [ 537.859476][T15969] netlink: 400 bytes leftover after parsing attributes in process `syz.4.2253'. [ 537.932358][T15976] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2255'. [ 538.607166][T16000] netlink: 'syz.2.2262': attribute type 29 has an invalid length. [ 538.634651][T16000] netlink: 'syz.2.2262': attribute type 29 has an invalid length. [ 539.513838][T16038] netlink: 'syz.7.2265': attribute type 21 has an invalid length. [ 539.563033][T16038] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2265'. [ 540.075394][T16057] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2270'. [ 540.111599][ T29] audit: type=1107 audit(1781508975.835:4): pid=16058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 540.113528][T16057] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2270'. [ 540.188171][T16057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2270'. [ 540.325520][T16066] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2273'. [ 540.548813][T16072] netlink: 'syz.7.2275': attribute type 2 has an invalid length. [ 540.569720][T16074] ªªªªª6: renamed from wg2 (while UP) [ 540.583879][T16072] netlink: 'syz.7.2275': attribute type 8 has an invalid length. [ 540.610769][T16072] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2275'. [ 540.683065][T16078] netlink: 1788 bytes leftover after parsing attributes in process `syz.4.2278'. [ 541.052859][T16082] bridge0: port 3(gretap0) entered blocking state [ 541.062088][T16082] bridge0: port 3(gretap0) entered disabled state [ 541.076293][T16082] gretap0: entered allmulticast mode [ 541.113592][T16082] gretap0: entered promiscuous mode [ 541.584195][T16095] netlink: 'syz.9.2282': attribute type 1 has an invalid length. [ 541.701469][T16099] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2283'. [ 544.127933][T16150] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 544.152279][T16150] syzkaller0: entered promiscuous mode [ 544.168000][T16150] syzkaller0: entered allmulticast mode [ 551.372948][ T5001] udevd[5001]: worker [5635] /devices/virtual/block/nbd0 timeout; kill it [ 551.384151][ T5001] udevd[5001]: seq 15880 '/devices/virtual/block/nbd0' killed [ 552.576405][T16250] netlink: 'syz.2.2336': attribute type 46 has an invalid length. [ 552.824959][T16264] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2341'. [ 552.864941][T16264] netlink: 'syz.7.2341': attribute type 12 has an invalid length. [ 552.888652][T16264] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2341'. [ 553.076436][T16275] netlink: 'syz.3.2347': attribute type 10 has an invalid length. [ 553.111397][T16275] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2347'. [ 553.125186][T16275] vlan0: entered promiscuous mode [ 553.139747][T16275] vlan0: entered allmulticast mode [ 553.168227][T16275] veth0_vlan: entered allmulticast mode [ 553.186843][T16275] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 553.216097][T16278] netlink: 'syz.7.2348': attribute type 29 has an invalid length. [ 553.226710][T16283] netlink: 'syz.7.2348': attribute type 29 has an invalid length. [ 553.399716][T16290] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2352'. [ 553.928584][T16302] netlink: 'syz.3.2358': attribute type 21 has an invalid length. [ 554.807526][T16323] netlink: 'syz.9.2364': attribute type 1 has an invalid length. [ 555.909990][T16336] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2370'. [ 556.760445][T16373] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2386'. [ 557.080734][T16391] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2393'. [ 557.796194][T16416] netlink: 'syz.9.2404': attribute type 39 has an invalid length. [ 558.182410][T16427] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2407'. [ 558.956495][T16455] lo speed is unknown, defaulting to 1000 [ 559.043665][ T2217] block nbd0: Possible stuck request ffff888027057000: control (read@0,4096B). Runtime 210 seconds [ 561.206260][T16540] veth1_to_bond: entered allmulticast mode [ 561.638190][T16560] sctp: [Deprecated]: syz.9.2463 (pid 16560) Use of int in max_burst socket option deprecated. [ 561.638190][T16560] Use struct sctp_assoc_value instead [ 562.540337][T16597] netlink: 'syz.7.2474': attribute type 4 has an invalid length. [ 562.888272][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.895324][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.656087][T16572] macvlan1: entered promiscuous mode [ 565.661726][T16572] macvlan1: entered allmulticast mode [ 565.668247][T16572] veth1_vlan: entered allmulticast mode [ 566.279235][T16626] syzkaller0: entered promiscuous mode [ 566.285217][T16626] syzkaller0: entered allmulticast mode [ 570.702676][T16640] syzkaller0: entered promiscuous mode [ 570.708460][T16640] syzkaller0: entered allmulticast mode [ 574.335315][T16647] lo speed is unknown, defaulting to 1000 [ 574.737508][T16694] lo speed is unknown, defaulting to 1000 [ 574.763001][T16707] [ 574.766621][T16707] ============================= [ 574.771733][T16707] WARNING: suspicious RCU usage [ 574.776618][T16707] syzkaller #0 Not tainted [ 574.781048][T16707] ----------------------------- [ 574.786213][T16707] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 574.794841][T16707] [ 574.794841][T16707] other info that might help us debug this: [ 574.794841][T16707] [ 574.805488][T16707] [ 574.805488][T16707] rcu_scheduler_active = 2, debug_locks = 1 [ 574.814747][T16707] 1 lock held by syz.9.2509/16707: [ 574.820114][T16707] #0: ffffffff8e95c8f8 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 574.831237][T16707] [ 574.831237][T16707] stack backtrace: [ 574.837150][T16707] CPU: 0 UID: 0 PID: 16707 Comm: syz.9.2509 Not tainted syzkaller #0 PREEMPT(full) [ 574.837176][T16707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 574.837188][T16707] Call Trace: [ 574.837196][T16707] [ 574.837203][T16707] dump_stack_lvl+0xe8/0x150 [ 574.837231][T16707] lockdep_rcu_suspicious+0x13f/0x1d0 [ 574.837261][T16707] get_callchain_entry+0x2b6/0x3c0 [ 574.837285][T16707] get_perf_callchain+0xd5/0x880 [ 574.837312][T16707] ? __pfx_get_perf_callchain+0x10/0x10 [ 574.837346][T16707] __bpf_get_stack+0x3e9/0xa70 [ 574.837377][T16707] ? __pfx___bpf_get_stack+0x10/0x10 [ 574.837393][T16707] ? futex_unqueue+0x22/0x240 [ 574.837417][T16707] ? __lock_acquire+0x683/0x2cd0 [ 574.837439][T16707] bpf_get_stack+0x33/0x50 [ 574.837476][T16707] ? bpf_prog_916d6cec71bb1b7e_F+0x32/0x38 [ 574.837496][T16707] bpf_get_stack_raw_tp+0x1a4/0x210 [ 574.837530][T16707] bpf_prog_916d6cec71bb1b7e_F+0x32/0x38 [ 574.837582][T16707] bpf_prog_0f401ca562e3309f+0x21/0x2e [ 574.837608][T16707] bpf_prog_run_pin_on_cpu+0x142/0x470 [ 574.837644][T16707] bpf_prog_test_run_syscall+0x324/0x4c0 [ 574.837680][T16707] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 574.837707][T16707] ? __fget_files+0x2a/0x420 [ 574.837734][T16707] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 574.837762][T16707] bpf_prog_test_run+0x2c5/0x340 [ 574.837783][T16707] __sys_bpf+0xa22/0xd90 [ 574.837817][T16707] ? __pfx___sys_bpf+0x10/0x10 [ 574.837846][T16707] ? do_futex+0x333/0x420 [ 574.837892][T16707] ? rcu_is_watching+0x15/0xb0 [ 574.837920][T16707] __x64_sys_bpf+0xba/0xd0 [ 574.837947][T16707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.837966][T16707] do_syscall_64+0x174/0x580 [ 574.837993][T16707] ? trace_irq_disable+0x3b/0x140 [ 574.838022][T16707] ? clear_bhb_loop+0x40/0x90 [ 574.838046][T16707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.838066][T16707] RIP: 0033:0x7f3c7659ce59 [ 574.838084][T16707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.838101][T16707] RSP: 002b:00007f3c77393028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 574.838122][T16707] RAX: ffffffffffffffda RBX: 00007f3c76815fa0 RCX: 00007f3c7659ce59 [ 574.838135][T16707] RDX: 0000000000000010 RSI: 0000200000001ac0 RDI: 000000000000000a [ 574.838148][T16707] RBP: 00007f3c76632d6f R08: 0000000000000000 R09: 0000000000000000 [ 574.838160][T16707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.838172][T16707] R13: 00007f3c76816038 R14: 00007f3c76815fa0 R15: 00007ffef3442628 [ 574.838204][T16707] [ 575.157825][T16709] lo speed is unknown, defaulting to 1000