last executing test programs: 56.596020583s ago: executing program 3 (id=481): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x482, 0x81, 0x7ff, 0x0, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 55.745458166s ago: executing program 3 (id=488): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x10000) 55.711941349s ago: executing program 0 (id=489): socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c00000000000000000000000700000044180501"], 0x30}, 0x7e8166965e22236a) 55.611886332s ago: executing program 4 (id=490): socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 55.555868365s ago: executing program 0 (id=492): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000007cc38af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 55.3560411s ago: executing program 0 (id=496): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x420, 0x3ec, 0x400, 0x70bd28, 0x25dfdbfc, {0x3, 0x2, 0x11, [0x3, 0x1, 0x0, 0x0, 0x9, 0x1000, 0x5, 0x7bfb, 0x200, 0x101, 0x2, 0x6, 0x0, 0x7, 0x5, 0x71, 0xfae3, 0xc6, 0x80000000, 0xf, 0x2, 0xb5a, 0x7fffffff, 0x200, 0x9, 0x4, 0x7fffffff, 0x1, 0x1, 0x9, 0x6, 0x5, 0x80, 0x7, 0x1, 0x8, 0x800, 0x18, 0x400, 0x3, 0xffff, 0x1ff, 0x4, 0x5, 0x5, 0x7, 0x5, 0x3, 0x2, 0x81, 0x1, 0x7, 0xfffffffa, 0x9, 0x0, 0x904f, 0x4, 0x9, 0x100, 0x4, 0x8000007, 0x4, 0x7, 0x1], [0xd, 0x0, 0x7, 0x416, 0x400, 0x8, 0xffff0001, 0x2, 0xbe, 0xb8, 0x40, 0xed, 0x4d, 0x7fffffff, 0x5, 0xffffffa2, 0xfffffffa, 0x7b5e, 0x8, 0x2, 0x9, 0x6, 0x4, 0xc005, 0x7, 0x7a4, 0x3b6, 0x2258, 0x9, 0x2, 0x9, 0x9, 0x8, 0x9, 0x401, 0x9, 0x1, 0x9, 0x6, 0xfffffff7, 0x1, 0x3f, 0x7, 0x2, 0x8, 0x6, 0x3, 0xa, 0x7, 0x7fffffff, 0xc, 0x3, 0x5, 0x2, 0x80000000, 0x2, 0xa4, 0xd, 0x6, 0x0, 0x9ecf, 0x4, 0x9a2, 0x1], [0x8, 0x4, 0x8000, 0x5, 0xc45, 0x0, 0x659, 0x5, 0x2, 0x7, 0x6, 0x5, 0x7f, 0x8, 0x640b, 0x9, 0x6, 0xb8000000, 0x2, 0x480, 0x9, 0x1, 0x62, 0xfffffffe, 0x5, 0x9, 0x3, 0x8, 0x8, 0x9a, 0x0, 0xcc1, 0xfe1, 0x8, 0x9a6, 0x400, 0x1, 0x401, 0x3, 0x9, 0x5, 0xfffffff8, 0x6, 0x1, 0x9, 0x486c4cc5, 0xc, 0x2, 0x0, 0x4, 0x7cec, 0x280f, 0x4, 0x3, 0x1, 0x3, 0xffff, 0x5, 0x1, 0x2, 0x2, 0x9, 0x3, 0x3], [0x10000, 0x40, 0x8, 0xd, 0x222f99b1, 0x90000, 0x1, 0x80000000, 0xfffffffb, 0x80, 0x8001, 0x2, 0x0, 0x2, 0xc00000, 0x401, 0x7ff, 0x8, 0x281ae340, 0x6, 0x1, 0x80000000, 0x35, 0x7, 0xf, 0x56, 0x1, 0x2, 0x3, 0x40, 0x1000, 0xa, 0x5, 0x4, 0x4, 0x7fffffff, 0x400, 0x7, 0x5, 0x1195, 0x9, 0x8d, 0x5, 0x444f, 0x8, 0x7, 0x9b, 0x9, 0x9, 0x2bd0, 0x3, 0x0, 0xe, 0x4, 0x2a4806ca, 0x6, 0x1, 0x0, 0x2, 0x9c3, 0x4, 0x9, 0x9d49, 0xfffffffd]}}, 0x420}, 0x1, 0x0, 0x0, 0x24000041}, 0x0) 55.233700912s ago: executing program 4 (id=497): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000300)) 55.043147159s ago: executing program 1 (id=500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 55.007944566s ago: executing program 0 (id=501): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000540)="7c603bb980ffa3251587ea157931a08af1a276dbb5be30d61824acf02ad2dc3520d5c3a124fb3d83dbdcb5bd3c43f57823f510fff4d20932a7b016fa1d2310b4044a3bd63896c5c9d6fe5929e319e7eca7d627597ce21ed8960e176b8a4f87c601369470bde8047864cee37515372d4f5e3ee4767f77d01a1f2e653a07b3e20c118caafc539598705c44e499346d00a574a8b5c24b31694b816af70dde7900c5f61779a6bafba45f052df09f16495e247dd2ea519def292d2adadb3f6d902dc1c2fc4b2afea7157f458952360b352e2939d85ed068584b6504ffcd388c0fcbe6893726c31a3e8fd4791b9d42c2400e0df37616d446a3bdd28fcbda7f90d51220be28b5df0cdd2e6d2751b7aa948b8b3790117d58e8fc6592d23b36edbef3c0a357fbc423f95bec1064dae1f79bf84eaa60a5f34376e9ad6e7724bf751faade801d9303e6a1887604c091a8faa7461ea94cfebd7ac56a67cad554df64d4083202c548cdd2178e39aff3a70c1a9e0c7ed5e69c6a02e1b0dd5351dc6f33eb5c2613973ecb53d9408ed73a72bb0f5650ec82538dcdafab2d48aff30ea238d8af97b6fd792e5f7498e058d0f36c277e07b83fc287353369c45ab9fdf267e0660191a39e09ad129363cd5f953a32373a0ed80905d7e4f7906878b477aebc011a91c5fa2b8e8f771f72afe702ea87a0aa5ccd6cf5915976e7ebed5b8e211bdd27860cbab458aade79564623652a6a30551e7621244a47d5321c395a5f94320eaf1a40c3263e1acb6d217aceab7d83bc0a7117ffda281d03f9bafb447caf5adaa902b1374cac52eab591255463fd1d9a4451196b8359a713d3d46cb8343d763e1466c69a0987b73e7a68907d51c06a5995749324a43b238291476551d3a09736ec7a419faba93e8efe1f34b92f079aac77e1d54a08a73ebf25e2723587516cd9326704f0cc8e63064670f71eae4c378552c09b3e8d24d2aa4192717767e75ef67705cdb97557f7f21b6d3dbf87e1687d189450efe1827f2c8a647eec8dfa7539eb1c1bea95b0d3378c29d8d4f85b47f06f1b363aa2e150daa988be3151f9f7651aaa22c3846e3713718b4af3897ec0322685ab898c9eaa48cea38471fe4169d8c182df391d6f74467d479c7ee4b2ca3e44dd44799b850e8323b8877ece79b60fcbd657a13701eb3742888e755f19f11d1ab710a5ad6381998d7364b51f3e7dad705672d7933939b4f10242940aebe80bca9f9d56ac87e09f3bdffb62b887ae294d5617ea1f695f1cdd7d57c92cb597322e3b25a1449fedb478ab8dabdeee7cb9565661f3de0c8edf479ce733c7304c1420501151ee8a092870ad3bcc738eb00b8e84c261865af7ea397a41651e7301fc03f6dbb356df59d9a3f9c18f9cf71453d93fa7e82eadd5596d183bb85f4909cc89d89f6e7763607f64d5d9cbe39b931fa006d134b3d040c5738ae18e24be20756cd2eae54bb9a2a1d7cc4448e5f15e2733b82949923ab13dac9c0319ab3078a3e79a8be510016605aef6fc132ca0b4e5d009d76f082afd2ef6d29f89695519606c99424d329077d3222fe41d967bf719a42671c4fd5841faf0d496cadf8a6fd2cbe6789622da0f6bd12a5ca2283dfa97260a62c495c7534dc0b6aea7df3b43b89a6455f2133c6d58d7d9c2d379868f4035e072724e9789a3469efff1a9fb89c10b70c1e44c852062b3b4541b713e6f607ae7eb1ad8a6c88391002b8c8cdde7467f22a9679daadd88319ecc1505b5a9ee774495865d946e58f8d7b2f09636a38c34af89b08f6c6cfb3bdf4ec30acb233c348ec86cfdda69a6f05bf387171b21e5df3b455f59867b8157e501487682b5987b3a8c5f3c43acbe0f158bcc294e6e77bb84a80acc12663ca12a899014216a64c002842195e439f32e86cbf46f7390230007447a505905a6b6b404f18360bb340b8e5dc6bb6aa3e95e6d236e9b57ad1d9e4fb0fe62a7a1109e7445940b49633055ab2096059720", 0x3192}], 0x1}, 0x40) close(0x3) 54.921537357s ago: executing program 4 (id=502): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r3, 0x0, '\x00', 0x0, r2, 0x0, 0x5}, 0x48) 54.886593751s ago: executing program 1 (id=503): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 54.7749717s ago: executing program 3 (id=505): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 54.732441071s ago: executing program 1 (id=506): r0 = socket$kcm(0x1e, 0x4, 0x0) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)=""/104, 0x68}], 0x1}, 0x40000020) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) 54.662167025s ago: executing program 4 (id=507): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) 54.638511281s ago: executing program 3 (id=508): bpf$BPF_BTF_GET_NEXT_ID(0x7, &(0x7f0000000240)={0x20fffffe}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 54.558645908s ago: executing program 1 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3a66505}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) 54.446051077s ago: executing program 3 (id=511): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100000001692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 54.366321127s ago: executing program 1 (id=512): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000009c0)={r0, &(0x7f0000000800), 0x0}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x1004}, 0x110400, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x44191}, 0x0) 54.365048265s ago: executing program 4 (id=513): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac008000200070002000600020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 54.050170095s ago: executing program 0 (id=514): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 53.89141548s ago: executing program 3 (id=515): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket(0x840000000002, 0x3, 0xff) sendmsg$kcm(r3, &(0x7f0000002800)={&(0x7f0000001680)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000001080)=[{&(0x7f0000001100)="ebb28f7fab10e643c0a56b5b8e343e18682962867a4af0ca2a3c261fe42309c51759fc7281c8e44b4f93", 0x2a}, {&(0x7f0000000040)="2de6", 0x2}], 0x2}, 0x4000) 53.807484172s ago: executing program 4 (id=516): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 53.239400402s ago: executing program 32 (id=515): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket(0x840000000002, 0x3, 0xff) sendmsg$kcm(r3, &(0x7f0000002800)={&(0x7f0000001680)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000001080)=[{&(0x7f0000001100)="ebb28f7fab10e643c0a56b5b8e343e18682962867a4af0ca2a3c261fe42309c51759fc7281c8e44b4f93", 0x2a}, {&(0x7f0000000040)="2de6", 0x2}], 0x2}, 0x4000) 53.220441542s ago: executing program 0 (id=518): socket$inet(0x2, 0x2, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000000c060500000000000000000000000003050001"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) 53.116943973s ago: executing program 33 (id=518): socket$inet(0x2, 0x2, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000000c060500000000000000000000000003050001"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) 53.090220018s ago: executing program 34 (id=516): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 51.249210791s ago: executing program 1 (id=526): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)="1400000024000b475280ce6e7806f37201cf3494", 0x14}], 0x1}, 0x44) recvmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 50.843372366s ago: executing program 35 (id=526): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)="1400000024000b475280ce6e7806f37201cf3494", 0x14}], 0x1}, 0x44) recvmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 7.243044795s ago: executing program 5 (id=827): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 6.347706278s ago: executing program 5 (id=834): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe7, 0xfff2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x4, 0x80000000, 0x866}}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47, 0x2}}}}]}]}, 0x68}}, 0x20000014) 5.815021858s ago: executing program 5 (id=839): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8880) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) 5.487133489s ago: executing program 2 (id=843): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 5.327867901s ago: executing program 8 (id=844): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{r0}, &(0x7f0000000c00), &(0x7f0000000c40)='%-5lx \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 5.045033699s ago: executing program 5 (id=847): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2222, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f6e9, 0x0, @perf_bp={0x0, 0x8}, 0x4889, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.002923341s ago: executing program 8 (id=848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2018, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) 4.807074402s ago: executing program 2 (id=850): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, 0x0, 0x9a) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000)=r3, 0x4) 4.703104789s ago: executing program 2 (id=851): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x3, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1a000}], 0x1}, 0x0) 4.554702206s ago: executing program 5 (id=852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 4.146897278s ago: executing program 7 (id=853): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8080, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7deb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb904021d0800fd007c05e8fe55a108001e000140020304000e4190001e00ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a7cee4090000001fb791643a5ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af2f28fcb1dc7a2cfe8ee732717c6ef", 0xd8}], 0x1}, 0x0) 3.899586058s ago: executing program 7 (id=854): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x581, 0x20c62, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x69, 0x3}, 0x0, 0xca, 0x200000, 0x0, 0x7, 0x100, 0x0, 0x0, 0xe}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="02"], 0x9a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.763864385s ago: executing program 7 (id=855): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x88) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021241300001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000f8120380300000802c000180250001007bb0"], 0x13a8}}, 0x0) 3.66080468s ago: executing program 2 (id=856): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_clone(0x4001000, 0x0, 0x408, &(0x7f0000000140), 0x0, 0x0) 3.469288372s ago: executing program 7 (id=857): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0xa00, 0x4000000}, 0x28) 3.363684203s ago: executing program 2 (id=858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) 3.142176322s ago: executing program 7 (id=859): syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2.692331425s ago: executing program 6 (id=860): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000060000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.280981449s ago: executing program 6 (id=861): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f5, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33) 2.147577079s ago: executing program 2 (id=862): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) 1.882527277s ago: executing program 6 (id=863): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x20}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="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", 0xfdef}], 0x1}, 0x48800) 1.881324299s ago: executing program 8 (id=864): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r2}) 1.800042694s ago: executing program 8 (id=865): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xd0}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 1.615010868s ago: executing program 8 (id=866): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @loopback}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000084) 1.264885576s ago: executing program 6 (id=867): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80, 0x5, 0x1000}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 983.73292ms ago: executing program 6 (id=868): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 902.757535ms ago: executing program 8 (id=869): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffef) ioctl$TUNGETVNETLE(r1, 0x8004745a, &(0x7f00000000c0)) 31.501961ms ago: executing program 7 (id=870): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82030, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 19.47881ms ago: executing program 6 (id=871): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000002780)=""/4096, 0x4}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 0s ago: executing program 5 (id=872): socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x8224, 0xa, 0x0, 0x0, 0x593f, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. [ 80.094894][ T5850] cgroup: Unknown subsys name 'net' [ 80.287166][ T5850] cgroup: Unknown subsys name 'cpuset' [ 80.297328][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.903406][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.783452][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.810142][ T5874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.819797][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.828163][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.836488][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.844397][ T5874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.851985][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.859543][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.868231][ T5874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.876394][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.883717][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.895215][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.927181][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.934824][ T5879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.943519][ T5881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.945237][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.951715][ T5881] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.958983][ T5879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.965490][ T5881] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.978387][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.983213][ T5879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.991445][ T5881] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.000401][ T5879] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.013327][ T5881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.021360][ T5881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.544327][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 85.780040][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 85.838475][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 85.850796][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 85.905319][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.912733][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.920841][ T5868] bridge_slave_0: entered allmulticast mode [ 85.929349][ T5868] bridge_slave_0: entered promiscuous mode [ 85.978038][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.985267][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.992602][ T5868] bridge_slave_1: entered allmulticast mode [ 85.999902][ T5868] bridge_slave_1: entered promiscuous mode [ 86.008044][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 86.138667][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.169549][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.177485][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.185069][ T5872] bridge_slave_0: entered allmulticast mode [ 86.192277][ T5872] bridge_slave_0: entered promiscuous mode [ 86.202657][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.269733][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.277297][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.284835][ T5872] bridge_slave_1: entered allmulticast mode [ 86.292051][ T5872] bridge_slave_1: entered promiscuous mode [ 86.317784][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.325137][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.333717][ T5861] bridge_slave_0: entered allmulticast mode [ 86.340953][ T5861] bridge_slave_0: entered promiscuous mode [ 86.406575][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.413893][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.421054][ T5861] bridge_slave_1: entered allmulticast mode [ 86.428932][ T5861] bridge_slave_1: entered promiscuous mode [ 86.435873][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.443309][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.450527][ T5866] bridge_slave_0: entered allmulticast mode [ 86.459183][ T5866] bridge_slave_0: entered promiscuous mode [ 86.469064][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.480208][ T5868] team0: Port device team_slave_0 added [ 86.515809][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.523177][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.530311][ T5866] bridge_slave_1: entered allmulticast mode [ 86.538751][ T5866] bridge_slave_1: entered promiscuous mode [ 86.548707][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.573463][ T5868] team0: Port device team_slave_1 added [ 86.634516][ T5872] team0: Port device team_slave_0 added [ 86.653727][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.661551][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.671726][ T5860] bridge_slave_0: entered allmulticast mode [ 86.679623][ T5860] bridge_slave_0: entered promiscuous mode [ 86.692138][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.717697][ T5872] team0: Port device team_slave_1 added [ 86.737529][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.744780][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.751901][ T5860] bridge_slave_1: entered allmulticast mode [ 86.760006][ T5860] bridge_slave_1: entered promiscuous mode [ 86.782597][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.794865][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.848913][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.856935][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.883766][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.934541][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.944647][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.951610][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.978855][ T5881] Bluetooth: hci0: command tx timeout [ 86.983031][ T5184] Bluetooth: hci2: command tx timeout [ 86.985193][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.002530][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.009490][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.036610][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.050941][ T5184] Bluetooth: hci4: command tx timeout [ 87.056574][ T5881] Bluetooth: hci3: command tx timeout [ 87.066511][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.123906][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.130899][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.158158][ T5881] Bluetooth: hci1: command tx timeout [ 87.165648][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.200883][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.230022][ T5861] team0: Port device team_slave_0 added [ 87.267578][ T5868] hsr_slave_0: entered promiscuous mode [ 87.274307][ T5868] hsr_slave_1: entered promiscuous mode [ 87.283860][ T5861] team0: Port device team_slave_1 added [ 87.304719][ T5866] team0: Port device team_slave_0 added [ 87.354515][ T5866] team0: Port device team_slave_1 added [ 87.360973][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.367962][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.394013][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.408502][ T5860] team0: Port device team_slave_0 added [ 87.441409][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.448465][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.474715][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.525499][ T5860] team0: Port device team_slave_1 added [ 87.531982][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.539426][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.565544][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.578421][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.585586][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.611697][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.710037][ T5861] hsr_slave_0: entered promiscuous mode [ 87.716880][ T5861] hsr_slave_1: entered promiscuous mode [ 87.723392][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 87.729204][ T5861] Cannot create hsr debugfs directory [ 87.741076][ T5872] hsr_slave_0: entered promiscuous mode [ 87.747666][ T5872] hsr_slave_1: entered promiscuous mode [ 87.753859][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 87.759596][ T5872] Cannot create hsr debugfs directory [ 87.789906][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.797021][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.823329][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.887444][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.894494][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.920429][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.032162][ T5866] hsr_slave_0: entered promiscuous mode [ 88.039299][ T5866] hsr_slave_1: entered promiscuous mode [ 88.045687][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 88.051424][ T5866] Cannot create hsr debugfs directory [ 88.153203][ T5860] hsr_slave_0: entered promiscuous mode [ 88.159891][ T5860] hsr_slave_1: entered promiscuous mode [ 88.166879][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 88.182866][ T5860] Cannot create hsr debugfs directory [ 88.517530][ T5868] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.554623][ T5868] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.598708][ T5868] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.626407][ T5868] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.690629][ T5861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.709143][ T5861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.721829][ T5861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.741530][ T5861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.836916][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.851258][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.864436][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.890514][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.983421][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.031433][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.048761][ T5881] Bluetooth: hci2: command tx timeout [ 89.054406][ T5184] Bluetooth: hci0: command tx timeout [ 89.080186][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.091652][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.119469][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.126369][ T5881] Bluetooth: hci3: command tx timeout [ 89.132802][ T5881] Bluetooth: hci4: command tx timeout [ 89.158151][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.183705][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.190863][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.203609][ T5881] Bluetooth: hci1: command tx timeout [ 89.218464][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.230813][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.241265][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.267302][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.274630][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.307436][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.314574][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.353185][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.381284][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.388484][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.425973][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.433180][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.516770][ T5868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.537993][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.595330][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.631572][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.638789][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.665545][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.699175][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.711739][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.718967][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.872392][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.902009][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.909204][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.938544][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.982136][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.989385][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.076791][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.120386][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.127686][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.154417][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.161598][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.179767][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.220864][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.432060][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.538111][ T5868] veth0_vlan: entered promiscuous mode [ 90.621139][ T5868] veth1_vlan: entered promiscuous mode [ 90.770305][ T5872] veth0_vlan: entered promiscuous mode [ 90.829310][ T5872] veth1_vlan: entered promiscuous mode [ 90.839788][ T5868] veth0_macvtap: entered promiscuous mode [ 90.869031][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.877377][ T5868] veth1_macvtap: entered promiscuous mode [ 90.895127][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.933229][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.962351][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.986104][ T5872] veth0_macvtap: entered promiscuous mode [ 91.019572][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.029555][ T5872] veth1_macvtap: entered promiscuous mode [ 91.048024][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.058638][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.078252][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.111639][ T5861] veth0_vlan: entered promiscuous mode [ 91.123564][ T5184] Bluetooth: hci0: command tx timeout [ 91.129066][ T5881] Bluetooth: hci2: command tx timeout [ 91.135409][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.180451][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.203056][ T5881] Bluetooth: hci4: command tx timeout [ 91.208510][ T5881] Bluetooth: hci3: command tx timeout [ 91.223928][ T5860] veth0_vlan: entered promiscuous mode [ 91.229756][ T5866] veth0_vlan: entered promiscuous mode [ 91.271596][ T5861] veth1_vlan: entered promiscuous mode [ 91.279602][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.289088][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.298259][ T5881] Bluetooth: hci1: command tx timeout [ 91.308232][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.317889][ T5860] veth1_vlan: entered promiscuous mode [ 91.332121][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.333247][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.350817][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.382431][ T5866] veth1_vlan: entered promiscuous mode [ 91.434155][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.445086][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.549513][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.550741][ T5860] veth0_macvtap: entered promiscuous mode [ 91.593429][ T5866] veth0_macvtap: entered promiscuous mode [ 91.602054][ T5860] veth1_macvtap: entered promiscuous mode [ 91.615769][ T5861] veth0_macvtap: entered promiscuous mode [ 91.632135][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.636321][ T5861] veth1_macvtap: entered promiscuous mode [ 91.655751][ T5866] veth1_macvtap: entered promiscuous mode [ 91.665287][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.770430][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.797710][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.825185][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.840304][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.866436][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.884101][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.887066][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.904468][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.929894][ T1217] cfg80211: failed to load regulatory.db [ 91.974120][ T2996] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.067754][ T2996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.078420][ T2996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.103022][ T2996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.123667][ T2996] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.165092][ T2996] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.204258][ T2996] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.225487][ T2996] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.278713][ T5994] netlink: 'syz.3.8': attribute type 21 has an invalid length. [ 92.368667][ T2996] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.382956][ T5994] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8'. [ 92.391877][ T5994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8'. [ 92.429464][ T2996] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.447407][ T2996] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.531418][ T2996] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.665390][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.675113][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.806765][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.832891][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.847351][ T6001] netlink: 1 bytes leftover after parsing attributes in process `syz.3.11'. [ 92.862866][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.870709][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.942611][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.971763][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.002427][ C0] hrtimer: interrupt took 93301 ns [ 93.017530][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.056813][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.109072][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.165295][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.219732][ T5184] Bluetooth: hci0: command tx timeout [ 93.225328][ T5881] Bluetooth: hci2: command tx timeout [ 93.282677][ T5184] Bluetooth: hci4: command tx timeout [ 93.288167][ T5881] Bluetooth: hci3: command tx timeout [ 93.369466][ T5881] Bluetooth: hci1: command tx timeout [ 93.658458][ T6018] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.16'. [ 93.705701][ T6019] netlink: 'syz.2.3': attribute type 39 has an invalid length. [ 94.396944][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 94.461026][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 94.923846][ T6044] netlink: 17 bytes leftover after parsing attributes in process `syz.0.26'. [ 94.963661][ T6044] netlink: zone id is out of range [ 94.982648][ T6044] netlink: zone id is out of range [ 94.988395][ T6044] netlink: zone id is out of range [ 95.009701][ T6044] netlink: zone id is out of range [ 95.027412][ T6044] netlink: zone id is out of range [ 95.054805][ T6044] netlink: zone id is out of range [ 95.059976][ T6044] netlink: zone id is out of range [ 95.108594][ T6044] netlink: zone id is out of range [ 95.116993][ T6044] netlink: zone id is out of range [ 95.157017][ T6044] netlink: zone id is out of range [ 95.317423][ T6057] netlink: 60 bytes leftover after parsing attributes in process `syz.1.30'. [ 96.125889][ T6073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.37'. [ 96.251701][ T6080] netlink: 48 bytes leftover after parsing attributes in process `syz.0.38'. [ 98.284309][ T6140] __nla_validate_parse: 2 callbacks suppressed [ 98.284331][ T6140] netlink: 44 bytes leftover after parsing attributes in process `syz.3.61'. [ 98.614751][ T6152] netlink: 60 bytes leftover after parsing attributes in process `syz.4.64'. [ 98.644993][ T6152] netlink: 60 bytes leftover after parsing attributes in process `syz.4.64'. [ 100.540716][ T6189] delete_channel: no stack [ 100.979607][ T6213] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.668125][ T6231] netlink: 80 bytes leftover after parsing attributes in process `syz.0.97'. [ 101.701163][ T6232] netlink: 184 bytes leftover after parsing attributes in process `syz.1.98'. [ 101.844845][ T6239] warning: `syz.2.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.929829][ T6241] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.102'. [ 102.387271][ T6254] netlink: 'syz.4.107': attribute type 3 has an invalid length. [ 102.470260][ T6254] netlink: 'syz.4.107': attribute type 2 has an invalid length. [ 102.535565][ T6254] netlink: 'syz.4.107': attribute type 1 has an invalid length. [ 102.576652][ T6254] netlink: 198112 bytes leftover after parsing attributes in process `syz.4.107'. [ 104.046214][ T6308] wg2: entered promiscuous mode [ 104.072686][ T6308] wg2: entered allmulticast mode [ 105.162314][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 105.321412][ T6357] netlink: 208192 bytes leftover after parsing attributes in process `syz.2.149'. [ 105.368958][ T6357] netlink: 'syz.2.149': attribute type 1 has an invalid length. [ 105.379591][ T6357] netlink: 'syz.2.149': attribute type 2 has an invalid length. [ 105.548307][ T6367] netlink: 132 bytes leftover after parsing attributes in process `syz.1.151'. [ 106.459050][ T6385] netlink: 'syz.1.161': attribute type 13 has an invalid length. [ 106.467148][ T6385] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.161'. [ 107.600101][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.608375][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.762929][ T6444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.183'. [ 108.784001][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.869386][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.124851][ T6454] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.188'. [ 109.549693][ T6432] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.177'. [ 109.581352][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.633437][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.660278][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.887748][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.998788][ T6468] ======================================================= [ 109.998788][ T6468] WARNING: The mand mount option has been deprecated and [ 109.998788][ T6468] and is ignored by this kernel. Remove the mand [ 109.998788][ T6468] option from the mount to silence this warning. [ 109.998788][ T6468] ======================================================= [ 111.714678][ T6513] netlink: 'syz.3.214': attribute type 2 has an invalid length. [ 111.754139][ T6513] netlink: 51 bytes leftover after parsing attributes in process `syz.3.214'. [ 111.993102][ T6520] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 112.027475][ T6521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.035594][ T6521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.058956][ T6521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.067892][ T6521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.580850][ T6555] netlink: 'syz.1.232': attribute type 49 has an invalid length. [ 113.601636][ T6555] netlink: 'syz.1.232': attribute type 50 has an invalid length. [ 113.621782][ T6555] netlink: 'syz.1.232': attribute type 51 has an invalid length. [ 113.646963][ T6557] netlink: 'syz.1.232': attribute type 49 has an invalid length. [ 113.657334][ T6557] netlink: 'syz.1.232': attribute type 50 has an invalid length. [ 113.678626][ T6557] netlink: 'syz.1.232': attribute type 51 has an invalid length. [ 113.711067][ T6558] netlink: 'syz.4.233': attribute type 39 has an invalid length. [ 113.767825][ T6558] veth0_macvtap: left promiscuous mode [ 114.403446][ T6585] netlink: 'syz.0.244': attribute type 10 has an invalid length. [ 114.416320][ T6579] IPv6: NLM_F_CREATE should be specified when creating new route [ 114.447162][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.244'. [ 114.489985][ T6585] ipvlan1: entered promiscuous mode [ 114.535124][ T6585] ipvlan1: entered allmulticast mode [ 114.588308][ T6585] veth0_vlan: entered allmulticast mode [ 114.623216][ T6590] netlink: 495 bytes leftover after parsing attributes in process `syz.3.246'. [ 114.710882][ T6585] bridge0: port 3(ipvlan1) entered blocking state [ 114.747820][ T6585] bridge0: port 3(ipvlan1) entered disabled state [ 114.775225][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 114.798925][ T6585] net_ratelimit: 72 callbacks suppressed [ 114.798963][ T6585] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 115.880874][ T6612] netlink: 'syz.0.256': attribute type 21 has an invalid length. [ 115.958345][ T6613] netlink: 56 bytes leftover after parsing attributes in process `syz.4.254'. [ 116.678159][ T6645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.341922][ T6655] netlink: 'syz.0.273': attribute type 1 has an invalid length. [ 117.405367][ T6655] netlink: 17 bytes leftover after parsing attributes in process `syz.0.273'. [ 117.717084][ T6667] netlink: 'syz.0.279': attribute type 22 has an invalid length. [ 118.020532][ T6680] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.285'. [ 119.909361][ T6715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.152836][ T6722] ref_ctr_offset mismatch. inode: 0x123 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 121.339194][ T6747] netlink: 'syz.0.312': attribute type 22 has an invalid length. [ 122.059102][ T6774] netlink: 830 bytes leftover after parsing attributes in process `syz.3.324'. [ 122.258521][ T6782] netlink: 'syz.2.325': attribute type 29 has an invalid length. [ 122.305989][ T6782] netlink: 'syz.2.325': attribute type 29 has an invalid length. [ 122.557239][ T6793] syz.2.331 uses obsolete (PF_INET,SOCK_PACKET) [ 123.577360][ T6816] sock: sock_timestamping_bind_phc: sock not bind to device [ 123.952079][ T6828] netlink: 208252 bytes leftover after parsing attributes in process `syz.1.342'. [ 123.966482][ T6829] netlink: 'syz.0.341': attribute type 7 has an invalid length. [ 124.004440][ T6828] netlink: 'syz.1.342': attribute type 1 has an invalid length. [ 124.036371][ T6828] netlink: 'syz.1.342': attribute type 2 has an invalid length. [ 124.063954][ T6828] netlink: 'syz.1.342': attribute type 3 has an invalid length. [ 124.093921][ T6833] netlink: 'syz.4.344': attribute type 10 has an invalid length. [ 124.107660][ T6828] netlink: 'syz.1.342': attribute type 4 has an invalid length. [ 124.151826][ T6833] veth0_vlan: left promiscuous mode [ 124.170490][ T6833] veth0_vlan: entered promiscuous mode [ 124.200923][ T6833] team0: Device veth0_vlan failed to register rx_handler [ 124.382479][ T6833] syz.4.344 (6833) used greatest stack depth: 18344 bytes left [ 125.893638][ T6881] syzkaller0: entered promiscuous mode [ 125.908854][ T6881] syzkaller0: entered allmulticast mode [ 127.189541][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.370'. [ 127.255113][ T6902] netlink: 'syz.3.372': attribute type 29 has an invalid length. [ 127.280293][ T6902] netlink: 'syz.3.372': attribute type 29 has an invalid length. [ 127.291657][ T6902] netlink: 147608 bytes leftover after parsing attributes in process `syz.3.372'. [ 127.301426][ T6902] netlink: 'syz.3.372': attribute type 1 has an invalid length. [ 127.309435][ T6902] netlink: 'syz.3.372': attribute type 2 has an invalid length. [ 127.328654][ T6902] netlink: 61939 bytes leftover after parsing attributes in process `syz.3.372'. [ 128.753154][ T6924] TCP: TCP_TX_DELAY enabled [ 128.844344][ T6928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.384'. [ 128.864289][ T6928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.384'. [ 129.396338][ T6948] netlink: 'syz.1.392': attribute type 10 has an invalid length. [ 129.445151][ T6948] netlink: 40 bytes leftover after parsing attributes in process `syz.1.392'. [ 129.544818][ T6948] bridge0: port 3(ipvlan1) entered blocking state [ 129.572808][ T6948] bridge0: port 3(ipvlan1) entered disabled state [ 129.580292][ T6948] ipvlan1: entered allmulticast mode [ 129.613601][ T6948] veth0_vlan: entered allmulticast mode [ 129.640216][ T6948] ipvlan1: left allmulticast mode [ 129.647883][ T6948] veth0_vlan: left allmulticast mode [ 129.656572][ T6948] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 130.076393][ T6978] netlink: 51563 bytes leftover after parsing attributes in process `syz.3.405'. [ 130.115365][ T6980] netlink: 'syz.2.404': attribute type 2 has an invalid length. [ 130.741895][ T6997] netlink: 752 bytes leftover after parsing attributes in process `syz.0.412'. [ 130.982055][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'. [ 130.995024][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 131.695496][ T7032] netlink: 830 bytes leftover after parsing attributes in process `syz.0.429'. [ 131.909810][ T7037] netlink: 'syz.2.431': attribute type 9 has an invalid length. [ 131.951192][ T7037] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.431'. [ 132.341145][ T7030] syzkaller0: entered promiscuous mode [ 132.390337][ T7030] syzkaller0: entered allmulticast mode [ 132.609875][ T7043] netlink: 'syz.2.433': attribute type 10 has an invalid length. [ 132.643573][ T7043] netlink: 40 bytes leftover after parsing attributes in process `syz.2.433'. [ 132.892756][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.899872][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.922839][ T7052] netlink: 'syz.3.437': attribute type 11 has an invalid length. [ 132.931083][ T7052] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.437'. [ 133.010366][ T7051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.030125][ T7043] bridge0: port 3(ipvlan1) entered blocking state [ 134.038649][ T7043] bridge0: port 3(ipvlan1) entered disabled state [ 134.045381][ T7043] ipvlan1: entered allmulticast mode [ 134.050838][ T7043] veth0_vlan: entered allmulticast mode [ 134.062497][ T7043] ipvlan1: left allmulticast mode [ 134.067561][ T7043] veth0_vlan: left allmulticast mode [ 134.073367][ T7043] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 135.643685][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'. [ 136.461628][ T7122] netlink: 24032 bytes leftover after parsing attributes in process `syz.3.465'. [ 136.532476][ T7122] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.465'. [ 136.557476][ T7122] netlink: 24032 bytes leftover after parsing attributes in process `syz.3.465'. [ 137.316832][ T7150] netlink: 'syz.1.476': attribute type 21 has an invalid length. [ 137.395223][ T7150] netlink: 100 bytes leftover after parsing attributes in process `syz.1.476'. [ 138.496800][ T7184] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 139.013124][ T7202] netlink: 'syz.2.499': attribute type 3 has an invalid length. [ 139.771376][ T7232] wlan1 speed is unknown, defaulting to 1000 [ 139.787768][ T7232] wlan1 speed is unknown, defaulting to 1000 [ 139.862322][ T7232] wlan1 speed is unknown, defaulting to 1000 [ 139.969945][ T7232] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 140.069995][ T7232] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 140.448694][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.620119][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.664413][ T7232] wlan1 speed is unknown, defaulting to 1000 [ 140.711144][ T7232] wlan1 speed is unknown, defaulting to 1000 [ 140.796830][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.848870][ T7232] wlan1 speed is unknown, defaulting to 1000 [ 140.951290][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.003274][ T7232] wlan1 speed is unknown, defaulting to 1000 [ 141.051665][ T7232] wlan1 speed is unknown, defaulting to 1000 [ 141.395309][ T49] bridge_slave_1: left allmulticast mode [ 141.401132][ T49] bridge_slave_1: left promiscuous mode [ 141.443706][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.553814][ T49] bridge_slave_0: left allmulticast mode [ 141.559532][ T49] bridge_slave_0: left promiscuous mode [ 141.592786][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.820683][ T5184] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.829835][ T5184] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.838080][ T5184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.849191][ T5184] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 141.857418][ T5184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.988929][ T5184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 142.001489][ T5184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 142.010483][ T5879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 142.017783][ T5184] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 142.027066][ T5879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 142.035089][ T5879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 142.048857][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 142.057183][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 142.065775][ T5184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 142.075330][ T5184] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 142.440232][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.460056][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.478168][ T49] bond0 (unregistering): Released all slaves [ 142.545173][ T7253] macsec0: entered promiscuous mode [ 142.551133][ T7253] macsec0: entered allmulticast mode [ 142.566510][ T7253] veth1_macvtap: entered allmulticast mode [ 142.730955][ T7256] wlan1 speed is unknown, defaulting to 1000 [ 142.757070][ T7252] wlan1 speed is unknown, defaulting to 1000 [ 142.837527][ T7257] wlan1 speed is unknown, defaulting to 1000 [ 143.538078][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 143.550456][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 143.558504][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 143.567365][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 143.575979][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 143.586755][ T49] hsr_slave_0: left promiscuous mode [ 143.593728][ T49] hsr_slave_1: left promiscuous mode [ 143.600023][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.622432][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.631144][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.642411][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.706647][ T49] veth1_macvtap: left promiscuous mode [ 143.719402][ T49] veth0_macvtap: left promiscuous mode [ 143.731810][ T49] veth1_vlan: left promiscuous mode [ 143.740109][ T49] veth0_vlan: left promiscuous mode [ 143.748045][ T7292] netlink: 'syz.2.529': attribute type 2 has an invalid length. [ 143.758463][ T7292] netlink: 'syz.2.529': attribute type 1 has an invalid length. [ 143.927624][ T5184] Bluetooth: hci0: command tx timeout [ 144.162893][ T5184] Bluetooth: hci2: command tx timeout [ 144.170117][ T5867] Bluetooth: hci1: command tx timeout [ 144.226517][ T49] team0 (unregistering): Port device team_slave_1 removed [ 144.260271][ T49] team0 (unregistering): Port device team_slave_0 removed [ 144.723050][ T7286] wlan1 speed is unknown, defaulting to 1000 [ 145.095021][ T7256] chnl_net:caif_netlink_parms(): no params data found [ 145.172283][ T7252] chnl_net:caif_netlink_parms(): no params data found [ 145.402167][ T7257] chnl_net:caif_netlink_parms(): no params data found [ 145.603371][ T5184] Bluetooth: hci4: command tx timeout [ 145.743700][ T7256] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.750911][ T7256] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.758717][ T7256] bridge_slave_0: entered allmulticast mode [ 145.768385][ T7256] bridge_slave_0: entered promiscuous mode [ 145.816682][ T7256] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.824243][ T7256] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.831457][ T7256] bridge_slave_1: entered allmulticast mode [ 145.839829][ T7256] bridge_slave_1: entered promiscuous mode [ 145.874566][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.881725][ T7252] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.889164][ T7252] bridge_slave_0: entered allmulticast mode [ 145.898363][ T7252] bridge_slave_0: entered promiscuous mode [ 145.910435][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.917698][ T7252] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.925812][ T7252] bridge_slave_1: entered allmulticast mode [ 145.933975][ T7252] bridge_slave_1: entered promiscuous mode [ 146.012836][ T5184] Bluetooth: hci0: command tx timeout [ 146.040965][ T7252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.055337][ T7256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.065803][ T7257] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.073981][ T7257] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.082572][ T7257] bridge_slave_0: entered allmulticast mode [ 146.089869][ T7257] bridge_slave_0: entered promiscuous mode [ 146.114676][ T7252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.154857][ T7256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.165502][ T7257] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.174654][ T7257] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.184134][ T7257] bridge_slave_1: entered allmulticast mode [ 146.191491][ T7257] bridge_slave_1: entered promiscuous mode [ 146.221295][ T7252] team0: Port device team_slave_0 added [ 146.234332][ T7252] team0: Port device team_slave_1 added [ 146.242867][ T5867] Bluetooth: hci1: command tx timeout [ 146.249008][ T5184] Bluetooth: hci2: command tx timeout [ 146.303498][ T7257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.347480][ T7286] chnl_net:caif_netlink_parms(): no params data found [ 146.361947][ T7257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.388341][ T7256] team0: Port device team_slave_0 added [ 146.399455][ T7256] team0: Port device team_slave_1 added [ 146.441344][ T7252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.449423][ T7252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.475891][ T7252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.491061][ T7252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.501897][ T7252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.552820][ T7252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.683522][ T7256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.690743][ T7256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.718053][ T7256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.779186][ T7257] team0: Port device team_slave_0 added [ 146.809554][ T7257] team0: Port device team_slave_1 added [ 146.861525][ T7256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.872692][ T7256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.907011][ T7256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.064604][ T7252] hsr_slave_0: entered promiscuous mode [ 147.071524][ T7252] hsr_slave_1: entered promiscuous mode [ 147.077480][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 147.155703][ T7252] debugfs: 'hsr0' already exists in 'hsr' [ 147.161634][ T7252] Cannot create hsr debugfs directory [ 147.271684][ T7257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.281382][ T7257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.316190][ T7257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.461078][ T7257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.468591][ T7257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.500833][ T7257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.658843][ T7256] hsr_slave_0: entered promiscuous mode [ 147.669008][ T7256] hsr_slave_1: entered promiscuous mode [ 147.680936][ T7256] debugfs: 'hsr0' already exists in 'hsr' [ 147.690993][ T7256] Cannot create hsr debugfs directory [ 147.699078][ T5184] Bluetooth: hci4: command tx timeout [ 147.915296][ T7286] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.924841][ T7286] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.932153][ T7286] bridge_slave_0: entered allmulticast mode [ 147.941222][ T7286] bridge_slave_0: entered promiscuous mode [ 147.980295][ T7286] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.987983][ T7286] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.996058][ T7286] bridge_slave_1: entered allmulticast mode [ 148.004654][ T7286] bridge_slave_1: entered promiscuous mode [ 148.045290][ T7257] hsr_slave_0: entered promiscuous mode [ 148.057864][ T7257] hsr_slave_1: entered promiscuous mode [ 148.066806][ T7257] debugfs: 'hsr0' already exists in 'hsr' [ 148.072949][ T7257] Cannot create hsr debugfs directory [ 148.082550][ T5184] Bluetooth: hci0: command tx timeout [ 148.235653][ T7286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.315324][ T7286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.325175][ T5184] Bluetooth: hci2: command tx timeout [ 148.330751][ T5184] Bluetooth: hci1: command tx timeout [ 148.523550][ T7286] team0: Port device team_slave_0 added [ 148.590288][ T7286] team0: Port device team_slave_1 added [ 148.786161][ T7390] netlink: 204 bytes leftover after parsing attributes in process `syz.2.550'. [ 148.899160][ T7286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.906303][ T7286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.936599][ T7286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.995271][ T7286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.002277][ T7286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.038966][ T7286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.228334][ T7252] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 149.256558][ T7252] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 149.289675][ T7286] hsr_slave_0: entered promiscuous mode [ 149.303886][ T7286] hsr_slave_1: entered promiscuous mode [ 149.323391][ T7286] debugfs: 'hsr0' already exists in 'hsr' [ 149.329153][ T7286] Cannot create hsr debugfs directory [ 149.419735][ T7252] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 149.429345][ T7408] netlink: 32 bytes leftover after parsing attributes in process `syz.2.553'. [ 149.494584][ T7252] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.560191][ T7411] Driver unsupported XDP return value 0 on prog (id 327) dev N/A, expect packet loss! [ 149.697642][ T7257] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 149.721336][ T7257] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 149.762604][ T5184] Bluetooth: hci4: command tx timeout [ 149.775031][ T7257] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 149.831345][ T7257] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 149.963720][ T7256] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 149.985055][ T7256] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 150.053340][ T7256] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 150.074589][ T7256] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 150.163716][ T5184] Bluetooth: hci0: command tx timeout [ 150.387855][ T7286] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 150.403866][ T5184] Bluetooth: hci1: command tx timeout [ 150.403878][ T5867] Bluetooth: hci2: command tx timeout [ 150.461166][ T7252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.473983][ T7286] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 150.538621][ T7286] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 150.566506][ T7286] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 150.682019][ T7454] netlink: 14 bytes leftover after parsing attributes in process `syz.2.559'. [ 150.695886][ T7252] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.787532][ T7257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.797753][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.804951][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.856715][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.863933][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.976872][ T7257] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.007873][ T7465] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.560'. [ 151.027535][ T7256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.126152][ T7465] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 151.208219][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.215714][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.411471][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.418928][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.568839][ T7256] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.656458][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.663722][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.727031][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.734263][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.794511][ T7286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.845288][ T5867] Bluetooth: hci4: command tx timeout [ 151.907971][ T7286] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.978592][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.985782][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.070848][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.078184][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.271337][ T7252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.353541][ T7485] netlink: 132 bytes leftover after parsing attributes in process `syz.2.563'. [ 152.655268][ T7257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.085324][ T7256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.557598][ T7286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.835947][ T7252] veth0_vlan: entered promiscuous mode [ 153.916756][ T7252] veth1_vlan: entered promiscuous mode [ 154.062805][ T7252] veth0_macvtap: entered promiscuous mode [ 154.079992][ T7252] veth1_macvtap: entered promiscuous mode [ 154.180616][ T7252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.209626][ T7252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.353898][ T1157] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.397446][ T1157] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.474877][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.498344][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.735787][ T7257] veth0_vlan: entered promiscuous mode [ 154.801803][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.842421][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.875982][ T7257] veth1_vlan: entered promiscuous mode [ 154.998788][ T7256] veth0_vlan: entered promiscuous mode [ 155.018744][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.042377][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.103391][ T7256] veth1_vlan: entered promiscuous mode [ 155.176344][ T7257] veth0_macvtap: entered promiscuous mode [ 155.196834][ T7257] veth1_macvtap: entered promiscuous mode [ 155.247948][ T7286] veth0_vlan: entered promiscuous mode [ 155.314487][ T7256] veth0_macvtap: entered promiscuous mode [ 155.339043][ T7257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.392255][ T7286] veth1_vlan: entered promiscuous mode [ 155.436930][ T7256] veth1_macvtap: entered promiscuous mode [ 155.511614][ T7257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.567799][ T7562] netlink: 752 bytes leftover after parsing attributes in process `syz.2.571'. [ 155.595865][ T7286] veth0_macvtap: entered promiscuous mode [ 155.625936][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.644012][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.705899][ T7286] veth1_macvtap: entered promiscuous mode [ 155.718942][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.731005][ T7256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.857645][ T2996] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.909454][ T7256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.951446][ T2996] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.978687][ T7286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.026312][ T2996] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.044145][ T2996] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.080777][ T7286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.118998][ T2996] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.199452][ T49] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.228848][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.270083][ T49] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.284987][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.295481][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.306426][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.615554][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.659979][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.791169][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.830519][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.019823][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.068619][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.177243][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.220483][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.287175][ T7599] netlink: 'syz.2.584': attribute type 2 has an invalid length. [ 157.315105][ T7599] netlink: 126524 bytes leftover after parsing attributes in process `syz.2.584'. [ 157.475857][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.502834][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.300582][ T7642] pim6reg1: entered allmulticast mode [ 159.403488][ T7646] netlink: 28 bytes leftover after parsing attributes in process `syz.8.600'. [ 159.709374][ T7659] netlink: 24 bytes leftover after parsing attributes in process `syz.7.604'. [ 159.746597][ T7659] netlink: 24 bytes leftover after parsing attributes in process `syz.7.604'. [ 160.596817][ T7687] netlink: del zone limit has 4 unknown bytes [ 162.177074][ T7711] netlink: 10 bytes leftover after parsing attributes in process `syz.7.624'. [ 162.352178][ T7722] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.628'. [ 163.225351][ T7740] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.635'. [ 163.861737][ T7755] netlink: 65047 bytes leftover after parsing attributes in process `syz.7.641'. [ 164.428895][ T7786] netlink: 84 bytes leftover after parsing attributes in process `syz.5.651'. [ 164.679802][ T7797] netlink: 'syz.2.656': attribute type 1 has an invalid length. [ 164.690512][ T7797] netlink: 16227 bytes leftover after parsing attributes in process `syz.2.656'. [ 167.130817][ T7832] netlink: 'syz.7.669': attribute type 1 has an invalid length. [ 167.243800][ T7832] netlink: 16150 bytes leftover after parsing attributes in process `syz.7.669'. [ 168.753624][ T7871] netlink: 60 bytes leftover after parsing attributes in process `syz.7.681'. [ 169.257748][ T5867] Bluetooth: hci0: Dropping invalid advertising data [ 169.266577][ T5867] Bluetooth: hci0: unknown advertising packet type: 0xff [ 169.266621][ T5867] Bluetooth: hci0: Malformed LE Event: 0x02 [ 169.819271][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.8.689'. [ 169.969857][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'. [ 170.578539][ T7919] netlink: 24 bytes leftover after parsing attributes in process `syz.6.696'. [ 170.689977][ T7927] netlink: 60 bytes leftover after parsing attributes in process `syz.2.698'. [ 170.733258][ T7925] netlink: 212940 bytes leftover after parsing attributes in process `syz.7.699'. [ 170.746223][ T7929] netlink: 'syz.2.698': attribute type 3 has an invalid length. [ 170.749441][ T7922] netlink: 60 bytes leftover after parsing attributes in process `syz.2.698'. [ 170.822681][ T7929] netlink: 'syz.2.698': attribute type 3 has an invalid length. [ 170.864790][ T7929] netlink: 130500 bytes leftover after parsing attributes in process `syz.2.698'. [ 171.069147][ T7944] netlink: 60 bytes leftover after parsing attributes in process `syz.5.702'. [ 171.082789][ T7934] netlink: 60 bytes leftover after parsing attributes in process `syz.5.702'. [ 171.103710][ T7941] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 171.112849][ T7941] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 171.120693][ T7944] netlink: 60 bytes leftover after parsing attributes in process `syz.5.702'. [ 171.121901][ T7941] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 171.139944][ T7941] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 171.149068][ T7941] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 171.158163][ T7941] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 171.167244][ T7941] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 171.176337][ T7941] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 171.185434][ T7941] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 171.194520][ T7941] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 171.762078][ T7961] netlink: 'syz.8.708': attribute type 22 has an invalid length. [ 172.540878][ T7989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.607087][ T7989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.735788][ T8052] syzkaller0: entered promiscuous mode [ 174.757216][ T8052] syzkaller0: entered allmulticast mode [ 175.231577][ T8080] netlink: 'syz.8.745': attribute type 9 has an invalid length. [ 175.281682][ T8080] netlink: 'syz.8.745': attribute type 4 has an invalid length. [ 176.219107][ T8097] netlink: 'syz.6.749': attribute type 2 has an invalid length. [ 176.274811][ T8097] netlink: 'syz.6.749': attribute type 1 has an invalid length. [ 176.302493][ T8097] __nla_validate_parse: 3 callbacks suppressed [ 176.302513][ T8097] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.749'. [ 176.378550][ T8097] block nbd5: not configured, cannot reconfigure [ 177.125286][ T8116] netlink: 'syz.6.755': attribute type 10 has an invalid length. [ 177.151308][ T8116] netlink: 3819 bytes leftover after parsing attributes in process `syz.6.755'. [ 178.235603][ T8133] netlink: 104 bytes leftover after parsing attributes in process `syz.8.761'. [ 182.724259][ T8205] macvtap0: refused to change device tx_queue_len [ 183.067330][ T8218] netlink: 'syz.8.791': attribute type 1 has an invalid length. [ 183.083081][ T8218] netlink: 'syz.8.791': attribute type 4 has an invalid length. [ 183.094959][ T8218] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.791'. [ 183.327304][ T8230] netlink: 'syz.7.795': attribute type 2 has an invalid length. [ 183.335288][ T8230] netlink: 17267 bytes leftover after parsing attributes in process `syz.7.795'. [ 184.445801][ T8250] netlink: 211 bytes leftover after parsing attributes in process `syz.8.803'. [ 184.851684][ T8262] netlink: 203516 bytes leftover after parsing attributes in process `syz.8.808'. [ 184.871934][ T8262] netlink: 6320 bytes leftover after parsing attributes in process `syz.8.808'. [ 188.046751][ T8334] netlink: 208192 bytes leftover after parsing attributes in process `syz.2.836'. [ 188.099457][ T8334] netlink: 'syz.2.836': attribute type 1 has an invalid length. [ 188.108155][ T8334] netlink: 'syz.2.836': attribute type 2 has an invalid length. [ 188.159150][ T8339] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.838'. [ 189.282269][ T8359] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.290848][ T8359] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.967050][ T8384] netlink: 'syz.7.853': attribute type 30 has an invalid length. [ 190.020746][ T8359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.047537][ T8359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.146167][ T5867] Bluetooth: hci2: Malformed Event: 0x02 [ 190.460062][ T8394] cgroup: fork rejected by pids controller in /syz2 [ 191.709391][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.795316][ T8405] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.861'. [ 192.695915][ T5184] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.712045][ T5184] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.720432][ T5184] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.728853][ T5184] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.740234][ T5184] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 192.809753][ T8414] netlink: 'syz.8.866': attribute type 2 has an invalid length. [ 192.845924][ T8414] netlink: 'syz.8.866': attribute type 1 has an invalid length. [ 193.850352][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.860293][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.870663][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.094676][ T8417] wlan1 speed is unknown, defaulting to 1000 [ 194.159308][ T8432] ================================================================== [ 194.167468][ T8432] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x677/0xcf0 [ 194.175319][ T8432] Write of size 8 at addr ffff888063b94658 by task syz.7.870/8432 [ 194.183147][ T8432] [ 194.185515][ T8432] CPU: 0 UID: 0 PID: 8432 Comm: syz.7.870 Not tainted syzkaller #0 PREEMPT(full) [ 194.185541][ T8432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.185563][ T8432] Call Trace: [ 194.185572][ T8432] [ 194.185581][ T8432] dump_stack_lvl+0x189/0x250 [ 194.185612][ T8432] ? __virt_addr_valid+0x1c8/0x5c0 [ 194.185637][ T8432] ? rcu_is_watching+0x15/0xb0 [ 194.185666][ T8432] ? __kasan_check_byte+0x12/0x40 [ 194.185697][ T8432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.185721][ T8432] ? rcu_is_watching+0x15/0xb0 [ 194.185742][ T8432] ? lock_release+0x4b/0x3e0 [ 194.185775][ T8432] ? __virt_addr_valid+0x1c8/0x5c0 [ 194.185801][ T8432] ? __virt_addr_valid+0x4a5/0x5c0 [ 194.185828][ T8432] print_report+0xca/0x240 [ 194.185848][ T8432] ? __bpf_get_stackid+0x677/0xcf0 [ 194.185878][ T8432] kasan_report+0x118/0x150 [ 194.185910][ T8432] ? __bpf_get_stackid+0x677/0xcf0 [ 194.185944][ T8432] ? __alloc_pages_noprof+0xa/0x30 [ 194.185964][ T8432] __bpf_get_stackid+0x677/0xcf0 [ 194.186004][ T8432] ? bpf_prog_12712c88fd19bd5b+0x2a/0x32 [ 194.186029][ T8432] bpf_get_stackid_raw_tp+0x196/0x210 [ 194.186058][ T8432] bpf_prog_12712c88fd19bd5b+0x2a/0x32 [ 194.186074][ T8432] bpf_trace_run4+0x28b/0x4a0 [ 194.186102][ T8432] ? bpf_trace_run4+0x19c/0x4a0 [ 194.186129][ T8432] ? __pfx_bpf_trace_run4+0x10/0x10 [ 194.186159][ T8432] ? percpu_ref_get_many+0x19/0x140 [ 194.186190][ T8432] ? percpu_ref_get_many+0x19/0x140 [ 194.186224][ T8432] trace_mm_page_alloc+0x129/0x150 [ 194.186246][ T8432] __alloc_frozen_pages_noprof+0x1d6/0x370 [ 194.186269][ T8432] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 194.186300][ T8432] __alloc_pages_noprof+0xa/0x30 [ 194.186319][ T8432] bpf_ringbuf_alloc+0x254/0x590 [ 194.186344][ T8432] ringbuf_map_alloc+0x1c8/0x2f0 [ 194.186377][ T8432] map_create+0xaa3/0x14d0 [ 194.186407][ T8432] ? security_bpf+0x7e/0x300 [ 194.186437][ T8432] __sys_bpf+0x60f/0x870 [ 194.186464][ T8432] ? __pfx___sys_bpf+0x10/0x10 [ 194.186508][ T8432] __x64_sys_bpf+0x7c/0x90 [ 194.186533][ T8432] do_syscall_64+0xfa/0x3b0 [ 194.186565][ T8432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.186587][ T8432] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 194.186608][ T8432] ? clear_bhb_loop+0x60/0xb0 [ 194.186633][ T8432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.186659][ T8432] RIP: 0033:0x7f19d198ebe9 [ 194.186679][ T8432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.186697][ T8432] RSP: 002b:00007f19d2751038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.186719][ T8432] RAX: ffffffffffffffda RBX: 00007f19d1bb5fa0 RCX: 00007f19d198ebe9 [ 194.186735][ T8432] RDX: 0000000000000048 RSI: 00002000000007c0 RDI: 0000000000000000 [ 194.186749][ T8432] RBP: 00007f19d1a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 194.186762][ T8432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.186775][ T8432] R13: 00007f19d1bb6038 R14: 00007f19d1bb5fa0 R15: 00007ffd0fe36828 [ 194.186800][ T8432] [ 194.186808][ T8432] [ 194.487065][ T8432] Allocated by task 8432: [ 194.491403][ T8432] kasan_save_track+0x3e/0x80 [ 194.496110][ T8432] __kasan_kmalloc+0x93/0xb0 [ 194.500739][ T8432] __kmalloc_node_noprof+0x276/0x4e0 [ 194.506051][ T8432] bpf_map_area_alloc+0x64/0x180 [ 194.511113][ T8432] prealloc_elems_and_freelist+0x86/0x1d0 [ 194.516866][ T8432] stack_map_alloc+0x33f/0x4c0 [ 194.521659][ T8432] map_create+0xaa3/0x14d0 [ 194.526098][ T8432] __sys_bpf+0x60f/0x870 [ 194.530363][ T8432] __x64_sys_bpf+0x7c/0x90 [ 194.534799][ T8432] do_syscall_64+0xfa/0x3b0 [ 194.539331][ T8432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.545257][ T8432] [ 194.547592][ T8432] The buggy address belongs to the object at ffff888063b94000 [ 194.547592][ T8432] which belongs to the cache kmalloc-cg-2k of size 2048 [ 194.561932][ T8432] The buggy address is located 24 bytes to the right of [ 194.561932][ T8432] allocated 1600-byte region [ffff888063b94000, ffff888063b94640) [ 194.576629][ T8432] [ 194.578968][ T8432] The buggy address belongs to the physical page: [ 194.585408][ T8432] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x63b90 [ 194.594196][ T8432] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 194.602711][ T8432] memcg:ffff8880291ba381 [ 194.607054][ T8432] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 194.614630][ T8432] page_type: f5(slab) [ 194.618648][ T8432] raw: 00fff00000000040 ffff88801a44b3c0 ffffea0001f9d000 dead000000000002 [ 194.627270][ T8432] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff8880291ba381 [ 194.635890][ T8432] head: 00fff00000000040 ffff88801a44b3c0 ffffea0001f9d000 dead000000000002 [ 194.644621][ T8432] head: 0000000000000000 0000000000080008 00000000f5000000 ffff8880291ba381 [ 194.653312][ T8432] head: 00fff00000000003 ffffea00018ee401 00000000ffffffff 00000000ffffffff [ 194.662128][ T8432] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 194.670814][ T8432] page dumped because: kasan: bad access detected [ 194.677334][ T8432] page_owner tracks the page as allocated [ 194.683061][ T8432] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7699, tgid 7699 (dhcpcd), ts 161741761253, free_ts 161634833512 [ 194.704186][ T8432] post_alloc_hook+0x240/0x2a0 [ 194.709000][ T8432] get_page_from_freelist+0x21e4/0x22c0 [ 194.714565][ T8432] __alloc_frozen_pages_noprof+0x181/0x370 [ 194.720401][ T8432] alloc_pages_mpol+0x232/0x4a0 [ 194.725281][ T8432] allocate_slab+0x8a/0x370 [ 194.729805][ T8432] ___slab_alloc+0xbeb/0x1410 [ 194.734522][ T8432] __kmalloc_cache_noprof+0x296/0x3d0 [ 194.739923][ T8432] bpf_prog_alloc_no_stats+0xdb/0x4b0 [ 194.745322][ T8432] bpf_prog_alloc+0x3c/0x1a0 [ 194.749938][ T8432] __get_filter+0xff/0x400 [ 194.754375][ T8432] sk_attach_filter+0x24/0x140 [ 194.759166][ T8432] sk_setsockopt+0x1f83/0x2dc0 [ 194.763958][ T8432] do_sock_setsockopt+0x11b/0x1b0 [ 194.769013][ T8432] __x64_sys_setsockopt+0x13f/0x1b0 [ 194.774226][ T8432] do_syscall_64+0xfa/0x3b0 [ 194.778757][ T8432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.784675][ T8432] page last free pid 7684 tgid 7684 stack trace: [ 194.791015][ T8432] __free_frozen_pages+0xbc4/0xd30 [ 194.796153][ T8432] __put_partials+0x156/0x1a0 [ 194.800846][ T8432] put_cpu_partial+0x17c/0x250 [ 194.805652][ T8432] __slab_free+0x2d5/0x3c0 [ 194.810098][ T8432] qlist_free_all+0x97/0x140 [ 194.814730][ T8432] kasan_quarantine_reduce+0x148/0x160 [ 194.820227][ T8432] __kasan_slab_alloc+0x22/0x80 [ 194.825147][ T8432] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 194.830637][ T8432] jbd2__journal_start+0x146/0x5b0 [ 194.835790][ T8432] __ext4_journal_start_sb+0x227/0x5c0 [ 194.841303][ T8432] ext4_dirty_inode+0x93/0x110 [ 194.846089][ T8432] __mark_inode_dirty+0x2ce/0xdf0 [ 194.851137][ T8432] file_update_time+0x40c/0x490 [ 194.856010][ T8432] ext4_page_mkwrite+0x20e/0x1190 [ 194.861056][ T8432] do_page_mkwrite+0x14d/0x310 [ 194.865839][ T8432] __handle_mm_fault+0x1916/0x5440 [ 194.870984][ T8432] [ 194.873327][ T8432] Memory state around the buggy address: [ 194.878980][ T8432] ffff888063b94500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 194.887065][ T8432] ffff888063b94580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 194.892700][ T5867] Bluetooth: hci3: command tx timeout [ 194.895148][ T8432] >ffff888063b94600: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 194.908696][ T8432] ^ [ 194.915649][ T8432] ffff888063b94680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.923731][ T8432] ffff888063b94700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.931804][ T8432] ================================================================== [ 194.973478][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.979844][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.980928][ T8432] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 194.980953][ T8432] CPU: 0 UID: 0 PID: 8432 Comm: syz.7.870 Not tainted syzkaller #0 PREEMPT(full) [ 194.980980][ T8432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.981022][ T8432] Call Trace: [ 194.981032][ T8432] [ 194.981044][ T8432] dump_stack_lvl+0x99/0x250 [ 194.981076][ T8432] ? __asan_memcpy+0x40/0x70 [ 194.981105][ T8432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.981134][ T8432] ? __pfx__printk+0x10/0x10 [ 194.981179][ T8432] vpanic+0x281/0x750 [ 194.981212][ T8432] ? irqentry_enter+0x3d/0x60 [ 194.981245][ T8432] ? __pfx_vpanic+0x10/0x10 [ 194.981275][ T8432] ? irqentry_exit+0x74/0x90 [ 194.981312][ T8432] panic+0xb9/0xc0 [ 194.981338][ T8432] ? __pfx_panic+0x10/0x10 [ 194.981366][ T8432] ? __bpf_get_stackid+0x677/0xcf0 [ 194.981421][ T8432] ? __bpf_get_stackid+0x677/0xcf0 [ 194.981457][ T8432] check_panic_on_warn+0x89/0xb0 [ 194.981490][ T8432] ? __bpf_get_stackid+0x677/0xcf0 [ 194.981525][ T8432] end_report+0x78/0x160 [ 194.981558][ T8432] kasan_report+0x129/0x150 [ 194.981592][ T8432] ? __bpf_get_stackid+0x677/0xcf0 [ 194.981631][ T8432] ? __alloc_pages_noprof+0xa/0x30 [ 194.981662][ T8432] __bpf_get_stackid+0x677/0xcf0 [ 194.981706][ T8432] ? bpf_prog_12712c88fd19bd5b+0x2a/0x32 [ 194.981729][ T8432] bpf_get_stackid_raw_tp+0x196/0x210 [ 194.981761][ T8432] bpf_prog_12712c88fd19bd5b+0x2a/0x32 [ 194.981782][ T8432] bpf_trace_run4+0x28b/0x4a0 [ 194.981812][ T8432] ? bpf_trace_run4+0x19c/0x4a0 [ 194.981842][ T8432] ? __pfx_bpf_trace_run4+0x10/0x10 [ 194.981877][ T8432] ? percpu_ref_get_many+0x19/0x140 [ 194.981913][ T8432] ? percpu_ref_get_many+0x19/0x140 [ 194.981951][ T8432] trace_mm_page_alloc+0x129/0x150 [ 194.981976][ T8432] __alloc_frozen_pages_noprof+0x1d6/0x370 [ 194.982002][ T8432] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 194.982038][ T8432] __alloc_pages_noprof+0xa/0x30 [ 194.982061][ T8432] bpf_ringbuf_alloc+0x254/0x590 [ 194.982088][ T8432] ringbuf_map_alloc+0x1c8/0x2f0 [ 194.982126][ T8432] map_create+0xaa3/0x14d0 [ 194.982160][ T8432] ? security_bpf+0x7e/0x300 [ 194.982195][ T8432] __sys_bpf+0x60f/0x870 [ 194.982226][ T8432] ? __pfx___sys_bpf+0x10/0x10 [ 194.982274][ T8432] __x64_sys_bpf+0x7c/0x90 [ 194.982302][ T8432] do_syscall_64+0xfa/0x3b0 [ 194.982338][ T8432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.982361][ T8432] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 194.982386][ T8432] ? clear_bhb_loop+0x60/0xb0 [ 194.982413][ T8432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.982436][ T8432] RIP: 0033:0x7f19d198ebe9 [ 194.982458][ T8432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.982478][ T8432] RSP: 002b:00007f19d2751038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.982504][ T8432] RAX: ffffffffffffffda RBX: 00007f19d1bb5fa0 RCX: 00007f19d198ebe9 [ 194.982522][ T8432] RDX: 0000000000000048 RSI: 00002000000007c0 RDI: 0000000000000000 [ 194.982539][ T8432] RBP: 00007f19d1a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 194.982553][ T8432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.982568][ T8432] R13: 00007f19d1bb6038 R14: 00007f19d1bb5fa0 R15: 00007ffd0fe36828 [ 194.982596][ T8432] [ 194.986416][ T8432] Kernel Offset: disabled