last executing test programs: 5.47423601s ago: executing program 2 (id=915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 5.173623461s ago: executing program 0 (id=918): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYRESHEX, @ANYRES32=0x1, @ANYRES64, @ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="000000230200000005e000"/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r0, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0], 0x0, 0x9b, &(0x7f0000000780)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xbb, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x1e, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x528, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x7}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9e, &(0x7f0000000640)=""/158, 0x41000, 0x3, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000a00)={0x4, 0xe, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000001200000000000000000095", @ANYRES32=r2, @ANYRESDEC=r4, @ANYRES64, @ANYBLOB="e73b34ad94c229cb025aeb0c3194da8b753217b8618cf00c63e36f290906e62eefee8bb0adb4428f155015c9769e700aca254bc5805309fd242c29047d99327faaff896ffaceccd0ad95d1487caffd5a01a306f8c214fb0cf4d3136bceb89644bcc47a11b7814764df883a40a43282fd9a93a8f1d99f15ac4514a63ffa970518c316b0408c5a0b63b845571842765580ab74823fae45fa6a4e94f1435fdbec4136230115611059bc7a302ff6e40d178b7d7ef345d8cb5858aba338354b", @ANYBLOB="ade44b6b219080e1df679c5e4be7d76c5a50b187dcdfbe951e1f9426eeb02f4c9fce48127fba4e116425793a"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1b00000000000000000000000001000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r5, @ANYBLOB], 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001380)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0xfc7, 0x4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x18, 0x1, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0xb6}], &(0x7f0000000f80)='GPL\x00', 0xca14, 0x72, &(0x7f0000000fc0)=""/114, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001100)={0x21, 0xf, 0x3fc2, 0x9}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r7, r8, r9], &(0x7f0000001480)=[{0x0, 0x2, 0xf, 0x9}, {0x5, 0x1, 0x2, 0x9}, {0x3, 0x5, 0xe}, {0x5, 0x1, 0x6, 0x3}, {0x5, 0x3, 0xb, 0xb}, {0x5, 0x5, 0x1, 0x5}, {0x0, 0x4, 0xb, 0x8}, {0x1, 0x4, 0xb, 0x7}]}, 0x94) sendmsg$inet(r5, &(0x7f00000015c0)={&(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x8000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r11 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x3e, &(0x7f00000002c0)=r10, 0x161) sendmsg$inet(r11, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 4.983949608s ago: executing program 2 (id=921): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)={0x14, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}, 0x1, 0x0, 0x0, 0x44814}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9d, 0x9, 0x7, 0x8, 0x4e19}}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7c, &(0x7f0000000000)=r4, 0x8) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x5) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1d, 0x4, &(0x7f00000007c0)=ANY=[@ANYRES64=r0, @ANYRES32=r1], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="11000000", @ANYRES32=r7, @ANYRES64=0x0], 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x91, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x90, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000056994bff45f335fbde98348e0000001200000a0000db", @ANYRESHEX=r9], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r10, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff11, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) 4.530400056s ago: executing program 0 (id=925): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8faf5bd23dd800008"], 0x0, 0x86}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e0000000400000008000000634f000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000300"/28], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000540)="a476776df6d5", 0x6}], 0x2}, 0x1808c) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r0, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'geneve1\x00', @link_local}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xce}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x3b70, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb51}, 0x4507, 0x32, 0xfffffbff, 0x2, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) 3.902611211s ago: executing program 2 (id=929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x20}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB="008000000051c0c5ea000000cac8c96c9df6922c1e3eaf41ce6c3f18a45b7ebf399934f381c0bc97eda425d95d05bb5455e7c2eed3c5c55982a3c520cbc4b0b7d8a64a8e8d3f74fb593ab2ada919b67001aab00638bd39a5031e26e40549e33a683060cacd847fe1ebf185aca2ca5cf99a298481adcd51bb3d8432a0ec11c7", @ANYRES64=r0, @ANYRES64=r0, @ANYRES16=r1, @ANYRES32=r0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000fdff0f0018010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000ee54ab4ff8ffffffb702000008000000b70300000300000085000000060000009500000000000000", @ANYRES8=r0, @ANYRES16=r3], &(0x7f0000000080)='GPL\x00', 0x6, 0x98, &(0x7f00000000c0)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_lsm={0x1d, 0x1, &(0x7f00000007c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000a40)='GPL\x00', 0x3, 0xb7, &(0x7f0000000cc0)=""/183, 0x41100, 0x67, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000ec0)=[r2, r5, 0x1, r5, 0xffffffffffffffff, 0xffffffffffffffff, r5, r5, 0xffffffffffffffff, r5], 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x13, &(0x7f0000000780)=ANY=[@ANYRESOCT=r1], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xd, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="b402000000000000610148000000000085000000a400000095000000fffd00001a3aca447867c88cfeb5e526", @ANYRES32=r5, @ANYRES64=r4], &(0x7f0000000900)='syzkaller\x00', 0x7, 0xb9, &(0x7f0000000b40)=""/185, 0x41000, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {0x6, 0x1e, 0x10}]}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x1400, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) socket$kcm(0x2c, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000008c0)=0x1000, 0x12) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000008111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000}, 0x0, 0x8000000000000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x7400}, 0x40084) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r9}, 0x18) 3.539270707s ago: executing program 3 (id=931): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0xac, &(0x7f00000000c0)}, 0x10) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x28) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000600000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x66) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r2}, 0xc) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r2}, 0x38) r3 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) setsockopt$sock_attach_bpf(r3, 0x6, 0x1e, &(0x7f0000000500), 0x4) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18ca000107000000000000000000001811000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000640)='kmem_cache_free\x00') (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r8, 0x6, 0x1, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1d, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000074ed0000000000000600000018470000fdffffff000000000000000018120000", @ANYRES64=r5, @ANYBLOB="0000000000000000b0030098754238008500008c845943a84a298e0000000009000000ffff70abc26d000000000000000000009500"/72], &(0x7f00000006c0)='syzkaller\x00', 0x1000005, 0xa3, &(0x7f00000007c0)=""/163, 0x41000, 0x0, '\x00', 0x0, @lsm=0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000940)=[r2, r4, r4, r4], &(0x7f0000000980)=[{0x1, 0x3, 0x8, 0x1}, {0x1, 0x3, 0xfffffffe, 0x1}, {0x2, 0x5, 0xf, 0xb}], 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b705000008000000850000007100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000780)=r12, 0x4) (async) sendmsg$inet(r10, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000) 3.273915164s ago: executing program 4 (id=933): r0 = socket$kcm(0x11, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000e800000850000000e0000009500"/33], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0xfffffffffffffe1e) setsockopt$sock_attach_bpf(r0, 0x107, 0xe, &(0x7f0000000000)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40047459, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r3, 0x40047459, &(0x7f0000001200)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000015006b03004e21000af32c6e020675f800250002400100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000094}, 0x4040840) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x1946}, 0x1c05c, 0x3, 0xcc91, 0x7, 0xffff, 0x7ffffdff}, 0x0, 0xf, 0xffffffffffffffff, 0x1) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x9, 0x0, 0x0, 0xff, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x6}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="09007898312f07000000000000000000040000000a00000000000000369d85bc53d2ea820030078e5fe85ef28a576ff331b9cd1a15d6d2b87a910c5e04ac5b0952a6ecd77ebd031b054b02adbaf6ad944d942e16cfb223723ecf23496c0c99408f8597b265c0b0cfd6b33a9d3fa9e150ae324403df53acd4b03392d8f0bd6145a51057c884e1085b89a9d3aeab267c326d2312f26734723518e4a49256ab7f815c2ce1265e5cc407d56fd871b41590d9714158adb070c8c4401a839ab2f1b30db552a6d302935bb0ba3b8eecc605c18e3a49db729053d75a", @ANYRES32=r8, @ANYRESHEX], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r10, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000540)}, 0x20) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="8803392980d3cb8852ec", @ANYRESHEX=r7, @ANYRESOCT=r3, @ANYRES16=r9, @ANYRES64=r1, @ANYBLOB="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"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES32=r12, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYRES16=r9, @ANYRES32=r1, @ANYRESDEC], &(0x7f00000003c0)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r14}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r13, r11}, 0xc) 3.20877822s ago: executing program 3 (id=935): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x6}, 0x14105, 0x2e, 0xffffebff, 0x3, 0x2, 0x4, 0x98a2, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x10, 0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000300000000000000030000008506a36630a839e31300000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x910, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) close(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/user\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={'bridge_slave_1\x00'}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) recvmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x76, 0x0, &(0x7f0000000940)="d62d81000000000000007f6829a100d54f77be9bbbb5519b8186ff1d7bae7c5ddd4b0bb78b484936c3374cd13d3ccff235f88ec85d7a7b8cabadab1adbca73f38e8f14a23e79c51d40be25862fc12b11aebde5037056d68e4d13cedc17daa10ca560671009e35cb8f476131b405aa43697686d2582bb", 0x0, 0x100b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3f}, 0x50) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(r5, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') write$cgroup_int(r4, 0x0, 0x0) 3.120844946s ago: executing program 2 (id=936): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000003c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'veth1_macvtap\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x2, 0x7, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYRES32=r2], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x18, 0x29, 0x39}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000800000000000000000000850000007d000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='mm_page_alloc_extfrag\x00', r6, 0x0, 0x4000}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r2, 0x58, &(0x7f0000000700)}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={&(0x7f0000000840)="fa712d49500125015d43aba535e8029d0cc31a26c3e0c6d84d649fde57388c6d79c0672f2b8833eb0ab0a4a1f2561c3aac6da2719150e0efaf608db6f1a7c1a007d6d073a260bfe3c024046e3aea9227a9ba21ac20541c99f05c6864e2d8050b499018f99aca1f98707f901cf3b9bb4630897aa282c8f09a081d9d0dda610d53460d89847627d76b52a055a6034802430f42deb844a1a38fd729eafd9f2be3875b023cfbd269fbfc1d733c3088097532c404", &(0x7f0000000680)=""/31, &(0x7f0000000c40)="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", &(0x7f0000000900)="8283b0498741ffb11d8f77cbf1cf8a0100b850b3cbfd513c80cfa98d35348053ca506eda3627d3b7abbd4020a7d4d439c077ff0ae46aff6e8067489db663ec41ff5ea0fa32b378e08491d52a922937645bf0f7ad52a6d7bb0b75791296a6b11de0e410caec43ffe00017134bd32ff3e2", 0xfffffffc, r2}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x20000000000000ef, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 2.944900738s ago: executing program 4 (id=937): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000400)="99", 0x1}], 0x1}, 0x24040080) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) socket$isdn_base(0x22, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) socket$kcm(0xa, 0x5, 0x0) (async) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000400)="99", 0x1}], 0x1}, 0x24040080) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) (async) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) (async) 2.749574096s ago: executing program 1 (id=938): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e0000d81500010084c06fb300000000080005007a010401a80016002000034004000000035c0461c9ab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798aeaa73e2fad95667e0fcd4c306dcdf63951f215ce3bb9ad809d5e1cace81000cffece0b494566d05f3d1269f0dd6e4edef3d93452a92954b43370e", 0xd1}], 0x1}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000010c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r0, @ANYBLOB="1a881037f35ead9c3a896ee5ff3263e962def5c64cbaa25a9246cdf51ac1e03094614ea1ec0ad9f1c6f625cb74b2991abec94e9d62125cf15b81f679b739d4abf672b9fdac6c9720e6eb32cdf17f71939ccfe0e3ac2eb5a240375538ef77b32abebb90ee34aa68f65f09575f564283058bca82e4", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r4}, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x58, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000000) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = perf_event_open(&(0x7f0000001040)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffff7f}, 0x0, 0x0, 0x5, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r8 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0xe3, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd6000, 0x4, @perf_bp={0x0, 0x4}, 0x29, 0x0, 0x0, 0x6, 0xa, 0x4, 0x4, 0x0, 0x0, 0x0, 0x2000000040}, 0x0, 0xffffffffffffffff, r7, 0x8) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r9) r10 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r9, 0x10e, 0x2, &(0x7f0000000300)=r10, 0x4) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f00000001c0)='(pu&\"&\t&&') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r4, 0xb, 0x1, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0]}, 0x40) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x2, 0x0, 0x0, 0x1000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000200)=0x1, 0x12) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0) socketpair(0x18, 0x5, 0x9, &(0x7f0000001000)) 2.303812348s ago: executing program 4 (id=939): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) socketpair(0x28, 0x1, 0x28, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000340)=r0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) socket$kcm(0xa, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r5, 0x36, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0]}, 0x40) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x1, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) 2.21348612s ago: executing program 0 (id=940): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x6e96dab972a62943, 0x1, 0x0, 0x3, 0x5, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r2, r0, 0x4, r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000eb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x8000}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0x10, 0x400000002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) write$cgroup_subtree(r5, 0x0, 0xfe33) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.13808543s ago: executing program 2 (id=941): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000004600000095"], &(0x7f0000000580)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffc8) r3 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, 0x0, 0x4000000) recvmsg$qrtr(0xffffffffffffffff, 0x0, 0x0, 0x40001121) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={0x0, 0x268}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x9, 0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x37}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000000)={'syz_tun\x00', @random="0200"}) r6 = socket$kcm(0x2, 0x3, 0x2) close(0x3) ioctl$SIOCSIFHWADDR(r6, 0x8918, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000f40)=""/185, 0xb9}, {&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f0000000e40)=""/217, 0xd9}, {&(0x7f0000000480)=""/213, 0xd5}, {&(0x7f0000000a00)=""/189, 0xbd}, {&(0x7f00000006c0)=""/194, 0xc2}, {&(0x7f0000002a00)=""/4068, 0xfe4}, {&(0x7f00000005c0)=""/127, 0x7f}], 0x9}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 2.11285398s ago: executing program 1 (id=942): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='svc_xprt_dequeue\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fb0400ff00000000000000008500000041000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081024e81f783db4cb9040a1d080006207c09e8fc55a10a0015000400142603600e1209000f0000000601a8000960040008400400027c035c0461c1d67f6f94177134cf2a2fbff912216efb8000a007a290457fe288d44235fb2e0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300000000", 0xd8}], 0x1}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080000000200000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x89) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) (async) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033"], 0xfe33) 1.90447226s ago: executing program 3 (id=943): socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x25, &(0x7f0000000080)=r2, 0xffffffffffffff81) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8221, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2110, 0x0, 0x0, 0x7, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYRES8=r4], &(0x7f0000000140)='GPL\x00'}, 0x94) openat$cgroup_freezer_state(r5, &(0x7f0000000400), 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a001000000002800000", 0x2c}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x18000000000002a0, 0x13, 0x0, &(0x7f00000001c0)="b15dd7cf1c00000400000000000036af1747da", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x3, 0x10) r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r10 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r10, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000480)}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10000) 1.614226413s ago: executing program 1 (id=944): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1bee, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x5}, 0x200, 0x1, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)='\x00'/14, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.481778231s ago: executing program 0 (id=945): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x3, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xeaff}, @generic={0x66, 0x8, 0x0, 0x0, 0x102}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.304815106s ago: executing program 1 (id=946): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)="0906e02a8e2aa7dcc466fd44e291d5b1d18e37133c1dc50fd7f1dd8d57a38a45f369d20e5f7ac0ce9e2d6c7822a52cb1d73e951e9c814677ab", 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)="0906e02a8e2aa7dcc466fd44e291d5b1d18e37133c1dc50fd7f1dd8d57a38a45f369d20e5f7ac0ce9e2d6c7822a52cb1d73e951e9c814677ab", 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000800) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000140)=""/254, 0xfe}], 0x1}, 0x40002102) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 1.225912544s ago: executing program 0 (id=947): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x32, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbca313a181003b00000000010000001000b10e978dec72ce", 0x26}], 0x1}, 0x44000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe0009"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@delqdisc={0xb4, 0x25, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {0x0, 0x8}, {0xd, 0x3}}, [@q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x13}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffe}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1a}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7f}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x400c084}, 0x881) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xf}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x14, 0x26, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x0, 0x3, 0x4, 0xb, 0x3, 0xfffffffffffffffe, 0x8}, @generic={0x1, 0x5, 0x8, 0xeece, 0x7ff}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb45}, @ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x7, 0x5, 0xb, 0x8, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0xfff, 0xc6, &(0x7f0000000440)=""/198, 0x41000, 0x60, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x7, 0x6, 0x4}, 0x10, 0x0, r5, 0x4, &(0x7f00000005c0)=[0x1], &(0x7f0000000600)=[{0x4, 0x3, 0x4, 0x8}, {0x1, 0x1, 0xc, 0x9}, {0x5, 0x5, 0xd, 0x6}, {0x3, 0x4, 0xa, 0x1}], 0x10, 0xc79}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000700)={r7, r8}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) 974.059723ms ago: executing program 1 (id=948): r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x1140d, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x1000000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xeaff}, @generic={0x66, 0x8, 0x0, 0x0, 0x102}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000000}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x48840) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0xffffffffffffffff}, 0x828, 0x2, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x80ffff) 912.602811ms ago: executing program 3 (id=949): socket$kcm(0x2, 0x2, 0x0) (async) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x8, &(0x7f0000000640), 0x4) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0xfe33) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0xffc3) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x480c0) (async) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x480c0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x101080, 0x0) ioctl$TUNGETIFF(r4, 0x800454d2, 0x0) (async) ioctl$TUNGETIFF(r4, 0x800454d2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) 876.27764ms ago: executing program 4 (id=950): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffff}, 0x828, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r0 = socket$kcm(0x21, 0x2, 0xa) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="2e00000012008188e6b62aa73772cc9f1ba1f84843a100005e140602000000000e000a000f", 0x25}, {&(0x7f0000000580)="7cd14bd937dfc869af", 0x9}], 0x2}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0xfffffffffffffe4a, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000001140)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4, 0xf5}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x90}}, 0x0) 698.137974ms ago: executing program 2 (id=951): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x224, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x9, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$kcm(0x2a, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 697.42898ms ago: executing program 0 (id=952): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000200)=@l2={0x1f, 0x1, @any, 0x6, 0x1}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)="52b229331607415761634ad17a98615d9ce1976dc3615da1816930c72dd149ed003ce74273d365a455c7e3343f88ee9a8b42bbdcf74ba9da1ff6055fcd26dd89a139950aec872ba2a55f09faefc6f7e90d1dae62ce78c8b141d4d731096e7e0b0631847408937cf99cc8ae6b8eba12aa5cbe79b8a76a089fecf77925a3a2", 0x7e}, {&(0x7f0000000300)="a2c04153757ddf0909d8e13ffe74fb4a7266be46e69b48c037f14d6f", 0x1c}, {&(0x7f0000000340)="bc369a89c0045fbb8d038d39bca30e358fb46978f4accad3244f67992a5fd176f29c1cb2b6a4c3f7357a48751967ac58c26deebda10246c5a98960e560fd3e441498ec2769d9b815ce3e2c68addf1dfdcc6ed75ea3d603a721299175e940eeda73d62a6800cd55b67c6cdf6ec8b370571a01", 0x72}], 0x3, &(0x7f0000001740)=[{0xb0, 0x10d, 0x7958, "f9ba367b1b0c1fe5ae9cd2bb128de797b1b05f91d7492f4a31e1a396aab4e76ec1dbd1af18f426d04a864be35d364719c92015e73754a4d60d19630c2fe18ab1a7bf29dcb3feef5da929303270f068a750333c11371fdcc898d53685813bf29aaf3209c43b2b74e1bdd3dd92dadcb1446f2d6b7aad716311104e4b77fc6f1382187d41c7041954a75750815171ec1d98f31da9badc49b0396f69f99ae7cad9"}, {0x20, 0x0, 0x5, "896134aece94b654853bdd95aeb36faf"}, {0xa8, 0x88, 0x80, "b43ab35818871ba860ba909018ee911d652e3be99942ad943d82c84b0904c4ea58af6e8667226376970766b3d1c7be281729ce9403fb9de50cb9275c4a377837d1c8f73b530dadde0fb0e5930adb422908cc04931fb5bc6cf04e820f0c4a3606faf7601239d80347e5fe808fe8efdcdbbff7b28923e3c040c936105f7b2fd1616c499b9e7550a57bc1a81078f875081dca5d1d2f"}, {0x1010, 0x103, 0x6, "2399e067ff02110721c4d111c3f7cf92fbdbe4e33131d3aee3b066331371bb31f7580e1f0c7a5e00d74535851a1d75519046f208d9f085b0c5ce8c58a37092a1879aa256a4f81cc8297ba3f6a64391b77bd428437fc5362c0376c5ea377695d9b05a74b8bc4791be303445593c026318309cdd7571a5a5870a921b1df12a19d9f2f0d9f232c92256e5bbc9cc3732c3fdb08ebd7dfed520928135ed89a38365876b811f4ca416091d62493dcf26161aeb3abefc7b525721b30bec222448d2bb73b4fa3fd70a31fccd94da69bdbc5a6eaf203aae1c21f2872318f22159d4aaf7e8bc31913c6491f8ec973097e338fb386d739bbaf2b9805d32dd9b10bfb3af72b2ab8438d77d03dd535d3786ab1a43895b7ab57029964934f3abb76e85f832b8aa63aaf4d80a027b59f9c70e9d7a2c3bdc46de9062c3e3887864e3741610cbc4357b6df9f0f7369aaee0f73f7cc04bc0c6dd98d1c1336c90f2feaffddfe941f3c3c13f1054b8608309099550a19c7be6c2442a08e51bce58df09a731b46cbf1be159f7a0f6c919fcf6085c04083a891d3783adcd23a36b388c4f80a393a5464390870816098e8736544150c9a3de28be421c1a358ffc2248c9677214d974f9601b7feef8b0d36adf3d5c6ca6b2b461c04c911a297ac0a473a961d25d3109c65e339a79e91ca28814eb99b0f9880ca671b511d45b60d0678d95d1a3eabe408233b0a54564b12d0d8e0a11ec4bf552bd8bb5dbb3503d6b9db89abf4e8508bb268ec06175acd13cd021373a91b5ee14e021958522a2a6622de53c9ac2fe1efcf55c0c3eb3272b0138332ef3258c858f0840cd5245cb161faec11521fe29eb546b66e45fbeffd0c44574b2b6cfc0c1d6b8d3ef9fa52241858c0f67b970c8631358addd1b534a14607acf2f253f2d4bd2e210ac284c0079e74fc9c1c594b4a778cd2ba4d12503721bbf336108f3774ad737febe64b04c96cfc4b43aca063a001973016f9c91d2f1d78de078feaccc50dbd81290b75d636a5579f1eacf788997dcce3ab33d6a0c5b43e2fa59652a9e9464cdc40fc158f7e7f1c21b962087399c0b712ddd3731200076da85f0df0e7311d55a6e6d6fa2c0b6094fc09af6331093c80d3040af1b8a5a6e676a4d74280b426229d6aefa0f91cdc3c3f339295cea8a990bc9dec7175f07385a197c6d31a636193563cfa8f8a5e1ac5e6b10c903e43f3502baec518b1d4819fd021e4da7aa432fdec6e099cfe89619f8381f692454b8f38f633699937e2d4401e6082ec70e43904e34f3bbacb60df8e9f234129a563d1797178c19223cf7b081fdaab9041075f33993093da3e736deacb1321105d2608ccbfbc0fe740404f653cdbdcf1aa8d67cff36469aa477eec02f6dea202f613810f6ba6c8858532d83516ffa46d480c421fa05bd600b8eb0c77c6f4ad909be44dba75d4b17d861856f28165ce6e92a18c5cab44af86cc01c22bfa3ec62f3e7e70a3576ee5c68529421e98c1c069de5c4f5895ac15ad9954affe211cb1fd15a1508c15c7028e42b3356d8ae8de922e4f7310bc1dbb22277306fc5f0eb2057f0e6b84de508150caad3ee3b697cfc15f937fdc0b7969fa1c888e5d297c16cd2b0656abd9f285646a124663a3072b01f1369991524e8593c3ae05a293d80cb2de50b38ec5b73a6e3d7b8462b17e5599f20e54658656ad1e4395ca672971fa9e2ef65e0591ef3c73c73ab7c535e6802d1c6a91960ba9a6621b68a9005ba862e987ebb2e29dd529ae4b9d768905e93294e7a341b21a2e2b888d23a7c4d13348efb7cf9924d9ed7e3647daa6ffbdd773e5054957cd966c2fc636e31492362e16320ea448cc73950dbca5e97aa0238a1992e44c3c01dc52e4bbfd2a70d13d35c959035c292303d982c6734d92df93b76f6be65bee2ccd01ec81fcb1df6726ecf1423bff0695fe8f80cd323ee0af4b6d0f99368c54127ba54aad6c3b422aed560b00da9c2452e0166b12afc36f04f1f0ce97815138e406c9a37e71464e75a7459cf9baaac7462f3ecffb943723a74a6abb17163ff409cbc036b4cc58417b23ce1e93ede55e80044b6f5ef2d525aa990e4c753261f43a73ab8c3b0d28da4b472c88c578ab9397d97542de44efa8c760ee94e3cdb0f09631c99fe50f2b1c15ac4712e7f8b92cc33adbc05f58083bc7af8cc399f706f332657db7aca9b5c57212def7c11b1e061779a64370068658416e132fc0bf76644c30dd4f553b91ec718ec59d1fb6754ba7b894e869eed56f87d0d1a30155557bd97ed9ea3bb18fb559d441580b40240653f18e7f72aa53b460ccf54b93f3c84ba1daae065cdef45adaee118c4e17b73fab71516bcfd6ae49daecbdcfd96d19e4b9fef5c3f4775fb19011a3edd448d1dd4ebb0957e631b6b3c96e75e7cb392dcb7353ea60f77e9b2382b60c602a2581c4c25a5d20f161fb3bf802f39f6e275dc169f97e458bd771225f26afdb778b890dde3cf90fe64d439c8d42723e89fc023ce5e66f19068c4a924caf6da16344714fc64d6c37dd60839ddd9401e114e65d2ea319d7fa13e5227f5539aa2ae290451c851191f18ee7617afb5892fc043bacb411b110085ee8bf96b3f9d0fca7bc6268f2115a8b8ae2a21ae26ab16a74b3083755c5e42d659d969a40bb29b16ac0fe7a45b6fd102206588f633148266d44a7f1acb02144b655cee5ea9ee3275a383c84bf46e85abc3659a48e64f7a4708a43c91c0e560d68fa478f7710b606c335963ce89371cc47420a3f5557811fd430270eaa40978b54a8111ddab66fc823ca4fc3ba02e4a793265f3a7eefb595a6b679943077a4fa8d2ca426294e1df469fa4ba0a1706490f55f4676244fe5476cc8b47d0497d077813c8bc943d2ef6bf934c3486c24a66aad4daff1eca75a84c793388b0b968420f425a1fec1aba295cf0a34dd32fe8926ece91acd0853761f6d54848f90209dccfeb7c1acc227e16864bfdf348d86f3fe5d3e817707a28ec4ca68ad089acba14f9ab60ec7c7398d99533defcb62319633756dc95e49dd8eb3b871b420dfb37ea9c9e7cbda92422919317b4abf6b4303915b3cbe0053fdcea3d6d09c78b59c863d864e22cb2353f2176af5d5fb71a0f6cfec3e69df6048c3b76c18a16fbbc27dbd7dc7075403a6af8c5ff8468b0038b00a35a85c71eadff1f3bbec05f19e5819317697713a28807bf3bd6df6251581e374c13b668f12e71de76183df05afa74469084510d697c83dc9803ea603280defb6a937e05527c9caaaa526f046ac56859dd9387132b7e91774aa49580ae558b77582ff519a01b54b10cd2ccbaec6a134050e5e0b69e3b83eedaae65252bc8930840a32545eef44667b6476fcc52aec900a7aa7c0de166543e2094ba87355f6f37eb02e43ec5bd91a928fa05c82e53a2baa18a7ed1e87e3f861440d8e494271b50d912b62c733354e2d44ee3f5c607b5b527a0ac361fa34fa666049399e9a1018112038691535e4be66ca632d3bb155ce5c6d82d8ba9a8a0a3e886a92f726b8d2afc3d6467a854bcd0cc0f7e9e33b218d766ff49e3710cdf75c2bf870c54876b2c577d03c0f9f1034fc8e012702337b8f4c7f18caedafc8fdd12cf7b0c79921638bab0274662e28e801f9b74d5043cf99445eba45cb0b8781ee74f4eaaa4990fe28b42872e0126d8ece3b23ed98828a53449237258ae81fb9a50b08cd6d2f2b42396454d42fa9d8ff9bb65f6356fa9cf0b1c095fb9821dea05fa027cf58e9c1473d482aa9ad8560fa0b7541c6b409da27f7a4521d05880e7ed99cc47d8f716e6108832364e5720e0355c5d88d2e79e03ea3b562c824ef14adb2dd2422cce36469b8910b71cb1478f9b4cf0d51c45a4b5fb2c73f00204eb38e1194aa3e8f6d479943ca36d11288194db2a04c8b72ba95529c879fa0e8ccae550e881bb755363eb2e8a32e04f234df71de2cc8712661deb449039aab6f5381379fe253fca8b32a4b7b8ae8e82b26738059f9ce577c8a16dee142b256781cdda5380a40324d9903d9ceecbb3c30ab0d8b4dda7ae688f252d274c035529b609e613c2c2158f31a660f247008c63861f6071b38ea1e7d0463944a7e752b7bf7e7928fda6c529b64ea43a9e9b0eb2351ec895586a07e6baf7f5f2075b95d5196acd5a454dd5cac0cc15fbae705fc2ecac31f3bf658634430b5736f669e9d589db0ebae4c183b49a7aa7448d619b1b76955901229c9e94da9736ee45051d98830586b03007780a7cb5dca1fd11b1b5c0959460dc1f13d13c988f1a1eba75568f6808a91b03e85dde46fa2f3c7fa56e42e0adba9ecb77817c091912ce3768fff272f45d21766570b3689efd4816cafd14411e7f2031f9fbdfe7186a8fe539382b530a208c49cb57e256cb6a2c7893cebc3e9ea763ff4236d6f167a49c38af24cfe9259a7364b402effb5284a450c34e1bb958aef4d53339c6ea9a28e3d3ae666016fd72412e9b1a79e77ef4f5cf2eb5994efe99c3717bca65b0e2ea2643f8bf6bae3dafe4a614ab80cada81348f8996fbf156b10d83265df366005e1e20c80d44e74782a44c3c5927f72eed7b43ace47219d4ca20dbf7f25d6986c34ded1a1d38619a53049e922c30ef0b0b70efa0f5ef93a63d044c72b8a81e3456e61fe20935a7822d2c24f70be822a8174d5409cc76709e6407a4d5d0fce13036856801f45f8cbbdb8ce1f845b7c3a4a22286531a47820e414ef692ab156963cb703819cee84c2238cac31aefd0587c540dfdf762b9bf2e34245500f601388094e327871f98a18e86281e74969ac21ff2d67c87d272c7060867fa771a1fda3fe2bd4e06b8862e3357d4339fbe6c6aa153d6725661ce981b9d0f26a663bbe7d6931f1a36af8273a17f3dc696545aa34dd1b5d906026f43621b56930ea4d1adf226848ab940a0e1051973221257035358485fab844f2da459fa1045340d9f603bd6d4cefb6c62ec42d170e604ad4002a4245e5ca0503c01f7f3bd0b854d2326e2136605c4ba5fbdedeb8bda163385bd19e3c646e1ceb6679a4293b3583b163f599e80372a93a8852a83258a596f4aa326be9720847889b88ddd782a75d2dceeb1eaa8401fd71fcd323e48c6010f60f10a60dd21eed9647dacfe57de9556875f739a0f825387cac2684a370cb2de3dfb67bc138895c9ff455c2d529fa0f1a0b4d4ee293f7c7a456624287ecd6b2b82bed887f9884c1af9a5ae5388cd2e7ea684d5313810aa81b4d8b8a8e6db7e88ba8751020cb2e8f2ed211a057e80fd6c46c247e90965fed6eb95ded5800b96fe9f2331977648d9d5faf890f9eea75cd8429e7c3c1b0e12e4652b179a29ab5fadf41e5431a5028494ba61850543ebb06a5e23ecca67561b0cfe7ab0db99d2b60518fea817a3f09cc0abb66efa6eb1370999851c38048f5425b6fde93e8fd00c8032452dd5e22d1b9cac7c4f4a5e1c7db6d9d06673acb23ebdd9240c917c0a57a5c2e8f922d949360e6ac50b378bba7fa92e9547f17fbf2b2481e7abd9224fe97d793076c1ef184fcaf768266fee0cddaec06d32ec25157cf556bb20e90e4ae458b44556f7757c59c4fd54a7721e11788094e58a48bf135734671bde7917a2bcfed722d9e32f30726440e30cdcfde6d27fc03a1b342993d181947ca74324f216982e66b41e669137719df29e46d0f825b6d8df06efe67c0060042d4f642c8d65c843e4f152af7270e07d81c827c1cf0f1b95cab1744bdbb207085be0c2ccd9400b0dabf4a2a46e598a506096076fa87788b30a242ca15d313ca2b1cfe21d80093b5df2cd7b"}], 0x1188}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0xb, 0x0, 0x0, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000001700)={&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)="ea", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000000), 0x98) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3f5}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xdadd}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3902}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x400}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xdf}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3583}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000045) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a80)="5c00000013006bcd9e3fe3dc4e48aa31086b87030e0000001f03000000010000040014000d000a000d0000009ee517d34860bc08eab556a705251e6182949a3651f60a7a3066a240bceaf7786f63ffe40639db6741c7685ecf84c553", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4000) 587.264451ms ago: executing program 4 (id=953): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xee, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xfffffc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = socket$kcm(0x2, 0x5, 0x84) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) (async) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 32) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x58, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000340)=r2}, 0x20) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) (async) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x65, 0x0, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="b1000000fcff9500000000000000000000000200000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r5, &(0x7f00000003c0)="ceb8563a3f2ec02b4a3831dcae4503957a7f28e7e2038797b6378644fa4b0986b454604f1b07e104f028c9d226ba4020118476385843", &(0x7f00000008c0)=""/243}, 0x20) (async, rerun: 64) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b635ef1681c717a3c4a0ed89a5b", 0x14}], 0x1}, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000200)="ff7f0e3f2617d1f42ab5a1db8511", 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50) (async) close(r0) 342.693919ms ago: executing program 3 (id=954): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xa8, 0x2, 0x9, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @broadcast}}}]}, @NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x8011) 170.019556ms ago: executing program 1 (id=955): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="10000000131401"], 0x10}, 0x1, 0x0, 0x0, 0x4001}, 0x4044000) 161.908931ms ago: executing program 4 (id=956): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e3900421803001825000a001400000002800000121fd0", 0x2f}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x7, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20010}, 0x11) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0xff08, 0x0) sendmsg$inet6(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="ed09e97841dfea8f064564719e97a795feb238bbe7f93495698e93ff426eed751a0fcf3a1ae0247f3e3605981c9a3ecba554a438868a6d5c1c0c569c36ff0dad40e69fbdef08a22bd54e475259181b8cd689773f9fae8fc028d167ccd344c5ba846486ac26de38694ed8a1", 0x6b}, {&(0x7f0000000180)="bdeef8a748d899951f11e48c185699f01277c816e3a455aeea59639331eadab617950c7cee14e498317f9a779dfcaa58ec2d02866c45a88c841ecccaa3425b8aec13d1c23ba59f79d1c64db401ef1391fad5c2342e1eb1b6a34b3be4fed830b71dbeefafd7f93790e6b2ce21f7dbc472b14cca0b1a32d9565e868023d0ed34dcd7438f29458d7e6557c62fcfe7e9fb68da3961d56fc6a5d375da154cd90ce8aabd76474c8a6dfc2612505320e7b1932e8d332acdb872e4bc4247e454a478451f1b359e918adfdbcc6b239f2a062a5927c65820dcdca52a79615f8e10224a", 0xde}, {&(0x7f00000000c0)="b1a1f5ed76e82089448467283a56d6dea783c349092e9b23e90c24487605a324ab660631bc76dd8aa517f37f55a2ac47c89b444ecb046274045325e3a262535af36f920c4cd37bbead6c0c21e1164463d2fc4574cfa6", 0x56}, {&(0x7f00000002c0)="aee1e6eadd197ac0de7ba68b3e7b0b933ef38233fe7e88f5f25093d862a576e0b256ccbbeebf66", 0x27}, {&(0x7f0000000300)="1c0832195a45db19b6da715c4966892d0837e18251afe89499c70cc499b641f163850fc71425bfd7eb00c32a3c038fcfbc07ac5721e7cc948b501928f05df27ccda570d660990a13278a7bd7b24f8bfd5cedcf6cf2b2d54a8507400b464415094c98", 0x62}, {&(0x7f0000000380)="8d02da44fdb05e809c2bac0994f69c9187bef726b303004efc856682f8d899a40429e618e16d5d2c43ba8b6d2f55d2b09089e9d8c6d2fd6cdd59bb7e310363308c789f248ae4f2193fbb35414b9d9b5cc8dc1c8b9befe178ec1c407dd55672be9110aac21aa16f009bda0f4ffc5476a694fbb35f7af931d03a5c7484137e35d175f915aeb92fa3d3fe246527cd6977e4596cdfe8", 0x94}], 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="380000000000000029000000040000000003000000000000000000000502000605020007c20400000001050225e8000000140000000000000029000000340000000000000000000000140000000000000029000000430000000600000000000000"], 0x68}, 0x4) 0s ago: executing program 3 (id=957): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r1, 0x0, 0x44845) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x40040800}, 0xc, &(0x7f00000036c0)={&(0x7f0000003640)={0x38, 0x0, 0x7, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x200c0c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000c00000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000c00000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000140)='contention_end\x00', r2}, 0x18) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x9, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x4) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xa00, &(0x7f00000001c0)=[{&(0x7f0000000100)="5c0000001e006bcd9e3fe3dc6e08000007000000010000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xa00, &(0x7f00000001c0)=[{&(0x7f0000000100)="5c0000001e006bcd9e3fe3dc6e08000007000000010000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="140000003a000b63d25a80648c25946f057319f9", 0x14}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 86.407345][ T5850] cgroup: Unknown subsys name 'net' [ 86.516638][ T5850] cgroup: Unknown subsys name 'cpuset' [ 86.526329][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.411185][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.176729][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.194434][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.202741][ T5876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.210409][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.220198][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.227711][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.235189][ T5876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.249899][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.258249][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.266401][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.273612][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.274430][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.290154][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.299813][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.318743][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.332538][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.341442][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.351322][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.358742][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.368145][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.407343][ T5877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.415557][ T5877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.426098][ T5877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.441838][ T5877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.450989][ T5877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.842474][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 92.108721][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 92.222033][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 92.280908][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.290738][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.298655][ T5862] bridge_slave_0: entered allmulticast mode [ 92.306558][ T5862] bridge_slave_0: entered promiscuous mode [ 92.358955][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.367685][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.375306][ T5862] bridge_slave_1: entered allmulticast mode [ 92.383302][ T5862] bridge_slave_1: entered promiscuous mode [ 92.465707][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 92.516337][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.530524][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.578416][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.587120][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.594645][ T5861] bridge_slave_0: entered allmulticast mode [ 92.601997][ T5861] bridge_slave_0: entered promiscuous mode [ 92.636735][ T5862] team0: Port device team_slave_0 added [ 92.643139][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 92.669864][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.677677][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.685498][ T5861] bridge_slave_1: entered allmulticast mode [ 92.693499][ T5861] bridge_slave_1: entered promiscuous mode [ 92.721623][ T5862] team0: Port device team_slave_1 added [ 92.794128][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.801400][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.809074][ T5863] bridge_slave_0: entered allmulticast mode [ 92.817189][ T5863] bridge_slave_0: entered promiscuous mode [ 92.883663][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.890856][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.898471][ T5863] bridge_slave_1: entered allmulticast mode [ 92.907100][ T5863] bridge_slave_1: entered promiscuous mode [ 92.946657][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.960142][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.013916][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.021017][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.047491][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.077281][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.101497][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.108895][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.117088][ T5879] bridge_slave_0: entered allmulticast mode [ 93.125069][ T5879] bridge_slave_0: entered promiscuous mode [ 93.133959][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.141154][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.149008][ T5879] bridge_slave_1: entered allmulticast mode [ 93.157047][ T5879] bridge_slave_1: entered promiscuous mode [ 93.164884][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.171861][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.197987][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.234209][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.291668][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.331840][ T5861] team0: Port device team_slave_0 added [ 93.341167][ T5861] team0: Port device team_slave_1 added [ 93.364625][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.383346][ T5183] Bluetooth: hci3: command tx timeout [ 93.389147][ T5183] Bluetooth: hci1: command tx timeout [ 93.398091][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.405477][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.412893][ T5866] bridge_slave_0: entered allmulticast mode [ 93.420309][ T5866] bridge_slave_0: entered promiscuous mode [ 93.463069][ T5183] Bluetooth: hci2: command tx timeout [ 93.468836][ T5183] Bluetooth: hci0: command tx timeout [ 93.490395][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.497865][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.506317][ T5866] bridge_slave_1: entered allmulticast mode [ 93.514407][ T5866] bridge_slave_1: entered promiscuous mode [ 93.523415][ T5863] team0: Port device team_slave_0 added [ 93.549666][ T5862] hsr_slave_0: entered promiscuous mode [ 93.555752][ T5183] Bluetooth: hci4: command tx timeout [ 93.562788][ T5862] hsr_slave_1: entered promiscuous mode [ 93.571818][ T5879] team0: Port device team_slave_0 added [ 93.581564][ T5879] team0: Port device team_slave_1 added [ 93.603630][ T5863] team0: Port device team_slave_1 added [ 93.610330][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.617824][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.643881][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.657453][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.664543][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.690642][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.808096][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.821556][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.831766][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.839095][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.865907][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.892379][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.899391][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.930689][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.989850][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.997225][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.023462][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.044477][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.051487][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.078098][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.153537][ T5861] hsr_slave_0: entered promiscuous mode [ 94.160017][ T5861] hsr_slave_1: entered promiscuous mode [ 94.169487][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 94.175622][ T5861] Cannot create hsr debugfs directory [ 94.183839][ T5866] team0: Port device team_slave_0 added [ 94.193064][ T5866] team0: Port device team_slave_1 added [ 94.259354][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.266796][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.292850][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.358765][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.365946][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.392490][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.459097][ T5879] hsr_slave_0: entered promiscuous mode [ 94.466333][ T5879] hsr_slave_1: entered promiscuous mode [ 94.473846][ T5879] debugfs: 'hsr0' already exists in 'hsr' [ 94.479709][ T5879] Cannot create hsr debugfs directory [ 94.516174][ T5863] hsr_slave_0: entered promiscuous mode [ 94.523585][ T5863] hsr_slave_1: entered promiscuous mode [ 94.532811][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 94.538613][ T5863] Cannot create hsr debugfs directory [ 94.748423][ T5866] hsr_slave_0: entered promiscuous mode [ 94.755179][ T5866] hsr_slave_1: entered promiscuous mode [ 94.761404][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 94.768051][ T5866] Cannot create hsr debugfs directory [ 95.009316][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.048371][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.097158][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.138578][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.286696][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.310684][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.322163][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.335498][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.451880][ T5866] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.464035][ T5183] Bluetooth: hci3: command tx timeout [ 95.466021][ T5877] Bluetooth: hci1: command tx timeout [ 95.480732][ T5866] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.496757][ T5866] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.529845][ T5866] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.543804][ T5877] Bluetooth: hci0: command tx timeout [ 95.544540][ T5183] Bluetooth: hci2: command tx timeout [ 95.623586][ T5183] Bluetooth: hci4: command tx timeout [ 95.651751][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.667671][ T5879] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.680380][ T5879] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.730089][ T5879] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.760735][ T5879] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.842934][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.850525][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.865834][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.877853][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.889580][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.916345][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.946248][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.953604][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.984173][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.991510][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.051453][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.070706][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.096635][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.103970][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.140327][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.147628][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.190498][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.241741][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.272999][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.280853][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.355023][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.362339][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.491933][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.514832][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.591843][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.642126][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.649373][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.705990][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.747419][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.755219][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.786220][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.793484][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.849819][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.857037][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.970507][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.009866][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.122426][ T5862] veth0_vlan: entered promiscuous mode [ 97.168381][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.195643][ T5862] veth1_vlan: entered promiscuous mode [ 97.304950][ T5861] veth0_vlan: entered promiscuous mode [ 97.364429][ T5861] veth1_vlan: entered promiscuous mode [ 97.474963][ T44] cfg80211: failed to load regulatory.db [ 97.481187][ T5862] veth0_macvtap: entered promiscuous mode [ 97.543054][ T5183] Bluetooth: hci3: command tx timeout [ 97.548551][ T5183] Bluetooth: hci1: command tx timeout [ 97.560661][ T5862] veth1_macvtap: entered promiscuous mode [ 97.626398][ T5877] Bluetooth: hci0: command tx timeout [ 97.631963][ T5183] Bluetooth: hci2: command tx timeout [ 97.638177][ T5861] veth0_macvtap: entered promiscuous mode [ 97.686282][ T5861] veth1_macvtap: entered promiscuous mode [ 97.703078][ T5183] Bluetooth: hci4: command tx timeout [ 97.745483][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.777508][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.806257][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.819691][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.856679][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.866801][ T1167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.876752][ T1167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.889560][ T1167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.908768][ T1167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.935098][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.969966][ T1167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.000729][ T1167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.018147][ T1167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.050325][ T1167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.135508][ T4086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.148536][ T4086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.175009][ T5866] veth0_vlan: entered promiscuous mode [ 98.197112][ T5863] veth0_vlan: entered promiscuous mode [ 98.259096][ T5879] veth0_vlan: entered promiscuous mode [ 98.277902][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.285887][ T5863] veth1_vlan: entered promiscuous mode [ 98.295358][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.299979][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.314746][ T5879] veth1_vlan: entered promiscuous mode [ 98.327771][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.333215][ T5866] veth1_vlan: entered promiscuous mode [ 98.443905][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.463751][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.484595][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.491280][ T5866] veth0_macvtap: entered promiscuous mode [ 98.539702][ T5879] veth0_macvtap: entered promiscuous mode [ 98.573771][ T5863] veth0_macvtap: entered promiscuous mode [ 98.604254][ T5866] veth1_macvtap: entered promiscuous mode [ 98.614818][ T5879] veth1_macvtap: entered promiscuous mode [ 98.630244][ T5863] veth1_macvtap: entered promiscuous mode [ 98.711272][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.725175][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.763300][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.779649][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.817591][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.827976][ T5986] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 98.832312][ C0] hrtimer: interrupt took 94997 ns [ 98.859499][ T5986] team0: Device ipvlan1 failed to register rx_handler [ 98.880540][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.890326][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.913928][ T5985] netlink: 1018 bytes leftover after parsing attributes in process `syz.1.2'. [ 98.926717][ T4086] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.939103][ T4086] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.955808][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.979357][ T4086] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.990400][ T4086] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.019876][ T4086] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.039370][ T5985] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2'. [ 99.067298][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.111569][ T78] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.129842][ T78] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.140632][ T78] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.151863][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.333936][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.357311][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.436114][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.453978][ T5989] IPv6: NLM_F_REPLACE set, but no existing node found! [ 99.461250][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.493476][ T5989] vxcan1: entered allmulticast mode [ 99.531663][ T4086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.557278][ T4086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.570634][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.580695][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.624729][ T4086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.627078][ T5877] Bluetooth: hci3: command tx timeout [ 99.640503][ T5183] Bluetooth: hci1: command tx timeout [ 99.659378][ T4086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.712680][ T5877] Bluetooth: hci2: command tx timeout [ 99.718189][ T5877] Bluetooth: hci0: command tx timeout [ 99.785520][ T5877] Bluetooth: hci4: command tx timeout [ 99.798556][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.813583][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.780826][ T6019] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11'. [ 100.825139][ T6019] hsr0: entered promiscuous mode [ 100.850036][ T6019] hsr0: entered allmulticast mode [ 100.905014][ T6019] hsr_slave_0: entered allmulticast mode [ 100.918254][ T6019] hsr_slave_1: entered allmulticast mode [ 101.509390][ T6031] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13'. [ 101.597295][ T6031] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 101.852093][ T6030] netlink: 'syz.1.14': attribute type 39 has an invalid length. [ 103.077126][ T6048] netlink: 14 bytes leftover after parsing attributes in process `syz.0.18'. [ 103.093869][ T6048] openvswitch: netlink: Message has 4 unknown bytes. [ 103.206928][ T6051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17'. [ 104.303622][ T6045] netlink: 763 bytes leftover after parsing attributes in process `syz.2.17'. [ 104.327672][ T6050] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.946711][ T6055] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.20'. [ 106.263371][ T6062] Zero length message leads to an empty skb [ 106.918248][ T6072] netlink: 196 bytes leftover after parsing attributes in process `syz.3.24'. [ 107.298868][ T6080] netlink: 'syz.1.27': attribute type 2 has an invalid length. [ 107.332194][ T6080] netlink: 'syz.1.27': attribute type 3 has an invalid length. [ 107.412416][ T6080] netlink: 132 bytes leftover after parsing attributes in process `syz.1.27'. [ 107.656546][ T6088] netlink: 'syz.1.28': attribute type 21 has an invalid length. [ 107.675272][ T6087] netlink: 'syz.1.28': attribute type 21 has an invalid length. [ 107.684879][ T6088] netlink: 156 bytes leftover after parsing attributes in process `syz.1.28'. [ 107.694971][ T6087] netlink: 156 bytes leftover after parsing attributes in process `syz.1.28'. [ 108.326446][ T6097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.30'. [ 109.072532][ T6105] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.33'. [ 109.756286][ T6114] netlink: 'syz.2.34': attribute type 3 has an invalid length. [ 109.846222][ T6114] netlink: 185280 bytes leftover after parsing attributes in process `syz.2.34'. [ 110.130669][ T6118] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 111.174391][ T30] audit: type=1107 audit(1755556707.171:2): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=',' [ 111.452516][ T6135] netlink: 'syz.0.42': attribute type 10 has an invalid length. [ 111.490508][ T6135] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.42'. [ 111.552545][ T6134] netlink: 44 bytes leftover after parsing attributes in process `syz.2.41'. [ 111.576542][ T6144] bpf: Bad value for 'gid' [ 112.109694][ T6151] netlink: 'syz.0.46': attribute type 3 has an invalid length. [ 112.189928][ T6151] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.46'. [ 112.213672][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 113.084665][ T6161] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.50'. [ 115.424610][ T6198] netlink: 56 bytes leftover after parsing attributes in process `syz.2.57'. [ 115.745571][ T6206] netlink: 'syz.2.60': attribute type 10 has an invalid length. [ 116.029936][ T6206] batman_adv: batadv0: Adding interface: netdevsim0 [ 116.038917][ T6206] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.065443][ T6206] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 116.081058][ T6215] netlink: 14 bytes leftover after parsing attributes in process `syz.0.62'. [ 116.268956][ T6215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.296342][ T6215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.326527][ T6215] bond0 (unregistering): Released all slaves [ 116.593327][ T6223] syz.1.66 uses obsolete (PF_INET,SOCK_PACKET) [ 117.613370][ T6227] netlink: 152 bytes leftover after parsing attributes in process `syz.0.67'. [ 117.628941][ T6227] netlink: 6 bytes leftover after parsing attributes in process `syz.0.67'. [ 118.147305][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 118.167875][ T6244] netlink: 'syz.0.73': attribute type 1 has an invalid length. [ 119.391310][ T6261] netlink: 48 bytes leftover after parsing attributes in process `syz.1.78'. [ 119.691880][ T6277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.802911][ T6322] netlink: 'syz.0.94': attribute type 2 has an invalid length. [ 120.873784][ T6322] netlink: 'syz.0.94': attribute type 1 has an invalid length. [ 120.911080][ T6322] netlink: 'syz.0.94': attribute type 2 has an invalid length. [ 121.033749][ T6322] netlink: 'syz.0.94': attribute type 1 has an invalid length. [ 121.515372][ T6333] netlink: 'syz.1.96': attribute type 11 has an invalid length. [ 121.934957][ T6348] netlink: 'syz.3.100': attribute type 1 has an invalid length. [ 122.218136][ T6358] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.102'. [ 124.195519][ T6384] lo: entered promiscuous mode [ 124.198052][ T6383] netlink: 44 bytes leftover after parsing attributes in process `syz.4.111'. [ 125.280243][ T6419] netlink: 'syz.4.119': attribute type 10 has an invalid length. [ 125.369843][ T6419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.504055][ T6419] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 125.547867][ T6430] batadv_slave_1: entered promiscuous mode [ 125.587461][ T6430] batadv_slave_1: entered allmulticast mode [ 125.964095][ T6437] warning: `syz.3.123' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 126.017357][ T6437] netlink: 'syz.3.123': attribute type 4 has an invalid length. [ 126.048344][ T6437] netlink: 152 bytes leftover after parsing attributes in process `syz.3.123'. [ 126.078861][ T6437] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 126.659176][ T6456] netlink: 'syz.4.126': attribute type 21 has an invalid length. [ 127.809253][ T6482] netlink: 'syz.1.134': attribute type 39 has an invalid length. [ 127.866756][ T6483] netlink: 80 bytes leftover after parsing attributes in process `syz.4.132'. [ 127.892839][ T6481] sit0: entered allmulticast mode [ 127.912979][ T6479] netlink: 'syz.4.132': attribute type 2 has an invalid length. [ 128.083421][ T6485] sit0: entered promiscuous mode [ 129.403269][ T6511] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.141'. [ 129.481093][ T6511] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 131.414579][ T6526] netlink: 64 bytes leftover after parsing attributes in process `syz.1.146'. [ 131.686656][ T6536] netlink: 2 bytes leftover after parsing attributes in process `syz.3.148'. [ 131.715087][ T6536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.868799][ T6540] sctp: [Deprecated]: syz.3.148 (pid 6540) Use of int in max_burst socket option deprecated. [ 131.868799][ T6540] Use struct sctp_assoc_value instead [ 131.931539][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.149'. [ 132.194715][ T6544] syzkaller0: entered promiscuous mode [ 132.219059][ T6544] syzkaller0: entered allmulticast mode [ 132.313567][ T6544] netlink: 'syz.1.150': attribute type 21 has an invalid length. [ 132.354268][ T6544] netlink: 'syz.1.150': attribute type 5 has an invalid length. [ 132.368986][ T6553] netlink: 'syz.4.152': attribute type 29 has an invalid length. [ 132.394310][ T6553] netlink: 'syz.4.152': attribute type 29 has an invalid length. [ 132.679638][ T6553] netlink: 'syz.4.152': attribute type 29 has an invalid length. [ 132.779297][ T6567] netlink: 136 bytes leftover after parsing attributes in process `syz.1.157'. [ 132.926206][ T5877] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 133.311357][ T6578] netlink: 'syz.2.160': attribute type 1 has an invalid length. [ 133.361184][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 134.144781][ T6605] netlink: 'syz.2.166': attribute type 1 has an invalid length. [ 134.902448][ T6573] syz.3.158: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 134.939179][ T6573] CPU: 1 UID: 0 PID: 6573 Comm: syz.3.158 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 134.939213][ T6573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.939235][ T6573] Call Trace: [ 134.939244][ T6573] [ 134.939255][ T6573] dump_stack_lvl+0x189/0x250 [ 134.939301][ T6573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.939329][ T6573] ? __pfx__printk+0x10/0x10 [ 134.939362][ T6573] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 134.939389][ T6573] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 134.939418][ T6573] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 134.939447][ T6573] warn_alloc+0x214/0x310 [ 134.939489][ T6573] ? __pfx_warn_alloc+0x10/0x10 [ 134.939534][ T6573] ? __get_vm_area_node+0x28f/0x300 [ 134.939568][ T6573] ? hash_netiface_create+0x358/0xfe0 [ 134.939599][ T6573] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 134.939667][ T6573] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 134.939700][ T6573] ? hash_netiface_create+0x358/0xfe0 [ 134.939728][ T6573] ? __get_vm_area_node+0x28f/0x300 [ 134.939761][ T6573] ? hash_netiface_create+0x358/0xfe0 [ 134.939789][ T6573] __vmalloc_node_range_noprof+0x56a/0x12f0 [ 134.939823][ T6573] ? hash_netiface_create+0x358/0xfe0 [ 134.939845][ T6573] ? do_syscall_64+0xfa/0x3b0 [ 134.939921][ T6573] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 134.939960][ T6573] ? rcu_is_watching+0x15/0xb0 [ 134.939982][ T6573] ? hash_netiface_create+0x358/0xfe0 [ 134.940005][ T6573] ? hash_netiface_create+0x358/0xfe0 [ 134.940028][ T6573] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 134.940062][ T6573] ? hash_netiface_create+0x358/0xfe0 [ 134.940088][ T6573] ? hash_netiface_create+0x2fe/0xfe0 [ 134.940118][ T6573] hash_netiface_create+0x358/0xfe0 [ 134.940143][ T6573] ? ip_set_create+0x4a2/0x1940 [ 134.940181][ T6573] ? __nla_parse+0x40/0x60 [ 134.940214][ T6573] ? __pfx_hash_netiface_create+0x10/0x10 [ 134.940242][ T6573] ip_set_create+0xa94/0x1940 [ 134.940268][ T6573] ? ip_set_create+0x4a2/0x1940 [ 134.940307][ T6573] ? __pfx_ip_set_create+0x10/0x10 [ 134.940370][ T6573] nfnetlink_rcv_msg+0xb4d/0x1130 [ 134.940399][ T6573] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 134.940448][ T6573] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 134.940473][ T6573] ? kasan_save_free_info+0x46/0x50 [ 134.940527][ T6573] ? perf_trace_preemptirq_template+0xa3/0x340 [ 134.940558][ T6573] ? kasan_quarantine_put+0x3d/0x220 [ 134.940608][ T6573] netlink_rcv_skb+0x208/0x470 [ 134.940643][ T6573] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 134.940673][ T6573] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.940719][ T6573] ? bpf_lsm_capable+0x9/0x20 [ 134.940750][ T6573] ? security_capable+0x7e/0x2e0 [ 134.940791][ T6573] nfnetlink_rcv+0x26a/0x2520 [ 134.940823][ T6573] ? __dev_queue_xmit+0x1d79/0x3b50 [ 134.940872][ T6573] ? __dev_queue_xmit+0x27b/0x3b50 [ 134.940912][ T6573] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 134.940940][ T6573] ? __pfx___dev_queue_xmit+0x10/0x10 [ 134.940981][ T6573] ? ref_tracker_free+0x63a/0x7d0 [ 134.941014][ T6573] ? __asan_memcpy+0x40/0x70 [ 134.941038][ T6573] ? __pfx_ref_tracker_free+0x10/0x10 [ 134.941066][ T6573] ? __skb_clone+0x63/0x7a0 [ 134.941093][ T6573] ? perf_trace_lock+0xec/0x3b0 [ 134.941113][ T6573] ? __skb_clone+0x483/0x7a0 [ 134.941140][ T6573] ? __pfx_perf_trace_lock+0x10/0x10 [ 134.941162][ T6573] ? skb_clone+0x246/0x3a0 [ 134.941190][ T6573] ? __netlink_deliver_tap+0x807/0x850 [ 134.941222][ T6573] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.941262][ T6573] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.941304][ T6573] netlink_unicast+0x82c/0x9e0 [ 134.941345][ T6573] ? __pfx_netlink_unicast+0x10/0x10 [ 134.941377][ T6573] ? netlink_sendmsg+0x642/0xb30 [ 134.941407][ T6573] ? skb_put+0x11b/0x210 [ 134.941447][ T6573] netlink_sendmsg+0x805/0xb30 [ 134.941510][ T6573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.941548][ T6573] ? aa_sock_msg_perm+0xf1/0x1d0 [ 134.941586][ T6573] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.941610][ T6573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.941644][ T6573] __sock_sendmsg+0x21c/0x270 [ 134.941678][ T6573] ____sys_sendmsg+0x505/0x830 [ 134.941706][ T6573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.941739][ T6573] ? import_iovec+0x74/0xa0 [ 134.941769][ T6573] ___sys_sendmsg+0x21f/0x2a0 [ 134.941795][ T6573] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.941842][ T6573] ? __fget_files+0x2a/0x420 [ 134.941892][ T6573] ? __fget_files+0x2a/0x420 [ 134.941910][ T6573] ? __fget_files+0x3a0/0x420 [ 134.941943][ T6573] __x64_sys_sendmsg+0x19b/0x260 [ 134.941970][ T6573] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.942005][ T6573] ? rcu_is_watching+0x15/0xb0 [ 134.942034][ T6573] ? do_syscall_64+0xbe/0x3b0 [ 134.942073][ T6573] do_syscall_64+0xfa/0x3b0 [ 134.942104][ T6573] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.942134][ T6573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.942156][ T6573] ? clear_bhb_loop+0x60/0xb0 [ 134.942183][ T6573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.942204][ T6573] RIP: 0033:0x7f5318b8ebe9 [ 134.942235][ T6573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.942253][ T6573] RSP: 002b:00007f5316df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.942276][ T6573] RAX: ffffffffffffffda RBX: 00007f5318db5fa0 RCX: 00007f5318b8ebe9 [ 134.942292][ T6573] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 134.942306][ T6573] RBP: 00007f5318c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 134.942319][ T6573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.942331][ T6573] R13: 00007f5318db6038 R14: 00007f5318db5fa0 R15: 00007ffe6a6f99b8 [ 134.942367][ T6573] [ 135.507132][ T6573] Mem-Info: [ 135.510332][ T6573] active_anon:6053 inactive_anon:0 isolated_anon:0 [ 135.510332][ T6573] active_file:11652 inactive_file:39840 isolated_file:0 [ 135.510332][ T6573] unevictable:768 dirty:96 writeback:0 [ 135.510332][ T6573] slab_reclaimable:10350 slab_unreclaimable:95795 [ 135.510332][ T6573] mapped:30253 shmem:1356 pagetables:1236 [ 135.510332][ T6573] sec_pagetables:0 bounce:0 [ 135.510332][ T6573] kernel_misc_reclaimable:0 [ 135.510332][ T6573] free:1291569 free_pcp:14487 free_cma:0 [ 135.556564][ T6573] Node 0 active_anon:24212kB inactive_anon:0kB active_file:46608kB inactive_file:159160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121012kB dirty:380kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11824kB pagetables:4812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 135.589376][ T6573] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 135.619468][ T6573] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 135.648447][ T6573] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 135.654351][ T6573] Node 0 DMA32 free:1264028kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24064kB inactive_anon:0kB active_file:46608kB inactive_file:157584kB unevictable:1536kB writepending:380kB present:3129332kB managed:2557484kB mlocked:0kB bounce:0kB free_pcp:34248kB local_pcp:18348kB free_cma:0kB [ 135.687654][ T6573] lowmem_reserve[]: 0 0 1 1 1 [ 135.692528][ T6573] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 135.722533][ T6573] lowmem_reserve[]: 0 0 0 0 0 [ 135.727335][ T6573] Node 1 Normal free:3886876kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23844kB local_pcp:12068kB free_cma:0kB [ 135.758738][ T6573] lowmem_reserve[]: 0 0 0 0 0 [ 135.763585][ T6573] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 135.776495][ T6573] Node 0 DMA32: 423*4kB (UM) 282*8kB (UME) 181*16kB (ME) 155*32kB (ME) 106*64kB (UME) 74*128kB (UM) 58*256kB (UM) 9*512kB (UME) 6*1024kB (UM) 3*2048kB (UME) 294*4096kB (M) = 1264028kB [ 135.796355][ T6573] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 135.808820][ T6573] Node 1 Normal: 205*4kB (UME) 75*8kB (UME) 49*16kB (UME) 80*32kB (UME) 24*64kB (UME) 5*128kB (UME) 6*256kB (UME) 5*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3886876kB [ 135.827114][ T6573] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 135.836771][ T6573] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 135.846221][ T6573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 135.856232][ T6573] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 135.867055][ T6573] 52844 total pagecache pages [ 135.871819][ T6573] 0 pages in swap cache [ 135.876126][ T6573] Free swap = 124996kB [ 135.880953][ T6573] Total swap = 124996kB [ 135.885258][ T6573] 2097051 pages RAM [ 135.890023][ T6573] 0 pages HighMem/MovableOnly [ 135.890922][ T6623] netlink: 'syz.2.171': attribute type 21 has an invalid length. [ 135.894805][ T6573] 425654 pages reserved [ 135.894838][ T6573] 0 pages cma reserved [ 136.131468][ T6620] netlink: 'syz.2.171': attribute type 5 has an invalid length. [ 136.172538][ T6623] netlink: 132 bytes leftover after parsing attributes in process `syz.2.171'. [ 136.287912][ T6630] netlink: 146936 bytes leftover after parsing attributes in process `syz.4.174'. [ 136.344416][ T6630] openvswitch: netlink: Message has 6 unknown bytes. [ 136.767689][ T6621] syz.2.171 (6621) used greatest stack depth: 17784 bytes left [ 137.353533][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'. [ 137.390635][ T6642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.177'. [ 137.435751][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'. [ 138.439258][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.446389][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.244233][ T6659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.182'. [ 139.374431][ T6660] Illegal XDP return value 4294967294 on prog (id 140) dev N/A, expect packet loss! [ 139.403095][ T6660] netlink: 72 bytes leftover after parsing attributes in process `syz.2.182'. [ 139.525439][ T6662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.555550][ T6662] netlink: 'syz.4.183': attribute type 6 has an invalid length. [ 140.158896][ T6681] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 140.278669][ T6683] @ÿ: renamed from veth0_vlan (while UP) [ 140.991195][ T6699] netlink: 'syz.0.194': attribute type 29 has an invalid length. [ 141.038634][ T6701] netlink: 'syz.2.193': attribute type 29 has an invalid length. [ 141.058235][ T6702] netlink: 'syz.0.194': attribute type 29 has an invalid length. [ 141.082746][ T6700] netlink: 'syz.0.194': attribute type 29 has an invalid length. [ 141.100156][ T6701] netlink: 'syz.2.193': attribute type 29 has an invalid length. [ 141.136181][ T6705] netlink: 500 bytes leftover after parsing attributes in process `syz.2.193'. [ 141.181986][ T6704] netlink: 60 bytes leftover after parsing attributes in process `syz.3.195'. [ 141.254840][ T6704] unsupported nlmsg_type 40 [ 141.641908][ T6709] openvswitch: netlink: Missing valid actions attribute. [ 141.721299][ T5877] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 141.732563][ T5877] Bluetooth: hci3: Invalid handle: 0x85b0 > 0x0eff [ 141.754825][ T6709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.777364][ T6716] netlink: 'syz.0.197': attribute type 3 has an invalid length. [ 141.907430][ T6716] netlink: 'syz.0.197': attribute type 2 has an invalid length. [ 142.012449][ T6716] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.197'. [ 142.388950][ T6713] delete_channel: no stack [ 142.487018][ T6723] netlink: 'syz.3.201': attribute type 10 has an invalid length. [ 142.515244][ T6723] netlink: 156 bytes leftover after parsing attributes in process `syz.3.201'. [ 143.041499][ T30] audit: type=1107 audit(1755556739.041:3): pid=6730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=',' [ 143.975387][ T6756] netlink: 14 bytes leftover after parsing attributes in process `syz.3.206'. [ 144.446122][ T5183] Bluetooth: hci4: ISO packet for unknown connection handle 5 [ 144.550733][ T6771] netlink: 'syz.1.212': attribute type 10 has an invalid length. [ 144.605951][ T6771] macvlan0: entered allmulticast mode [ 144.757679][ T6771] veth1_vlan: entered allmulticast mode [ 144.795420][ T6771] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 145.095368][ T6780] netlink: zone id is out of range [ 145.119559][ T6780] netlink: zone id is out of range [ 145.153194][ T6781] netlink: del zone limit has 4 unknown bytes [ 145.160541][ T6781] netlink: del zone limit has 4 unknown bytes [ 145.181747][ T6780] netlink: zone id is out of range [ 145.190665][ T6781] netlink: del zone limit has 4 unknown bytes [ 145.295490][ T6780] netlink: zone id is out of range [ 145.307244][ T6780] netlink: zone id is out of range [ 145.321963][ T6780] netlink: zone id is out of range [ 145.347444][ T6780] netlink: zone id is out of range [ 145.370037][ T6793] netlink: 40 bytes leftover after parsing attributes in process `syz.2.218'. [ 145.732557][ T6804] netlink: 'syz.3.221': attribute type 10 has an invalid length. [ 145.788441][ T6804] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 146.805617][ T6837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.230'. [ 146.989740][ T6841] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.233'. [ 147.152034][ T6850] netlink: 'syz.3.235': attribute type 10 has an invalid length. [ 147.189598][ T6850] netlink: 55 bytes leftover after parsing attributes in process `syz.3.235'. [ 147.261531][ T6851] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.234'. [ 147.294002][ T6851] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.234'. [ 147.770873][ T6864] netlink: 'syz.4.238': attribute type 3 has an invalid length. [ 147.780704][ T6864] netlink: 'syz.4.238': attribute type 1 has an invalid length. [ 147.800053][ T6864] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.238'. [ 148.194107][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 148.322474][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.239'. [ 148.537393][ T6867] netlink: 2 bytes leftover after parsing attributes in process `syz.0.239'. [ 149.511597][ T6886] bridge_slave_1: left allmulticast mode [ 149.528793][ T6886] bridge_slave_1: left promiscuous mode [ 149.545852][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.744072][ T6886] bridge_slave_0: left promiscuous mode [ 149.829337][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.939186][ T6961] net_ratelimit: 200 callbacks suppressed [ 151.939212][ T6961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.029892][ T6962] __nla_validate_parse: 3 callbacks suppressed [ 152.029917][ T6962] netlink: 64 bytes leftover after parsing attributes in process `syz.3.260'. [ 152.043278][ T6964] netlink: 'syz.1.265': attribute type 10 has an invalid length. [ 152.109113][ T6964] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 152.398266][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.266'. [ 153.769742][ T7017] netlink: 992 bytes leftover after parsing attributes in process `syz.2.278'. [ 153.941475][ T7022] @ÿ: renamed from bond_slave_0 (while UP) [ 154.563729][ T7035] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32 [ 154.602550][ T7027] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 155.114679][ T7045] netlink: 40 bytes leftover after parsing attributes in process `syz.3.289'. [ 155.157960][ T7043] netlink: 72 bytes leftover after parsing attributes in process `syz.2.288'. [ 155.179964][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.234219][ T7045] bridge_slave_0 (unregistering): left allmulticast mode [ 155.273907][ T7045] bridge_slave_0 (unregistering): left promiscuous mode [ 155.326329][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.427413][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 156.141176][ T7071] netlink: 'syz.3.294': attribute type 2 has an invalid length. [ 156.718477][ T7079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.355106][ T7082] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.296'. [ 158.738682][ T7097] netlink: 'syz.4.301': attribute type 7 has an invalid length. [ 158.851412][ T7099] netlink: 'syz.4.301': attribute type 7 has an invalid length. [ 159.656218][ T7111] netlink: 196 bytes leftover after parsing attributes in process `syz.0.305'. [ 160.283359][ T7127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.309'. [ 160.322660][ T7128] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.309'. [ 160.332522][ T7128] netlink: zone id is out of range [ 160.337689][ T7128] netlink: zone id is out of range [ 160.364802][ T7135] netlink: 'syz.4.311': attribute type 21 has an invalid length. [ 160.374142][ T7128] netlink: zone id is out of range [ 160.379513][ T7128] netlink: get zone limit has 8 unknown bytes [ 161.629782][ T7136] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.311'. [ 161.639490][ T7140] netlink: 60 bytes leftover after parsing attributes in process `syz.1.312'. [ 161.860614][ T7157] netlink: 182 bytes leftover after parsing attributes in process `syz.2.317'. [ 161.922579][ T7161] netlink: 'syz.1.318': attribute type 10 has an invalid length. [ 161.930402][ T7161] netlink: 156 bytes leftover after parsing attributes in process `syz.1.318'. [ 161.963851][ T7164] netlink: 92 bytes leftover after parsing attributes in process `syz.4.316'. [ 162.005615][ T7162] netlink: 'syz.1.318': attribute type 10 has an invalid length. [ 162.020206][ T7162] netlink: 156 bytes leftover after parsing attributes in process `syz.1.318'. [ 162.445750][ T7185] netlink: 'syz.2.325': attribute type 10 has an invalid length. [ 162.463083][ T7185] ipvlan1: entered promiscuous mode [ 162.486969][ T7185] ipvlan1: entered allmulticast mode [ 162.505538][ T7185] veth0_vlan: entered allmulticast mode [ 162.537898][ T7185] bridge0: port 3(ipvlan1) entered blocking state [ 162.587419][ T7185] bridge0: port 3(ipvlan1) entered disabled state [ 162.627616][ T7185] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 163.951216][ T7224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.753964][ T7250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.785412][ T7244] __nla_validate_parse: 4 callbacks suppressed [ 164.785479][ T7244] netlink: 14 bytes leftover after parsing attributes in process `syz.4.342'. [ 165.324536][ T7255] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 165.370432][ T7257] netlink: 'syz.4.345': attribute type 10 has an invalid length. [ 165.423331][ T7261] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 165.498468][ T7257] batman_adv: batadv0: Adding interface: team0 [ 165.505929][ T7257] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.537090][ T7257] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 166.495043][ T7278] netlink: 'syz.0.350': attribute type 11 has an invalid length. [ 166.525386][ T7278] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.350'. [ 166.626215][ T7275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.780509][ T7288] netlink: 'syz.1.353': attribute type 6 has an invalid length. [ 166.796685][ T7288] netlink: 'syz.1.353': attribute type 3 has an invalid length. [ 166.806742][ T7288] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.353'. [ 167.285104][ T7302] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.358'. [ 167.291006][ T7303] netlink: 'syz.0.356': attribute type 22 has an invalid length. [ 167.302832][ T7303] netlink: 168 bytes leftover after parsing attributes in process `syz.0.356'. [ 167.455110][ T7308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.477037][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'. [ 167.495665][ T7307] netlink: 'syz.2.360': attribute type 9 has an invalid length. [ 167.514211][ T7307] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.360'. [ 168.190655][ T7325] netlink: 'syz.3.364': attribute type 21 has an invalid length. [ 168.217567][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 168.536132][ T7331] netlink: 92 bytes leftover after parsing attributes in process `syz.1.365'. [ 168.555936][ T7334] netlink: 'syz.2.366': attribute type 64 has an invalid length. [ 168.567412][ T7331] netlink: 92 bytes leftover after parsing attributes in process `syz.1.365'. [ 168.867148][ T7350] bond_slave_0: entered promiscuous mode [ 168.873296][ T7350] bond_slave_1: entered promiscuous mode [ 171.181823][ T7408] netlink: 'syz.2.386': attribute type 10 has an invalid length. [ 171.221034][ T7409] netlink: 'syz.2.386': attribute type 10 has an invalid length. [ 171.251224][ T7408] __nla_validate_parse: 2 callbacks suppressed [ 171.251247][ T7408] netlink: 2 bytes leftover after parsing attributes in process `syz.2.386'. [ 171.318843][ T7409] netlink: 2 bytes leftover after parsing attributes in process `syz.2.386'. [ 171.334884][ T7409] bond0: entered promiscuous mode [ 171.340019][ T7409] @ÿ: entered promiscuous mode [ 171.350131][ T7409] bond_slave_1: entered promiscuous mode [ 171.361223][ T7409] bridge0: port 3(bond0) entered blocking state [ 171.374249][ T7409] bridge0: port 3(bond0) entered disabled state [ 171.380814][ T7409] bond0: entered allmulticast mode [ 171.406543][ T7409] @ÿ: entered allmulticast mode [ 171.432126][ T7409] bond_slave_1: entered allmulticast mode [ 171.458011][ T7409] bridge0: port 3(bond0) entered blocking state [ 171.464560][ T7409] bridge0: port 3(bond0) entered forwarding state [ 171.792831][ T7420] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 171.804713][ T7438] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.393'. [ 172.117337][ T7450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.398'. [ 172.245626][ T7453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.451974][ T7450] žåÓD`¼ê: renamed from hsr_slave_1 [ 173.615172][ T7460] syzkaller0: entered promiscuous mode [ 173.620899][ T7460] syzkaller0: entered allmulticast mode [ 174.156536][ T7481] netlink: 'syz.2.404': attribute type 13 has an invalid length. [ 175.001069][ T7489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.406'. [ 175.349983][ T7500] openvswitch: netlink: Flow actions attr not present in new flow. [ 176.729288][ T7481] bridge0: port 3(bond0) entered disabled state [ 176.735838][ T7481] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.743666][ T7481] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.269537][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.301005][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.025668][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.045992][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.090281][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.111760][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.305922][ T7520] netlink: 40 bytes leftover after parsing attributes in process `syz.4.412'. [ 178.393729][ T7520] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.426134][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.412'. [ 178.490738][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.412'. [ 178.527043][ T7520] bridge_slave_0 (unregistering): left allmulticast mode [ 178.541371][ T7520] bridge_slave_0 (unregistering): left promiscuous mode [ 178.550190][ T7520] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.734384][ T7552] wg2: entered promiscuous mode [ 179.753804][ T7552] wg2: entered allmulticast mode [ 180.323781][ T7574] netlink: 13951 bytes leftover after parsing attributes in process `syz.4.427'. [ 180.582172][ T7589] netlink: 'syz.2.429': attribute type 10 has an invalid length. [ 180.593528][ T7589] netlink: 40 bytes leftover after parsing attributes in process `syz.2.429'. [ 180.696118][ T7589] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 180.991023][ T7597] netlink: 'syz.1.430': attribute type 1 has an invalid length. [ 181.046282][ T7597] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.430'. [ 181.091411][ T7598] syzkaller0: entered promiscuous mode [ 181.121401][ T7598] syzkaller0: entered allmulticast mode [ 181.242058][ T7608] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 181.359529][ T7608] delete_channel: no stack [ 181.370066][ T7616] delete_channel: no stack [ 181.377816][ T7608] delete_channel: no stack [ 181.393135][ T7616] delete_channel: no stack [ 181.605621][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.435'. [ 181.715904][ T7621] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.436'. [ 182.784672][ T7636] netlink: 'syz.3.440': attribute type 11 has an invalid length. [ 183.303988][ T1167] wlan1: Trigger new scan to find an IBSS to join [ 186.345236][ T37] wlan1: Trigger new scan to find an IBSS to join [ 186.718666][ T7614] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.434'. [ 186.742604][ T7614] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 186.761530][ T7628] netlink: 10 bytes leftover after parsing attributes in process `syz.0.438'. [ 187.011381][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.445'. [ 187.857247][ T7655] veth1_macvtap: left promiscuous mode [ 188.148023][ T7664] veth1_macvtap: entered promiscuous mode [ 188.171000][ T7664] macsec0: entered promiscuous mode [ 188.212583][ T7664] macsec0: entered allmulticast mode [ 188.218543][ T7664] veth1_macvtap: entered allmulticast mode [ 188.330491][ T7665] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 188.413673][ T7665] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 188.479093][ T7665] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 188.962721][ T7688] netlink: 'syz.3.453': attribute type 4 has an invalid length. [ 188.973458][ T7692] netlink: 'syz.3.453': attribute type 4 has an invalid length. [ 188.981157][ T7692] netlink: 152 bytes leftover after parsing attributes in process `syz.3.453'. [ 189.033143][ T7688] netlink: 152 bytes leftover after parsing attributes in process `syz.3.453'. [ 189.252884][ T7688] netlink: 6 bytes leftover after parsing attributes in process `syz.3.453'. [ 189.261742][ T7688] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 189.301999][ T7692] netlink: 6 bytes leftover after parsing attributes in process `syz.3.453'. [ 189.355074][ T7692] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 189.384437][ T13] wlan1: Trigger new scan to find an IBSS to join [ 190.379292][ T36] wlan1: Creating new IBSS network, BSSID a2:8b:1a:81:ae:b4 [ 190.728319][ T7739] netlink: 'syz.2.465': attribute type 11 has an invalid length. [ 191.644611][ T7755] netlink: 'syz.2.469': attribute type 39 has an invalid length. [ 193.982782][ T7780] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 194.022782][ T7780] netlink: 36 bytes leftover after parsing attributes in process `syz.4.474'. [ 194.197295][ T7780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.933650][ T7803] netlink: 132 bytes leftover after parsing attributes in process `syz.4.481'. [ 195.621780][ T7820] netlink: zone id is out of range [ 195.644044][ T7825] netlink: del zone limit has 4 unknown bytes [ 195.737975][ T7820] netlink: zone id is out of range [ 195.757060][ T7820] netlink: zone id is out of range [ 195.978270][ T7836] netlink: 104 bytes leftover after parsing attributes in process `syz.3.488'. [ 196.113523][ T7837] netlink: 116 bytes leftover after parsing attributes in process `syz.3.488'. [ 196.291985][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.488'. [ 197.755108][ T7820] netlink: set zone limit has 4 unknown bytes [ 197.943795][ T7855] netlink: 'syz.3.494': attribute type 19 has an invalid length. [ 197.979343][ T7859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.495'. [ 198.201368][ T7870] netlink: 'syz.4.500': attribute type 27 has an invalid length. [ 198.272730][ T7870] netlink: 152 bytes leftover after parsing attributes in process `syz.4.500'. [ 198.303913][ T7870] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 198.759043][ T7886] netlink: 'syz.3.504': attribute type 10 has an invalid length. [ 199.205515][ T7902] netlink: 'syz.2.509': attribute type 10 has an invalid length. [ 199.208743][ T7903] netlink: 'syz.2.509': attribute type 10 has an invalid length. [ 199.225724][ T7902] netlink: 40 bytes leftover after parsing attributes in process `syz.2.509'. [ 199.254620][ T7907] netlink: 15678 bytes leftover after parsing attributes in process `syz.3.510'. [ 199.269266][ T7903] netlink: 40 bytes leftover after parsing attributes in process `syz.2.509'. [ 199.317866][ T7912] netlink: 164 bytes leftover after parsing attributes in process `syz.1.511'. [ 199.327335][ T7902] dummy0: entered promiscuous mode [ 199.338173][ T7911] netlink: 164 bytes leftover after parsing attributes in process `syz.1.511'. [ 199.409820][ T7914] netlink: 'syz.1.511': attribute type 2 has an invalid length. [ 199.431305][ T7902] bridge0: port 4(dummy0) entered blocking state [ 199.451984][ T7902] bridge0: port 4(dummy0) entered disabled state [ 199.485681][ T7902] dummy0: entered allmulticast mode [ 199.866427][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.873279][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.074615][ T7938] netlink: 128 bytes leftover after parsing attributes in process `syz.1.516'. [ 200.223086][ T7940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.586103][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 200.644668][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 200.678600][ T7958] netlink: 19 bytes leftover after parsing attributes in process `syz.4.523'. [ 200.727691][ T7958] Dead loop on virtual device ip6_vti0, fix it urgently! [ 200.799848][ T7975] netlink: 'syz.2.525': attribute type 13 has an invalid length. [ 200.810959][ T7975] netlink: 160 bytes leftover after parsing attributes in process `syz.2.525'. [ 200.833712][ T7975] erspan0: refused to change device tx_queue_len [ 200.840324][ T7975] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 200.865013][ T7985] netlink: 'syz.2.525': attribute type 13 has an invalid length. [ 200.900078][ T7985] erspan0: refused to change device tx_queue_len [ 200.912471][ T7985] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 202.236649][ T8030] netlink: 'syz.4.534': attribute type 4 has an invalid length. [ 202.407754][ T8035] dummy0 (unregistering): left allmulticast mode [ 202.436793][ T8035] bridge0: port 4(dummy0) entered disabled state [ 202.880740][ T8061] netlink: 'syz.0.543': attribute type 13 has an invalid length. [ 203.949407][ T8083] sit0: entered allmulticast mode [ 204.590046][ T8087] syzkaller0: entered promiscuous mode [ 204.596557][ T8087] syzkaller0: entered allmulticast mode [ 205.277288][ T8122] __nla_validate_parse: 6 callbacks suppressed [ 205.277312][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.560'. [ 206.402994][ T8118] lo speed is unknown, defaulting to 1000 [ 206.409649][ T8126] netlink: 10 bytes leftover after parsing attributes in process `syz.1.563'. [ 206.432978][ T8118] lo speed is unknown, defaulting to 1000 [ 206.463287][ T8118] lo speed is unknown, defaulting to 1000 [ 206.490166][ T8118] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 206.615292][ T8118] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 206.946445][ T8118] lo speed is unknown, defaulting to 1000 [ 206.977535][ T8118] lo speed is unknown, defaulting to 1000 [ 207.049576][ T8118] lo speed is unknown, defaulting to 1000 [ 207.068101][ T8118] lo speed is unknown, defaulting to 1000 [ 207.078285][ T8118] lo speed is unknown, defaulting to 1000 [ 209.353661][ T8186] syzkaller0: entered promiscuous mode [ 209.400246][ T8186] syzkaller0: entered allmulticast mode [ 209.768762][ T8181] lo speed is unknown, defaulting to 1000 [ 210.839759][ T8216] netlink: 'syz.3.588': attribute type 2 has an invalid length. [ 211.293744][ T8218] netlink: 68 bytes leftover after parsing attributes in process `syz.0.590'. [ 211.515315][ T8229] netlink: 60 bytes leftover after parsing attributes in process `syz.3.592'. [ 211.550244][ T8227] IPv6: NLM_F_REPLACE set, but no existing node found! [ 211.605597][ T8227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.652121][ T8227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.762690][ T8227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.816461][ T8227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.769105][ T8256] netlink: 348 bytes leftover after parsing attributes in process `syz.3.602'. [ 213.284576][ T8268] netlink: 348 bytes leftover after parsing attributes in process `syz.3.602'. [ 213.570114][ T8251] lo speed is unknown, defaulting to 1000 [ 214.228245][ T8277] netlink: 56 bytes leftover after parsing attributes in process `syz.3.605'. [ 214.306224][ T8277] netlink: 56 bytes leftover after parsing attributes in process `syz.3.605'. [ 214.421473][ T8283] netlink: 'syz.1.607': attribute type 28 has an invalid length. [ 214.484518][ T8283] netlink: 2 bytes leftover after parsing attributes in process `syz.1.607'. [ 214.825331][ T8293] netlink: 182 bytes leftover after parsing attributes in process `syz.4.609'. [ 215.094252][ T8302] netlink: 'syz.1.613': attribute type 1 has an invalid length. [ 215.151862][ T8308] netlink: 763 bytes leftover after parsing attributes in process `syz.2.614'. [ 215.550533][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.618'. [ 216.264323][ T8343] veth1_macvtap: left allmulticast mode [ 216.280819][ T8343] veth1_macvtap: left promiscuous mode [ 216.322415][ T8343] macsec0: left promiscuous mode [ 216.334556][ T8346] __nla_validate_parse: 1 callbacks suppressed [ 216.334578][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.625'. [ 216.542965][ T8351] netlink: 52 bytes leftover after parsing attributes in process `syz.0.626'. [ 217.235452][ T8370] : entered promiscuous mode [ 217.303423][ T5876] Bluetooth: hci0: command 0x0406 tx timeout [ 217.303992][ T5865] Bluetooth: hci1: command 0x0406 tx timeout [ 217.309590][ T5876] Bluetooth: hci2: command 0x0406 tx timeout [ 217.319298][ T5865] Bluetooth: hci3: command 0x0406 tx timeout [ 217.324047][ T5876] Bluetooth: hci4: command 0x0406 tx timeout [ 217.933773][ T8383] netlink: 830 bytes leftover after parsing attributes in process `syz.1.634'. [ 218.030773][ T8390] netlink: 830 bytes leftover after parsing attributes in process `syz.4.636'. [ 219.285684][ T8415] netlink: 'syz.1.642': attribute type 39 has an invalid length. [ 220.379628][ T8001] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 220.895909][ T8448] netlink: 92 bytes leftover after parsing attributes in process `syz.4.649'. [ 220.932469][ T8448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.649'. [ 220.941695][ T8448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.649'. [ 221.021813][ T8450] netlink: 22 bytes leftover after parsing attributes in process `syz.2.650'. [ 221.093545][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.649'. [ 221.114414][ T8453] xt_time: unknown flags 0xf4 [ 221.130659][ T8447] netlink: 32 bytes leftover after parsing attributes in process `syz.4.649'. [ 221.156486][ T8453] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 222.063074][ T8462] netlink: 'syz.2.654': attribute type 29 has an invalid length. [ 222.131161][ T8464] netlink: 'syz.2.654': attribute type 29 has an invalid length. [ 222.182763][ T8465] netlink: 'syz.2.654': attribute type 29 has an invalid length. [ 222.484629][ T8427] lo speed is unknown, defaulting to 1000 [ 223.289596][ T8487] netlink: 'syz.1.659': attribute type 1 has an invalid length. [ 225.378027][ T8517] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.667'. [ 225.389229][ T8517] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 225.418334][ T8517] openvswitch: netlink: Message has 6332 unknown bytes. [ 225.693461][ T8520] lo speed is unknown, defaulting to 1000 [ 226.236678][ T8536] netlink: 'syz.1.670': attribute type 10 has an invalid length. [ 227.387704][ T8536] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 227.466317][ T8536] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 228.343249][ T8562] netlink: 292 bytes leftover after parsing attributes in process `syz.0.679'. [ 228.611350][ T8565] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 228.618519][ T8565] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 232.408457][ T8589] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 232.597617][ T8606] netlink: 183676 bytes leftover after parsing attributes in process `syz.2.693'. [ 232.767363][ T8605] lo speed is unknown, defaulting to 1000 [ 233.226069][ T8615] netlink: 'syz.3.695': attribute type 3 has an invalid length. [ 233.263809][ T8615] netlink: 132 bytes leftover after parsing attributes in process `syz.3.695'. [ 233.314797][ T8621] netlink: 'syz.0.697': attribute type 3 has an invalid length. [ 233.322794][ T8621] netlink: 'syz.0.697': attribute type 1 has an invalid length. [ 233.341506][ T8621] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.697'. [ 233.612847][ T8626] netlink: 'syz.1.700': attribute type 2 has an invalid length. [ 233.636094][ T8626] netlink: 51 bytes leftover after parsing attributes in process `syz.1.700'. [ 235.107030][ T8662] netlink: 40 bytes leftover after parsing attributes in process `syz.4.706'. [ 235.339045][ T8672] netlink: 'syz.2.708': attribute type 21 has an invalid length. [ 235.367374][ T8672] netlink: 132 bytes leftover after parsing attributes in process `syz.2.708'. [ 235.426181][ T8674] netlink: 'syz.4.709': attribute type 21 has an invalid length. [ 236.607649][ T8701] netlink: 'syz.4.714': attribute type 10 has an invalid length. [ 237.376478][ T8701] team0: Port device geneve1 added [ 237.398887][ T8706] netlink: 'syz.4.714': attribute type 1 has an invalid length. [ 237.402009][ T8703] bridge_slave_1: left allmulticast mode [ 237.413089][ T8703] bridge_slave_1: left promiscuous mode [ 237.418932][ T8703] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.351967][ T8726] netlink: 60 bytes leftover after parsing attributes in process `syz.4.724'. [ 238.731702][ T5870] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 238.817424][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.727'. [ 238.843412][ T8745] netlink: 'syz.0.728': attribute type 1 has an invalid length. [ 238.874999][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 238.908536][ T8739] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 239.643780][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.737'. [ 239.716688][ T8778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.906447][ T8786] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.739'. [ 241.279080][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.749'. [ 244.261859][ T8840] lo speed is unknown, defaulting to 1000 [ 244.941047][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 245.237410][ T8862] netlink: 3 bytes leftover after parsing attributes in process `syz.3.759'. [ 247.616874][ T8878] macsec0: entered promiscuous mode [ 247.629110][ T8878] macsec0: entered allmulticast mode [ 247.635299][ T8878] veth1_macvtap: entered allmulticast mode [ 248.824576][ T8925] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.778'. [ 248.971034][ T8930] netlink: 68 bytes leftover after parsing attributes in process `syz.3.780'. [ 249.227104][ T8938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.782'. [ 249.775885][ T8949] netlink: 'syz.4.774': attribute type 29 has an invalid length. [ 249.855962][ T8956] lo: entered allmulticast mode [ 250.280212][ T8966] netlink: 67 bytes leftover after parsing attributes in process `syz.3.789'. [ 250.338007][ T8969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.790'. [ 250.584863][ T8973] ======================================================= [ 250.584863][ T8973] WARNING: The mand mount option has been deprecated and [ 250.584863][ T8973] and is ignored by this kernel. Remove the mand [ 250.584863][ T8973] option from the mount to silence this warning. [ 250.584863][ T8973] ======================================================= [ 251.395880][ T8001] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 251.544070][ T8978] netlink: 'syz.4.793': attribute type 19 has an invalid length. [ 251.551923][ T8978] netlink: 55 bytes leftover after parsing attributes in process `syz.4.793'. [ 252.066160][ T8984] netlink: 'syz.3.796': attribute type 10 has an invalid length. [ 252.436786][ T8984] team0: Port device geneve1 added [ 252.487274][ T8988] netlink: 'syz.0.795': attribute type 10 has an invalid length. [ 252.552619][ T8990] netlink: 'syz.1.794': attribute type 4 has an invalid length. [ 253.315366][ T5233] udevd[5233]: worker [6267] terminated by signal 33 (Unknown signal 33) [ 253.341972][ T5233] udevd[5233]: worker [6267] failed while handling '/devices/virtual/block/loop3' [ 253.647967][ T9024] netlink: 'syz.0.802': attribute type 39 has an invalid length. [ 253.853926][ T9031] netlink: 'syz.2.805': attribute type 10 has an invalid length. [ 255.177902][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'. [ 255.228473][ T9052] netlink: 10 bytes leftover after parsing attributes in process `syz.4.811'. [ 255.251427][ T9052] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.811'. [ 257.076605][ T9084] netlink: 56 bytes leftover after parsing attributes in process `syz.4.820'. [ 257.513746][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'. [ 257.667522][ T9092] netlink: 'syz.1.822': attribute type 39 has an invalid length. [ 260.138871][ T9141] netlink: 4172 bytes leftover after parsing attributes in process `syz.0.835'. [ 260.849473][ T9157] netlink: 'syz.0.839': attribute type 12 has an invalid length. [ 260.924306][ T9157] netlink: 132 bytes leftover after parsing attributes in process `syz.0.839'. [ 261.056384][ T9157] syz.0.839 (9157) used obsolete PPPIOCDETACH ioctl [ 261.312055][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.318711][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.417629][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 261.443059][ T9160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.841'. [ 261.452024][ T9160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.841'. [ 261.535639][ T9163] lo speed is unknown, defaulting to 1000 [ 261.638878][ T9168] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.842'. [ 261.800797][ T9171] netlink: 40 bytes leftover after parsing attributes in process `syz.2.842'. [ 262.818228][ T9190] netlink: 17 bytes leftover after parsing attributes in process `syz.4.847'. [ 262.949991][ T9190] netlink: zone id is out of range [ 262.962123][ T9195] netlink: 48 bytes leftover after parsing attributes in process `syz.3.844'. [ 262.974055][ T9190] netlink: zone id is out of range [ 263.020704][ T9190] netlink: zone id is out of range [ 263.091797][ T9190] netlink: zone id is out of range [ 263.098328][ T9190] netlink: zone id is out of range [ 263.198179][ T9190] netlink: zone id is out of range [ 263.209498][ T9190] netlink: zone id is out of range [ 263.256502][ T9190] netlink: zone id is out of range [ 263.265102][ T9190] netlink: zone id is out of range [ 263.270475][ T9190] netlink: zone id is out of range [ 265.106242][ T9227] netlink: 152 bytes leftover after parsing attributes in process `syz.4.857'. [ 265.169636][ T9227] tc_dump_action: action bad kind [ 265.275471][ T9227] netlink: 'syz.4.857': attribute type 11 has an invalid length. [ 265.410819][ T9234] netlink: 1053 bytes leftover after parsing attributes in process `syz.3.860'. [ 265.597404][ T9231] lo speed is unknown, defaulting to 1000 [ 265.693995][ T9244] netlink: 'syz.2.861': attribute type 10 has an invalid length. [ 265.701991][ T9244] netlink: 55 bytes leftover after parsing attributes in process `syz.2.861'. [ 265.939136][ T9245] netlink: 'syz.1.858': attribute type 29 has an invalid length. [ 266.024221][ T9240] netlink: 'syz.1.858': attribute type 29 has an invalid length. [ 266.116145][ T9252] netlink: 'syz.1.858': attribute type 29 has an invalid length. [ 266.288660][ T9264] netlink: 'syz.4.865': attribute type 21 has an invalid length. [ 266.312237][ T9264] netlink: 164 bytes leftover after parsing attributes in process `syz.4.865'. [ 266.690948][ T9277] netlink: 76 bytes leftover after parsing attributes in process `syz.3.870'. [ 266.802066][ T9278] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.869'. [ 266.828848][ T9278] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.869'. [ 269.258909][ T9308] netlink: 'syz.3.877': attribute type 29 has an invalid length. [ 269.631664][ T9324] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.882'. [ 269.667996][ T9329] netlink: 'syz.0.884': attribute type 10 has an invalid length. [ 269.742322][ T9329] team0: Device ip6_vti0 is of different type [ 270.009237][ T9345] lo speed is unknown, defaulting to 1000 [ 270.145947][ T9352] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.890'. [ 270.738152][ T9379] netlink: 264 bytes leftover after parsing attributes in process `syz.1.898'. [ 270.750209][ T9379] netlink: 56 bytes leftover after parsing attributes in process `syz.1.898'. [ 270.836690][ T9387] netlink: 67 bytes leftover after parsing attributes in process `syz.4.900'. [ 270.880039][ T9392] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.899'. [ 272.486205][ T9431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.909'. [ 272.581629][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'. [ 272.623933][ T9428] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 272.747033][ T9428] batman_adv: batadv0: Adding interface: team0 [ 272.762513][ T9428] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.869500][ T9428] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 273.284598][ T9452] netlink: 192 bytes leftover after parsing attributes in process `syz.3.919'. [ 273.441083][ T9458] netlink: 14 bytes leftover after parsing attributes in process `syz.3.920'. [ 273.494777][ T9458] hsr_slave_0: left promiscuous mode [ 273.509920][ T9458] žåÓD`¼ê: left promiscuous mode [ 273.540579][ T9464] netlink: 'syz.1.923': attribute type 2 has an invalid length. [ 275.414186][ T9514] netlink: 'syz.3.935': attribute type 29 has an invalid length. [ 275.455370][ T9520] netlink: 'syz.3.935': attribute type 29 has an invalid length. [ 275.502054][ T9514] netlink: 'syz.3.935': attribute type 29 has an invalid length. [ 275.542152][ T9514] netlink: 'syz.3.935': attribute type 29 has an invalid length. [ 276.296260][ T9538] netlink: 'syz.2.941': attribute type 29 has an invalid length. [ 276.306497][ T9544] netlink: 'syz.1.942': attribute type 21 has an invalid length. [ 276.353721][ T9544] netlink: 'syz.1.942': attribute type 15 has an invalid length. [ 276.361559][ T9544] __nla_validate_parse: 3 callbacks suppressed [ 276.361580][ T9544] netlink: 156 bytes leftover after parsing attributes in process `syz.1.942'. [ 276.400551][ T9544] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.478973][ T9544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 276.486340][ T9544] IPv6: NLM_F_CREATE should be set when creating new route [ 276.493718][ T9544] IPv6: NLM_F_CREATE should be set when creating new route [ 276.501037][ T9544] IPv6: NLM_F_CREATE should be set when creating new route [ 277.228637][ T9560] netlink: 60 bytes leftover after parsing attributes in process `syz.1.946'. [ 277.229746][ T9563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.947'. [ 277.238471][ T9560] netlink: 60 bytes leftover after parsing attributes in process `syz.1.946'. [ 277.548818][ T9573] netlink: 'syz.4.950': attribute type 10 has an invalid length. [ 277.682676][ T9571] lo speed is unknown, defaulting to 1000 [ 277.749049][ T30] audit: type=1107 audit(1755556873.751:4): pid=9579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 277.762430][ T9582] netlink: 'syz.0.952': attribute type 10 has an invalid length. [ 277.789446][ T9582] netlink: 40 bytes leftover after parsing attributes in process `syz.0.952'. [ 277.812212][ T9582] vcan0: entered promiscuous mode [ 277.819348][ T9582] net_ratelimit: 77 callbacks suppressed [ 277.819371][ T9582] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 278.347524][ T9596] netlink: 14 bytes leftover after parsing attributes in process `syz.4.956'. [ 278.419759][ C0] ================================================================== [ 278.428030][ C0] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x868/0xcf0 [ 278.435903][ C0] Write of size 8 at addr ffff888143b2c258 by task syz.2.951/9588 [ 278.443735][ C0] [ 278.446088][ C0] CPU: 0 UID: 0 PID: 9588 Comm: syz.2.951 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 278.446113][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.446137][ C0] Call Trace: [ 278.446147][ C0] [ 278.446156][ C0] dump_stack_lvl+0x189/0x250 [ 278.446183][ C0] ? rcu_is_watching+0x15/0xb0 [ 278.446200][ C0] ? __kasan_check_byte+0x12/0x40 [ 278.446230][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.446253][ C0] ? rcu_is_watching+0x15/0xb0 [ 278.446268][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 278.446293][ C0] ? lock_release+0x4b/0x3e0 [ 278.446333][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 278.446356][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 278.446387][ C0] print_report+0xca/0x240 [ 278.446407][ C0] ? __bpf_get_stackid+0x868/0xcf0 [ 278.446432][ C0] kasan_report+0x118/0x150 [ 278.446465][ C0] ? __bpf_get_stackid+0x868/0xcf0 [ 278.446510][ C0] ? rcu_core+0xca8/0x1770 [ 278.446540][ C0] __bpf_get_stackid+0x868/0xcf0 [ 278.446595][ C0] ? bpf_prog_b724608cae728045+0x27/0x2f [ 278.446619][ C0] bpf_get_stackid_raw_tp+0x196/0x210 [ 278.446654][ C0] bpf_prog_b724608cae728045+0x27/0x2f [ 278.446672][ C0] bpf_trace_run2+0x284/0x4b0 [ 278.446696][ C0] ? irqentry_exit+0x74/0x90 [ 278.446721][ C0] ? bpf_trace_run2+0x186/0x4b0 [ 278.446751][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 278.446779][ C0] ? slab_free_after_rcu_debug+0x60/0x2a0 [ 278.446810][ C0] ? rcu_core+0xc37/0x1770 [ 278.446839][ C0] ? rcu_core+0xc37/0x1770 [ 278.446863][ C0] ? slab_free_after_rcu_debug+0x60/0x2a0 [ 278.446884][ C0] kfree+0x3a0/0x440 [ 278.446912][ C0] ? rcu_core+0xc37/0x1770 [ 278.446941][ C0] slab_free_after_rcu_debug+0x60/0x2a0 [ 278.446963][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 278.446981][ C0] ? rcu_core+0xc37/0x1770 [ 278.447010][ C0] rcu_core+0xca8/0x1770 [ 278.447076][ C0] ? __pfx_rcu_core+0x10/0x10 [ 278.447106][ C0] ? sched_balance_domains+0x121/0x9e0 [ 278.447148][ C0] ? sched_balance_domains+0x121/0x9e0 [ 278.447185][ C0] ? sched_balance_domains+0x8be/0x9e0 [ 278.447257][ C0] ? sched_balance_domains+0x121/0x9e0 [ 278.447299][ C0] handle_softirqs+0x283/0x870 [ 278.447327][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 278.447358][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 278.447387][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 278.447418][ C0] __irq_exit_rcu+0xca/0x1f0 [ 278.447437][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 278.447474][ C0] irq_exit_rcu+0x9/0x30 [ 278.447496][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 278.447521][ C0] [ 278.447527][ C0] [ 278.447537][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 278.447558][ C0] RIP: 0010:perf_swevent_event+0x10e/0x5e0 [ 278.447578][ C0] Code: 81 e6 00 01 00 00 31 ff e8 9f 49 d0 ff 48 81 e3 00 01 00 00 75 1e e8 b1 44 d0 ff e9 c2 00 00 00 e8 a7 44 d0 ff e9 70 04 00 00 9d 44 d0 ff e9 66 04 00 00 4d 8d b7 00 01 00 00 4c 89 f0 48 c1 [ 278.447595][ C0] RSP: 0018:ffffc9001b07ee60 EFLAGS: 00000246 [ 278.447612][ C0] RAX: ffffffff81ef66b6 RBX: 1ffff9200360fdd4 RCX: ffff8880306a3c00 [ 278.447626][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 278.447636][ C0] RBP: ffffc9001b07ef30 R08: ffffc9001b07efd7 R09: 0000000000000000 [ 278.447648][ C0] R10: ffffc9001b07efc8 R11: fffff5200360fdfb R12: 0000000000000001 [ 278.447660][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888055b412c0 [ 278.447687][ C0] ? perf_swevent_event+0xb6/0x5e0 [ 278.447735][ C0] ? __pfx_perf_swevent_event+0x10/0x10 [ 278.447751][ C0] ? perf_tp_event+0x664/0x1380 [ 278.447790][ C0] perf_tp_event+0x4f6/0x1380 [ 278.447823][ C0] ? __pfx_perf_tp_event+0x10/0x10 [ 278.447905][ C0] ? irqentry_exit+0x74/0x90 [ 278.447946][ C0] ? perf_trace_run_bpf_submit+0xee/0x170 [ 278.447980][ C0] perf_trace_run_bpf_submit+0xee/0x170 [ 278.448013][ C0] perf_trace_lock+0x2f8/0x3b0 [ 278.448048][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 278.448066][ C0] ? irqentry_exit+0x74/0x90 [ 278.448103][ C0] ? percpu_ref_put+0x19/0x180 [ 278.448129][ C0] ? percpu_ref_put+0x19/0x180 [ 278.448158][ C0] lock_release+0x3b2/0x3e0 [ 278.448182][ C0] ? percpu_ref_put+0x19/0x180 [ 278.448211][ C0] ? percpu_ref_put+0x19/0x180 [ 278.448237][ C0] ? percpu_ref_put+0x19/0x180 [ 278.448269][ C0] percpu_ref_put+0xf9/0x180 [ 278.448303][ C0] __memcg_slab_free_hook+0x12f/0x3d0 [ 278.448348][ C0] ? compute_scc+0xf04/0xfa0 [ 278.448369][ C0] kfree+0x255/0x440 [ 278.448403][ C0] compute_scc+0xf04/0xfa0 [ 278.448463][ C0] ? __pfx_compute_scc+0x10/0x10 [ 278.448525][ C0] bpf_check+0x173f6/0x1d2d0 [ 278.448560][ C0] ? __pfx_perf_tp_event+0x10/0x10 [ 278.448725][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 278.448751][ C0] ? __pfx_bpf_check+0x10/0x10 [ 278.448772][ C0] ? ktime_get_with_offset+0x8c/0x2a0 [ 278.448810][ C0] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 278.448833][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.448858][ C0] ? ktime_get_with_offset+0x8c/0x2a0 [ 278.448878][ C0] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 278.448901][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 278.448945][ C0] ? __asan_memset+0x22/0x50 [ 278.448967][ C0] ? bpf_obj_name_cpy+0x194/0x1e0 [ 278.448983][ C0] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 278.449006][ C0] ? security_bpf_prog_load+0x7f/0x310 [ 278.449040][ C0] bpf_prog_load+0x1318/0x1930 [ 278.449091][ C0] ? __pfx_bpf_prog_load+0x10/0x10 [ 278.449118][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 278.449176][ C0] ? bpf_lsm_bpf+0x9/0x20 [ 278.449197][ C0] ? security_bpf+0x7e/0x300 [ 278.449228][ C0] __sys_bpf+0x528/0x870 [ 278.449261][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 278.449346][ C0] __x64_sys_bpf+0x7c/0x90 [ 278.449371][ C0] do_syscall_64+0xfa/0x3b0 [ 278.449401][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.449417][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 278.449435][ C0] ? clear_bhb_loop+0x60/0xb0 [ 278.449461][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.449478][ C0] RIP: 0033:0x7fdd6518ebe9 [ 278.449504][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.449518][ C0] RSP: 002b:00007fdd65f49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 278.449535][ C0] RAX: ffffffffffffffda RBX: 00007fdd653b5fa0 RCX: 00007fdd6518ebe9 [ 278.449547][ C0] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 278.449558][ C0] RBP: 00007fdd65211e19 R08: 0000000000000000 R09: 0000000000000000 [ 278.449569][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.449578][ C0] R13: 00007fdd653b6038 R14: 00007fdd653b5fa0 R15: 00007ffc2eac6a18 [ 278.449623][ C0] [ 278.449630][ C0] [ 279.114586][ C0] Allocated by task 9588: [ 279.118940][ C0] kasan_save_track+0x3e/0x80 [ 279.123655][ C0] __kasan_kmalloc+0x93/0xb0 [ 279.128283][ C0] __kmalloc_node_noprof+0x276/0x4e0 [ 279.133610][ C0] bpf_map_area_alloc+0x64/0x180 [ 279.138590][ C0] prealloc_elems_and_freelist+0x86/0x1d0 [ 279.144445][ C0] stack_map_alloc+0x33f/0x4c0 [ 279.149272][ C0] map_create+0xaa0/0x14d0 [ 279.153726][ C0] __sys_bpf+0x60f/0x870 [ 279.158006][ C0] __x64_sys_bpf+0x7c/0x90 [ 279.162471][ C0] do_syscall_64+0xfa/0x3b0 [ 279.167014][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.172950][ C0] [ 279.175298][ C0] The buggy address belongs to the object at ffff888143b2c000 [ 279.175298][ C0] which belongs to the cache kmalloc-cg-1k of size 1024 [ 279.189804][ C0] The buggy address is located 24 bytes to the right of [ 279.189804][ C0] allocated 576-byte region [ffff888143b2c000, ffff888143b2c240) [ 279.204467][ C0] [ 279.206824][ C0] The buggy address belongs to the physical page: [ 279.213273][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x143b28 [ 279.222160][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 279.230691][ C0] memcg:ffff88814e305201 [ 279.234957][ C0] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 279.242615][ C0] page_type: f5(slab) [ 279.246634][ C0] raw: 057ff00000000040 ffff88801a44b280 dead000000000122 0000000000000000 [ 279.255250][ C0] raw: 0000000000000000 0000000080100010 00000000f5000000 ffff88814e305201 [ 279.263868][ C0] head: 057ff00000000040 ffff88801a44b280 dead000000000122 0000000000000000 [ 279.272570][ C0] head: 0000000000000000 0000000080100010 00000000f5000000 ffff88814e305201 [ 279.281271][ C0] head: 057ff00000000003 ffffea00050eca01 00000000ffffffff 00000000ffffffff [ 279.289978][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 279.298678][ C0] page dumped because: kasan: bad access detected [ 279.305132][ C0] page_owner tracks the page as allocated [ 279.310876][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 9396, tgid 9395 (syz.4.902), ts 271039318424, free_ts 261781418941 [ 279.330425][ C0] post_alloc_hook+0x240/0x2a0 [ 279.335248][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 279.340826][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 279.346670][ C0] allocate_slab+0x65/0x370 [ 279.351205][ C0] ___slab_alloc+0xbeb/0x1410 [ 279.355924][ C0] __kmalloc_cache_node_noprof+0x29a/0x3d0 [ 279.361770][ C0] mem_cgroup_css_alloc+0x4b2/0x1f20 [ 279.367090][ C0] cgroup_apply_control_enable+0x3d1/0xa80 [ 279.372955][ C0] cgroup_mkdir+0xc40/0xe60 [ 279.377489][ C0] kernfs_iop_mkdir+0x211/0x350 [ 279.382375][ C0] vfs_mkdir+0x303/0x510 [ 279.386658][ C0] do_mkdirat+0x247/0x590 [ 279.391020][ C0] __x64_sys_mkdirat+0x87/0xa0 [ 279.395817][ C0] do_syscall_64+0xfa/0x3b0 [ 279.400357][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.406283][ C0] page last free pid 9163 tgid 9162 stack trace: [ 279.412633][ C0] __free_frozen_pages+0xbc4/0xd30 [ 279.417783][ C0] __slab_free+0x303/0x3c0 [ 279.422233][ C0] qlist_free_all+0x97/0x140 [ 279.426864][ C0] kasan_quarantine_reduce+0x148/0x160 [ 279.432355][ C0] __kasan_slab_alloc+0x22/0x80 [ 279.437251][ C0] __kmalloc_cache_noprof+0x1be/0x3d0 [ 279.442654][ C0] ref_tracker_alloc+0x133/0x460 [ 279.447630][ C0] register_netdevice+0x14a3/0x1ae0 [ 279.452860][ C0] register_netdev+0x40/0x60 [ 279.457482][ C0] vti6_init_net+0x238/0x370 [ 279.462109][ C0] ops_init+0x359/0x5c0 [ 279.466310][ C0] setup_net+0x10c/0x320 [ 279.470586][ C0] copy_net_ns+0x31b/0x4d0 [ 279.475042][ C0] create_new_namespaces+0x3f3/0x720 [ 279.480363][ C0] copy_namespaces+0x438/0x4b0 [ 279.485168][ C0] copy_process+0x1733/0x3c00 [ 279.489876][ C0] [ 279.492224][ C0] Memory state around the buggy address: [ 279.497883][ C0] ffff888143b2c100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 279.505971][ C0] ffff888143b2c180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 279.514058][ C0] >ffff888143b2c200: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 279.522144][ C0] ^ [ 279.529109][ C0] ffff888143b2c280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 279.537216][ C0] ffff888143b2c300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 279.545305][ C0] ================================================================== [ 279.554151][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 279.561442][ C0] CPU: 0 UID: 0 PID: 9588 Comm: syz.2.951 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 279.572885][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 279.582968][ C0] Call Trace: [ 279.586279][ C0] [ 279.589192][ C0] dump_stack_lvl+0x99/0x250 [ 279.593822][ C0] ? __asan_memcpy+0x40/0x70 [ 279.598449][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.603683][ C0] ? __pfx__printk+0x10/0x10 [ 279.608353][ C0] vpanic+0x281/0x750 [ 279.612379][ C0] ? __pfx_vpanic+0x10/0x10 [ 279.616928][ C0] ? __irq_exit_rcu+0xd8/0x1f0 [ 279.621721][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 279.626972][ C0] panic+0xb9/0xc0 [ 279.630735][ C0] ? __pfx_panic+0x10/0x10 [ 279.635188][ C0] ? __bpf_get_stackid+0x868/0xcf0 [ 279.640365][ C0] ? __bpf_get_stackid+0x868/0xcf0 [ 279.645526][ C0] check_panic_on_warn+0x89/0xb0 [ 279.650502][ C0] ? __bpf_get_stackid+0x868/0xcf0 [ 279.655656][ C0] end_report+0x78/0x160 [ 279.659938][ C0] kasan_report+0x129/0x150 [ 279.664487][ C0] ? __bpf_get_stackid+0x868/0xcf0 [ 279.669652][ C0] ? rcu_core+0xca8/0x1770 [ 279.674117][ C0] __bpf_get_stackid+0x868/0xcf0 [ 279.679131][ C0] ? bpf_prog_b724608cae728045+0x27/0x2f [ 279.684800][ C0] bpf_get_stackid_raw_tp+0x196/0x210 [ 279.690227][ C0] bpf_prog_b724608cae728045+0x27/0x2f [ 279.695721][ C0] bpf_trace_run2+0x284/0x4b0 [ 279.700437][ C0] ? irqentry_exit+0x74/0x90 [ 279.705060][ C0] ? bpf_trace_run2+0x186/0x4b0 [ 279.709956][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 279.715225][ C0] ? slab_free_after_rcu_debug+0x60/0x2a0 [ 279.721084][ C0] ? rcu_core+0xc37/0x1770 [ 279.725572][ C0] ? rcu_core+0xc37/0x1770 [ 279.730048][ C0] ? slab_free_after_rcu_debug+0x60/0x2a0 [ 279.735806][ C0] kfree+0x3a0/0x440 [ 279.739752][ C0] ? rcu_core+0xc37/0x1770 [ 279.744212][ C0] slab_free_after_rcu_debug+0x60/0x2a0 [ 279.749806][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 279.755998][ C0] ? rcu_core+0xc37/0x1770 [ 279.760461][ C0] rcu_core+0xca8/0x1770 [ 279.764785][ C0] ? __pfx_rcu_core+0x10/0x10 [ 279.769689][ C0] ? sched_balance_domains+0x121/0x9e0 [ 279.775215][ C0] ? sched_balance_domains+0x121/0x9e0 [ 279.780767][ C0] ? sched_balance_domains+0x8be/0x9e0 [ 279.786292][ C0] ? sched_balance_domains+0x121/0x9e0 [ 279.791798][ C0] handle_softirqs+0x283/0x870 [ 279.796587][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 279.801382][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 279.806688][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 279.811948][ C0] __irq_exit_rcu+0xca/0x1f0 [ 279.816590][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 279.821860][ C0] irq_exit_rcu+0x9/0x30 [ 279.826137][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 279.831901][ C0] [ 279.834863][ C0] [ 279.837846][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 279.843917][ C0] RIP: 0010:perf_swevent_event+0x10e/0x5e0 [ 279.849770][ C0] Code: 81 e6 00 01 00 00 31 ff e8 9f 49 d0 ff 48 81 e3 00 01 00 00 75 1e e8 b1 44 d0 ff e9 c2 00 00 00 e8 a7 44 d0 ff e9 70 04 00 00 9d 44 d0 ff e9 66 04 00 00 4d 8d b7 00 01 00 00 4c 89 f0 48 c1 [ 279.869507][ C0] RSP: 0018:ffffc9001b07ee60 EFLAGS: 00000246 [ 279.875626][ C0] RAX: ffffffff81ef66b6 RBX: 1ffff9200360fdd4 RCX: ffff8880306a3c00 [ 279.883632][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 279.891652][ C0] RBP: ffffc9001b07ef30 R08: ffffc9001b07efd7 R09: 0000000000000000 [ 279.899666][ C0] R10: ffffc9001b07efc8 R11: fffff5200360fdfb R12: 0000000000000001 [ 279.907675][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888055b412c0 [ 279.915764][ C0] ? perf_swevent_event+0xb6/0x5e0 [ 279.920947][ C0] ? __pfx_perf_swevent_event+0x10/0x10 [ 279.926533][ C0] ? perf_tp_event+0x664/0x1380 [ 279.931447][ C0] perf_tp_event+0x4f6/0x1380 [ 279.936175][ C0] ? __pfx_perf_tp_event+0x10/0x10 [ 279.941409][ C0] ? irqentry_exit+0x74/0x90 [ 279.946059][ C0] ? perf_trace_run_bpf_submit+0xee/0x170 [ 279.951836][ C0] perf_trace_run_bpf_submit+0xee/0x170 [ 279.957444][ C0] perf_trace_lock+0x2f8/0x3b0 [ 279.962270][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 279.967596][ C0] ? irqentry_exit+0x74/0x90 [ 279.972260][ C0] ? percpu_ref_put+0x19/0x180 [ 279.977071][ C0] ? percpu_ref_put+0x19/0x180 [ 279.981877][ C0] lock_release+0x3b2/0x3e0 [ 279.986422][ C0] ? percpu_ref_put+0x19/0x180 [ 279.991229][ C0] ? percpu_ref_put+0x19/0x180 [ 279.996049][ C0] ? percpu_ref_put+0x19/0x180 [ 280.000864][ C0] percpu_ref_put+0xf9/0x180 [ 280.005534][ C0] __memcg_slab_free_hook+0x12f/0x3d0 [ 280.010992][ C0] ? compute_scc+0xf04/0xfa0 [ 280.015664][ C0] kfree+0x255/0x440 [ 280.019625][ C0] compute_scc+0xf04/0xfa0 [ 280.024130][ C0] ? __pfx_compute_scc+0x10/0x10 [ 280.029123][ C0] bpf_check+0x173f6/0x1d2d0 [ 280.033776][ C0] ? __pfx_perf_tp_event+0x10/0x10 [ 280.039076][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 280.044407][ C0] ? __pfx_bpf_check+0x10/0x10 [ 280.049240][ C0] ? ktime_get_with_offset+0x8c/0x2a0 [ 280.054767][ C0] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 280.061063][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.066308][ C0] ? ktime_get_with_offset+0x8c/0x2a0 [ 280.071720][ C0] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 280.077996][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 280.084654][ C0] ? __asan_memset+0x22/0x50 [ 280.089283][ C0] ? bpf_obj_name_cpy+0x194/0x1e0 [ 280.094341][ C0] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 280.099583][ C0] ? security_bpf_prog_load+0x7f/0x310 [ 280.105107][ C0] bpf_prog_load+0x1318/0x1930 [ 280.109943][ C0] ? __pfx_bpf_prog_load+0x10/0x10 [ 280.115134][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 280.120496][ C0] ? bpf_lsm_bpf+0x9/0x20 [ 280.124861][ C0] ? security_bpf+0x7e/0x300 [ 280.129497][ C0] __sys_bpf+0x528/0x870 [ 280.133790][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 280.138653][ C0] __x64_sys_bpf+0x7c/0x90 [ 280.143114][ C0] do_syscall_64+0xfa/0x3b0 [ 280.147719][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.153818][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 280.160008][ C0] ? clear_bhb_loop+0x60/0xb0 [ 280.164726][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.170654][ C0] RIP: 0033:0x7fdd6518ebe9 [ 280.175104][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.194746][ C0] RSP: 002b:00007fdd65f49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.203205][ C0] RAX: ffffffffffffffda RBX: 00007fdd653b5fa0 RCX: 00007fdd6518ebe9 [ 280.211223][ C0] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 280.219232][ C0] RBP: 00007fdd65211e19 R08: 0000000000000000 R09: 0000000000000000 [ 280.227242][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.235271][ C0] R13: 00007fdd653b6038 R14: 00007fdd653b5fa0 R15: 00007ffc2eac6a18 [ 280.243319][ C0] [ 280.246782][ C0] Kernel Offset: disabled [ 280.251136][ C0] Rebooting in 86400 seconds..