last executing test programs: 4.603146564s ago: executing program 3 (id=89): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000edff000000ffff"], 0x0, 0x1a, 0x0, 0xa}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) socket$kcm(0x10, 0x400000002, 0x0) (async) r1 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xc9, 0x10, 0x0, 0x0, 0x0, 0x6, 0x7013a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3d, 0x4}, 0x10a, 0x0, 0x4000001, 0x3, 0x3f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000003c0)=r0, 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0xc02}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x3, 0x8, 0x9, 0x0, 0x8e6]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04}, 0x8080) 3.727185931s ago: executing program 3 (id=97): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x880, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x880, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)={0x1, 0x1, [@remote]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r3}, 0x38) close(0x3) (async) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58}, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$AUDIT_USER(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x10, 0x3ed, 0x4, 0x70bd2a, 0x25dfdbfd}, 0x10}}, 0x40000) sendmsg$AUDIT_GET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3e8, 0x300, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000) 3.409175785s ago: executing program 3 (id=99): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x0) recvmsg$unix(r1, &(0x7f0000002840)={&(0x7f0000002100)=@abs, 0x6e, &(0x7f0000002640)=[{&(0x7f0000002180)}, {&(0x7f00000001c0)=""/178, 0xb2}, {0x0}], 0x3, &(0x7f0000000000)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x40000022) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000340)="f4f6011d3a", 0x2, 0xffffffffffffffff, 0x4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) (async) gettid() (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000002840)={&(0x7f0000002100)=@abs, 0x6e, &(0x7f0000002640)=[{&(0x7f0000002180)}, {&(0x7f00000001c0)=""/178, 0xb2}, {0x0}], 0x3, &(0x7f0000000000)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x40000022) (async) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000340)="f4f6011d3a", 0x2, 0xffffffffffffffff, 0x4}, 0x38) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) (async) 3.152303478s ago: executing program 2 (id=102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x194}}, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x6, 0x1, 0x3, 0x0, 0x0, 0x6, 0x800, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x1, 0x7fffffff, 0x3, 0x6, 0x1, 0x1, 0x88, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xa, 0x40, 0x8, 0x24, 0x0, 0x10, 0x4410, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0x6}, 0x2, 0x8, 0x0, 0x2, 0x0, 0x3fee3730, 0x5, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x6, r1, 0x0) 3.131786079s ago: executing program 3 (id=103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x70}}, 0x0) 2.935240783s ago: executing program 2 (id=107): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 2.90265773s ago: executing program 3 (id=108): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000001600)=ANY=[@ANYRES64=r1], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="2e00000036000511d25a80698c6394090324fc602f6e35400800018025581d00d1bd00000000000000000000000f05", 0x2f}], 0x1, 0x0, 0x0, 0x39c}, 0x4040014) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @sched_cls=0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4004004) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20580, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) socket$kcm(0xa, 0x1, 0x106) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000280)}], 0x2, &(0x7f0000000340)=[{0x10, 0x88, 0x7}], 0x10}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x300, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.349473547s ago: executing program 2 (id=112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000003c0007010000000000000000017c00001c00fc80180008800e0031002a27262d2e2b2a7b2e0000000400a7800c00018006000600800a0000080002800400158008000700", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x2, 0x0) sendmsg(r2, 0x0, 0x40000040) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x20040010) sendmsg$kcm(r5, 0x0, 0x20000000) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0xd, 0x7, 0x6, 0x0, 0x0, 0x3, 0x43a16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x7, 0x2}, 0x5020, 0x1500, 0x3, 0x9, 0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffff801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x13) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x76, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$kcm(0x10, 0x2, 0x4) 2.191593233s ago: executing program 1 (id=113): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x4a88, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) (async) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) r1 = socket$nl_audit(0x10, 0x3, 0x9) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r2 = socket$kcm(0x2, 0x5, 0x84) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async, rerun: 64) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) (async, rerun: 64) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000008c0), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001980)=""/140, 0x8c}, {&(0x7f0000001a40)=""/160, 0xa0}], 0x3}, 0x40000002) (rerun: 64) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) (async) socket$kcm(0x2, 0x1, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async, rerun: 64) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) (rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x6, 0x0, 0x0, 0x9, 0x800000, 0xfffc, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x541b, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x468, 0x3f4, 0x0, 0x70bd25, 0x25dfdbfc, {0x2, 0x1, 0x17, [0x400, 0x4, 0x88, 0x3, 0x7ff, 0x9, 0x7, 0xb2e, 0xffffff83, 0x89, 0x3, 0x2, 0x82d, 0x5, 0x4, 0x2, 0x9, 0x1, 0x3, 0x5, 0x8, 0x3ff, 0x3, 0x9, 0x200, 0x8000, 0x1, 0x6, 0x3, 0xfffff59b, 0x10, 0x0, 0x80000001, 0x1ff, 0x9, 0x7, 0x6, 0x3, 0x7, 0x9, 0x4, 0xf9, 0x9, 0x1a, 0x4, 0x2b, 0x8, 0x3, 0x9a9, 0xc412, 0x1, 0x5, 0x1, 0x7, 0x80, 0xd, 0x66d, 0x9, 0xfffff648, 0x7, 0x0, 0x8, 0xf6f8, 0x8], [0x6, 0xc3, 0x5, 0xfffffffe, 0x7, 0x8001, 0x9, 0x8, 0xc, 0x2, 0xfffffffb, 0x8, 0x2, 0x6, 0xffffffff, 0x1, 0xffff, 0x8, 0xab, 0x66, 0x5e1, 0x10001, 0x5, 0x5, 0x5, 0x2, 0x200, 0xffff, 0x8, 0x3, 0x1, 0xd72, 0x6, 0x3ff, 0x6, 0x7801, 0x7fff, 0x80000001, 0x8001, 0x5, 0xd, 0x400, 0x7fff, 0x2, 0x0, 0x1000, 0xf, 0x8, 0x5747, 0xfffffffc, 0x4, 0x1, 0x5, 0xfffffafe, 0xf, 0x1, 0x95d5, 0x3, 0x4, 0xfffffffc, 0x5, 0x9, 0x69, 0x7], [0x8c9f, 0xe, 0x0, 0x2, 0x8, 0x3c3, 0x93, 0x1c000000, 0x4, 0x0, 0x6, 0x3, 0x9, 0x4, 0x8000, 0x8, 0xfff, 0x1, 0x0, 0xe8, 0x6, 0x0, 0x3, 0x9, 0xffffff7f, 0x0, 0xffffffff, 0x80, 0x9, 0x0, 0x2, 0x5, 0x1, 0x6, 0x1, 0xa, 0x2, 0x4, 0x5, 0xbc52, 0x3, 0x40, 0x1ff, 0x7, 0xef5, 0x23e, 0x4, 0x10001, 0x10000, 0x60be3550, 0xd, 0x1ff, 0x6d0e, 0x2, 0x4, 0x3, 0x5, 0xfffffff7, 0x9, 0xe, 0xc24, 0x6, 0x4, 0x6], [0x6, 0x3, 0xde4, 0x5, 0xb5f1, 0x1, 0x68e8e78f, 0x5, 0x3ff, 0xa, 0x35f, 0x3c7, 0x8, 0x4, 0x2, 0xfffffff7, 0x60ed881b, 0x110, 0x3, 0x8, 0x8, 0xffffffff, 0x3, 0x800, 0x7, 0x9, 0xfffffc01, 0x9, 0x30, 0x0, 0x9, 0xb, 0x6, 0x2, 0xb, 0x1, 0x1ff, 0x7, 0x1, 0x6, 0x1, 0xaa, 0x9, 0x3, 0x45aa4ea8, 0x2, 0x5, 0x693e, 0x6, 0x5, 0x1, 0x8, 0x200, 0xb, 0x8, 0x5, 0x5a8d, 0x21b, 0x0, 0x10000, 0x0, 0x10000, 0x5, 0x728], 0x47, ['blkio.bfq.sectors_recursive\x00', 'lo\x00', 'blkio.bfq.sectors_recursive\x00', '\x00', '&#\x00', 'lo\x00', '\'\x00', 'lo\x00']}, ["", "", ""]}, 0x468}, 0x1, 0x0, 0x0, 0x20000}, 0x1800) 2.190705554s ago: executing program 4 (id=114): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000c40), 0x1}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6307e08102030000fe0ea66718330200975a65789ff57b00000000000000cade22000000000000ac9ccb"], 0xfdef) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r3, @ANYRES32, @ANYBLOB="ff0f000000000000d9000000000000000000", @ANYRES64=r1, @ANYRES16=r0, @ANYBLOB='\x00'/21], 0x50) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) close(0xffffffffffffffff) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x105800, 0x0) (async) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000280)=r7) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={&(0x7f0000000740)="e69c3229285d3a030e4b55fe2b94fee7ebfd8aed644a28e2e8b5365ca6d7f9ed7f81695191208cc33e012b4e3217c59d5ab91f47cc0aac16da43a3221fd20294b66e372a3aedb4f64d5f0e99858fddfb37196813aef5b488e5ca588ee4370f", &(0x7f0000000800)=""/246, &(0x7f0000000900)="2145efcce7399216fbf90698b0d8a31fbd5e20f65a4f439187a5d0e4cf7eaa793e99b8ba27e916020e0444e484fff0569bb24756e456005f1c597fc885b4c50229cacbbb7286b731144f627bdbda9596e8ffe19eb55ce1c524d014f2a5fc06146afab69256d554c2e1edada2638fd10f30dddbd836f77616f5b27d756d2585fc62d305e80fe96c70aa2b9d8bc9079779b046752410380461c8a9f6f8431812e2e989b9588470b8d48f3b0cfdf35f94e6afaddbc8b45137e8392aee079a1ef7950ae9a48e844e4e6e72b9a0b13e22101db8", &(0x7f0000000a00)="d0a16df37af7111573f7643458ad504d5e410f17e94622693d610efcebed6a585a253300fb9f01a27f52a088f5e3c6abc6a2262acb30f751dd61fa68e83e993a21cbf763774b6f23a2b1b43dd637f825215143f4f324678e14d2092a731173a3820c", 0x7ff, 0xffffffffffffffff, 0x4}, 0x38) (async) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x48) (async) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r9) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000180), 0x127) (async, rerun: 32) close(r8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) 1.88689075s ago: executing program 1 (id=116): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030200590200000000002f1eafbcf706e10500000088a8000f88a8ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3332be2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) 1.860256862s ago: executing program 4 (id=117): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, 0x0, 0xc094) 1.719736014s ago: executing program 1 (id=118): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x70}}, 0x0) 1.639223727s ago: executing program 4 (id=119): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2f08, 0xe, 0x0, &(0x7f0000000000)="46c33c56e981df5e1559014932a2", 0x0, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.550732678s ago: executing program 0 (id=120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000e307001640000097ff080007"], 0x6c}}, 0x0) (fail_nth: 7) 1.521002355s ago: executing program 4 (id=121): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x13, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) syz_open_procfs$namespace(0x0, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x0, {0xa, 0x4e21, 0x1200, @local, 0xa}}, 0x80, 0x0, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0xffffffffffffff72) (async, rerun: 64) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) (async) close(r3) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) (async) socket$kcm(0x11, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async, rerun: 32) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="1e"], 0xffdd) (async, rerun: 32) r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x10000) (async) recvmsg$unix(r8, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r10, 0x1, 0x41, 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(r9, &(0x7f0000000fc0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000b80)={0x434, 0x3f3, 0x200, 0x70bd2a, 0x25dfdbff, {0x6, 0x1, 0x31, [0x8, 0xfffffffc, 0x3, 0x1000, 0x5, 0x0, 0x880e, 0x7, 0x0, 0x1000, 0x4, 0x6, 0x0, 0xa7f, 0x100, 0x8000, 0x8001, 0xf08c, 0x2, 0x9, 0xc9, 0x1ff, 0x5, 0x2, 0x10000, 0x467c80, 0x1, 0x0, 0x6, 0xfffffff4, 0xd, 0x1, 0x8622, 0x4, 0x81, 0x5cc4, 0x2, 0x82d, 0x3, 0x400, 0x1, 0x9, 0x9, 0x10, 0x50b, 0x2, 0x9, 0x8, 0x2, 0x5, 0x6, 0x7, 0x3, 0x1, 0x0, 0x8, 0x4, 0x6, 0x2, 0x6, 0xfffffffd, 0x5, 0x3, 0x4], [0x7, 0x4, 0xed, 0x9, 0xa1ee, 0x0, 0x0, 0x0, 0xa75, 0x5, 0x1000, 0x0, 0xe8e, 0x8, 0x591f, 0x1, 0x1, 0x2, 0x4, 0x1ff, 0xae02, 0x1, 0x3, 0x4, 0x4, 0xb, 0x9, 0x6, 0x80000001, 0x3, 0x8, 0x2, 0x9, 0x9, 0xd7f4, 0x4, 0x9, 0x10, 0x9, 0xa9, 0x9, 0x9, 0x404000, 0x0, 0x4, 0x6, 0x80000001, 0x2, 0x10, 0x800, 0xfd15, 0x800, 0xb, 0x5, 0x684539fd, 0x2a43, 0xda5, 0x2, 0x2, 0xffffffff, 0xa4d7, 0x7, 0x5, 0x6e], [0x6, 0xfffffffc, 0x5, 0x3, 0x8, 0x10001, 0x10001, 0x5, 0x40, 0x6, 0x80, 0x3ff, 0xc6a4, 0x200, 0x1000, 0x400, 0x1, 0x1, 0x10000, 0x8, 0x7, 0x8, 0x2, 0xe32d, 0x15a4, 0xffffff6e, 0x4a, 0xd71e, 0x6, 0x4, 0xa17c7bdf, 0x40, 0x4ce, 0x0, 0x0, 0x7ff, 0xfffffffb, 0xc7, 0x2, 0x0, 0x6, 0x7, 0x0, 0x10, 0xd0, 0xffff7a67, 0x0, 0x1, 0x200, 0x2, 0x0, 0x7f, 0x101, 0x1e0800, 0x3, 0x4, 0x10000, 0x2, 0x1ff, 0x0, 0x7ff, 0x7, 0x1, 0x6b71], [0x8000, 0x6, 0x6fa, 0x5, 0x6, 0x9, 0x2, 0x40, 0x70, 0x421b, 0x2a1, 0x3, 0x38ac6e04, 0x6a2, 0x100, 0x5, 0x9, 0xfffff001, 0x9, 0x8001, 0x6f, 0x0, 0xbe, 0xfffffffd, 0xfffffffc, 0x5, 0x39c7, 0x9, 0xc, 0x6, 0x7, 0x44, 0x8, 0x7f, 0xfffffcde, 0xae, 0xd, 0x0, 0xffff1c19, 0x7, 0x3, 0x7fffffff, 0xe, 0x8, 0x7101d7ad, 0x0, 0x3ff, 0x5c30ca0, 0x4d, 0x7fff, 0x8, 0x6, 0x10001, 0x4, 0x128d9dbf, 0x4d, 0x1, 0x0, 0x1, 0x4, 0x4, 0x0, 0xfff, 0x4], 0x11, ['U{)&*\x00', '\x00', '\x00', 'GPL\x00', '\x00', 'GPL\x00']}, ["", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x40051}, 0x20000000) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) 1.475084583s ago: executing program 1 (id=122): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d08000600", 0x16}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 1.26443103s ago: executing program 4 (id=123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000e307001640000097ff080007"], 0x6c}}, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x7, 0xbd, 0x3, 0xa9, 0x0, 0x3, 0x9360872bfa2508dc, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x2}, 0x100040, 0x1000000000000000, 0x63, 0x7, 0x8, 0xc, 0x6, 0x0, 0x5, 0x0, 0x1}, 0xffffffffffffffff, 0xd, r1, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x5, 0xff, 0x8, 0x3, 0x0, 0x7ff, 0x88200, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x161a, 0x8, 0x3, 0x7, 0x5, 0x0, 0x6, 0x0, 0x9ba8, 0x0, 0x8000000000000001}, 0xffffffffffffffff, 0x7, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x2000000000009237, 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x6, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000081000000"], 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x7, 0x0, &(0x7f00000004c0)="630b008646dc3f", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.112062264s ago: executing program 0 (id=124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a00fffd0900010073797a31000000000900020073797a320000000028000480240001800b000100736f636b65740000140002800800014000000000080002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 847.682573ms ago: executing program 0 (id=125): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030200590200000000002f1eafbcf706e105000000892f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3332be2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x139}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) 758.254657ms ago: executing program 0 (id=126): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) (async) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000008c0)={0x0, r0}, 0x8) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001ac0)=""/4081, 0xff1}], 0x1}, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0xfff, 0x4, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x3, 0x8}, {0x0, 0x4, 0x10004}]}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000015, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x83, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0xfd31, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8) r7 = syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs$namespace(r7, &(0x7f0000001140)='ns/cgroup\x00') (async) syz_open_procfs$namespace(r7, &(0x7f0000000880)='ns/net\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xb, &(0x7f00000001c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf95}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0xfe3, 0x17, &(0x7f0000000240)=""/23, 0x41100, 0x38, '\x00', r5, @fallback=0x2e, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x0, 0x0, 0x6, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[r1], &(0x7f0000000700)=[{0x4, 0x4, 0x7, 0xc}, {0x0, 0x5, 0x10, 0xb}, {0x1, 0x3, 0x9, 0x8}, {0x3, 0x2, 0x3, 0x9}, {0xb61, 0x2, 0xd, 0x9}, {0x1, 0x4, 0x7, 0x4}, {0x3, 0x4, 0xb, 0x9}, {0x3, 0x3, 0x9, 0x8}, {0x3, 0x2, 0xc, 0x7}], 0x10, 0x24}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)="140000002d000b35f8ffffffffffffff0424ff0f", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x8840) 595.041685ms ago: executing program 3 (id=127): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x200, 0x0, 0x0, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYBLOB], 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0xb, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x420c0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1a, 0xf, 0x10001, 0x6, 0xc408, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="1400000038000b63d2c57022f5d8f1781024fc60", 0x14}], 0x1}, 0x0) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000008500000087000000850000000f00"/40], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, 0xfffffffffffffffe, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 517.517663ms ago: executing program 2 (id=128): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030200590200000000002f1eafbcf706e10500000088a8000f88a8ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3332be2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fd", 0xd1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) 473.981745ms ago: executing program 1 (id=129): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, 0x0, 0xc094) 370.421778ms ago: executing program 4 (id=130): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000100081", 0x7}], 0x1}, 0x0) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x4a88, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r1 = socket$kcm(0x2, 0x3, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x44000) close(r3) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8=r5], 0x9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x71, &(0x7f0000000000)=r10, 0x8) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0xf6a8, 0x6, 0x401, 0x62, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4, 0x7}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0xb, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x1, 0x2, 0x0, 0x1, 0x2, 0x4}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x401}, @map_idx_val={0x18, 0xd569e312ea52f84c, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x35e85418}], &(0x7f0000000140)='syzkaller\x00', 0xc, 0x10, &(0x7f0000000200)=""/16, 0x40f00, 0x6, '\x00', r7, 0x17, r10, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x1, 0xc, 0x3}, 0x10, 0x211d9, 0xffffffffffffffff, 0x1, &(0x7f0000000580)=[r11], &(0x7f00000005c0)=[{0x3, 0x5, 0xf, 0x5}]}, 0x94) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000180)={r1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 370.220144ms ago: executing program 0 (id=131): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000740), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2f08, 0xe, 0x0, &(0x7f0000000000)="46c33c56e981df5e1559014932a2", 0x0, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 315.633099ms ago: executing program 2 (id=132): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x70}}, 0x0) 206.000619ms ago: executing program 1 (id=133): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r0}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 4.28296ms ago: executing program 0 (id=134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000e307001640000097ff080007"], 0x6c}}, 0x0) (fail_nth: 8) 0s ago: executing program 2 (id=135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a00fffd0900010073797a31000000000900020073797a320000000028000480240001800b000100736f636b65740000140002800800014000000000080002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. [ 84.819043][ T5849] cgroup: Unknown subsys name 'net' [ 84.955648][ T5849] cgroup: Unknown subsys name 'cpuset' [ 84.965697][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.694086][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.234877][ T5875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.249558][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.264406][ T5880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.268870][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.273028][ T5880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.279270][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.287984][ T5880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.293725][ T5877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.300520][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.307876][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.314827][ T5880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.323163][ T5877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.328517][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.335550][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.349938][ T5880] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.350292][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.358372][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.366404][ T5876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.374391][ T5875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.382891][ T5183] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.386448][ T5875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.392582][ T5183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.406405][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.418737][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.432152][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.090931][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 92.102407][ T9] cfg80211: failed to load regulatory.db [ 92.168598][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 92.315654][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 92.425293][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 92.449424][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 92.461598][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.469531][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.477132][ T5860] bridge_slave_0: entered allmulticast mode [ 92.485159][ T5860] bridge_slave_0: entered promiscuous mode [ 92.526478][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.534022][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.541387][ T5860] bridge_slave_1: entered allmulticast mode [ 92.548841][ T5860] bridge_slave_1: entered promiscuous mode [ 92.644138][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.651384][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.659282][ T5861] bridge_slave_0: entered allmulticast mode [ 92.666820][ T5861] bridge_slave_0: entered promiscuous mode [ 92.729703][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.740028][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.747575][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.755835][ T5861] bridge_slave_1: entered allmulticast mode [ 92.764038][ T5861] bridge_slave_1: entered promiscuous mode [ 92.797737][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.876377][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.884056][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.891306][ T5859] bridge_slave_0: entered allmulticast mode [ 92.900324][ T5859] bridge_slave_0: entered promiscuous mode [ 92.910319][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.922857][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.930096][ T5859] bridge_slave_1: entered allmulticast mode [ 92.939850][ T5859] bridge_slave_1: entered promiscuous mode [ 93.016105][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.030014][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.053726][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.061027][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.069725][ T5862] bridge_slave_0: entered allmulticast mode [ 93.077152][ T5862] bridge_slave_0: entered promiscuous mode [ 93.100274][ T5860] team0: Port device team_slave_0 added [ 93.109414][ T5860] team0: Port device team_slave_1 added [ 93.146019][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.153364][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.160564][ T5862] bridge_slave_1: entered allmulticast mode [ 93.169610][ T5862] bridge_slave_1: entered promiscuous mode [ 93.176763][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.184019][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.191230][ T5871] bridge_slave_0: entered allmulticast mode [ 93.198832][ T5871] bridge_slave_0: entered promiscuous mode [ 93.237906][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.261090][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.268573][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.275971][ T5871] bridge_slave_1: entered allmulticast mode [ 93.284425][ T5871] bridge_slave_1: entered promiscuous mode [ 93.308984][ T5861] team0: Port device team_slave_0 added [ 93.317643][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.369138][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.376498][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.402946][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.416453][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.423552][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.449601][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.453190][ T5872] Bluetooth: hci2: command tx timeout [ 93.460329][ T51] Bluetooth: hci4: command tx timeout [ 93.466113][ T5876] Bluetooth: hci1: command tx timeout [ 93.474949][ T5861] team0: Port device team_slave_1 added [ 93.522749][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.532276][ T5876] Bluetooth: hci0: command tx timeout [ 93.538052][ T5876] Bluetooth: hci3: command tx timeout [ 93.555660][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.590116][ T5859] team0: Port device team_slave_0 added [ 93.598947][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.610714][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.650653][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.657693][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.683714][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.697613][ T5859] team0: Port device team_slave_1 added [ 93.735640][ T5871] team0: Port device team_slave_0 added [ 93.742567][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.749546][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.775965][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.831017][ T5862] team0: Port device team_slave_0 added [ 93.839805][ T5871] team0: Port device team_slave_1 added [ 93.869205][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.877808][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.904663][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.932203][ T5862] team0: Port device team_slave_1 added [ 93.970184][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.977678][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.003855][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.021328][ T5860] hsr_slave_0: entered promiscuous mode [ 94.028541][ T5860] hsr_slave_1: entered promiscuous mode [ 94.055968][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.063010][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.089475][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.103154][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.110233][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.136889][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.182753][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.189744][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.216418][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.228913][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.237957][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.264902][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.326107][ T5861] hsr_slave_0: entered promiscuous mode [ 94.333368][ T5861] hsr_slave_1: entered promiscuous mode [ 94.339737][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 94.346508][ T5861] Cannot create hsr debugfs directory [ 94.397090][ T5859] hsr_slave_0: entered promiscuous mode [ 94.403760][ T5859] hsr_slave_1: entered promiscuous mode [ 94.410033][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 94.416271][ T5859] Cannot create hsr debugfs directory [ 94.538375][ T5862] hsr_slave_0: entered promiscuous mode [ 94.546190][ T5862] hsr_slave_1: entered promiscuous mode [ 94.552708][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 94.558750][ T5862] Cannot create hsr debugfs directory [ 94.637229][ T5871] hsr_slave_0: entered promiscuous mode [ 94.644201][ T5871] hsr_slave_1: entered promiscuous mode [ 94.650470][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 94.656771][ T5871] Cannot create hsr debugfs directory [ 95.153912][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.166950][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.179154][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.201256][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.258206][ T5859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.271967][ T5859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.287347][ T5859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.300914][ T5859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.400263][ T5871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.414097][ T5871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.439617][ T5871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.453704][ T5871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.532897][ T5872] Bluetooth: hci1: command tx timeout [ 95.532907][ T51] Bluetooth: hci2: command tx timeout [ 95.544785][ T5876] Bluetooth: hci4: command tx timeout [ 95.557425][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.611993][ T5872] Bluetooth: hci3: command tx timeout [ 95.617460][ T5872] Bluetooth: hci0: command tx timeout [ 95.626499][ T5861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.645521][ T5861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.660696][ T5861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.675479][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.694819][ T5861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.727230][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.734522][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.747350][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.754521][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.878395][ T5862] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.896478][ T5862] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.909360][ T5862] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.920123][ T5862] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.965666][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.019060][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.099619][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.111203][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.167230][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.174609][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.216201][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.223498][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.258711][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.323409][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.336295][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.343619][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.375387][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.382564][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.436877][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.458808][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.466030][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.488550][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.500206][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.507524][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.538072][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.628817][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.698890][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.706132][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.778885][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.786144][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.878727][ T5860] veth0_vlan: entered promiscuous mode [ 96.985894][ T5860] veth1_vlan: entered promiscuous mode [ 97.175440][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.203177][ T5860] veth0_macvtap: entered promiscuous mode [ 97.227489][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.254930][ T5860] veth1_macvtap: entered promiscuous mode [ 97.337966][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.368276][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.389566][ T5871] veth0_vlan: entered promiscuous mode [ 97.428956][ T3435] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.438847][ T3435] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.490740][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.511806][ T3435] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.521930][ T3491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.537027][ T5871] veth1_vlan: entered promiscuous mode [ 97.612627][ T5876] Bluetooth: hci4: command tx timeout [ 97.618099][ T5876] Bluetooth: hci2: command tx timeout [ 97.626177][ T5872] Bluetooth: hci1: command tx timeout [ 97.637790][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.664121][ T5859] veth0_vlan: entered promiscuous mode [ 97.693556][ T5872] Bluetooth: hci0: command tx timeout [ 97.693565][ T5876] Bluetooth: hci3: command tx timeout [ 97.700649][ T5871] veth0_macvtap: entered promiscuous mode [ 97.716274][ T5871] veth1_macvtap: entered promiscuous mode [ 97.774378][ T5859] veth1_vlan: entered promiscuous mode [ 97.879186][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.901090][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.917956][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.970232][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.996323][ T5862] veth0_vlan: entered promiscuous mode [ 98.018382][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.038785][ T65] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.050600][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.067222][ T65] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.106057][ T65] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.116557][ T5859] veth0_macvtap: entered promiscuous mode [ 98.146400][ T65] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.165569][ T5862] veth1_vlan: entered promiscuous mode [ 98.174191][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.210969][ T5859] veth1_macvtap: entered promiscuous mode [ 98.238771][ T5861] veth0_vlan: entered promiscuous mode [ 98.286299][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.354799][ T5861] veth1_vlan: entered promiscuous mode [ 98.407131][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.428620][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.456123][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.464016][ T5862] veth0_macvtap: entered promiscuous mode [ 98.536849][ T3532] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.548921][ T3532] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.567649][ T5862] veth1_macvtap: entered promiscuous mode [ 98.631235][ T3532] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.657872][ T5861] veth0_macvtap: entered promiscuous mode [ 98.679480][ T3532] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.694968][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.705580][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.720629][ T5861] veth1_macvtap: entered promiscuous mode [ 98.774698][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.795077][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.917061][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.928169][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.967454][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.991467][ C1] hrtimer: interrupt took 68950 ns [ 99.017345][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.082860][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.119685][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.159177][ T5991] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.2'. [ 99.206643][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.232811][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.295822][ T3435] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.313789][ T3435] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.371396][ T3435] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.465581][ T3435] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.497507][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.506304][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.573682][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.603778][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.696637][ T5872] Bluetooth: hci1: command tx timeout [ 99.696969][ T51] Bluetooth: hci4: command tx timeout [ 99.708073][ T5876] Bluetooth: hci2: command tx timeout [ 99.734122][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.750168][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.773205][ T5876] Bluetooth: hci3: command tx timeout [ 99.781664][ T5876] Bluetooth: hci0: command tx timeout [ 99.997223][ T6010] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.14'. [ 100.017640][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.044865][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.186921][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.225582][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.553963][ T6022] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 100.601472][ T6022] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.3'. [ 101.281650][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 101.726621][ T6040] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 101.802691][ T6042] netlink: 56 bytes leftover after parsing attributes in process `syz.4.20'. [ 102.396629][ T6050] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.22'. [ 102.643927][ T6060] netlink: 'syz.4.27': attribute type 1 has an invalid length. [ 102.931143][ T6062] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.308471][ T6074] netlink: 'syz.2.30': attribute type 10 has an invalid length. [ 103.367964][ T6074] netlink: 152 bytes leftover after parsing attributes in process `syz.2.30'. [ 103.568889][ T6074] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 104.345651][ T6102] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 104.358063][ T6102] syzkaller1: linktype set to 780 [ 104.871456][ T6098] netlink: 60 bytes leftover after parsing attributes in process `syz.4.35'. [ 105.092219][ T6098] netlink: 60 bytes leftover after parsing attributes in process `syz.4.35'. [ 105.844745][ T6128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.43'. [ 106.928526][ T6153] netlink: 'syz.4.49': attribute type 1 has an invalid length. [ 107.018002][ T6153] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.49'. [ 109.845524][ T6142] : renamed from veth0_to_bond (while UP) [ 109.888966][ T6157] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.50'. [ 110.797096][ T6188] netlink: 'syz.0.62': attribute type 28 has an invalid length. [ 110.837593][ T6188] netlink: 'syz.0.62': attribute type 21 has an invalid length. [ 110.873949][ T6188] netlink: 'syz.0.62': attribute type 5 has an invalid length. [ 110.992528][ T6184] netlink: 'syz.1.61': attribute type 2 has an invalid length. [ 111.000168][ T6184] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.61'. [ 112.369123][ T6194] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.63'. [ 112.567744][ T6198] netlink: 146736 bytes leftover after parsing attributes in process `syz.3.65'. [ 112.623682][ T6198] netlink: 'syz.3.65': attribute type 17 has an invalid length. [ 112.673751][ T6198] netlink: 'syz.3.65': attribute type 16 has an invalid length. [ 112.701843][ T6198] netlink: 152 bytes leftover after parsing attributes in process `syz.3.65'. [ 113.195123][ T6222] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.76'. [ 113.231542][ T6220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.75'. [ 113.707175][ T6238] Zero length message leads to an empty skb [ 114.024034][ T6252] netlink: 'syz.3.89': attribute type 10 has an invalid length. [ 114.034338][ T6252] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.043259][ T6252] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.182381][ T6252] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.190169][ T6252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.198398][ T6252] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.205666][ T6252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.250925][ T6252] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 114.301953][ T6264] netlink: 32 bytes leftover after parsing attributes in process `syz.4.93'. [ 114.439727][ T6257] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.91'. [ 114.752449][ T6273] netlink: 'syz.1.96': attribute type 3 has an invalid length. [ 114.810993][ T6273] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.96'. [ 115.590858][ T6300] FAULT_INJECTION: forcing a failure. [ 115.590858][ T6300] name failslab, interval 1, probability 0, space 0, times 1 [ 115.657247][ T6300] CPU: 1 UID: 0 PID: 6300 Comm: syz.4.105 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 115.657277][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.657298][ T6300] Call Trace: [ 115.657307][ T6300] [ 115.657316][ T6300] dump_stack_lvl+0x189/0x250 [ 115.657351][ T6300] ? __pfx____ratelimit+0x10/0x10 [ 115.657381][ T6300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.657407][ T6300] ? __pfx__printk+0x10/0x10 [ 115.657452][ T6300] should_fail_ex+0x414/0x560 [ 115.657487][ T6300] should_failslab+0xa8/0x100 [ 115.657521][ T6300] kmem_cache_alloc_noprof+0x73/0x3c0 [ 115.657550][ T6300] ? __nf_conntrack_alloc+0x98/0x400 [ 115.657580][ T6300] __nf_conntrack_alloc+0x98/0x400 [ 115.657610][ T6300] ctnetlink_new_conntrack+0x571/0x2070 [ 115.657637][ T6300] ? __pfx___mutex_trylock_common+0x10/0x10 [ 115.657670][ T6300] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 115.657690][ T6300] ? trace_contention_end+0x39/0x120 [ 115.657720][ T6300] ? __mutex_lock+0x335/0x1360 [ 115.657749][ T6300] ? __pfx___nla_validate_parse+0x10/0x10 [ 115.657786][ T6300] ? __lock_acquire+0xab9/0xd20 [ 115.657819][ T6300] ? nfnetlink_rcv_msg+0x9dc/0x1130 [ 115.657878][ T6300] nfnetlink_rcv_msg+0xb4d/0x1130 [ 115.657907][ T6300] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 115.657956][ T6300] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 115.657982][ T6300] ? kasan_save_free_info+0x46/0x50 [ 115.658061][ T6300] netlink_rcv_skb+0x208/0x470 [ 115.658095][ T6300] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 115.658124][ T6300] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 115.658167][ T6300] ? bpf_lsm_capable+0x9/0x20 [ 115.658195][ T6300] ? security_capable+0x7e/0x2e0 [ 115.658236][ T6300] nfnetlink_rcv+0x26a/0x2520 [ 115.658266][ T6300] ? __dev_queue_xmit+0x1d79/0x3b50 [ 115.658301][ T6300] ? __dev_queue_xmit+0x27b/0x3b50 [ 115.658338][ T6300] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 115.658364][ T6300] ? __pfx___dev_queue_xmit+0x10/0x10 [ 115.658403][ T6300] ? ref_tracker_free+0x63a/0x7d0 [ 115.658433][ T6300] ? __asan_memcpy+0x40/0x70 [ 115.658456][ T6300] ? __pfx_ref_tracker_free+0x10/0x10 [ 115.658484][ T6300] ? __skb_clone+0x63/0x7a0 [ 115.658512][ T6300] ? __skb_clone+0x483/0x7a0 [ 115.658542][ T6300] ? skb_clone+0x246/0x3a0 [ 115.658569][ T6300] ? __netlink_deliver_tap+0x807/0x850 [ 115.658600][ T6300] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.658639][ T6300] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.658680][ T6300] netlink_unicast+0x82c/0x9e0 [ 115.658728][ T6300] ? __pfx_netlink_unicast+0x10/0x10 [ 115.658759][ T6300] ? netlink_sendmsg+0x642/0xb30 [ 115.658787][ T6300] ? skb_put+0x11b/0x210 [ 115.658829][ T6300] netlink_sendmsg+0x805/0xb30 [ 115.658870][ T6300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.658905][ T6300] ? aa_sock_msg_perm+0xf1/0x1d0 [ 115.658940][ T6300] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 115.658963][ T6300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.658996][ T6300] __sock_sendmsg+0x21c/0x270 [ 115.659027][ T6300] ____sys_sendmsg+0x505/0x830 [ 115.659055][ T6300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.659089][ T6300] ? import_iovec+0x74/0xa0 [ 115.659118][ T6300] ___sys_sendmsg+0x21f/0x2a0 [ 115.659143][ T6300] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.659208][ T6300] ? __fget_files+0x2a/0x420 [ 115.659227][ T6300] ? __fget_files+0x3a0/0x420 [ 115.659259][ T6300] __x64_sys_sendmsg+0x19b/0x260 [ 115.659283][ T6300] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.659316][ T6300] ? __pfx_ksys_write+0x10/0x10 [ 115.659342][ T6300] ? rcu_is_watching+0x15/0xb0 [ 115.659368][ T6300] ? do_syscall_64+0xbe/0x3b0 [ 115.659403][ T6300] do_syscall_64+0xfa/0x3b0 [ 115.659432][ T6300] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.659459][ T6300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.659480][ T6300] ? clear_bhb_loop+0x60/0xb0 [ 115.659505][ T6300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.659525][ T6300] RIP: 0033:0x7f5bb2d8ebe9 [ 115.659553][ T6300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.659570][ T6300] RSP: 002b:00007f5bb3b33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.659592][ T6300] RAX: ffffffffffffffda RBX: 00007f5bb2fb5fa0 RCX: 00007f5bb2d8ebe9 [ 115.659606][ T6300] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 115.659618][ T6300] RBP: 00007f5bb3b33090 R08: 0000000000000000 R09: 0000000000000000 [ 115.659630][ T6300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.659642][ T6300] R13: 00007f5bb2fb6038 R14: 00007f5bb2fb5fa0 R15: 00007ffca68c0c38 [ 115.659677][ T6300] [ 115.676878][ T6303] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.107'. [ 115.960516][ T6311] netlink: 26 bytes leftover after parsing attributes in process `syz.3.108'. [ 116.229181][ T6314] netlink: 'syz.3.108': attribute type 3 has an invalid length. [ 116.237360][ T6314] netlink: 'syz.3.108': attribute type 2 has an invalid length. [ 116.322937][ T6315] netlink: 'syz.3.108': attribute type 13 has an invalid length. [ 116.338264][ T6314] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.108'. [ 116.459485][ T6326] netlink: 'syz.2.112': attribute type 10 has an invalid length. [ 116.605209][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.612619][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.710238][ T6334] netlink: 48 bytes leftover after parsing attributes in process `syz.0.115'. [ 116.750480][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 116.997648][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.044375][ T6346] FAULT_INJECTION: forcing a failure. [ 117.044375][ T6346] name failslab, interval 1, probability 0, space 0, times 0 [ 117.059881][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.060080][ T6346] CPU: 0 UID: 0 PID: 6346 Comm: syz.0.120 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 117.060113][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.060128][ T6346] Call Trace: [ 117.060138][ T6346] [ 117.060148][ T6346] dump_stack_lvl+0x189/0x250 [ 117.060184][ T6346] ? __pfx____ratelimit+0x10/0x10 [ 117.060217][ T6346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.060247][ T6346] ? __pfx__printk+0x10/0x10 [ 117.060314][ T6346] should_fail_ex+0x414/0x560 [ 117.060353][ T6346] should_failslab+0xa8/0x100 [ 117.060393][ T6346] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 117.060429][ T6346] ? nf_ct_ext_add+0x1ab/0x450 [ 117.060461][ T6346] ? nf_ct_ext_add+0x1ab/0x450 [ 117.060486][ T6346] krealloc_noprof+0x124/0x340 [ 117.060525][ T6346] nf_ct_ext_add+0x1ab/0x450 [ 117.060558][ T6346] ctnetlink_new_conntrack+0x11e7/0x2070 [ 117.060583][ T6346] ? ctnetlink_new_conntrack+0x6d3/0x2070 [ 117.060627][ T6346] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 117.060651][ T6346] ? trace_contention_end+0x39/0x120 [ 117.060679][ T6346] ? __mutex_lock+0x335/0x1360 [ 117.060713][ T6346] ? __pfx___nla_validate_parse+0x10/0x10 [ 117.060757][ T6346] ? __lock_acquire+0xab9/0xd20 [ 117.060797][ T6346] ? nfnetlink_rcv_msg+0x9dc/0x1130 [ 117.060862][ T6346] nfnetlink_rcv_msg+0xb4d/0x1130 [ 117.060894][ T6346] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 117.060949][ T6346] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 117.060976][ T6346] ? kasan_save_free_info+0x46/0x50 [ 117.061036][ T6346] ? perf_trace_preemptirq_template+0xa3/0x340 [ 117.061072][ T6346] ? kasan_quarantine_put+0x3d/0x220 [ 117.061124][ T6346] netlink_rcv_skb+0x208/0x470 [ 117.061160][ T6346] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 117.061194][ T6346] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.061244][ T6346] ? bpf_lsm_capable+0x9/0x20 [ 117.061276][ T6346] ? security_capable+0x7e/0x2e0 [ 117.061329][ T6346] nfnetlink_rcv+0x26a/0x2520 [ 117.061364][ T6346] ? __dev_queue_xmit+0x1d79/0x3b50 [ 117.061411][ T6346] ? __dev_queue_xmit+0x27b/0x3b50 [ 117.061455][ T6346] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 117.061486][ T6346] ? __pfx___dev_queue_xmit+0x10/0x10 [ 117.061533][ T6346] ? ref_tracker_free+0x63a/0x7d0 [ 117.061567][ T6346] ? __asan_memcpy+0x40/0x70 [ 117.061594][ T6346] ? __pfx_ref_tracker_free+0x10/0x10 [ 117.061625][ T6346] ? __skb_clone+0x63/0x7a0 [ 117.061655][ T6346] ? __skb_clone+0x483/0x7a0 [ 117.061690][ T6346] ? skb_clone+0x246/0x3a0 [ 117.061719][ T6346] ? __netlink_deliver_tap+0x807/0x850 [ 117.061754][ T6346] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.061798][ T6346] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.061842][ T6346] netlink_unicast+0x82c/0x9e0 [ 117.061885][ T6346] ? __pfx_netlink_unicast+0x10/0x10 [ 117.061920][ T6346] ? netlink_sendmsg+0x642/0xb30 [ 117.061951][ T6346] ? skb_put+0x11b/0x210 [ 117.061993][ T6346] netlink_sendmsg+0x805/0xb30 [ 117.062041][ T6346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.062081][ T6346] ? aa_sock_msg_perm+0xf1/0x1d0 [ 117.062123][ T6346] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 117.062149][ T6346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.062186][ T6346] __sock_sendmsg+0x21c/0x270 [ 117.062222][ T6346] ____sys_sendmsg+0x505/0x830 [ 117.062253][ T6346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.062290][ T6346] ? import_iovec+0x74/0xa0 [ 117.062331][ T6346] ___sys_sendmsg+0x21f/0x2a0 [ 117.062359][ T6346] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.062429][ T6346] ? __fget_files+0x2a/0x420 [ 117.062449][ T6346] ? __fget_files+0x3a0/0x420 [ 117.062485][ T6346] __x64_sys_sendmsg+0x19b/0x260 [ 117.062513][ T6346] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.062550][ T6346] ? __pfx_ksys_write+0x10/0x10 [ 117.062580][ T6346] ? rcu_is_watching+0x15/0xb0 [ 117.062610][ T6346] ? do_syscall_64+0xbe/0x3b0 [ 117.062651][ T6346] do_syscall_64+0xfa/0x3b0 [ 117.062683][ T6346] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.062716][ T6346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.062740][ T6346] ? clear_bhb_loop+0x60/0xb0 [ 117.062771][ T6346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.062795][ T6346] RIP: 0033:0x7f3d66d8ebe9 [ 117.062818][ T6346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.062838][ T6346] RSP: 002b:00007f3d67c22038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.062865][ T6346] RAX: ffffffffffffffda RBX: 00007f3d66fb5fa0 RCX: 00007f3d66d8ebe9 [ 117.062884][ T6346] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 117.062900][ T6346] RBP: 00007f3d67c22090 R08: 0000000000000000 R09: 0000000000000000 [ 117.062913][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.062928][ T6346] R13: 00007f3d66fb6038 R14: 00007f3d66fb5fa0 R15: 00007ffda6e84a58 [ 117.062966][ T6346] [ 117.841070][ T6319] : entered promiscuous mode [ 117.863185][ T6326] team0: Device ipvlan1 failed to register rx_handler [ 117.889875][ T6353] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.122'. [ 117.921917][ T1108] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.931039][ T1108] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.956111][ T1108] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.981345][ T1108] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.223007][ T6369] netlink: 'syz.3.127': attribute type 10 has an invalid length. [ 118.231283][ T6369] netlink: 55 bytes leftover after parsing attributes in process `syz.3.127'. [ 118.603548][ T6388] FAULT_INJECTION: forcing a failure. [ 118.603548][ T6388] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 118.604266][ T6388] [ 118.604275][ T6388] ====================================================== [ 118.604283][ T6388] WARNING: possible circular locking dependency detected [ 118.604308][ T6388] 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 Not tainted [ 118.604320][ T6388] ------------------------------------------------------ [ 118.604328][ T6388] syz.0.134/6388 is trying to acquire lock: [ 118.604339][ T6388] ffffffff8e12e120 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 118.604407][ T6388] [ 118.604407][ T6388] but task is already holding lock: [ 118.604414][ T6388] ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 118.604469][ T6388] [ 118.604469][ T6388] which lock already depends on the new lock. [ 118.604469][ T6388] [ 118.604476][ T6388] [ 118.604476][ T6388] the existing dependency chain (in reverse order) is: [ 118.604483][ T6388] [ 118.604483][ T6388] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 118.604509][ T6388] lock_acquire+0x120/0x360 [ 118.604538][ T6388] _raw_spin_lock_nested+0x32/0x50 [ 118.604565][ T6388] raw_spin_rq_lock_nested+0x2a/0x140 [ 118.604595][ T6388] task_rq_lock+0xbc/0x470 [ 118.604624][ T6388] cgroup_move_task+0x92/0x2a0 [ 118.604644][ T6388] css_set_move_task+0x658/0x9e0 [ 118.604666][ T6388] cgroup_post_fork+0x1ef/0x790 [ 118.604687][ T6388] copy_process+0x3862/0x3c00 [ 118.604707][ T6388] kernel_clone+0x21e/0x840 [ 118.604729][ T6388] user_mode_thread+0xdd/0x140 [ 118.604751][ T6388] rest_init+0x23/0x300 [ 118.604768][ T6388] start_kernel+0x3a9/0x410 [ 118.604786][ T6388] x86_64_start_reservations+0x24/0x30 [ 118.604812][ T6388] x86_64_start_kernel+0x143/0x1c0 [ 118.604837][ T6388] common_startup_64+0x13e/0x147 [ 118.604864][ T6388] [ 118.604864][ T6388] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 118.604890][ T6388] lock_acquire+0x120/0x360 [ 118.604918][ T6388] _raw_spin_lock_irqsave+0xa7/0xf0 [ 118.604940][ T6388] try_to_wake_up+0x67/0x12b0 [ 118.604963][ T6388] create_worker+0x503/0x720 [ 118.604990][ T6388] workqueue_init+0x3f0/0x6a0 [ 118.605017][ T6388] kernel_init_freeable+0x302/0x4b0 [ 118.605037][ T6388] kernel_init+0x1d/0x1d0 [ 118.605055][ T6388] ret_from_fork+0x3f9/0x770 [ 118.605073][ T6388] ret_from_fork_asm+0x1a/0x30 [ 118.605100][ T6388] [ 118.605100][ T6388] -> #3 (&pool->lock){-.-.}-{2:2}: [ 118.605127][ T6388] lock_acquire+0x120/0x360 [ 118.605155][ T6388] _raw_spin_lock+0x2e/0x40 [ 118.605186][ T6388] __queue_work+0x809/0xfb0 [ 118.605205][ T6388] queue_work_on+0x181/0x270 [ 118.605224][ T6388] rpm_suspend+0xe54/0x1720 [ 118.605242][ T6388] __pm_runtime_idle+0x12f/0x1a0 [ 118.605259][ T6388] __device_attach+0x342/0x400 [ 118.605278][ T6388] bus_probe_device+0x185/0x260 [ 118.605305][ T6388] device_add+0x7b6/0xb50 [ 118.605321][ T6388] serial_base_port_add+0x2e3/0x410 [ 118.605343][ T6388] serial_core_register_port+0x369/0x27c0 [ 118.605371][ T6388] serial8250_register_8250_port+0x16db/0x2050 [ 118.605398][ T6388] serial_pnp_probe+0x527/0x790 [ 118.605424][ T6388] pnp_device_probe+0x308/0x4c0 [ 118.605452][ T6388] really_probe+0x26d/0x9e0 [ 118.605472][ T6388] __driver_probe_device+0x18c/0x2f0 [ 118.605492][ T6388] driver_probe_device+0x4f/0x430 [ 118.605513][ T6388] __driver_attach+0x452/0x700 [ 118.605533][ T6388] bus_for_each_dev+0x233/0x2b0 [ 118.605559][ T6388] bus_add_driver+0x345/0x640 [ 118.605587][ T6388] driver_register+0x23a/0x320 [ 118.605610][ T6388] serial8250_init+0x8f/0x160 [ 118.605636][ T6388] do_one_initcall+0x233/0x820 [ 118.605660][ T6388] do_initcall_level+0x104/0x190 [ 118.605680][ T6388] do_initcalls+0x59/0xa0 [ 118.605699][ T6388] kernel_init_freeable+0x334/0x4b0 [ 118.605718][ T6388] kernel_init+0x1d/0x1d0 [ 118.605736][ T6388] ret_from_fork+0x3f9/0x770 [ 118.605754][ T6388] ret_from_fork_asm+0x1a/0x30 [ 118.605781][ T6388] [ 118.605781][ T6388] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 118.605810][ T6388] lock_acquire+0x120/0x360 [ 118.605837][ T6388] _raw_spin_lock_irqsave+0xa7/0xf0 [ 118.605860][ T6388] __pm_runtime_resume+0x10f/0x180 [ 118.605879][ T6388] __uart_start+0x171/0x460 [ 118.605905][ T6388] uart_write+0xdc/0x130 [ 118.605932][ T6388] n_tty_write+0xd29/0x1200 [ 118.605953][ T6388] file_tty_write+0x551/0xa20 [ 118.605979][ T6388] vfs_write+0x5c9/0xb30 [ 118.606003][ T6388] ksys_write+0x145/0x250 [ 118.606028][ T6388] do_syscall_64+0xfa/0x3b0 [ 118.606055][ T6388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.606074][ T6388] [ 118.606074][ T6388] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 118.606102][ T6388] lock_acquire+0x120/0x360 [ 118.606129][ T6388] _raw_spin_lock_irqsave+0xa7/0xf0 [ 118.606151][ T6388] serial8250_console_write+0x17e/0x1ba0 [ 118.606178][ T6388] console_flush_all+0x728/0xc40 [ 118.606201][ T6388] console_unlock+0xc4/0x270 [ 118.606220][ T6388] vprintk_emit+0x5b7/0x7a0 [ 118.606239][ T6388] _printk+0xcf/0x120 [ 118.606265][ T6388] register_console+0xa8b/0xf90 [ 118.606287][ T6388] univ8250_console_init+0x3a/0x70 [ 118.606312][ T6388] console_init+0x10e/0x430 [ 118.606333][ T6388] start_kernel+0x254/0x410 [ 118.606351][ T6388] x86_64_start_reservations+0x24/0x30 [ 118.606377][ T6388] x86_64_start_kernel+0x143/0x1c0 [ 118.606401][ T6388] common_startup_64+0x13e/0x147 [ 118.606428][ T6388] [ 118.606428][ T6388] -> #0 (console_owner){-.-.}-{0:0}: [ 118.606455][ T6388] validate_chain+0xb9b/0x2140 [ 118.606474][ T6388] __lock_acquire+0xab9/0xd20 [ 118.606502][ T6388] lock_acquire+0x120/0x360 [ 118.606528][ T6388] console_flush_all+0x6d2/0xc40 [ 118.606550][ T6388] console_unlock+0xc4/0x270 [ 118.606569][ T6388] vprintk_emit+0x5b7/0x7a0 [ 118.606587][ T6388] _printk+0xcf/0x120 [ 118.606612][ T6388] should_fail_ex+0x3f5/0x560 [ 118.606635][ T6388] strncpy_from_user+0x36/0x290 [ 118.606657][ T6388] strncpy_from_user_nofault+0x72/0x150 [ 118.606680][ T6388] bpf_probe_read_user_str+0x2a/0x70 [ 118.606698][ T6388] bpf_prog_7acee76fef7300d9+0x64/0x6c [ 118.606724][ T6388] bpf_trace_run2+0x284/0x4b0 [ 118.606748][ T6388] __bpf_trace_tlb_flush+0xf5/0x150 [ 118.606773][ T6388] trace_tlb_flush+0x115/0x140 [ 118.606798][ T6388] switch_mm_irqs_off+0x53e/0x7a0 [ 118.606823][ T6388] __schedule+0x110e/0x4cc0 [ 118.606846][ T6388] preempt_schedule_irq+0xb5/0x150 [ 118.606869][ T6388] irqentry_exit+0x6f/0x90 [ 118.606894][ T6388] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 118.606913][ T6388] lock_acquire+0x31c/0x360 [ 118.606940][ T6388] unwind_next_frame+0xc2/0x2390 [ 118.606961][ T6388] __unwind_start+0x5b9/0x760 [ 118.606982][ T6388] arch_stack_walk+0xe4/0x150 [ 118.607005][ T6388] stack_trace_save+0x9c/0xe0 [ 118.607027][ T6388] kasan_save_track+0x3e/0x80 [ 118.607052][ T6388] __kasan_kmalloc+0x93/0xb0 [ 118.607077][ T6388] __kmalloc_cache_noprof+0x230/0x3d0 [ 118.607105][ T6388] kmem_cache_free+0x166/0x400 [ 118.607132][ T6388] nf_conntrack_free+0x2f7/0x380 [ 118.607151][ T6388] nf_ct_gc_expired+0x246/0x3a0 [ 118.607180][ T6388] __nf_conntrack_find_get+0x20b/0x520 [ 118.607198][ T6388] nf_conntrack_find_get+0x25d/0x600 [ 118.607216][ T6388] ctnetlink_new_conntrack+0x32c/0x2070 [ 118.607235][ T6388] nfnetlink_rcv_msg+0xb4d/0x1130 [ 118.607259][ T6388] netlink_rcv_skb+0x208/0x470 [ 118.607286][ T6388] nfnetlink_rcv+0x26a/0x2520 [ 118.607308][ T6388] netlink_unicast+0x82c/0x9e0 [ 118.607331][ T6388] netlink_sendmsg+0x805/0xb30 [ 118.607358][ T6388] __sock_sendmsg+0x21c/0x270 [ 118.607381][ T6388] ____sys_sendmsg+0x505/0x830 [ 118.607398][ T6388] ___sys_sendmsg+0x21f/0x2a0 [ 118.607415][ T6388] __x64_sys_sendmsg+0x19b/0x260 [ 118.607433][ T6388] do_syscall_64+0xfa/0x3b0 [ 118.607461][ T6388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.607481][ T6388] [ 118.607481][ T6388] other info that might help us debug this: [ 118.607481][ T6388] [ 118.607488][ T6388] Chain exists of: [ 118.607488][ T6388] console_owner --> &p->pi_lock --> &rq->__lock [ 118.607488][ T6388] [ 118.607521][ T6388] Possible unsafe locking scenario: [ 118.607521][ T6388] [ 118.607527][ T6388] CPU0 CPU1 [ 118.607533][ T6388] ---- ---- [ 118.607539][ T6388] lock(&rq->__lock); [ 118.607552][ T6388] lock(&p->pi_lock); [ 118.607566][ T6388] lock(&rq->__lock); [ 118.607581][ T6388] lock(console_owner); [ 118.607593][ T6388] [ 118.607593][ T6388] *** DEADLOCK *** [ 118.607593][ T6388] [ 118.607598][ T6388] 6 locks held by syz.0.134/6388: [ 118.607610][ T6388] #0: ffffffff99fc7ac0 (nfnl_subsys_ctnetlink){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x9dc/0x1130 [ 118.607664][ T6388] #1: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: nf_conntrack_find_get+0x120/0x600 [ 118.607711][ T6388] #2: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 118.607769][ T6388] #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 118.607822][ T6388] #4: ffffffff8e12e180 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 118.607875][ T6388] #5: ffffffff8e015a50 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 118.607928][ T6388] [ 118.607928][ T6388] stack backtrace: [ 118.607947][ T6388] CPU: 0 UID: 0 PID: 6388 Comm: syz.0.134 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 118.607972][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.607988][ T6388] Call Trace: [ 118.607996][ T6388] [ 118.608006][ T6388] dump_stack_lvl+0x189/0x250 [ 118.608036][ T6388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.608062][ T6388] ? __pfx__printk+0x10/0x10 [ 118.608095][ T6388] ? print_lock_name+0xde/0x100 [ 118.608130][ T6388] print_circular_bug+0x2ee/0x310 [ 118.608159][ T6388] check_noncircular+0x134/0x160 [ 118.608198][ T6388] validate_chain+0xb9b/0x2140 [ 118.608247][ T6388] __lock_acquire+0xab9/0xd20 [ 118.608285][ T6388] ? console_flush_all+0x13a/0xc40 [ 118.608309][ T6388] lock_acquire+0x120/0x360 [ 118.608339][ T6388] ? console_flush_all+0x13a/0xc40 [ 118.608374][ T6388] ? do_raw_spin_unlock+0x122/0x240 [ 118.608398][ T6388] ? console_flush_all+0x13a/0xc40 [ 118.608425][ T6388] console_flush_all+0x6d2/0xc40 [ 118.608449][ T6388] ? console_flush_all+0x13a/0xc40 [ 118.608478][ T6388] ? console_flush_all+0x13a/0xc40 [ 118.608510][ T6388] ? __pfx_console_flush_all+0x10/0x10 [ 118.608547][ T6388] ? is_printk_cpu_sync_owner+0x32/0x40 [ 118.608581][ T6388] console_unlock+0xc4/0x270 [ 118.608608][ T6388] ? __pfx_console_unlock+0x10/0x10 [ 118.608635][ T6388] ? is_printk_cpu_sync_owner+0x32/0x40 [ 118.608667][ T6388] vprintk_emit+0x5b7/0x7a0 [ 118.608694][ T6388] ? __pfx_vprintk_emit+0x10/0x10 [ 118.608736][ T6388] _printk+0xcf/0x120 [ 118.608765][ T6388] ? __pfx____ratelimit+0x10/0x10 [ 118.608796][ T6388] ? __pfx__printk+0x10/0x10 [ 118.608823][ T6388] ? perf_trace_lock_acquire+0xf5/0x410 [ 118.608847][ T6388] ? htab_lock_bucket+0x18c/0x330 [ 118.608886][ T6388] should_fail_ex+0x3f5/0x560 [ 118.608917][ T6388] strncpy_from_user+0x36/0x290 [ 118.608947][ T6388] strncpy_from_user_nofault+0x72/0x150 [ 118.608976][ T6388] bpf_probe_read_user_str+0x2a/0x70 [ 118.608998][ T6388] bpf_prog_7acee76fef7300d9+0x64/0x6c [ 118.609019][ T6388] bpf_trace_run2+0x284/0x4b0 [ 118.609047][ T6388] ? bpf_trace_run2+0x186/0x4b0 [ 118.609074][ T6388] ? __pfx_bpf_trace_run2+0x10/0x10 [ 118.609103][ T6388] ? perf_trace_lock_acquire+0xf5/0x410 [ 118.609120][ T6388] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 118.609153][ T6388] __bpf_trace_tlb_flush+0xf5/0x150 [ 118.609194][ T6388] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 118.609228][ T6388] ? perf_cgroup_switch+0xe6/0x910 [ 118.609259][ T6388] ? psi_group_change+0xab8/0x1050 [ 118.609284][ T6388] trace_tlb_flush+0x115/0x140 [ 118.609315][ T6388] switch_mm_irqs_off+0x53e/0x7a0 [ 118.609350][ T6388] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 118.609377][ T6388] ? psi_task_switch+0x4e3/0x880 [ 118.609407][ T6388] __schedule+0x110e/0x4cc0 [ 118.609447][ T6388] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 118.609471][ T6388] ? rcu_is_watching+0x15/0xb0 [ 118.609493][ T6388] ? trace_page_fault_kernel+0x84/0x1e0 [ 118.609527][ T6388] ? __pfx___schedule+0x10/0x10 [ 118.609552][ T6388] ? exc_page_fault+0x9f/0xf0 [ 118.609585][ T6388] ? perf_trace_lock+0xec/0x3b0 [ 118.609611][ T6388] ? preempt_schedule_irq+0xaa/0x150 [ 118.609643][ T6388] preempt_schedule_irq+0xb5/0x150 [ 118.609671][ T6388] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 118.609708][ T6388] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 118.609729][ T6388] irqentry_exit+0x6f/0x90 [ 118.609750][ T6388] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 118.609768][ T6388] RIP: 0010:lock_acquire+0x31c/0x360 [ 118.609793][ T6388] Code: 08 8b 4c 24 04 4c 8b 44 24 20 4c 8b 4c 24 28 ff b4 24 98 00 00 00 ff 74 24 18 e8 8f 43 ff ff 48 83 c4 10 65 ff 0d 54 e2 02 11 <8b> 5c 24 08 4c 8b 74 24 10 4c 8b 7c 24 28 4c 8b 64 24 20 48 8b ac [ 118.609807][ T6388] RSP: 0018:ffffc9000dbe6378 EFLAGS: 00000286 [ 118.609821][ T6388] RAX: 9ac7bad3a8ac5b00 RBX: 0000000000000000 RCX: ffffe8ffffc3e0a8 [ 118.609833][ T6388] RDX: 0000000000000000 RSI: ffffffff8be33360 RDI: ffffffff8be33320 [ 118.609844][ T6388] RBP: ffffffff8172c195 R08: 0000000000000002 R09: 0000000000000000 [ 118.609854][ T6388] R10: ffffc9000dbe6548 R11: fffff52001b7ccb5 R12: 0000000000000002 [ 118.609866][ T6388] R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000000 [ 118.609879][ T6388] ? unwind_next_frame+0xa5/0x2390 [ 118.609906][ T6388] ? unwind_next_frame+0xa5/0x2390 [ 118.609930][ T6388] ? __unwind_start+0xf8/0x760 [ 118.609949][ T6388] ? unwind_next_frame+0xa5/0x2390 [ 118.609967][ T6388] unwind_next_frame+0xc2/0x2390 [ 118.609984][ T6388] ? unwind_next_frame+0xa5/0x2390 [ 118.610006][ T6388] ? perf_trace_lock+0xec/0x3b0 [ 118.610023][ T6388] ? get_stack_info_noinstr+0x1b/0x130 [ 118.610046][ T6388] __unwind_start+0x5b9/0x760 [ 118.610068][ T6388] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 118.610089][ T6388] arch_stack_walk+0xe4/0x150 [ 118.610113][ T6388] ? __unwind_start+0xf8/0x760 [ 118.610135][ T6388] stack_trace_save+0x9c/0xe0 [ 118.610154][ T6388] ? __pfx_stack_trace_save+0x10/0x10 [ 118.610182][ T6388] ? perf_trace_lock_acquire+0xf5/0x410 [ 118.610203][ T6388] kasan_save_track+0x3e/0x80 [ 118.610265][ T6388] __kasan_kmalloc+0x93/0xb0 [ 118.610289][ T6388] __kmalloc_cache_noprof+0x230/0x3d0 [ 118.610312][ T6388] ? kmem_cache_free+0x166/0x400 [ 118.610337][ T6388] ? nf_conntrack_free+0x2f7/0x380 [ 118.610353][ T6388] kmem_cache_free+0x166/0x400 [ 118.610380][ T6388] nf_conntrack_free+0x2f7/0x380 [ 118.610398][ T6388] nf_ct_gc_expired+0x246/0x3a0 [ 118.610417][ T6388] ? __pfx_nf_ct_gc_expired+0x10/0x10 [ 118.610444][ T6388] __nf_conntrack_find_get+0x20b/0x520 [ 118.610468][ T6388] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 118.610486][ T6388] ? __siphash_unaligned+0x232/0x3b0 [ 118.610516][ T6388] nf_conntrack_find_get+0x25d/0x600 [ 118.610536][ T6388] ? nf_conntrack_find_get+0x120/0x600 [ 118.610552][ T6388] ? __pfx_nf_conntrack_find_get+0x10/0x10 [ 118.610576][ T6388] ? __lock_acquire+0xab9/0xd20 [ 118.610606][ T6388] ctnetlink_new_conntrack+0x32c/0x2070 [ 118.610626][ T6388] ? __pfx___mutex_trylock_common+0x10/0x10 [ 118.610650][ T6388] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 118.610665][ T6388] ? trace_contention_end+0x39/0x120 [ 118.610704][ T6388] ? __mutex_lock+0x335/0x1360 [ 118.610728][ T6388] ? __pfx___nla_validate_parse+0x10/0x10 [ 118.610752][ T6388] ? perf_trace_lock+0xec/0x3b0 [ 118.610769][ T6388] ? perf_trace_lock+0xec/0x3b0 [ 118.610786][ T6388] ? nfnetlink_rcv_msg+0x9dc/0x1130 [ 118.610827][ T6388] nfnetlink_rcv_msg+0xb4d/0x1130 [ 118.610848][ T6388] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 118.610883][ T6388] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 118.610902][ T6388] ? kasan_save_free_info+0x46/0x50 [ 118.610939][ T6388] ? perf_trace_preemptirq_template+0xa3/0x340 [ 118.610962][ T6388] ? kasan_quarantine_put+0x3d/0x220 [ 118.610995][ T6388] netlink_rcv_skb+0x208/0x470 [ 118.611020][ T6388] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 118.611042][ T6388] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.611075][ T6388] ? bpf_lsm_capable+0x9/0x20 [ 118.611097][ T6388] ? security_capable+0x7e/0x2e0 [ 118.611127][ T6388] nfnetlink_rcv+0x26a/0x2520 [ 118.611150][ T6388] ? __dev_queue_xmit+0x1d79/0x3b50 [ 118.611270][ T6388] ? __dev_queue_xmit+0x27b/0x3b50 [ 118.611319][ T6388] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 118.611340][ T6388] ? __pfx___dev_queue_xmit+0x10/0x10 [ 118.611369][ T6388] ? ref_tracker_free+0x63a/0x7d0 [ 118.611393][ T6388] ? __asan_memcpy+0x40/0x70 [ 118.611420][ T6388] ? __pfx_ref_tracker_free+0x10/0x10 [ 118.611442][ T6388] ? __skb_clone+0x63/0x7a0 [ 118.611462][ T6388] ? perf_trace_lock+0xec/0x3b0 [ 118.611476][ T6388] ? __skb_clone+0x483/0x7a0 [ 118.611496][ T6388] ? __pfx_perf_trace_lock+0x10/0x10 [ 118.611512][ T6388] ? skb_clone+0x246/0x3a0 [ 118.611531][ T6388] ? __netlink_deliver_tap+0x807/0x850 [ 118.611555][ T6388] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.611584][ T6388] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.611613][ T6388] netlink_unicast+0x82c/0x9e0 [ 118.611643][ T6388] ? __pfx_netlink_unicast+0x10/0x10 [ 118.611666][ T6388] ? netlink_sendmsg+0x642/0xb30 [ 118.611689][ T6388] ? skb_put+0x11b/0x210 [ 118.611718][ T6388] netlink_sendmsg+0x805/0xb30 [ 118.611753][ T6388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.611777][ T6388] ? aa_sock_msg_perm+0xf1/0x1d0 [ 118.611803][ T6388] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 118.611819][ T6388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.611841][ T6388] __sock_sendmsg+0x21c/0x270 [ 118.611862][ T6388] ____sys_sendmsg+0x505/0x830 [ 118.611881][ T6388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.611902][ T6388] ? import_iovec+0x74/0xa0 [ 118.611922][ T6388] ___sys_sendmsg+0x21f/0x2a0 [ 118.611938][ T6388] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.611968][ T6388] ? __fget_files+0x2a/0x420 [ 118.611990][ T6388] ? __fget_files+0x2a/0x420 [ 118.612001][ T6388] ? __fget_files+0x3a0/0x420 [ 118.612021][ T6388] __x64_sys_sendmsg+0x19b/0x260 [ 118.612038][ T6388] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.612059][ T6388] ? __pfx_ksys_write+0x10/0x10 [ 118.612078][ T6388] ? rcu_is_watching+0x15/0xb0 [ 118.612096][ T6388] ? do_syscall_64+0xbe/0x3b0 [ 118.612120][ T6388] do_syscall_64+0xfa/0x3b0 [ 118.612140][ T6388] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.612160][ T6388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.612177][ T6388] ? clear_bhb_loop+0x60/0xb0 [ 118.612195][ T6388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.612210][ T6388] RIP: 0033:0x7f3d66d8ebe9 [ 118.612224][ T6388] Code: Unable to access opcode bytes at 0x7f3d66d8ebbf. [ 118.612231][ T6388] RSP: 002b:00007f3d67c22038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.612247][ T6388] RAX: ffffffffffffffda RBX: 00007f3d66fb5fa0 RCX: 00007f3d66d8ebe9 [ 118.612259][ T6388] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 118.612269][ T6388] RBP: 00007f3d67c22090 R08: 0000000000000000 R09: 0000000000000000 [ 118.612278][ T6388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.612287][ T6388] R13: 00007f3d66fb6038 R14: 00007f3d66fb5fa0 R15: 00007ffda6e84a58 [ 118.612309][ T6388] [ 120.493730][ T6388] CPU: 0 UID: 0 PID: 6388 Comm: syz.0.134 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 120.493752][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 120.493762][ T6388] Call Trace: [ 120.493771][ T6388] [ 120.493778][ T6388] dump_stack_lvl+0x189/0x250 [ 120.493802][ T6388] ? __pfx____ratelimit+0x10/0x10 [ 120.493823][ T6388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.493841][ T6388] ? __pfx__printk+0x10/0x10 [ 120.493861][ T6388] ? perf_trace_lock_acquire+0xf5/0x410 [ 120.493879][ T6388] ? htab_lock_bucket+0x18c/0x330 [ 120.493906][ T6388] should_fail_ex+0x414/0x560 [ 120.493930][ T6388] strncpy_from_user+0x36/0x290 [ 120.493951][ T6388] strncpy_from_user_nofault+0x72/0x150 [ 120.493972][ T6388] bpf_probe_read_user_str+0x2a/0x70 [ 120.493994][ T6388] bpf_prog_7acee76fef7300d9+0x64/0x6c [ 120.494009][ T6388] bpf_trace_run2+0x284/0x4b0 [ 120.494029][ T6388] ? bpf_trace_run2+0x186/0x4b0 [ 120.494049][ T6388] ? __pfx_bpf_trace_run2+0x10/0x10 [ 120.494071][ T6388] ? perf_trace_lock_acquire+0xf5/0x410 [ 120.494085][ T6388] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 120.494109][ T6388] __bpf_trace_tlb_flush+0xf5/0x150 [ 120.494131][ T6388] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 120.494155][ T6388] ? perf_cgroup_switch+0xe6/0x910 [ 120.494176][ T6388] ? psi_group_change+0xab8/0x1050 [ 120.494193][ T6388] trace_tlb_flush+0x115/0x140 [ 120.494215][ T6388] switch_mm_irqs_off+0x53e/0x7a0 [ 120.494239][ T6388] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 120.494257][ T6388] ? psi_task_switch+0x4e3/0x880 [ 120.494278][ T6388] __schedule+0x110e/0x4cc0 [ 120.494306][ T6388] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 120.494324][ T6388] ? rcu_is_watching+0x15/0xb0 [ 120.494339][ T6388] ? trace_page_fault_kernel+0x84/0x1e0 [ 120.494363][ T6388] ? __pfx___schedule+0x10/0x10 [ 120.494387][ T6388] ? exc_page_fault+0x9f/0xf0 [ 120.494410][ T6388] ? perf_trace_lock+0xec/0x3b0 [ 120.494428][ T6388] ? preempt_schedule_irq+0xaa/0x150 [ 120.494450][ T6388] preempt_schedule_irq+0xb5/0x150 [ 120.494470][ T6388] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 120.494495][ T6388] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 120.494512][ T6388] irqentry_exit+0x6f/0x90 [ 120.494531][ T6388] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 120.494548][ T6388] RIP: 0010:lock_acquire+0x31c/0x360 [ 120.494570][ T6388] Code: 08 8b 4c 24 04 4c 8b 44 24 20 4c 8b 4c 24 28 ff b4 24 98 00 00 00 ff 74 24 18 e8 8f 43 ff ff 48 83 c4 10 65 ff 0d 54 e2 02 11 <8b> 5c 24 08 4c 8b 74 24 10 4c 8b 7c 24 28 4c 8b 64 24 20 48 8b ac [ 120.494583][ T6388] RSP: 0018:ffffc9000dbe6378 EFLAGS: 00000286 [ 120.494596][ T6388] RAX: 9ac7bad3a8ac5b00 RBX: 0000000000000000 RCX: ffffe8ffffc3e0a8 [ 120.494607][ T6388] RDX: 0000000000000000 RSI: ffffffff8be33360 RDI: ffffffff8be33320 [ 120.494618][ T6388] RBP: ffffffff8172c195 R08: 0000000000000002 R09: 0000000000000000 [ 120.494627][ T6388] R10: ffffc9000dbe6548 R11: fffff52001b7ccb5 R12: 0000000000000002 [ 120.494637][ T6388] R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000000 [ 120.494649][ T6388] ? unwind_next_frame+0xa5/0x2390 [ 120.494673][ T6388] ? unwind_next_frame+0xa5/0x2390 [ 120.494695][ T6388] ? __unwind_start+0xf8/0x760 [ 120.494712][ T6388] ? unwind_next_frame+0xa5/0x2390 [ 120.494728][ T6388] unwind_next_frame+0xc2/0x2390 [ 120.494744][ T6388] ? unwind_next_frame+0xa5/0x2390 [ 120.494763][ T6388] ? perf_trace_lock+0xec/0x3b0 [ 120.494778][ T6388] ? get_stack_info_noinstr+0x1b/0x130 [ 120.494799][ T6388] __unwind_start+0x5b9/0x760 [ 120.494819][ T6388] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 120.494838][ T6388] arch_stack_walk+0xe4/0x150 [ 120.494860][ T6388] ? __unwind_start+0xf8/0x760 [ 120.494880][ T6388] stack_trace_save+0x9c/0xe0 [ 120.494897][ T6388] ? __pfx_stack_trace_save+0x10/0x10 [ 120.494916][ T6388] ? perf_trace_lock_acquire+0xf5/0x410 [ 120.494935][ T6388] kasan_save_track+0x3e/0x80 [ 120.494997][ T6388] __kasan_kmalloc+0x93/0xb0 [ 120.495019][ T6388] __kmalloc_cache_noprof+0x230/0x3d0 [ 120.495041][ T6388] ? kmem_cache_free+0x166/0x400 [ 120.495063][ T6388] ? nf_conntrack_free+0x2f7/0x380 [ 120.495078][ T6388] kmem_cache_free+0x166/0x400 [ 120.495103][ T6388] nf_conntrack_free+0x2f7/0x380 [ 120.495120][ T6388] nf_ct_gc_expired+0x246/0x3a0 [ 120.495136][ T6388] ? __pfx_nf_ct_gc_expired+0x10/0x10 [ 120.495159][ T6388] __nf_conntrack_find_get+0x20b/0x520 [ 120.495181][ T6388] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 120.495198][ T6388] ? __siphash_unaligned+0x232/0x3b0 [ 120.495224][ T6388] nf_conntrack_find_get+0x25d/0x600 [ 120.495242][ T6388] ? nf_conntrack_find_get+0x120/0x600 [ 120.495257][ T6388] ? __pfx_nf_conntrack_find_get+0x10/0x10 [ 120.495278][ T6388] ? __lock_acquire+0xab9/0xd20 [ 120.495306][ T6388] ctnetlink_new_conntrack+0x32c/0x2070 [ 120.495324][ T6388] ? __pfx___mutex_trylock_common+0x10/0x10 [ 120.495345][ T6388] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 120.495359][ T6388] ? trace_contention_end+0x39/0x120 [ 120.495376][ T6388] ? __mutex_lock+0x335/0x1360 [ 120.495396][ T6388] ? __pfx___nla_validate_parse+0x10/0x10 [ 120.495419][ T6388] ? perf_trace_lock+0xec/0x3b0 [ 120.495435][ T6388] ? perf_trace_lock+0xec/0x3b0 [ 120.495450][ T6388] ? nfnetlink_rcv_msg+0x9dc/0x1130 [ 120.495487][ T6388] nfnetlink_rcv_msg+0xb4d/0x1130 [ 120.495506][ T6388] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 120.495537][ T6388] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 120.495554][ T6388] ? kasan_save_free_info+0x46/0x50 [ 120.495587][ T6388] ? perf_trace_preemptirq_template+0xa3/0x340 [ 120.495608][ T6388] ? kasan_quarantine_put+0x3d/0x220 [ 120.495638][ T6388] netlink_rcv_skb+0x208/0x470 [ 120.495661][ T6388] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 120.495681][ T6388] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.495710][ T6388] ? bpf_lsm_capable+0x9/0x20 [ 120.495730][ T6388] ? security_capable+0x7e/0x2e0 [ 120.495853][ T6388] nfnetlink_rcv+0x26a/0x2520 [ 120.495879][ T6388] ? __dev_queue_xmit+0x1d79/0x3b50 [ 120.495904][ T6388] ? __dev_queue_xmit+0x27b/0x3b50 [ 120.495929][ T6388] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 120.495955][ T6388] ? __pfx___dev_queue_xmit+0x10/0x10 [ 120.495981][ T6388] ? ref_tracker_free+0x63a/0x7d0 [ 120.496004][ T6388] ? __asan_memcpy+0x40/0x70 [ 120.496022][ T6388] ? __pfx_ref_tracker_free+0x10/0x10 [ 120.496050][ T6388] ? __skb_clone+0x63/0x7a0 [ 120.496068][ T6388] ? perf_trace_lock+0xec/0x3b0 [ 120.496082][ T6388] ? __skb_clone+0x483/0x7a0 [ 120.496100][ T6388] ? __pfx_perf_trace_lock+0x10/0x10 [ 120.496114][ T6388] ? skb_clone+0x246/0x3a0 [ 120.496142][ T6388] ? __netlink_deliver_tap+0x807/0x850 [ 120.496164][ T6388] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.496190][ T6388] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.496216][ T6388] netlink_unicast+0x82c/0x9e0 [ 120.496242][ T6388] ? __pfx_netlink_unicast+0x10/0x10 [ 120.496263][ T6388] ? netlink_sendmsg+0x642/0xb30 [ 120.496284][ T6388] ? skb_put+0x11b/0x210 [ 120.496309][ T6388] netlink_sendmsg+0x805/0xb30 [ 120.496338][ T6388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.496362][ T6388] ? aa_sock_msg_perm+0xf1/0x1d0 [ 120.496390][ T6388] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.496407][ T6388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.496429][ T6388] __sock_sendmsg+0x21c/0x270 [ 120.496452][ T6388] ____sys_sendmsg+0x505/0x830 [ 120.496472][ T6388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.496493][ T6388] ? import_iovec+0x74/0xa0 [ 120.496513][ T6388] ___sys_sendmsg+0x21f/0x2a0 [ 120.496529][ T6388] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.496558][ T6388] ? __fget_files+0x2a/0x420 [ 120.496580][ T6388] ? __fget_files+0x2a/0x420 [ 120.496592][ T6388] ? __fget_files+0x3a0/0x420 [ 120.496612][ T6388] __x64_sys_sendmsg+0x19b/0x260 [ 120.496630][ T6388] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.496652][ T6388] ? __pfx_ksys_write+0x10/0x10 [ 120.496671][ T6388] ? rcu_is_watching+0x15/0xb0 [ 120.496690][ T6388] ? do_syscall_64+0xbe/0x3b0 [ 120.496715][ T6388] do_syscall_64+0xfa/0x3b0 [ 120.496736][ T6388] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.496755][ T6388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.496770][ T6388] ? clear_bhb_loop+0x60/0xb0 [ 120.496789][ T6388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.496804][ T6388] RIP: 0033:0x7f3d66d8ebe9 [ 120.496818][ T6388] Code: Unable to access opcode bytes at 0x7f3d66d8ebbf. [ 120.496826][ T6388] RSP: 002b:00007f3d67c22038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.496842][ T6388] RAX: ffffffffffffffda RBX: 00007f3d66fb5fa0 RCX: 00007f3d66d8ebe9 [ 120.496853][ T6388] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 120.496862][ T6388] RBP: 00007f3d67c22090 R08: 0000000000000000 R09: 0000000000000000 [ 120.496871][ T6388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.496880][ T6388] R13: 00007f3d66fb6038 R14: 00007f3d66fb5fa0 R15: 00007ffda6e84a58 [ 120.496902][ T6388] [ 121.400021][ T6388] syz.0.134 (6388) used greatest stack depth: 17288 bytes left