last executing test programs: 17.229740075s ago: executing program 1 (id=103): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0x0, 0x0}, 0x10) 17.040197555s ago: executing program 1 (id=106): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1}, 0x48) 16.852848503s ago: executing program 1 (id=108): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)={'c', ' *:* ', 'm\x00'}, 0x8) 16.456820374s ago: executing program 1 (id=111): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa106000000000007010000f8ffffffb702000008000000b7030000870000008500000006000000850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 16.340130995s ago: executing program 3 (id=114): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000016, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000000)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000000, 0x180}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 16.312995328s ago: executing program 1 (id=115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 16.077402752s ago: executing program 1 (id=117): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x61, 0x1, 0x0, 0x0, 0x0, 0x3, 0x30400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4}, 0x0, 0x0, 0x1, 0x6, 0x0, 0x8, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x62a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 15.559091544s ago: executing program 3 (id=120): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000060019008500000061000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x28) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x29, 0x0}}, 0x10) 15.044708557s ago: executing program 3 (id=122): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x3, 0x20}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="8520"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.960025095s ago: executing program 3 (id=123): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0x5}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f, 0x2e, 0x61]}}, 0x0, 0x52}, 0x28) 14.81247927s ago: executing program 3 (id=124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe41, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6300"], 0xfdef) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, 0x0, 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 13.604359782s ago: executing program 3 (id=129): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x987}, 0x94) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x400}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 3.415923544s ago: executing program 2 (id=141): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x182, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x0, 0x5c, 0x1}, 0x6e, 0x0}, 0x20048880) ioctl$TUNGETVNETLE(r1, 0x40047451, &(0x7f0000000180)) 3.374126328s ago: executing program 0 (id=142): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r5}, 0x10) close(r1) 3.16620873s ago: executing program 0 (id=143): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xdeb9065d}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.723796824s ago: executing program 0 (id=144): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 2.643087752s ago: executing program 0 (id=145): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.328268934s ago: executing program 2 (id=146): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)='%pS \x00'}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000"], 0x0, 0x7fc, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 1.701627628s ago: executing program 0 (id=147): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x6a) 1.510904377s ago: executing program 0 (id=148): socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0xf, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000080)) 1.352685563s ago: executing program 2 (id=149): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000404000000080000000800000000000000947201742d92e2efd58b9c7e8b9d28701a79ccb36a7219fca7558f83c58bcec9021c6adc05d043dc1f9835917a87a63d17d345c7723e71fd7497345532d2c4cd15bd5fdf9b5cd0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r0}, &(0x7f0000000c80), &(0x7f0000000cc0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000009b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000b482959e9d4d295e00000000000000000000080000000000000b3f64fb8372bce0c8085493e08926faf0e4775bc87a899c8eab78e080324a43455d6a1c5f7a635b378b1319952d129d5bf1577956713f84a56a1a0f3efcf9db5d311a99589f8e41a4404017d6f2d324a15018218575019ca373770300e63d69968059422a2baaf65705fc69d7dd6f5120f10aa2359d2a5fd1"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="150000001000"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="000000000000000000000000000000000000000000000000000000003bd00e4ee8ca75c7e1f299d28b16ce5310fb334a7d555e2da91046f1861ba8623bd117f3acab1187761dcf3444dfb0f17b2c6cc78d06cd1084"], 0x50) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x6, 0x44, 0x1, 0x0, 0x0, 0x3, 0x60014, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xa, 0x9}, 0x20, 0x200, 0xfffffff9, 0x4, 0xc, 0x0, 0x200, 0x0, 0x40, 0x0, 0x7}, 0x0, 0xf, r5, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlink(&(0x7f0000000180)='./cgroup/../file0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 477.882451ms ago: executing program 32 (id=117): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x61, 0x1, 0x0, 0x0, 0x0, 0x3, 0x30400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4}, 0x0, 0x0, 0x1, 0x6, 0x0, 0x8, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x62a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 467.909972ms ago: executing program 2 (id=151): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x87}}, @call={0x85, 0x0, 0x0, 0x9e}]}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 400.340939ms ago: executing program 2 (id=152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r2, 0x4004743c, 0xf0ff1f00000000) 0s ago: executing program 2 (id=153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40089000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000004c0), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.114' (ED25519) to the list of known hosts. [ 336.649225][ T5800] cgroup: Unknown subsys name 'net' [ 336.787428][ T5800] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 338.240251][ T5800] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 339.960290][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.968328][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.976020][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.984280][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.001305][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.008667][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.056010][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.069363][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.077060][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.104108][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.112058][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.121766][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.152823][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.164418][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.182127][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.189657][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.197471][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.205337][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.213689][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.221421][ T5812] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.228869][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.263556][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.271848][ T5821] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.279355][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.634391][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 340.712389][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 340.806060][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 340.824219][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.832221][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.839457][ T5809] bridge_slave_0: entered allmulticast mode [ 340.846395][ T5809] bridge_slave_0: entered promiscuous mode [ 340.860090][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.867291][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.874483][ T5809] bridge_slave_1: entered allmulticast mode [ 340.881498][ T5809] bridge_slave_1: entered promiscuous mode [ 340.908002][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 340.970239][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.982224][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.991822][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.998970][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.006504][ T5813] bridge_slave_0: entered allmulticast mode [ 341.013695][ T5813] bridge_slave_0: entered promiscuous mode [ 341.021674][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.028822][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.035991][ T5813] bridge_slave_1: entered allmulticast mode [ 341.043376][ T5813] bridge_slave_1: entered promiscuous mode [ 341.107911][ T5809] team0: Port device team_slave_0 added [ 341.138416][ T5809] team0: Port device team_slave_1 added [ 341.158017][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.204709][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.244392][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.252990][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.260151][ T5816] bridge_slave_0: entered allmulticast mode [ 341.267584][ T5816] bridge_slave_0: entered promiscuous mode [ 341.277828][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.285132][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.311850][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.334045][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.341458][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.348574][ T5817] bridge_slave_0: entered allmulticast mode [ 341.355786][ T5817] bridge_slave_0: entered promiscuous mode [ 341.363063][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.370178][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.379241][ T5816] bridge_slave_1: entered allmulticast mode [ 341.386543][ T5816] bridge_slave_1: entered promiscuous mode [ 341.403794][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.410787][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.437113][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.451366][ T5813] team0: Port device team_slave_0 added [ 341.459980][ T5813] team0: Port device team_slave_1 added [ 341.466361][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.473624][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.480996][ T5817] bridge_slave_1: entered allmulticast mode [ 341.487765][ T5817] bridge_slave_1: entered promiscuous mode [ 341.506490][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.554626][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.582917][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.589872][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.616177][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.656209][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.663431][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.690178][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.703289][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.715265][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.726476][ T5816] team0: Port device team_slave_0 added [ 341.734777][ T5816] team0: Port device team_slave_1 added [ 341.757860][ T5809] hsr_slave_0: entered promiscuous mode [ 341.764624][ T5809] hsr_slave_1: entered promiscuous mode [ 341.818534][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.825556][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.851939][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.868420][ T5817] team0: Port device team_slave_0 added [ 341.876886][ T5817] team0: Port device team_slave_1 added [ 341.893539][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.900499][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.926703][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.988030][ T5813] hsr_slave_0: entered promiscuous mode [ 341.994611][ T5813] hsr_slave_1: entered promiscuous mode [ 342.001655][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.009423][ T5813] Cannot create hsr debugfs directory [ 342.022083][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.029041][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.055031][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.067402][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.074818][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.101523][ T5083] Bluetooth: hci0: command tx timeout [ 342.103895][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.170870][ T5083] Bluetooth: hci1: command tx timeout [ 342.221635][ T5816] hsr_slave_0: entered promiscuous mode [ 342.228046][ T5816] hsr_slave_1: entered promiscuous mode [ 342.234527][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.242382][ T5816] Cannot create hsr debugfs directory [ 342.250774][ T5083] Bluetooth: hci3: command tx timeout [ 342.289398][ T5817] hsr_slave_0: entered promiscuous mode [ 342.296143][ T5817] hsr_slave_1: entered promiscuous mode [ 342.302591][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.310197][ T5817] Cannot create hsr debugfs directory [ 342.330851][ T5083] Bluetooth: hci2: command tx timeout [ 342.579637][ T5809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 342.600400][ T5809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 342.611195][ T5809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 342.630313][ T5809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 342.706453][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 342.722268][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 342.732945][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 342.745382][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 342.831238][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 342.841344][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 342.851278][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 342.871406][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 342.955320][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.969878][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 342.979755][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 343.000853][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 343.021926][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 343.053285][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.083806][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.091087][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.108672][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.115815][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.137672][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.173825][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.223608][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.230784][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.246395][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.253540][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.324814][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.414049][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.435426][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.457055][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.464202][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.487617][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.494843][ T5846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.534756][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.575071][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.582222][ T5881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.635963][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.652344][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.659484][ T5881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.769569][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.785303][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.905555][ T5809] veth0_vlan: entered promiscuous mode [ 343.918941][ T5813] veth0_vlan: entered promiscuous mode [ 343.947966][ T5809] veth1_vlan: entered promiscuous mode [ 343.966135][ T5813] veth1_vlan: entered promiscuous mode [ 344.041888][ T5809] veth0_macvtap: entered promiscuous mode [ 344.056245][ T5809] veth1_macvtap: entered promiscuous mode [ 344.066033][ T5813] veth0_macvtap: entered promiscuous mode [ 344.096170][ T5813] veth1_macvtap: entered promiscuous mode [ 344.107059][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.120383][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.157558][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.173668][ T5083] Bluetooth: hci0: command tx timeout [ 344.187358][ T5809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.197239][ T5809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.206038][ T5809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.216590][ T5809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.230542][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.243033][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.253383][ T5083] Bluetooth: hci1: command tx timeout [ 344.260269][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.297102][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.322547][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.333575][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.344679][ T5083] Bluetooth: hci3: command tx timeout [ 344.346164][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.362132][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.371849][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.380645][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.389344][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.411497][ T5083] Bluetooth: hci2: command tx timeout [ 344.509915][ T5817] veth0_vlan: entered promiscuous mode [ 344.516450][ T5881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.526964][ T5881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.558026][ T5816] veth0_vlan: entered promiscuous mode [ 344.583029][ T5817] veth1_vlan: entered promiscuous mode [ 344.598022][ T5816] veth1_vlan: entered promiscuous mode [ 344.608832][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.622061][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.677171][ T5846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.687359][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.688489][ T5846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.707827][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.733881][ T5817] veth0_macvtap: entered promiscuous mode [ 344.761546][ T5816] veth0_macvtap: entered promiscuous mode [ 344.785585][ T5817] veth1_macvtap: entered promiscuous mode [ 344.806561][ T5816] veth1_macvtap: entered promiscuous mode [ 344.855563][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.866515][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.877425][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.888073][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.900336][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.923385][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.941595][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.955662][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.976506][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.012052][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.019796][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.051446][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.065175][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.076019][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.090233][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.105663][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.127445][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.146431][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.173412][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.184870][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.199413][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.201127][ C1] hrtimer: interrupt took 72136 ns [ 345.213449][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.231143][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.242279][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.260351][ T5817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.274139][ T5817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.285005][ T5817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.287278][ T5904] netlink: 'syz.1.5': attribute type 1 has an invalid length. [ 345.301519][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.312676][ T5904] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.5'. [ 345.335503][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5'. [ 345.386710][ T5816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.406429][ T5816] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.416739][ T5816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.428601][ T5816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.468257][ T5907] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6'. [ 345.507611][ T5907] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6'. [ 345.528733][ T5908] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 345.570292][ T5906] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6'. [ 345.607749][ T5910] warning: `syz.0.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 345.648170][ T5910] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.7'. [ 345.677986][ T5881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.694213][ T5881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.752894][ T765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.768913][ T765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.813595][ T5894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.828917][ T5894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.887446][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.934837][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.096392][ T5917] netlink: 'syz.1.8': attribute type 10 has an invalid length. [ 346.166343][ T5917] team0: Port device geneve1 added [ 346.251300][ T5083] Bluetooth: hci0: command tx timeout [ 346.330657][ T5083] Bluetooth: hci1: command tx timeout [ 346.369119][ T5917] syz.1.8 (5917) used greatest stack depth: 17792 bytes left [ 346.411343][ T5083] Bluetooth: hci3: command tx timeout [ 346.491539][ T5083] Bluetooth: hci2: command tx timeout [ 346.738808][ T5937] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.12'. [ 347.520300][ T5940] @: entered promiscuous mode [ 347.527438][ T5940] @: entered allmulticast mode [ 347.555080][ T5953] netlink: 'syz.3.15': attribute type 3 has an invalid length. [ 347.569549][ T5952] netlink: 'syz.3.15': attribute type 10 has an invalid length. [ 347.582577][ T5953] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15'. [ 347.680366][ T5952] team0: Port device netdevsim0 added [ 347.831570][ T5959] Zero length message leads to an empty skb [ 347.877999][ T5957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.330848][ T5083] Bluetooth: hci0: command tx timeout [ 348.410702][ T5083] Bluetooth: hci1: command tx timeout [ 348.496761][ T5083] Bluetooth: hci3: command tx timeout [ 348.571472][ T5083] Bluetooth: hci2: command tx timeout [ 348.632055][ T5988] Illegal XDP return value 4294967274 on prog (id 26) dev N/A, expect packet loss! [ 351.764478][ T6102] syz.2.86 uses obsolete (PF_INET,SOCK_PACKET) [ 352.076040][ T6108] netlink: 'syz.1.89': attribute type 12 has an invalid length. [ 352.123337][ T6108] netlink: 132 bytes leftover after parsing attributes in process `syz.1.89'. [ 353.332189][ T6151] bond_slave_1: mtu less than device minimum [ 353.583694][ T6159] pim6reg1: entered promiscuous mode [ 353.617157][ T6159] pim6reg1: entered allmulticast mode [ 355.047945][ T6177] pim6reg1: entered promiscuous mode [ 355.053550][ T6177] pim6reg1: entered allmulticast mode [ 365.474550][ T6224] veth1_macvtap: left promiscuous mode [ 365.480160][ T6224] macsec0: entered promiscuous mode [ 368.897004][ T6252] veth0_vlan: entered allmulticast mode [ 370.029408][ T6266] [ 370.031880][ T6266] ====================================================== [ 370.038914][ T6266] WARNING: possible circular locking dependency detected [ 370.045949][ T6266] syzkaller #0 Not tainted [ 370.050366][ T6266] ------------------------------------------------------ [ 370.057371][ T6266] syz.2.153/6266 is trying to acquire lock: [ 370.063250][ T6266] ffff8880b8f29370 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x15a/0x780 [ 370.071869][ T6266] [ 370.071869][ T6266] but task is already holding lock: [ 370.079230][ T6266] ffff8880b8f29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 370.088100][ T6266] [ 370.088100][ T6266] which lock already depends on the new lock. [ 370.088100][ T6266] [ 370.098495][ T6266] [ 370.098495][ T6266] the existing dependency chain (in reverse order) is: [ 370.107504][ T6266] [ 370.107504][ T6266] -> #1 (&base->lock){-.-.}-{2:2}: [ 370.114793][ T6266] _raw_spin_lock_irqsave+0xa8/0xf0 [ 370.120519][ T6266] lock_timer_base+0x123/0x270 [ 370.125809][ T6266] __mod_timer+0xf9/0xdb0 [ 370.130677][ T6266] queue_delayed_work_on+0x12a/0x1e0 [ 370.136472][ T6266] kvfree_call_rcu+0x541/0x780 [ 370.141752][ T6266] rtnl_register_internal+0x486/0x590 [ 370.147659][ T6266] rtnl_register+0x32/0x70 [ 370.152590][ T6266] ip_rt_init+0x2ec/0x390 [ 370.157438][ T6266] ip_init+0xe/0x20 [ 370.161763][ T6266] inet_init+0x2c1/0x3e0 [ 370.166520][ T6266] do_one_initcall+0x1fd/0x750 [ 370.171796][ T6266] do_initcall_level+0x137/0x1f0 [ 370.177253][ T6266] do_initcalls+0x69/0xd0 [ 370.182181][ T6266] kernel_init_freeable+0x3d2/0x570 [ 370.187892][ T6266] kernel_init+0x1d/0x1c0 [ 370.192736][ T6266] ret_from_fork+0x48/0x80 [ 370.197682][ T6266] ret_from_fork_asm+0x11/0x20 [ 370.202962][ T6266] [ 370.202962][ T6266] -> #0 (krc.lock){..-.}-{2:2}: [ 370.209983][ T6266] __lock_acquire+0x2ddb/0x7c80 [ 370.215346][ T6266] lock_acquire+0x197/0x410 [ 370.220358][ T6266] _raw_spin_lock+0x2e/0x40 [ 370.225379][ T6266] kvfree_call_rcu+0x15a/0x780 [ 370.230655][ T6266] trie_delete_elem+0x535/0x6a0 [ 370.236108][ T6266] bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 370.242079][ T6266] bpf_trace_run3+0x1e7/0x400 [ 370.247266][ T6266] __bpf_trace_timer_start+0x14a/0x1b0 [ 370.253246][ T6266] enqueue_timer+0x398/0x530 [ 370.258346][ T6266] __mod_timer+0x977/0xdb0 [ 370.263279][ T6266] sk_reset_timer+0x23/0xc0 [ 370.268308][ T6266] tipc_sk_finish_conn+0x154/0x7e0 [ 370.273939][ T6266] tipc_socketpair+0x254/0x470 [ 370.279211][ T6266] __sys_socketpair+0x2b0/0x550 [ 370.284569][ T6266] __x64_sys_socketpair+0x9b/0xb0 [ 370.290098][ T6266] do_syscall_64+0x55/0xb0 [ 370.295021][ T6266] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.301429][ T6266] [ 370.301429][ T6266] other info that might help us debug this: [ 370.301429][ T6266] [ 370.311641][ T6266] Possible unsafe locking scenario: [ 370.311641][ T6266] [ 370.319075][ T6266] CPU0 CPU1 [ 370.324429][ T6266] ---- ---- [ 370.329779][ T6266] lock(&base->lock); [ 370.333849][ T6266] lock(krc.lock); [ 370.340168][ T6266] lock(&base->lock); [ 370.346746][ T6266] lock(krc.lock); [ 370.350543][ T6266] [ 370.350543][ T6266] *** DEADLOCK *** [ 370.350543][ T6266] [ 370.358686][ T6266] 2 locks held by syz.2.153/6266: [ 370.363694][ T6266] #0: ffff8880b8f29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 370.372993][ T6266] #1: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf4/0x400 [ 370.382283][ T6266] [ 370.382283][ T6266] stack backtrace: [ 370.388164][ T6266] CPU: 1 PID: 6266 Comm: syz.2.153 Not tainted syzkaller #0 [ 370.395438][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 370.405488][ T6266] Call Trace: [ 370.408760][ T6266] [ 370.411684][ T6266] dump_stack_lvl+0x16c/0x230 [ 370.416360][ T6266] ? load_image+0x3b0/0x3b0 [ 370.420864][ T6266] ? show_regs_print_info+0x20/0x20 [ 370.426069][ T6266] ? print_circular_bug+0x12b/0x1a0 [ 370.431262][ T6266] check_noncircular+0x2bd/0x3c0 [ 370.436196][ T6266] ? print_deadlock_bug+0x5d0/0x5d0 [ 370.441392][ T6266] ? lockdep_lock+0xe0/0x220 [ 370.445975][ T6266] ? _find_first_zero_bit+0xd3/0x100 [ 370.451270][ T6266] __lock_acquire+0x2ddb/0x7c80 [ 370.456129][ T6266] ? stack_trace_snprint+0xf0/0xf0 [ 370.461239][ T6266] ? __stack_depot_save+0x560/0x630 [ 370.466429][ T6266] ? verify_lock_unused+0x140/0x140 [ 370.471616][ T6266] ? kasan_save_stack+0x4d/0x60 [ 370.476460][ T6266] ? kasan_save_stack+0x3e/0x60 [ 370.481298][ T6266] ? __kasan_record_aux_stack+0xaf/0xc0 [ 370.486833][ T6266] ? kvfree_call_rcu+0xee/0x780 [ 370.491676][ T6266] ? trie_delete_elem+0x535/0x6a0 [ 370.496692][ T6266] ? bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 370.502312][ T6266] ? bpf_trace_run3+0x1e7/0x400 [ 370.507171][ T6266] ? __bpf_trace_timer_start+0x14a/0x1b0 [ 370.512823][ T6266] ? enqueue_timer+0x398/0x530 [ 370.517574][ T6266] ? __mod_timer+0x977/0xdb0 [ 370.522173][ T6266] ? sk_reset_timer+0x23/0xc0 [ 370.526846][ T6266] ? tipc_sk_finish_conn+0x154/0x7e0 [ 370.532122][ T6266] ? tipc_socketpair+0x254/0x470 [ 370.537053][ T6266] ? __sys_socketpair+0x2b0/0x550 [ 370.542067][ T6266] ? __x64_sys_socketpair+0x9b/0xb0 [ 370.547256][ T6266] ? do_syscall_64+0x55/0xb0 [ 370.551834][ T6266] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.557900][ T6266] lock_acquire+0x197/0x410 [ 370.562394][ T6266] ? kvfree_call_rcu+0x15a/0x780 [ 370.567330][ T6266] ? read_lock_is_recursive+0x20/0x20 [ 370.572694][ T6266] ? __phys_addr+0xba/0x170 [ 370.577187][ T6266] _raw_spin_lock+0x2e/0x40 [ 370.581682][ T6266] ? kvfree_call_rcu+0x15a/0x780 [ 370.586613][ T6266] kvfree_call_rcu+0x15a/0x780 [ 370.591374][ T6266] ? call_rcu+0x930/0x930 [ 370.595697][ T6266] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 370.601582][ T6266] ? _raw_spin_unlock+0x40/0x40 [ 370.606424][ T6266] trie_delete_elem+0x535/0x6a0 [ 370.611270][ T6266] bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 370.616716][ T6266] bpf_trace_run3+0x1e7/0x400 [ 370.621387][ T6266] ? bpf_trace_run3+0xf4/0x400 [ 370.626150][ T6266] ? bpf_trace_run2+0x3c0/0x3c0 [ 370.630990][ T6266] ? __bpf_trace_timer_start+0x133/0x1b0 [ 370.636631][ T6266] __bpf_trace_timer_start+0x14a/0x1b0 [ 370.642085][ T6266] ? __bpf_trace_timer_class+0x100/0x100 [ 370.647721][ T6266] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 370.653604][ T6266] ? _raw_spin_unlock+0x40/0x40 [ 370.658448][ T6266] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 370.663822][ T6266] enqueue_timer+0x398/0x530 [ 370.668404][ T6266] __mod_timer+0x977/0xdb0 [ 370.672850][ T6266] sk_reset_timer+0x23/0xc0 [ 370.677348][ T6266] tipc_sk_finish_conn+0x154/0x7e0 [ 370.682487][ T6266] tipc_socketpair+0x254/0x470 [ 370.687260][ T6266] __sys_socketpair+0x2b0/0x550 [ 370.692116][ T6266] __x64_sys_socketpair+0x9b/0xb0 [ 370.697135][ T6266] do_syscall_64+0x55/0xb0 [ 370.701543][ T6266] ? clear_bhb_loop+0x40/0x90 [ 370.706213][ T6266] ? clear_bhb_loop+0x40/0x90 [ 370.710883][ T6266] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.716764][ T6266] RIP: 0033:0x7f725a98f749 [ 370.721188][ T6266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.740783][ T6266] RSP: 002b:00007f725b86c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 370.749188][ T6266] RAX: ffffffffffffffda RBX: 00007f725abe6090 RCX: 00007f725a98f749 [ 370.757149][ T6266] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 370.765109][ T6266] RBP: 00007f725aa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 370.773164][ T6266] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000000 [ 370.781136][ T6266] R13: 00007f725abe6128 R14: 00007f725abe6090 R15: 00007fff270c6458 [ 370.789107][ T6266] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 372.401470][ T5881] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.459305][ T5881] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.518328][ T5881] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.608799][ T5881] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.739373][ T5881] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.799323][ T5881] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.866999][ T5881] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.947438][ T5881] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.001293][ T5881] hsr_slave_0: left promiscuous mode [ 374.011317][ T5881] hsr_slave_1: left promiscuous mode [ 374.034185][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.043706][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.051872][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.059297][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.091419][ T5881] bridge_slave_1: left allmulticast mode [ 374.097097][ T5881] bridge_slave_1: left promiscuous mode [ 374.122196][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.143461][ T5881] bridge_slave_0: left allmulticast mode [ 374.149144][ T5881] bridge_slave_0: left promiscuous mode [ 374.162122][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.175160][ T5881] hsr_slave_0: left promiscuous mode [ 374.182161][ T5881] hsr_slave_1: left promiscuous mode [ 374.188043][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.196233][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.204802][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.213803][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.231090][ T5881] bridge_slave_1: left allmulticast mode [ 374.236837][ T5881] bridge_slave_1: left promiscuous mode [ 374.250344][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.258987][ T5881] bridge_slave_0: left allmulticast mode [ 374.264858][ T5881] bridge_slave_0: left promiscuous mode [ 374.270695][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.283887][ T5881] veth0_macvtap: left promiscuous mode [ 374.289496][ T5881] veth1_vlan: left promiscuous mode [ 374.294831][ T5881] veth0_vlan: left promiscuous mode [ 374.302271][ T5881] veth1_macvtap: left promiscuous mode [ 374.307823][ T5881] veth0_macvtap: left promiscuous mode [ 374.313809][ T5881] veth1_vlan: left promiscuous mode [ 374.599724][ T5881] team0 (unregistering): Port device team_slave_1 removed [ 374.619325][ T5881] team0 (unregistering): Port device team_slave_0 removed [ 374.644144][ T5881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.666642][ T5881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.734702][ T5881] bond0 (unregistering): Released all slaves [ 374.892706][ T5881] team0 (unregistering): Port device team_slave_1 removed [ 374.915015][ T5881] team0 (unregistering): Port device team_slave_0 removed [ 374.935462][ T5881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.948422][ T5881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.010506][ T5881] bond0 (unregistering): Released all slaves [ 375.785998][ T5881] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.848035][ T5881] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.878818][ T5881] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.934274][ T5881] team0: Port device netdevsim0 removed [ 375.941892][ T5881] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.616452][ T5881] hsr_slave_0: left promiscuous mode [ 376.622403][ T5881] hsr_slave_1: left promiscuous mode [ 376.628268][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.636484][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.644360][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.652747][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.660351][ T5881] bridge_slave_1: left allmulticast mode [ 376.667810][ T5881] bridge_slave_1: left promiscuous mode [ 376.677817][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.686694][ T5881] bridge_slave_0: left allmulticast mode [ 376.693224][ T5881] bridge_slave_0: left promiscuous mode [ 376.698958][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.711407][ T5881] veth1_macvtap: left promiscuous mode [ 376.717028][ T5881] veth0_macvtap: left promiscuous mode [ 376.722866][ T5881] veth1_vlan: left promiscuous mode [ 376.728170][ T5881] veth0_vlan: left promiscuous mode [ 376.898673][ T5881] team0 (unregistering): Port device team_slave_1 removed [ 376.910236][ T5881] team0 (unregistering): Port device team_slave_0 removed [ 376.930142][ T5881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.956758][ T5881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.022364][ T5881] bond0 (unregistering): Released all slaves [ 378.816203][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.822760][ T1279] ieee802154 phy1 wpan1: encryption failed: -22