last executing test programs: 4m28.654249522s ago: executing program 0 (id=855): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)='?', 0xfdef}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) gettid() r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r5, @ANYBLOB="000000000001ffe50000bb7fd9f4e00cf239220d0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x18, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x6, 0x8, &(0x7f00000002c0)="b80a00050000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$unix(0xffffffffffffffff, 0x0, 0x10090) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x48}, 0x200040c4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0xbd, &(0x7f00000001c0)=""/189, 0x40f00, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x7, 0x3, 0x7}, 0x10, 0x11c97, r3, 0x0, 0x0, &(0x7f0000000580), 0x10, 0x59d}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}, 0x40dd, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000000)='cpu<=0||!') 4m28.075772926s ago: executing program 0 (id=862): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000870000001801"], 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x2, 0x0, 0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x10000}, 0x1922d6, 0xca, 0x2, 0x7, 0x4, 0x400000, 0xffff, 0x0, 0xe, 0x0, 0xfff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3e0002"], 0x9a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0xb6, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000ac0), &(0x7f0000000180), 0x8, 0x9d, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000340)=r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xce24, @multicast1}, 0x2, 0x1, 0x3, 0x1}}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff49) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0xa, 0x2, 0x73) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x42) recvmsg(r6, &(0x7f0000000800)={&(0x7f00000005c0)=@ax25={{0x3, @default}, [@null, @bcast, @rose, @default, @null, @rose, @default, @default]}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000640)=""/21, 0x15}, {&(0x7f0000000680)=""/8, 0x8}, {&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/9, 0x9}, {&(0x7f0000000880)=""/180, 0xb4}], 0x5, &(0x7f00000009c0)=""/243, 0xf3}, 0x2002) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x9) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000380)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000040), 0x12) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) 4m27.808259797s ago: executing program 0 (id=865): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0xd2, 0x81, 0x57, 0x0, 0x3ff, 0x10, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x5, 0xcde7}, 0x100, 0xe, 0x9, 0x5, 0x1, 0x7ab3, 0xab, 0x0, 0xf3, 0x0, 0x3ff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0xa6, 0x6a, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x9e8, 0x8}, 0x211c, 0x7ff, 0x6, 0x0, 0x81, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0xd72b}, 0x0, 0xffffffffffffffff, r1, 0x1) (async) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x8}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x16, 0x0, 0x21) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0) 4m27.662004658s ago: executing program 0 (id=866): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0000000400000000000000010000", @ANYRES32=0x1, @ANYRES8=r1], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="a0", 0x0, 0x1, 0x2000000}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r0, 0x20, 0x1, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, r0, 0x0, 0x4, &(0x7f0000000400)='GPL\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@ifindex=r6, 0xffffffffffffffff, 0xe, 0x30, r4, @void, @void, @void, @value=r7, r5}, 0x20) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'ip6gretap0\x00'}) 4m27.10713234s ago: executing program 0 (id=869): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x4506, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x2, @perf_config_ext={0x40000000000000, 0x4}, 0x0, 0x701, 0x43a1bd76, 0x0, 0x5, 0x6, 0xa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r3, 0x58, &(0x7f0000000180)}, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x2, 0x3, 0x84) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) close(0xffffffffffffffff) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r6}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000014c0)={r7, 0x58, &(0x7f00000025c0)}, 0x7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0xfffffffe, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m26.615139968s ago: executing program 32 (id=871): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)='?', 0xfdef}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) gettid() r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r5, @ANYBLOB="000000000001ffe50000bb7fd9f4e00cf239220d0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x18, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x6, 0x8, &(0x7f00000002c0)="b80a00050000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$unix(0xffffffffffffffff, 0x0, 0x10090) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x48}, 0x200040c4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0xbd, &(0x7f00000001c0)=""/189, 0x40f00, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x7, 0x3, 0x7}, 0x10, 0x11c97, r3, 0x0, 0x0, &(0x7f0000000580), 0x10, 0x59d}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}, 0x40dd, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000000)='cpu<=0||!') 4m26.600522689s ago: executing program 0 (id=874): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x5, 0x4, 0x68, 0x0, 0x7fff, 0x2, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3b56, 0x4, @perf_config_ext={0x3, 0x5}, 0x429, 0x3, 0x6, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x0, 0xd68}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x8f}, @call={0x85, 0x0, 0x0, 0x4b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xd9, &(0x7f0000000180)=""/217, 0x40f00, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x1, 0x3, 0xe, 0x3}, {0x3, 0x4, 0x9, 0x6}, {0x1, 0x2, 0x5}, {0x0, 0x2, 0x0, 0x4}, {0x1, 0x4, 0xf, 0x3}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x5, 0x4d, &(0x7f0000000440)="cec3df6cd5", &(0x7f0000000480)=""/77, 0x1, 0x0, 0x1d, 0xa4, &(0x7f0000000500)="320ddde60267b1f9564811d82b991cbce411447f39c047daa46e862324", &(0x7f0000000540)="7c135deb521478047e4aedd8188c5191a309aaedd294342a47075d368b4755dd409e86acccab0b568b12aef3b51340606ca19c2d6d218c2050a456ed62956f419f437cd52a401ed8dfb4a01b5b762753f6d08e42dfd36655640bd1beccc2a104adb58ae2b008271dbd68ae82bebfc28c90707207c9b9470e3e9abdbf7372a0c69eb89795e723ecd77b4c44fdc779f3833dbc5d8691606dfb8a13ebb87251d235a42006d5", 0x2, 0x0, 0x1}, 0x50) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='host1x_channel_submitted\x00', r2, 0x0, 0x9}, 0x18) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000700)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000740), 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f00000007c0)=0x1) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000800)=r2) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000840)={0x0, 0x1, [@multicast]}) ioctl$TUNGETVNETBE(r6, 0x800454df, &(0x7f0000000880)=0x1) r7 = perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x9, 0x3, 0xf1, 0x5, 0x0, 0x8, 0x800, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000008c0), 0x4}, 0x4802, 0x9b67949, 0x80000000, 0x9, 0x401, 0x1, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0xe, r3, 0x1) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x318d, '\x00', 0x0, r5, 0x3, 0x4, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r2, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000a80)=[0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0], 0x0, 0xf7, &(0x7f0000000b00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)={@map=r8, r2, 0x28, 0x30, 0x0, @void, @void, @void, @value=r9}, 0x20) ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f0000000d40)) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f00)=r10, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001040)={{r8, 0xffffffffffffffff}, &(0x7f0000000fc0), &(0x7f0000001000)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001100)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000d80)=@raw=[@generic={0x7, 0x5, 0xd, 0x7, 0x7}, @generic={0xb4, 0x7, 0x4, 0x1, 0x4}, @ldst={0x2, 0x3, 0x1, 0x5, 0x0, 0x50, 0x10}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit, @jmp={0x5, 0x0, 0x1, 0xbc900be055b7bb97, 0xb, 0x1c21935280b331c4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3800000}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}], &(0x7f0000000e00)='syzkaller\x00', 0x10, 0x94, &(0x7f0000000e40)=""/148, 0x40f00, 0x70, '\x00', 0x0, 0x18, r11, 0x8, &(0x7f0000000f40)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000f80)={0x4, 0x1, 0x1ff}, 0x10, 0xffdf, r2, 0x3, &(0x7f0000001080)=[r8, r8, r12, r8, r8, r8, r8, r8], &(0x7f00000010c0)=[{0x1, 0x4, 0x9, 0x6}, {0x1, 0x1, 0x10, 0x8}, {0x1, 0x1, 0x4, 0x3}], 0x10, 0x4}, 0x94) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f00000011c0)) r13 = socket$kcm(0x29, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000014c0)={r2, 0xe0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000001240)=[0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf0, &(0x7f00000012c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001300), &(0x7f0000001340), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) r14 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001540)=@o_path={&(0x7f0000001500)='./file0\x00', 0x0, 0x0, r1}, 0x18) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000001580)=r14, 0x4) r15 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001680)={&(0x7f0000001640)='oom_score_adj_update\x00', r14}, 0x18) perf_event_open(&(0x7f00000015c0)={0x0, 0x80, 0x18, 0x5, 0x7, 0xb, 0x0, 0x40, 0x840c0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x10, 0xb331}, 0x5, 0x1, 0x9, 0x8, 0x101, 0x200, 0x5, 0x0, 0x5, 0x0, 0x101}, 0x0, 0x10, r15, 0x0) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f00000016c0)=r2) openat$tun(0xffffffffffffff9c, &(0x7f0000001700), 0x408001, 0x0) 4m26.356984688s ago: executing program 33 (id=875): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18f10017714a4ef8e72eaaeeb9634c0000000000000000000000000018110000e4df79e29e1fa9d061abf056bdb04a101bcfb1bcc229e7a515f3abadd10d18874115a0c1018825a6c5d8a3a343ff1bd43367715e8d2b07ad657e5fffeb98962d26814e3e42643a3b9cc55072ff8db0", @ANYRES32=r5, @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="050000000000000000000000fcb4be7f9b7062032261d53b48587dcf45dc1eeb9188cc8dd4fb1003718309a02fd720a00b8063d248b492627cd55118fe286ed10ba687b2cd2e4714066f7b92875620053561300762", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000f7ed00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000ebffffff0000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000800)='kfree_skb\x00', r8}, 0x18) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000}, 0x0, 0x0, 0x80}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f00000002c0)="62400344b6b40c3be7ce6472f8a6221fdb17", &(0x7f00000009c0)=""/244, &(0x7f0000000580)="906e9d75b9fbc7e01ca2a755bf0ef0106cc5b5a9810bb3e9b4c5aabe7e00eb9f68b02b8151cc0ff80a9694b1b70fdb7c7d94f183ae1009c3f45f2f12f771df0a6e92565603b99ebdefd6e5e44344fccfcb538ecdc6a194dde6ff30", &(0x7f0000000780)="fa756612734693f60165a4122d9fb453b226cdcbb602d31cae7ef82e119599e00a8ebd5a31d4724065a666cff03b8993f7b41947a750ab2673707928eb8d6854c621e53be454434b0f1f9bb7cd023ac04ddb7003bacb8f96e42bce9c1521dd10c38f1c417afb26136098ebb3f6e6b48f45d94dff7b3c2bbd2437959c", 0x1, r5, 0x4}, 0x38) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x11, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xc6, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000ac0)="20e3ac0219dce3228dee4841867ec038e17ef004823787d8a8a638bcafe3c6b75344de4f8df180f520149d7113f049d90fe5fcece6f1accd6aff4b9dba77394b1f5e9ca4118819e9ed6c2cc8ba4ed3dd88340b40284088bc9ace6d842e3e3681bd33c2064f5035ea93b7ca74ecc47efdded05a14ce16765777a3fc851052206e9aff6bbfd32d5d76b20d2307184ad29e575ff226250f20f57c747aed31f808b8c432492d7bc1464cf712f309dc84eaa6", 0x2}], 0x1, 0x0, 0x60}, 0x10) close(r12) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)}, 0x40801) 4m26.159845763s ago: executing program 34 (id=874): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x5, 0x4, 0x68, 0x0, 0x7fff, 0x2, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3b56, 0x4, @perf_config_ext={0x3, 0x5}, 0x429, 0x3, 0x6, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x0, 0xd68}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x8f}, @call={0x85, 0x0, 0x0, 0x4b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xd9, &(0x7f0000000180)=""/217, 0x40f00, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x1, 0x3, 0xe, 0x3}, {0x3, 0x4, 0x9, 0x6}, {0x1, 0x2, 0x5}, {0x0, 0x2, 0x0, 0x4}, {0x1, 0x4, 0xf, 0x3}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x5, 0x4d, &(0x7f0000000440)="cec3df6cd5", &(0x7f0000000480)=""/77, 0x1, 0x0, 0x1d, 0xa4, &(0x7f0000000500)="320ddde60267b1f9564811d82b991cbce411447f39c047daa46e862324", &(0x7f0000000540)="7c135deb521478047e4aedd8188c5191a309aaedd294342a47075d368b4755dd409e86acccab0b568b12aef3b51340606ca19c2d6d218c2050a456ed62956f419f437cd52a401ed8dfb4a01b5b762753f6d08e42dfd36655640bd1beccc2a104adb58ae2b008271dbd68ae82bebfc28c90707207c9b9470e3e9abdbf7372a0c69eb89795e723ecd77b4c44fdc779f3833dbc5d8691606dfb8a13ebb87251d235a42006d5", 0x2, 0x0, 0x1}, 0x50) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='host1x_channel_submitted\x00', r2, 0x0, 0x9}, 0x18) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000700)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000740), 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f00000007c0)=0x1) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000800)=r2) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000840)={0x0, 0x1, [@multicast]}) ioctl$TUNGETVNETBE(r6, 0x800454df, &(0x7f0000000880)=0x1) r7 = perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x9, 0x3, 0xf1, 0x5, 0x0, 0x8, 0x800, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000008c0), 0x4}, 0x4802, 0x9b67949, 0x80000000, 0x9, 0x401, 0x1, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0xe, r3, 0x1) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x318d, '\x00', 0x0, r5, 0x3, 0x4, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r2, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000a80)=[0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0], 0x0, 0xf7, &(0x7f0000000b00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)={@map=r8, r2, 0x28, 0x30, 0x0, @void, @void, @void, @value=r9}, 0x20) ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f0000000d40)) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f00)=r10, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001040)={{r8, 0xffffffffffffffff}, &(0x7f0000000fc0), &(0x7f0000001000)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001100)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000d80)=@raw=[@generic={0x7, 0x5, 0xd, 0x7, 0x7}, @generic={0xb4, 0x7, 0x4, 0x1, 0x4}, @ldst={0x2, 0x3, 0x1, 0x5, 0x0, 0x50, 0x10}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit, @jmp={0x5, 0x0, 0x1, 0xbc900be055b7bb97, 0xb, 0x1c21935280b331c4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3800000}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}], &(0x7f0000000e00)='syzkaller\x00', 0x10, 0x94, &(0x7f0000000e40)=""/148, 0x40f00, 0x70, '\x00', 0x0, 0x18, r11, 0x8, &(0x7f0000000f40)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000f80)={0x4, 0x1, 0x1ff}, 0x10, 0xffdf, r2, 0x3, &(0x7f0000001080)=[r8, r8, r12, r8, r8, r8, r8, r8], &(0x7f00000010c0)=[{0x1, 0x4, 0x9, 0x6}, {0x1, 0x1, 0x10, 0x8}, {0x1, 0x1, 0x4, 0x3}], 0x10, 0x4}, 0x94) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f00000011c0)) r13 = socket$kcm(0x29, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000014c0)={r2, 0xe0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000001240)=[0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf0, &(0x7f00000012c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001300), &(0x7f0000001340), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) r14 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001540)=@o_path={&(0x7f0000001500)='./file0\x00', 0x0, 0x0, r1}, 0x18) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000001580)=r14, 0x4) r15 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001680)={&(0x7f0000001640)='oom_score_adj_update\x00', r14}, 0x18) perf_event_open(&(0x7f00000015c0)={0x0, 0x80, 0x18, 0x5, 0x7, 0xb, 0x0, 0x40, 0x840c0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x10, 0xb331}, 0x5, 0x1, 0x9, 0x8, 0x101, 0x200, 0x5, 0x0, 0x5, 0x0, 0x101}, 0x0, 0x10, r15, 0x0) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f00000016c0)=r2) openat$tun(0xffffffffffffff9c, &(0x7f0000001700), 0x408001, 0x0) 3m46.811863614s ago: executing program 6 (id=1259): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r0, 0x0, 0xfff}, 0x18) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0xfdef) 3m46.623720548s ago: executing program 6 (id=1263): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x0, 0x3, 0x0, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu==0||!') 3m46.506738908s ago: executing program 6 (id=1265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 3m46.167451553s ago: executing program 6 (id=1272): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r1, 0x0, 0x80000001}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 3m45.983627887s ago: executing program 6 (id=1276): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 3m45.791931862s ago: executing program 6 (id=1279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r0, @ANYRES32=0x0], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 3m30.753184263s ago: executing program 35 (id=1279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r0, @ANYRES32=0x0], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 2m34.492857658s ago: executing program 3 (id=1948): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 2m34.412725474s ago: executing program 3 (id=1950): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m26.800007127s ago: executing program 3 (id=1970): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000080018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 2m26.693926175s ago: executing program 3 (id=1972): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m26.466976702s ago: executing program 3 (id=1973): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='timer_start\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 2m26.295416726s ago: executing program 3 (id=1975): r0 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m10.95293009s ago: executing program 36 (id=1975): r0 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m59.292830792s ago: executing program 8 (id=2051): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 1m59.084350968s ago: executing program 8 (id=2053): bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0xf3, 0x0, 0x0, 0x1, 0xa66a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0xa, 0x1, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) close(r0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf26, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0x4}, 0x50) 1m58.006164101s ago: executing program 8 (id=2059): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffffffffffe3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd32) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={&(0x7f00000001c0)='./cgroup/../file0/file0\x00'}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000400), 0x4}, 0x5200, 0xfffffffffffffffd, 0x0, 0x0, 0x1ea, 0xfffffffd, 0xffff, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x1000000001, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x157, 0x0, 0xfff, 0x0, 0xfffffffa}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 1m56.947767572s ago: executing program 8 (id=2063): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x57}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r1}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 1m56.459354399s ago: executing program 8 (id=2066): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, 0x0, &(0x7f0000000b00)=""/151}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x221, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1000}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) 1m56.290591222s ago: executing program 8 (id=2068): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4975e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x10008, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0x10, 0xa437}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000400)=[{0x5, 0x3, 0xa, 0x2}, {0x1, 0x5, 0x4, 0x6}, {0x1, 0x5, 0x6, 0x6}, {0x1, 0x1, 0x8, 0xc}, {0x2, 0x4, 0xa, 0x1}], 0x10, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000e2ff000000007e3eb9e5b100000000000000000000dddf55cfa61565b50dde9b730b3e055182f4479e785b366a92687c85f671bd74466788da0f5c7d277bf91d8e8fcd1ae38980e2501e6b181f7ccb1afabf4697d29b4882b070ffbd60141b27773d3affb13d34933cdc7f68a53b50becd9d7caaeb73b74722c86d2b04a9be16643ea3c42c9644526d8727e320fd7dce7c56"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000007000001000000010000000000000000000000c3e8101600b3cfaf6e57e6ae0d5433ae677e636a13e58365b9b445c6cbcfc09581dfa607ae748ccdc1d75b44f8ce598b58c43542c274eea5c98791937d9aed1a82f84b511d636f0f2dfb0c6c198c2d66916ee09084d1d7f290217efa2809000000ecc18d220000000094bd96fbd562fa2b004b5d000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffff2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6694380b}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m40.760310301s ago: executing program 37 (id=2068): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4975e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x10008, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0x10, 0xa437}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000400)=[{0x5, 0x3, 0xa, 0x2}, {0x1, 0x5, 0x4, 0x6}, {0x1, 0x5, 0x6, 0x6}, {0x1, 0x1, 0x8, 0xc}, {0x2, 0x4, 0xa, 0x1}], 0x10, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000e2ff000000007e3eb9e5b100000000000000000000dddf55cfa61565b50dde9b730b3e055182f4479e785b366a92687c85f671bd74466788da0f5c7d277bf91d8e8fcd1ae38980e2501e6b181f7ccb1afabf4697d29b4882b070ffbd60141b27773d3affb13d34933cdc7f68a53b50becd9d7caaeb73b74722c86d2b04a9be16643ea3c42c9644526d8727e320fd7dce7c56"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000007000001000000010000000000000000000000c3e8101600b3cfaf6e57e6ae0d5433ae677e636a13e58365b9b445c6cbcfc09581dfa607ae748ccdc1d75b44f8ce598b58c43542c274eea5c98791937d9aed1a82f84b511d636f0f2dfb0c6c198c2d66916ee09084d1d7f290217efa2809000000ecc18d220000000094bd96fbd562fa2b004b5d000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffff2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6694380b}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 45.614714985s ago: executing program 5 (id=2301): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000002e00), &(0x7f0000000000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcf3, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 45.446592588s ago: executing program 5 (id=2304): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x9000, 0x5, 0x0, 0x4, 0xed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38) 44.872022283s ago: executing program 5 (id=2307): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 44.615703493s ago: executing program 5 (id=2310): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_clone(0xe0044600, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x3, 0x9, 0x3, 0x0, 0x0, 0xe1, 0x40964, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0xa}, 0x108000, 0x0, 0x7, 0x7, 0x0, 0x7, 0x7, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xe9, 0x0, 0xf, 0x7, 0x0, 0x0, 0xa8310, 0x7, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x400000, 0x2, @perf_config_ext={0xffffffffffff5605, 0xfffffffffffffff9}, 0x18200, 0x0, 0x7, 0xa, 0x9, 0x100, 0x1, 0x0, 0x2, 0x0, 0xfff}, r1, 0x4, r2, 0x0) perf_event_open(&(0x7f0000000d00)={0x1, 0x80, 0x6d, 0x1, 0x10, 0x2f, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf87, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x8ca4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x206, 0x0, 0xfffffff9}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000300000042000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000c00), &(0x7f0000000340), 0xe9f, r4}, 0x38) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) close(r5) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x10, 0x20, 0x8, 0x0, 0x0, 0x200, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x1}, 0x900, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0xd806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 42.605196799s ago: executing program 5 (id=2313): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$LINK_DETACH(0x22, &(0x7f0000000200), 0x4) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x0, 0x0, 0x7602, 0x0, 0x140, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x1fa80000000000, 0x24818, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x800, 0xed44, 0x0, 0x0, 0x2}, 0x0, 0x400000000, r1, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x6, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0xa}, 0x3004, 0x8, 0x9, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES8=r1, @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRESDEC=r2, @ANYRES8=r2, @ANYBLOB="0000000000000000000000000000000000000b01dfa8464a15c7517c8ceedfd9f62558da8a742bf4ca6a7d601a507814c361ebd3d34d4e24ebf3ef115c1a037be4b5a585562211fb311573e9a91308dc0d201bd65aeb2f38de96808fe3e1b5fb5c6f19e22c0bc848ed12dd93341b0a533c6ad7fa98f699e00c6a9b3123e0e03b01bd04747c041cc8e4976d095c4e00"/157], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES32=r3], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xa04000, &(0x7f0000000540)="4454be224fd4f6f6ba5302ff62d0b4530dd63aa0c39ca3b24484b881bc93d2f80387749261697287aabd27e66781346fc9882ba6b379ff3b5b8630b4ed053cc098c5046a19b4e075443a630797f929d0c0385ac3eaeae4b258962440d89db4e9b0efc7a32e5af4a8e7242803d4db4246298c588bbbd3f895af19970bee732cd6157de88e2f48a0d53b478c659d7577c5", 0x90, &(0x7f0000000000), 0x0, &(0x7f0000000680)="f7544740d814f491c83e386da86d09600f9e2021d806b4eeeaa5") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000000)='syzkaller\x00', 0x2df9, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r7, 0x40047451, &(0x7f0000000180)) 40.340600725s ago: executing program 5 (id=2330): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14c20, 0x0, 0x0, 0x0, 0x48d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x2020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x4}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)=0x6c0000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'ipvlan1\x00'}) 38.797176365s ago: executing program 9 (id=2333): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000240)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) 38.247017278s ago: executing program 9 (id=2337): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x511}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 38.123784438s ago: executing program 9 (id=2338): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$LINK_DETACH(0x22, &(0x7f0000000200), 0x4) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x0, 0x0, 0x7602, 0x0, 0x140, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x1fa80000000000, 0x24818, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x800, 0xed44, 0x0, 0x0, 0x2}, 0x0, 0x400000000, r1, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x6, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0xa}, 0x3004, 0x8, 0x9, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES8=r1, @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRESDEC=r2, @ANYRES8=r2, @ANYBLOB="0000000000000000000000000000000000000b01dfa8464a15c7517c8ceedfd9f62558da8a742bf4ca6a7d601a507814c361ebd3d34d4e24ebf3ef115c1a037be4b5a585562211fb311573e9a91308dc0d201bd65aeb2f38de96808fe3e1b5fb5c6f19e22c0bc848ed12dd93341b0a533c6ad7fa98f699e00c6a9b3123e0e03b01bd04747c041cc8e4976d095c4e00"/157], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES32=r3], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xa04000, &(0x7f0000000540)="4454be224fd4f6f6ba5302ff62d0b4530dd63aa0c39ca3b24484b881bc93d2f80387749261697287aabd27e66781346fc9882ba6b379ff3b5b8630b4ed053cc098c5046a19b4e075443a630797f929d0c0385ac3eaeae4b258962440d89db4e9b0efc7a32e5af4a8e7242803d4db4246298c588bbbd3f895af19970bee732cd6157de88e2f48a0d53b478c659d7577c5", 0x90, &(0x7f0000000000), 0x0, &(0x7f0000000680)="f7544740d814f491c83e386da86d09600f9e2021d806b4eeeaa5") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000000)='syzkaller\x00', 0x2df9, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r7, 0x40047451, &(0x7f0000000180)) 33.45556138s ago: executing program 9 (id=2343): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 33.267817305s ago: executing program 9 (id=2344): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11f564}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="110000000400000004000000ff0010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x17) 32.274829872s ago: executing program 9 (id=2346): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x1, 0x5, 0x5, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 24.515749335s ago: executing program 38 (id=2330): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14c20, 0x0, 0x0, 0x0, 0x48d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x2020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x4}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)=0x6c0000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'ipvlan1\x00'}) 17.020218797s ago: executing program 39 (id=2346): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x1, 0x5, 0x5, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 8.472738592s ago: executing program 2 (id=2364): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0xa}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB='k\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"], 0x50) 7.97805601s ago: executing program 2 (id=2365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 7.714884241s ago: executing program 4 (id=2367): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11f564}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="110000000400000004000000ff0010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x17) 7.389817146s ago: executing program 2 (id=2368): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00'], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r2}, 0x38) 6.628289825s ago: executing program 2 (id=2372): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="6f50aa8100000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x40047451, &(0x7f0000000180)) 6.56224116s ago: executing program 4 (id=2373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0xc8, 0xfffffffe, 0x0, 0x7fffffffffffffff, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x10) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) 6.403864713s ago: executing program 7 (id=2374): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 4.950298795s ago: executing program 1 (id=2363): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$LINK_DETACH(0x22, &(0x7f0000000200), 0x4) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x0, 0x0, 0x7602, 0x0, 0x140, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x1fa80000000000, 0x24818, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x800, 0xed44, 0x0, 0x0, 0x2}, 0x0, 0x400000000, r1, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x6, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0xa}, 0x3004, 0x8, 0x9, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES8=r1, @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRESDEC=r2, @ANYRES8=r2, @ANYBLOB="0000000000000000000000000000000000000b01dfa8464a15c7517c8ceedfd9f62558da8a742bf4ca6a7d601a507814c361ebd3d34d4e24ebf3ef115c1a037be4b5a585562211fb311573e9a91308dc0d201bd65aeb2f38de96808fe3e1b5fb5c6f19e22c0bc848ed12dd93341b0a533c6ad7fa98f699e00c6a9b3123e0e03b01bd04747c041cc8e4976d095c4e00"/157], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES32=r3], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xa04000, &(0x7f0000000540)="4454be224fd4f6f6ba5302ff62d0b4530dd63aa0c39ca3b24484b881bc93d2f80387749261697287aabd27e66781346fc9882ba6b379ff3b5b8630b4ed053cc098c5046a19b4e075443a630797f929d0c0385ac3eaeae4b258962440d89db4e9b0efc7a32e5af4a8e7242803d4db4246298c588bbbd3f895af19970bee732cd6157de88e2f48a0d53b478c659d7577c5", 0x90, &(0x7f0000000000), 0x0, &(0x7f0000000680)="f7544740d814f491c83e386da86d09600f9e2021d806b4eeeaa5") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000000)='syzkaller\x00', 0x2df9, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r7, 0x40047451, &(0x7f0000000180)) 4.946285015s ago: executing program 7 (id=2383): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="611534000000000061134c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000002000000160300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000005574d074fa7e93447a88c0fbab48660aae7cdf367ef0e4538279b6113de5b94e1056f443305145c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 4.945542015s ago: executing program 2 (id=2384): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x6, 0x9, 0x0, 0x8, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x440, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 4.942329316s ago: executing program 4 (id=2385): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 3.649393086s ago: executing program 1 (id=2375): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0xa}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB='k\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"], 0x50) 3.648785526s ago: executing program 7 (id=2387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 3.648325886s ago: executing program 2 (id=2377): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x42}, 0x28) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa220, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 3.634278438s ago: executing program 4 (id=2378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x77) 3.322608091s ago: executing program 1 (id=2379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 3.192952612s ago: executing program 4 (id=2380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 2.140810554s ago: executing program 1 (id=2381): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11f564}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="110000000400000004000000ff0010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x17) 2.135584744s ago: executing program 7 (id=2393): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x77) 788.616159ms ago: executing program 1 (id=2382): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00'], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r2}, 0x38) 787.298309ms ago: executing program 7 (id=2395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 770.30236ms ago: executing program 4 (id=2386): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002104000000000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0xca73}, 0x0, 0xc8, 0x0, 0x2, 0xfffffffffffffffc, 0x8}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fe08000e40000200875a65969ff57b00"], 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 103.944442ms ago: executing program 1 (id=2388): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}, 0x8228}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 0s ago: executing program 7 (id=2389): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f00000004c0), &(0x7f0000000540)=r0}, 0x20) kernel console output (not intermixed with test programs): ? do_swap_page+0xcf/0x40c0 [ 124.670053][ T5767] ? handle_mm_fault+0xd1/0x4920 [ 124.675035][ T5767] handle_mm_fault+0x105e/0x4920 [ 124.680140][ T5767] ? handle_mm_fault+0xd1/0x4920 [ 124.685217][ T5767] ? lock_vma_under_rcu+0x526/0x650 [ 124.690587][ T5767] ? numa_migrate_prep+0x350/0x350 [ 124.695841][ T5767] ? do_user_addr_fault+0x1c3/0x12e0 [ 124.701349][ T5767] do_user_addr_fault+0xad0/0x12e0 [ 124.706494][ T5767] ? rcu_is_watching+0x15/0xb0 [ 124.711314][ T5767] exc_page_fault+0x67/0x110 [ 124.716188][ T5767] ? clear_bhb_loop+0x40/0x90 [ 124.721226][ T5767] asm_exc_page_fault+0x26/0x30 [ 124.726095][ T5767] RIP: 0033:0x7fd1fb3c2008 [ 124.730645][ T5767] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 124.751061][ T5767] RSP: 002b:00007ffd8c94adb0 EFLAGS: 00010293 [ 124.757347][ T5767] RAX: 0000000000000000 RBX: 00000000000000c4 RCX: 00007fd1fb3c2005 [ 124.765522][ T5767] RDX: 00007ffd8c94adf0 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.774304][ T5767] RBP: 00007ffd8c94ae5c R08: 0000000000000000 R09: 0000000000000000 [ 124.782397][ T5767] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 124.790465][ T5767] R13: 00000000000927c0 R14: 000000000001de7b R15: 00007ffd8c94aeb0 [ 124.798658][ T5767] [ 124.811404][ T5767] memory: usage 224000kB, limit 307200kB, failcnt 2180 [ 124.818723][ T5767] memory+swap: usage 224216kB, limit 9007199254740988kB, failcnt 0 [ 124.826748][ T5767] kmem: usage 223652kB, limit 9007199254740988kB, failcnt 0 [ 124.834698][ T5767] Memory cgroup stats for /syz2: [ 124.835256][ T5767] cache 139264 [ 124.850801][ T5767] rss 0 [ 124.857783][ T5767] rss_huge 0 [ 124.861150][ T5767] shmem 0 [ 124.868138][ T5767] mapped_file 139264 [ 124.872181][ T5767] dirty 139264 [ 124.877398][ T5767] writeback 0 [ 124.880921][ T5767] workingset_refault_anon 0 [ 124.889353][ T5767] workingset_refault_file 0 [ 124.894356][ T5767] swap 221184 [ 124.898479][ T5767] pgpgin 21507 [ 124.902162][ T5767] pgpgout 21473 [ 124.912360][ T5767] pgfault 8687 [ 124.916114][ T5767] pgmajfault 5 [ 124.919725][ T5767] inactive_anon 0 [ 124.930581][ T5767] active_anon 0 [ 124.934452][ T5767] inactive_file 139264 [ 124.938553][ T5767] active_file 0 [ 124.942224][ T5767] unevictable 0 [ 124.949304][ T5767] hierarchical_memory_limit 314572800 [ 124.965823][ T5767] hierarchical_memsw_limit 9223372036854771712 [ 124.972117][ T5767] total_cache 139264 [ 124.978705][ T5767] total_rss 0 [ 124.982324][ T5767] total_rss_huge 0 [ 124.986613][ T5767] total_shmem 0 [ 124.990422][ T5767] total_mapped_file 139264 [ 125.001569][ T5767] total_dirty 139264 [ 125.006984][ T5767] total_writeback 0 [ 125.011019][ T5767] total_workingset_refault_anon 0 [ 125.020834][ T5767] total_workingset_refault_file 0 [ 125.027597][ T5767] total_swap 221184 [ 125.032070][ T5767] total_pgpgin 21507 [ 125.042227][ T5767] total_pgpgout 21473 [ 125.047852][ T5767] total_pgfault 8687 [ 125.052083][ T5767] total_pgmajfault 5 [ 125.059589][ T5767] total_inactive_anon 0 [ 125.066222][ T5767] total_active_anon 0 [ 125.070268][ T5767] total_inactive_file 139264 [ 125.087971][ T5767] total_active_file 0 [ 125.092201][ T5767] total_unevictable 0 [ 125.098110][ T5767] anon_cost 0 [ 125.101586][ T5767] file_cost 0 [ 125.109498][ T5767] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.271,pid=6807,uid=0 [ 125.141501][ T5767] Memory cgroup out of memory: Killed process 6815 (syz.2.271) total-vm:102156kB, anon-rss:1144kB, file-rss:22528kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 125.993396][ T6856] netlink: 'syz.3.282': attribute type 21 has an invalid length. [ 126.015808][ T6856] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 126.043828][ T6856] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.282'. [ 126.183907][ T6862] netlink: 'syz.0.284': attribute type 10 has an invalid length. [ 126.231390][ T6862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.251064][ T6862] team0: Port device batadv0 added [ 126.254760][ T6866] netlink: 'syz.2.286': attribute type 9 has an invalid length. [ 126.264519][ T6866] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.286'. [ 126.372763][ T6866] netlink: 'syz.2.286': attribute type 9 has an invalid length. [ 126.392171][ T6866] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.286'. [ 126.421993][ T6865] delete_channel: no stack [ 126.723319][ T6871] syzkaller0: entered promiscuous mode [ 126.729398][ T6871] syzkaller0: entered allmulticast mode [ 126.762822][ T6881] netlink: 'syz.3.290': attribute type 39 has an invalid length. [ 127.665460][ T6902] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.296'. [ 127.684389][ T6902] netlink: 'syz.1.296': attribute type 2 has an invalid length. [ 128.157550][ T6907] syz.3.297 (6907) used greatest stack depth: 19496 bytes left [ 131.412278][ T6956] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.308'. [ 131.752598][ T6969] sit0: entered allmulticast mode [ 132.139662][ T6985] syzkaller0: entered promiscuous mode [ 132.173183][ T6985] syzkaller0: entered allmulticast mode [ 133.112926][ T6998] syzkaller0: entered promiscuous mode [ 133.118976][ T6998] syzkaller0: entered allmulticast mode [ 133.167630][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.174181][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.243313][ T7004] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 133.250958][ T7004] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 136.941147][ T7022] netlink: 'syz.1.325': attribute type 39 has an invalid length. [ 136.951687][ T7022] veth0_macvtap: left promiscuous mode [ 137.161458][ T7028] netlink: 'syz.3.326': attribute type 27 has an invalid length. [ 137.189982][ T7028] netlink: 164 bytes leftover after parsing attributes in process `syz.3.326'. [ 137.200306][ T7024] Ÿë: port 1(gretap0) entered blocking state [ 137.235165][ T7024] Ÿë: port 1(gretap0) entered disabled state [ 137.251203][ T7028] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.326'. [ 137.267884][ T7024] gretap0: entered allmulticast mode [ 137.281650][ T7024] gretap0: entered promiscuous mode [ 138.254815][ T7057] netlink: 'syz.1.334': attribute type 10 has an invalid length. [ 139.018851][ T7057] team0: Port device geneve1 added [ 139.177754][ T7057] syz.1.334 (7057) used greatest stack depth: 18376 bytes left [ 139.254714][ T7079] : renamed from veth0_to_bond (while UP) [ 139.631156][ T7091] netlink: 'syz.0.345': attribute type 4 has an invalid length. [ 139.651641][ T7091] netlink: 156 bytes leftover after parsing attributes in process `syz.0.345'. [ 139.740307][ T7091] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 139.893563][ T7103] netlink: 'syz.2.349': attribute type 3 has an invalid length. [ 139.925923][ T7103] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.349'. [ 142.217941][ T7095] netlink: 'syz.0.345': attribute type 2 has an invalid length. [ 142.228784][ T7095] netlink: 'syz.0.345': attribute type 4 has an invalid length. [ 142.490058][ T7112] netlink: 'syz.0.352': attribute type 2 has an invalid length. [ 142.527518][ T7114] netlink: 'syz.2.353': attribute type 10 has an invalid length. [ 142.626351][ T7114] batman_adv: batadv0: Adding interface: team0 [ 142.675984][ T7114] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.765697][ T7114] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 143.522892][ T7135] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.358'. [ 143.981875][ T7151] netlink: 'syz.1.362': attribute type 39 has an invalid length. [ 144.045883][ T7156] netlink: 'syz.1.362': attribute type 39 has an invalid length. [ 144.216341][ T7162] netlink: 'syz.3.365': attribute type 33 has an invalid length. [ 144.229676][ T7162] netlink: 36 bytes leftover after parsing attributes in process `syz.3.365'. [ 145.790401][ T7237] netlink: 132 bytes leftover after parsing attributes in process `syz.0.387'. [ 145.817136][ T7235] bridge0: port 3(team0) entered blocking state [ 145.835139][ T7235] bridge0: port 3(team0) entered disabled state [ 145.858069][ T7235] team0: entered allmulticast mode [ 145.866311][ T7235] team_slave_0: entered allmulticast mode [ 145.889406][ T7235] team_slave_1: entered allmulticast mode [ 145.939306][ T7235] team0: entered promiscuous mode [ 145.947147][ T7235] team_slave_0: entered promiscuous mode [ 145.960507][ T7235] team_slave_1: entered promiscuous mode [ 145.993096][ T7235] bridge0: port 3(team0) entered blocking state [ 146.000787][ T7235] bridge0: port 3(team0) entered forwarding state [ 148.362955][ T7264] netlink: 'syz.1.395': attribute type 10 has an invalid length. [ 148.412702][ T7269] netlink: 156 bytes leftover after parsing attributes in process `syz.2.396'. [ 148.980651][ T7289] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.401'. [ 149.007086][ T7291] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.402'. [ 149.332305][ T7306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.409'. [ 149.361485][ T7306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.409'. [ 149.383432][ T7306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.409'. [ 149.404205][ T7306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.409'. [ 149.562060][ T7313] netlink: 40 bytes leftover after parsing attributes in process `syz.1.411'. [ 150.285578][ T7348] netlink: 'syz.2.421': attribute type 3 has an invalid length. [ 150.491519][ T7359] netlink: 'syz.3.423': attribute type 9 has an invalid length. [ 150.512106][ T7359] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.423'. [ 150.608462][ T7360] netlink: 'syz.3.423': attribute type 9 has an invalid length. [ 150.618172][ T7360] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.423'. [ 151.041721][ T7382] mac80211_hwsim hwsim9 O3ãc¤±: renamed from wlan1 (while UP) [ 151.564475][ T7410] netlink: 60 bytes leftover after parsing attributes in process `syz.2.436'. [ 152.741411][ T7439] netlink: 'syz.0.446': attribute type 3 has an invalid length. [ 153.760548][ T7461] netlink: 'syz.1.452': attribute type 4 has an invalid length. [ 154.691278][ T7465] syzkaller0: entered promiscuous mode [ 154.709685][ T7465] syzkaller0: entered allmulticast mode [ 155.541444][ T7490] netlink: 'syz.3.458': attribute type 4 has an invalid length. [ 155.550835][ T7489] netlink: 'syz.3.458': attribute type 4 has an invalid length. [ 155.563976][ T7490] __nla_validate_parse: 2 callbacks suppressed [ 155.564001][ T7490] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.458'. [ 155.581129][ T7489] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.458'. [ 157.140280][ T7485] netlink: 'syz.2.457': attribute type 49 has an invalid length. [ 159.683542][ T7520] netlink: 132 bytes leftover after parsing attributes in process `syz.2.466'. [ 159.813206][ T7525] netlink: 'syz.0.467': attribute type 10 has an invalid length. [ 159.841843][ T7525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.012124][ T7525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.064903][ T7535] netlink: 44 bytes leftover after parsing attributes in process `syz.2.471'. [ 160.205615][ T7525] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 160.244451][ T7527] netlink: 'syz.3.469': attribute type 10 has an invalid length. [ 160.266754][ T7527] hsr0: entered promiscuous mode [ 160.276431][ T7527] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 160.323378][ T7529] netlink: 830 bytes leftover after parsing attributes in process `syz.0.467'. [ 160.350418][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'. [ 160.540672][ T7545] syz.3.473[7545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.540843][ T7545] syz.3.473[7545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.575317][ T7545] netlink: 'syz.3.473': attribute type 10 has an invalid length. [ 160.601986][ T7545] netlink: 40 bytes leftover after parsing attributes in process `syz.3.473'. [ 160.611450][ T7545] dummy0: entered promiscuous mode [ 160.618886][ T7545] bridge0: port 4(dummy0) entered blocking state [ 160.626030][ T7545] bridge0: port 4(dummy0) entered disabled state [ 160.635012][ T7545] dummy0: entered allmulticast mode [ 160.641582][ T7545] bridge0: port 4(dummy0) entered blocking state [ 160.648091][ T7545] bridge0: port 4(dummy0) entered forwarding state [ 163.247086][ T7565] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.479'. [ 163.256690][ T7572] netlink: 'syz.2.481': attribute type 10 has an invalid length. [ 163.270478][ T7572] team0: Device ipvlan1 failed to register rx_handler [ 163.289545][ T7564] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.479'. [ 163.815115][ T7596] netlink: 'syz.3.489': attribute type 3 has an invalid length. [ 163.838384][ T7603] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.490'. [ 163.839334][ T7596] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.489'. [ 163.864162][ T7603] netlink: zone id is out of range [ 163.879021][ T7603] netlink: zone id is out of range [ 163.891329][ T7603] netlink: zone id is out of range [ 163.923347][ T7603] netlink: zone id is out of range [ 163.943259][ T7603] netlink: zone id is out of range [ 163.962278][ T7603] netlink: zone id is out of range [ 163.983223][ T7603] netlink: zone id is out of range [ 163.993950][ T7603] netlink: zone id is out of range [ 164.013338][ T7603] netlink: zone id is out of range [ 164.018851][ T7603] netlink: zone id is out of range [ 164.157668][ T7610] netlink: 'syz.1.494': attribute type 33 has an invalid length. [ 164.210545][ T7608] ref_ctr_offset mismatch. inode: 0x2c6 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 164.254243][ T7610] netlink: 'syz.1.494': attribute type 8 has an invalid length. [ 164.293630][ T7612] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.495'. [ 164.608378][ T7627] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.500'. [ 164.624768][ T7624] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.498'. [ 164.667645][ T7627] netlink: 'syz.1.500': attribute type 10 has an invalid length. [ 164.668244][ T7624] netlink: 60 bytes leftover after parsing attributes in process `syz.0.498'. [ 164.721278][ T7624] netlink: 60 bytes leftover after parsing attributes in process `syz.0.498'. [ 164.974169][ T7638] netlink: 'syz.2.503': attribute type 39 has an invalid length. [ 165.138025][ T7638] hsr_slave_1 (unregistering): left promiscuous mode [ 165.248712][ T7647] can: request_module (can-proto-5) failed. [ 165.256209][ T7649] netlink: 'syz.3.507': attribute type 21 has an invalid length. [ 165.483566][ T7657] netlink: 'syz.3.510': attribute type 21 has an invalid length. [ 165.612737][ T7664] __nla_validate_parse: 3 callbacks suppressed [ 165.612770][ T7664] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.513'. [ 166.275710][ T7702] syzkaller0: entered promiscuous mode [ 166.281867][ T7702] syzkaller0: entered allmulticast mode [ 166.300583][ T7708] netlink: 60 bytes leftover after parsing attributes in process `syz.1.522'. [ 169.275671][ T7708] netlink: 60 bytes leftover after parsing attributes in process `syz.1.522'. [ 169.520989][ T7746] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.530'. [ 169.562962][ T7744] netlink: 'syz.2.529': attribute type 7 has an invalid length. [ 169.572569][ T7744] netlink: 65031 bytes leftover after parsing attributes in process `syz.2.529'. [ 169.594741][ T7750] netlink: 60 bytes leftover after parsing attributes in process `syz.3.530'. [ 169.639584][ T7750] netlink: 60 bytes leftover after parsing attributes in process `syz.3.530'. [ 169.722851][ T7746] netlink: 60 bytes leftover after parsing attributes in process `syz.3.530'. [ 169.847871][ T7746] syzkaller0: entered promiscuous mode [ 169.854607][ T7746] syzkaller0: entered allmulticast mode [ 170.626213][ T7781] netlink: 'syz.1.539': attribute type 3 has an invalid length. [ 170.673919][ T7781] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.539'. [ 170.927947][ T7784] netlink: 'syz.2.540': attribute type 3 has an invalid length. [ 170.936987][ T7784] netlink: 'syz.2.540': attribute type 1 has an invalid length. [ 170.946835][ T7784] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.540'. [ 172.705098][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'. [ 175.128338][ T7868] netlink: 'syz.2.564': attribute type 16 has an invalid length. [ 175.138085][ T7868] netlink: 16 bytes leftover after parsing attributes in process `syz.2.564'. [ 175.225261][ T7868] netlink: 'syz.2.564': attribute type 4 has an invalid length. [ 175.238666][ T7868] netlink: 140 bytes leftover after parsing attributes in process `syz.2.564'. [ 175.569703][ T7889] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.571'. [ 175.623930][ T7889] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.571'. [ 175.639791][ T7889] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 175.847383][ T7897] netlink: 'syz.3.574': attribute type 2 has an invalid length. [ 177.361388][ T7924] netlink: 'syz.3.582': attribute type 4 has an invalid length. [ 177.374658][ T7924] netlink: 152 bytes leftover after parsing attributes in process `syz.3.582'. [ 177.426083][ T7924] net_ratelimit: 331 callbacks suppressed [ 177.426102][ T7924] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 177.464116][ T7927] netlink: 'syz.0.583': attribute type 13 has an invalid length. [ 177.472324][ T7927] netlink: 'syz.0.583': attribute type 58 has an invalid length. [ 177.513662][ T7927] netlink: 152 bytes leftover after parsing attributes in process `syz.0.583'. [ 177.668937][ T7939] netlink: 'syz.1.586': attribute type 10 has an invalid length. [ 178.115734][ T7954] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.590'. [ 179.540372][ T7982] syzkaller0: entered promiscuous mode [ 179.551146][ T7982] syzkaller0: entered allmulticast mode [ 182.898018][ T7998] netlink: 'syz.1.603': attribute type 21 has an invalid length. [ 182.906249][ T7998] netlink: 'syz.1.603': attribute type 2 has an invalid length. [ 182.914603][ T7998] netlink: 9062 bytes leftover after parsing attributes in process `syz.1.603'. [ 182.924707][ T8002] netlink: 'syz.2.601': attribute type 10 has an invalid length. [ 182.949468][ T8002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.983873][ T8002] batadv0: entered promiscuous mode [ 183.000825][ T8002] batadv0: entered allmulticast mode [ 183.020230][ T8002] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 183.064160][ T8003] bond0: left allmulticast mode [ 183.074138][ T8003] bond_slave_0: left allmulticast mode [ 183.079767][ T8003] bond_slave_1: left allmulticast mode [ 183.101908][ T8003] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 183.112233][ T8003] batadv0: left allmulticast mode [ 183.139223][ T8009] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.605'. [ 186.797896][ T8053] netlink: 60 bytes leftover after parsing attributes in process `syz.0.618'. [ 186.861047][ T8053] netlink: 60 bytes leftover after parsing attributes in process `syz.0.618'. [ 186.879302][ T8052] netlink: 60 bytes leftover after parsing attributes in process `syz.0.618'. [ 188.362383][ T8088] netlink: 'syz.2.627': attribute type 7 has an invalid length. [ 189.631038][ T5773] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 189.832401][ T8147] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.645'. [ 191.124128][ T8165] can: request_module (can-proto-0) failed. [ 191.562706][ T5773] Bluetooth: hci0: command 0x0406 tx timeout [ 191.564352][ T5762] Bluetooth: hci1: command 0x0406 tx timeout [ 191.573000][ T5773] Bluetooth: hci3: command 0x0406 tx timeout [ 191.576214][ T5082] Bluetooth: hci2: command 0x0406 tx timeout [ 191.779305][ T8169] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.651'. [ 191.840408][ T8170] netlink: 60 bytes leftover after parsing attributes in process `syz.1.651'. [ 193.257125][ T8169] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 193.266078][ T8169] CPU: 0 PID: 8169 Comm: syz.1.651 Not tainted syzkaller #0 [ 193.273454][ T8169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.283628][ T8169] Call Trace: [ 193.287347][ T8169] [ 193.290274][ T8169] dump_stack_lvl+0x16c/0x230 [ 193.295052][ T8169] ? show_regs_print_info+0x20/0x20 [ 193.300357][ T8169] ? load_image+0x3b0/0x3b0 [ 193.304881][ T8169] sysfs_warn_dup+0x8e/0xa0 [ 193.309400][ T8169] sysfs_do_create_link_sd+0xc0/0x110 [ 193.314825][ T8169] device_add_class_symlinks+0x1cf/0x240 [ 193.320932][ T8169] device_add+0x507/0xc20 [ 193.325306][ T8169] wiphy_register+0x1e74/0x2c00 [ 193.330184][ T8169] ? cfg80211_event_work+0x40/0x40 [ 193.335294][ T8169] ? minstrel_ht_alloc+0x88a/0x990 [ 193.340420][ T8169] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 193.346516][ T8169] ieee80211_register_hw+0x2de8/0x3b10 [ 193.352092][ T8169] ? ieee80211_register_hw+0xf61/0x3b10 [ 193.357660][ T8169] ? ieee80211_tasklet_handler+0x20/0x20 [ 193.363382][ T8169] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 193.369366][ T8169] ? __debug_object_init+0xe8/0x430 [ 193.374654][ T8169] ? __asan_memset+0x22/0x40 [ 193.379242][ T8169] ? __hrtimer_init+0x186/0x270 [ 193.384090][ T8169] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 193.389914][ T8169] ? mac80211_hwsim_free+0x220/0x220 [ 193.395227][ T8169] ? rcu_is_watching+0x15/0xb0 [ 193.400018][ T8169] ? kstrndup+0xbd/0x140 [ 193.404313][ T8169] hwsim_new_radio_nl+0xd78/0x19d0 [ 193.409430][ T8169] ? __nla_validate+0x50/0x50 [ 193.414121][ T8169] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 193.420652][ T8169] ? __nla_parse+0x40/0x50 [ 193.425186][ T8169] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 193.431699][ T8169] genl_family_rcv_msg_doit+0x209/0x2f0 [ 193.437258][ T8169] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 193.443160][ T8169] ? bpf_lsm_capable+0x9/0x10 [ 193.448453][ T8169] ? security_capable+0x89/0xb0 [ 193.453315][ T8169] genl_rcv_msg+0x60b/0x790 [ 193.457824][ T8169] ? genl_bind+0x360/0x360 [ 193.462247][ T8169] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 193.468577][ T8169] ? ref_tracker_free+0x634/0x7d0 [ 193.473696][ T8169] netlink_rcv_skb+0x216/0x480 [ 193.478466][ T8169] ? genl_bind+0x360/0x360 [ 193.482886][ T8169] ? netlink_ack+0x1110/0x1110 [ 193.487668][ T8169] ? __lock_acquire+0x7c80/0x7c80 [ 193.492712][ T8169] ? down_read+0x1ac/0x2e0 [ 193.497131][ T8169] genl_rcv+0x28/0x40 [ 193.501112][ T8169] netlink_unicast+0x751/0x8d0 [ 193.505892][ T8169] netlink_sendmsg+0x8c1/0xbe0 [ 193.510843][ T8169] ? netlink_getsockopt+0x580/0x580 [ 193.516043][ T8169] ? aa_sock_msg_perm+0x94/0x150 [ 193.520980][ T8169] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 193.526265][ T8169] ? security_socket_sendmsg+0x80/0xa0 [ 193.531717][ T8169] ? netlink_getsockopt+0x580/0x580 [ 193.536907][ T8169] ____sys_sendmsg+0x5bf/0x950 [ 193.541675][ T8169] ? __asan_memset+0x22/0x40 [ 193.546264][ T8169] ? __sys_sendmsg_sock+0x30/0x30 [ 193.551285][ T8169] ? __import_iovec+0x5f2/0x860 [ 193.556144][ T8169] ? import_iovec+0x73/0xa0 [ 193.560651][ T8169] ___sys_sendmsg+0x220/0x290 [ 193.565328][ T8169] ? __sys_sendmsg+0x270/0x270 [ 193.570125][ T8169] __se_sys_sendmsg+0x1a5/0x270 [ 193.574985][ T8169] ? __x64_sys_sendmsg+0x80/0x80 [ 193.579964][ T8169] ? lockdep_hardirqs_on+0x98/0x150 [ 193.585214][ T8169] do_syscall_64+0x55/0xb0 [ 193.589623][ T8169] ? clear_bhb_loop+0x40/0x90 [ 193.594296][ T8169] ? clear_bhb_loop+0x40/0x90 [ 193.598972][ T8169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.604872][ T8169] RIP: 0033:0x7fa12278f749 [ 193.609285][ T8169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.629067][ T8169] RSP: 002b:00007fa12353f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.637481][ T8169] RAX: ffffffffffffffda RBX: 00007fa1229e5fa0 RCX: 00007fa12278f749 [ 193.645627][ T8169] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 193.653712][ T8169] RBP: 00007fa122813f91 R08: 0000000000000000 R09: 0000000000000000 [ 193.661853][ T8169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.669820][ T8169] R13: 00007fa1229e6038 R14: 00007fa1229e5fa0 R15: 00007ffd8cec9f98 [ 193.677813][ T8169] [ 193.901689][ T8174] netlink: 'syz.2.653': attribute type 1 has an invalid length. [ 193.910829][ T8174] netlink: 'syz.2.653': attribute type 4 has an invalid length. [ 193.925959][ T8174] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.653'. [ 193.940815][ T8177] netlink: 'syz.2.653': attribute type 1 has an invalid length. [ 193.950603][ T8177] netlink: 'syz.2.653': attribute type 4 has an invalid length. [ 193.960447][ T8177] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.653'. [ 194.346574][ T8198] netlink: 'syz.2.660': attribute type 21 has an invalid length. [ 194.607806][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.614360][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.134053][ T8212] wg2: entered promiscuous mode [ 195.140062][ T8212] wg2: entered allmulticast mode [ 195.664741][ T8232] netlink: 'syz.3.671': attribute type 4 has an invalid length. [ 195.672559][ T8232] netlink: 152 bytes leftover after parsing attributes in process `syz.3.671'. [ 195.794492][ T8232] netlink: 6 bytes leftover after parsing attributes in process `syz.3.671'. [ 195.828095][ T8232] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 195.913279][ T8228] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.669'. [ 195.924165][ T8237] netlink: 76 bytes leftover after parsing attributes in process `syz.1.670'. [ 196.905634][ T8251] netlink: 164 bytes leftover after parsing attributes in process `syz.2.676'. [ 197.033476][ T8253] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 197.150667][ T8249] netlink: 'syz.3.675': attribute type 4 has an invalid length. [ 197.198440][ T8249] netlink: 152 bytes leftover after parsing attributes in process `syz.3.675'. [ 197.217111][ T8249] .`: renamed from bond0 [ 197.989299][ T8276] syz.0.683[8276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.989522][ T8276] syz.0.683[8276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.838527][ T8295] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.688'. [ 199.356117][ T8297] sctp: [Deprecated]: syz.1.689 (pid 8297) Use of int in max_burst socket option deprecated. [ 199.356117][ T8297] Use struct sctp_assoc_value instead [ 199.856569][ T8311] netlink: 61959 bytes leftover after parsing attributes in process `syz.1.693'. [ 200.174192][ T8315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.962284][ T8364] netlink: 'syz.2.707': attribute type 3 has an invalid length. [ 201.972376][ T8364] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.707'. [ 202.373363][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 202.532624][ T8373] syzkaller0: entered promiscuous mode [ 202.558975][ T8373] syzkaller0: entered allmulticast mode [ 203.862341][ T8416] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.722'. [ 205.628885][ T8429] netlink: 15119 bytes leftover after parsing attributes in process `syz.2.726'. [ 205.664771][ T8427] delete_channel: no stack [ 206.001575][ T8449] netlink: 'syz.1.732': attribute type 10 has an invalid length. [ 206.120150][ T8454] netlink: 'syz.1.733': attribute type 10 has an invalid length. [ 206.132892][ T8454] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.733'. [ 206.223890][ T8457] netlink: 'syz.2.734': attribute type 21 has an invalid length. [ 206.232608][ T8457] netlink: 132 bytes leftover after parsing attributes in process `syz.2.734'. [ 207.121001][ T8478] netlink: 'syz.3.742': attribute type 39 has an invalid length. [ 207.318734][ T8478] hsr_slave_1 (unregistering): left promiscuous mode [ 207.660053][ T8498] netlink: 'syz.0.745': attribute type 13 has an invalid length. [ 207.682761][ T8498] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.745'. [ 208.086078][ T8514] netlink: 'syz.3.750': attribute type 10 has an invalid length. [ 208.095090][ T8514] netlink: 55 bytes leftover after parsing attributes in process `syz.3.750'. [ 208.775217][ T8536] netlink: 'syz.1.757': attribute type 10 has an invalid length. [ 208.818193][ T8536] bridge0: port 3(dummy0) entered disabled state [ 208.851156][ T8536] dummy0: left allmulticast mode [ 208.873255][ T8536] dummy0: left promiscuous mode [ 208.913560][ T8536] bridge0: port 3(dummy0) entered disabled state [ 208.964737][ T8536] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 209.016077][ T8548] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.759'. [ 209.044110][ T8548] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.759'. [ 209.071243][ T8545] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.759'. [ 209.105756][ T8548] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.759'. [ 210.684797][ T8551] delete_channel: no stack [ 211.532127][ T8583] netlink: 'syz.2.769': attribute type 21 has an invalid length. [ 211.651803][ T8583] netlink: 'syz.2.769': attribute type 10 has an invalid length. [ 211.693145][ T8583] netlink: 55 bytes leftover after parsing attributes in process `syz.2.769'. [ 212.568305][ T8593] netdevsim netdevsim1: Direct firmware load for e_queue_work failed with error -2 [ 212.703786][ T8593] netdevsim netdevsim1: Falling back to sysfs fallback for: e_queue_work [ 213.430931][ T8607] netlink: 'syz.3.776': attribute type 2 has an invalid length. [ 213.453541][ T8607] netlink: 'syz.3.776': attribute type 8 has an invalid length. [ 213.505588][ T8607] netlink: 132 bytes leftover after parsing attributes in process `syz.3.776'. [ 214.175056][ T8620] netlink: 830 bytes leftover after parsing attributes in process `syz.0.780'. [ 214.202272][ T8620] bond_slave_0: entered promiscuous mode [ 214.208578][ T8620] bond_slave_1: entered promiscuous mode [ 214.214541][ T8620] batadv_slave_0: entered promiscuous mode [ 214.460802][ T8630] syz.1.782[8630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.460929][ T8630] syz.1.782[8630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.592660][ T8635] netlink: 'syz.0.784': attribute type 11 has an invalid length. [ 215.926400][ T8660] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.994398][ T8660] bridge0: entered allmulticast mode [ 216.356579][ T8663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.411200][ T8683] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 217.711807][ T8685] netlink: 'syz.1.800': attribute type 14 has an invalid length. [ 217.737286][ T8685] netlink: 164 bytes leftover after parsing attributes in process `syz.1.800'. [ 218.574209][ T8703] netlink: 'syz.1.802': attribute type 10 has an invalid length. [ 218.582518][ T8703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.802'. [ 218.623339][ T8703] team0: entered promiscuous mode [ 218.628452][ T8703] team_slave_0: entered promiscuous mode [ 218.652938][ T8703] team_slave_1: entered promiscuous mode [ 218.677405][ T8703] geneve1: entered promiscuous mode [ 218.691289][ T8703] team0: entered allmulticast mode [ 218.723208][ T8703] team_slave_0: entered allmulticast mode [ 218.735377][ T8703] team_slave_1: entered allmulticast mode [ 218.809524][ T8703] geneve1: entered allmulticast mode [ 218.841821][ T8703] bridge0: port 1(team0) entered blocking state [ 218.870387][ T8703] bridge0: port 1(team0) entered disabled state [ 219.055065][ T8711] syz.3.806[8711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.055204][ T8711] syz.3.806[8711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.677568][ T8724] netlink: 60 bytes leftover after parsing attributes in process `syz.1.809'. [ 219.778597][ T8725] netlink: 60 bytes leftover after parsing attributes in process `syz.1.809'. [ 221.542061][ T8750] netlink: 'syz.2.816': attribute type 1 has an invalid length. [ 221.990744][ T8760] netlink: 'syz.0.819': attribute type 10 has an invalid length. [ 222.062577][ T8760] netlink: 40 bytes leftover after parsing attributes in process `syz.0.819'. [ 222.145216][ T8760] team0: entered promiscuous mode [ 222.148180][ T8765] netlink: 'syz.1.822': attribute type 33 has an invalid length. [ 222.162955][ T8760] team_slave_0: entered promiscuous mode [ 222.171109][ T8760] team_slave_1: entered promiscuous mode [ 222.219142][ T8760] batadv0: entered promiscuous mode [ 222.248421][ T8760] team0: entered allmulticast mode [ 222.292260][ T8760] team_slave_0: entered allmulticast mode [ 222.309275][ T8760] team_slave_1: entered allmulticast mode [ 222.316741][ T8760] batadv0: entered allmulticast mode [ 222.332873][ T8760] bridge0: port 3(team0) entered blocking state [ 222.340812][ T8760] bridge0: port 3(team0) entered disabled state [ 222.391097][ T8760] bridge0: port 3(team0) entered blocking state [ 222.398155][ T8760] bridge0: port 3(team0) entered forwarding state [ 222.428975][ T8763] netlink: 'syz.0.819': attribute type 10 has an invalid length. [ 222.437178][ T8763] netlink: 40 bytes leftover after parsing attributes in process `syz.0.819'. [ 222.448905][ T8763] batman_adv: batadv0: Adding interface: virt_wifi0 [ 222.455771][ T8763] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.482170][ T8763] batman_adv: batadv0: Interface activated: virt_wifi0 [ 222.502699][ T8776] netpci0: tun_chr_ioctl cmd 2147767511 [ 222.786025][ T8789] netlink: 14 bytes leftover after parsing attributes in process `syz.2.825'. [ 222.801158][ T2964] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 222.811226][ T2964] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 223.207519][ T8789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.223282][ T8789] bond_slave_0: left promiscuous mode [ 223.245664][ T8789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.256017][ T8789] bond_slave_1: left promiscuous mode [ 223.268834][ T8789] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 223.278675][ T8789] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 223.288450][ T8789] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 223.300741][ T8789] batadv0: left promiscuous mode [ 223.312255][ T8789] bond0 (unregistering): Released all slaves [ 223.746006][ T8811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.937649][ T8820] netlink: 'syz.2.839': attribute type 29 has an invalid length. [ 223.958744][ T8824] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.840'. [ 224.027434][ T8820] netlink: 'syz.2.839': attribute type 29 has an invalid length. [ 224.046239][ T8828] netlink: 'syz.2.839': attribute type 29 has an invalid length. [ 224.065334][ T8820] netlink: 'syz.2.839': attribute type 29 has an invalid length. [ 224.080779][ T8820] netlink: 'syz.2.839': attribute type 29 has an invalid length. [ 225.022650][ T8839] netlink: 'syz.3.844': attribute type 10 has an invalid length. [ 225.064423][ T8839] netlink: 168 bytes leftover after parsing attributes in process `syz.3.844'. [ 225.102460][ T8849] netlink: 'syz.1.847': attribute type 21 has an invalid length. [ 225.468070][ T8872] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.854'. [ 225.509192][ T8872] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.854'. [ 225.702555][ T8883] netlink: 'syz.2.857': attribute type 10 has an invalid length. [ 226.204211][ T8898] netlink: 'syz.2.863': attribute type 39 has an invalid length. [ 227.616662][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.704641][ T8917] delete_channel: no stack [ 227.832979][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.985301][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.143237][ T5770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.153313][ T5770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.164734][ T5770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.173348][ T5770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.181604][ T5770] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 228.190367][ T5770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.286033][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.321111][ T8922] netlink: 'syz.3.877': attribute type 9 has an invalid length. [ 228.348939][ T8922] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.877'. [ 228.401969][ T5770] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 228.416650][ T5770] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 228.433428][ T5770] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 228.446969][ T5770] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 228.463561][ T5770] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 228.471018][ T5770] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 228.562597][ T5770] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 228.573637][ T5770] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 228.582385][ T5770] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 228.591806][ T5770] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 228.600107][ T5770] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 228.613342][ T5770] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.582185][ T8923] chnl_net:caif_netlink_parms(): no params data found [ 229.643417][ T8967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.651864][ T8967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.835726][ T8923] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.843913][ T8923] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.851218][ T8923] bridge_slave_0: entered allmulticast mode [ 229.865103][ T8923] bridge_slave_0: entered promiscuous mode [ 229.875269][ T8923] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.883537][ T8923] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.890856][ T8923] bridge_slave_1: entered allmulticast mode [ 229.898786][ T8923] bridge_slave_1: entered promiscuous mode [ 229.910485][ T8926] chnl_net:caif_netlink_parms(): no params data found [ 229.927918][ T8928] chnl_net:caif_netlink_parms(): no params data found [ 229.969873][ T12] gretap0 (unregistering): left allmulticast mode [ 229.978373][ T12] gretap0 (unregistering): left promiscuous mode [ 229.987264][ T12] Ÿë: port 1(gretap0) entered disabled state [ 230.032191][ T8982] netlink: 'syz.3.885': attribute type 1 has an invalid length. [ 230.040247][ T8982] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.885'. [ 230.238451][ T8923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.273271][ T5764] Bluetooth: hci0: command tx timeout [ 230.291417][ T8923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.459414][ T8923] team0: Port device team_slave_0 added [ 230.471748][ T8996] netlink: 60 bytes leftover after parsing attributes in process `syz.3.887'. [ 230.513975][ T5764] Bluetooth: hci1: command tx timeout [ 230.633251][ T8923] team0: Port device team_slave_1 added [ 230.639486][ T8996] netlink: 60 bytes leftover after parsing attributes in process `syz.3.887'. [ 230.678542][ T5764] Bluetooth: hci2: command tx timeout [ 230.908207][ T8928] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.922605][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.932971][ T8928] bridge_slave_0: entered allmulticast mode [ 230.946909][ T8928] bridge_slave_0: entered promiscuous mode [ 231.027218][ T8926] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.038591][ T8926] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.049286][ T8926] bridge_slave_0: entered allmulticast mode [ 231.063844][ T8926] bridge_slave_0: entered promiscuous mode [ 231.086916][ T8928] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.111977][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.132428][ T8928] bridge_slave_1: entered allmulticast mode [ 231.146645][ T8928] bridge_slave_1: entered promiscuous mode [ 231.272634][ T8926] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.287102][ T8926] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.305548][ T8926] bridge_slave_1: entered allmulticast mode [ 231.313857][ T8926] bridge_slave_1: entered promiscuous mode [ 231.356474][ T8928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.371825][ T8923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.402923][ T8923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.434652][ T8923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.526006][ T8928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.555584][ T8923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.562907][ T8923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.592899][ T8923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.612330][ T8926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.676263][ T8928] team0: Port device team_slave_0 added [ 231.698106][ T8926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.723147][ T8928] team0: Port device team_slave_1 added [ 231.781360][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.789845][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.799271][ T12] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 231.808086][ T12] batman_adv: batadv0: Removing interface: virt_wifi0 [ 231.817471][ T12] bridge0: port 3(team0) entered disabled state [ 231.829753][ T12] bridge_slave_1: left allmulticast mode [ 231.836793][ T12] bridge_slave_1: left promiscuous mode [ 231.843511][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.855720][ T12] bridge_slave_0: left allmulticast mode [ 231.862593][ T12] bridge_slave_0: left promiscuous mode [ 231.870437][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.900376][ T12] veth1_macvtap: left promiscuous mode [ 231.907064][ T12] veth0_macvtap: left promiscuous mode [ 231.915915][ T12] veth1_vlan: left promiscuous mode [ 232.353566][ T5764] Bluetooth: hci0: command tx timeout [ 232.483631][ T12] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 232.536576][ T12] team_slave_1 (unregistering): left promiscuous mode [ 232.546030][ T12] team_slave_1 (unregistering): left allmulticast mode [ 232.558554][ T12] team0 (unregistering): Port device team_slave_1 removed [ 232.599983][ T5764] Bluetooth: hci1: command tx timeout [ 232.610946][ T12] team_slave_0 (unregistering): left promiscuous mode [ 232.621955][ T12] team_slave_0 (unregistering): left allmulticast mode [ 232.638400][ T12] team0 (unregistering): Port device team_slave_0 removed [ 232.701321][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.749526][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.758922][ T5764] Bluetooth: hci2: command tx timeout [ 232.969711][ T12] batadv0 (unregistering): left promiscuous mode [ 232.977242][ T12] batadv0 (unregistering): left allmulticast mode [ 232.987014][ T12] team0 (unregistering): Port device batadv0 removed [ 233.281819][ T12] bond0 (unregistering): Released all slaves [ 233.356879][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.364038][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.390501][ T8928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.406715][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.414307][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.442348][ T8928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.459312][ T8926] team0: Port device team_slave_0 added [ 233.479077][ T9018] netlink: 'syz.3.891': attribute type 2 has an invalid length. [ 233.486967][ T9018] netlink: 'syz.3.891': attribute type 8 has an invalid length. [ 233.495390][ T9018] netlink: 132 bytes leftover after parsing attributes in process `syz.3.891'. [ 233.532074][ T8926] team0: Port device team_slave_1 added [ 233.578578][ T8923] hsr_slave_0: entered promiscuous mode [ 233.606453][ T8923] hsr_slave_1: entered promiscuous mode [ 233.638467][ T8926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.652793][ T8926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.679447][ T8926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.753760][ T8926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.760757][ T8926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.795403][ T8926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.861866][ T8928] hsr_slave_0: entered promiscuous mode [ 233.886117][ T8928] hsr_slave_1: entered promiscuous mode [ 233.908035][ T8928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.922185][ T8928] Cannot create hsr debugfs directory [ 234.100012][ T8926] hsr_slave_0: entered promiscuous mode [ 234.108131][ T8926] hsr_slave_1: entered promiscuous mode [ 234.119743][ T8926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.128025][ T8926] Cannot create hsr debugfs directory [ 234.433248][ T5764] Bluetooth: hci0: command tx timeout [ 234.637698][ T8923] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 234.666781][ T8923] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 234.676620][ T5764] Bluetooth: hci1: command tx timeout [ 234.690185][ T8923] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 234.728203][ T8923] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 234.833258][ T5764] Bluetooth: hci2: command tx timeout [ 234.905745][ T8926] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 234.936309][ T8926] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 234.962749][ T8926] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 235.015668][ T8926] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 235.122598][ T8928] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 235.155296][ T8928] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 235.174911][ T8928] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 235.200146][ T8928] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 235.235371][ T8923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.338158][ T8923] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.419692][ T9067] netlink: 164 bytes leftover after parsing attributes in process `syz.3.899'. [ 235.443847][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.451187][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.529102][ T8926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.539662][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.546887][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.627050][ T8928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.665236][ T8926] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.731938][ T8928] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.747747][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.755323][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.794676][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.802075][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.830694][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.838018][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.922808][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.930144][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.120515][ T8928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 236.145413][ T8928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.438369][ T8923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.521160][ T5764] Bluetooth: hci0: command tx timeout [ 236.719791][ T8926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.748092][ T8928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.755199][ T5764] Bluetooth: hci1: command tx timeout [ 236.913258][ T5764] Bluetooth: hci2: command tx timeout [ 236.962932][ T9102] netlink: 'syz.3.902': attribute type 4 has an invalid length. [ 237.199150][ T8923] veth0_vlan: entered promiscuous mode [ 237.231544][ T8923] veth1_vlan: entered promiscuous mode [ 237.348796][ T8928] veth0_vlan: entered promiscuous mode [ 237.390606][ T8923] veth0_macvtap: entered promiscuous mode [ 237.401616][ T8928] veth1_vlan: entered promiscuous mode [ 237.430405][ T8923] veth1_macvtap: entered promiscuous mode [ 237.460254][ T8926] veth0_vlan: entered promiscuous mode [ 237.488762][ T8926] veth1_vlan: entered promiscuous mode [ 237.541051][ T8923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.557520][ T8923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.567515][ T8923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.578392][ T8923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.598277][ T8923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.622268][ T8928] veth0_macvtap: entered promiscuous mode [ 237.662468][ T8923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.674996][ T8923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.686237][ T8923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.697526][ T8923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.711848][ T8923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.729264][ T8928] veth1_macvtap: entered promiscuous mode [ 237.739394][ T9115] netlink: 192440 bytes leftover after parsing attributes in process `syz.3.904'. [ 237.752741][ T9115] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 237.776622][ T8923] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.786401][ T8923] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.797904][ T8923] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.808149][ T8923] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.868347][ T8926] veth0_macvtap: entered promiscuous mode [ 237.902915][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.913822][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.930353][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.941064][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.951954][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.964801][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.986927][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.002658][ T8926] veth1_macvtap: entered promiscuous mode [ 238.012118][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.023896][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.035793][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.053439][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.064561][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.077739][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.091251][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.168975][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.185631][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.197406][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.210501][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.222338][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.233101][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.242945][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.257632][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.274347][ T8926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.285533][ T8928] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.297580][ T8928] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.306514][ T8928] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.316141][ T8928] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.371887][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.381054][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.392138][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.404210][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.415040][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.426276][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.443186][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.457957][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.471027][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.482354][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.495688][ T8926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.520085][ T8926] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.529488][ T8926] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.538358][ T8926] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.547425][ T8926] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.622944][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.634343][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.727197][ T9117] netlink: 'syz.3.905': attribute type 21 has an invalid length. [ 238.740397][ T9117] netlink: 'syz.3.905': attribute type 6 has an invalid length. [ 238.748804][ T9117] netlink: 132 bytes leftover after parsing attributes in process `syz.3.905'. [ 238.768952][ T9118] netlink: 'syz.3.905': attribute type 21 has an invalid length. [ 238.778790][ T9118] netlink: 'syz.3.905': attribute type 6 has an invalid length. [ 238.787970][ T9118] netlink: 132 bytes leftover after parsing attributes in process `syz.3.905'. [ 238.818907][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.832522][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.944194][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.968601][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.012940][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.028015][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.061467][ T7953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.092286][ T7953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.187882][ T9126] netlink: 'syz.4.907': attribute type 4 has an invalid length. [ 239.222068][ T9126] netlink: 152 bytes leftover after parsing attributes in process `syz.4.907'. [ 239.282392][ T9132] netlink: 'syz.3.908': attribute type 2 has an invalid length. [ 239.305568][ T9132] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.908'. [ 239.313845][ T9126] .`: renamed from bond0 (while UP) [ 239.328027][ T9130] netlink: 'syz.3.908': attribute type 2 has an invalid length. [ 239.342963][ T9130] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.908'. [ 239.755709][ T9147] netlink: 'syz.5.911': attribute type 10 has an invalid length. [ 240.037338][ T9147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.207788][ T9158] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.915'. [ 240.239742][ T9158] netlink: zone id is out of range [ 240.253641][ T9158] netlink: zone id is out of range [ 240.256096][ T9147] team0: Port device bond0 added [ 240.266175][ T9158] netlink: zone id is out of range [ 240.281696][ T9158] netlink: zone id is out of range [ 240.290539][ T9158] netlink: zone id is out of range [ 240.296630][ T9158] netlink: zone id is out of range [ 240.310575][ T9158] netlink: zone id is out of range [ 240.333308][ T9158] netlink: zone id is out of range [ 240.343156][ T9158] netlink: zone id is out of range [ 240.444217][ T9156] pim6reg1: entered promiscuous mode [ 240.449827][ T9156] pim6reg1: entered allmulticast mode [ 240.855601][ T9179] netlink: 'syz.6.920': attribute type 29 has an invalid length. [ 241.259946][ T9183] syzkaller0: entered promiscuous mode [ 241.266266][ T9183] syzkaller0: entered allmulticast mode [ 241.740620][ T9203] tap0: tun_chr_ioctl cmd 1074025675 [ 241.746192][ T9203] tap0: persist enabled [ 241.750771][ T9203] tap0: tun_chr_ioctl cmd 1074025675 [ 241.756546][ T9203] tap0: persist enabled [ 243.917848][ T9219] netlink: 40 bytes leftover after parsing attributes in process `syz.6.929'. [ 244.000727][ T9219] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.226155][ T9219] bridge_slave_0 (unregistering): left allmulticast mode [ 244.243435][ T9219] bridge_slave_0 (unregistering): left promiscuous mode [ 244.251296][ T9219] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.440752][ T9225] IPv6: Can't replace route, no match found [ 244.468818][ T9227] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 244.719268][ T9250] validate_nla: 3 callbacks suppressed [ 244.719284][ T9250] netlink: 'syz.6.936': attribute type 11 has an invalid length. [ 244.750594][ T9250] netlink: 132 bytes leftover after parsing attributes in process `syz.6.936'. [ 245.199732][ T9270] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.947'. [ 246.301823][ T9312] netlink: 'syz.6.968': attribute type 7 has an invalid length. [ 247.164926][ T8494] wlan1: Trigger new scan to find an IBSS to join [ 247.279376][ T9336] syzkaller0: entered promiscuous mode [ 247.295300][ T9336] syzkaller0: entered allmulticast mode [ 247.331209][ T9343] netlink: 'syz.6.980': attribute type 21 has an invalid length. [ 247.345209][ T9343] netlink: 132 bytes leftover after parsing attributes in process `syz.6.980'. [ 247.413424][ T9345] syz.3.982[9345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.413545][ T9345] syz.3.982[9345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.454869][ T9345] syz.3.982[9345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.483212][ T9345] syz.3.982[9345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.489650][ T9360] lo: entered promiscuous mode [ 249.511562][ T9360] lo: entered allmulticast mode [ 250.201028][ T12] wlan1: Trigger new scan to find an IBSS to join [ 250.486331][ T9399] netlink: 'syz.5.1006': attribute type 4 has an invalid length. [ 250.510110][ T9399] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1006'. [ 250.712247][ T9410] netlink: 'syz.4.1010': attribute type 4 has an invalid length. [ 250.721598][ T9410] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1010'. [ 250.740847][ T9410] net_ratelimit: 125 callbacks suppressed [ 250.740866][ T9410] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 251.814665][ T9443] wg2: entered promiscuous mode [ 251.833140][ T9443] wg2: entered allmulticast mode [ 253.184815][ T9493] syz.3.1048[9493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.184935][ T9493] syz.3.1048[9493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.234020][ T12] wlan1: Trigger new scan to find an IBSS to join [ 253.339060][ T9498] netlink: 'syz.4.1051': attribute type 21 has an invalid length. [ 253.354194][ T9500] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1052'. [ 253.449827][ T9502] netlink: 'syz.3.1053': attribute type 10 has an invalid length. [ 253.570430][ T9502] geneve1: entered promiscuous mode [ 253.613938][ T9502] geneve1: entered allmulticast mode [ 253.620403][ T9502] team0: Port device geneve1 added [ 253.650298][ T9508] IPv6: Can't replace route, no match found [ 253.705905][ T9512] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1057'. [ 253.840048][ T9517] IPv6: Can't replace route, no match found [ 253.970999][ T9521] pim6reg1: entered promiscuous mode [ 253.994482][ T9521] pim6reg1: entered allmulticast mode [ 254.249222][ T61] wlan1: Creating new IBSS network, BSSID 7a:c7:c1:c5:38:fc [ 254.450472][ T9542] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1072'. [ 255.330821][ T9577] syz.5.1089[9577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.330945][ T9577] syz.5.1089[9577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.391312][ T9577] syz.5.1089[9577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.436518][ T9577] syz.5.1089[9577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.035964][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.058765][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.596262][ T9636] syz.6.1114[9636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.596392][ T9636] syz.6.1114[9636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.645979][ T9636] syz_tun: refused to change device tx_queue_len [ 257.797410][ T9644] netlink: 'syz.4.1116': attribute type 10 has an invalid length. [ 257.848610][ T9644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.898760][ T9644] .`: (slave batadv0): Enslaving as an active interface with an up link [ 258.197749][ T9658] netlink: 'syz.3.1122': attribute type 1 has an invalid length. [ 258.227243][ T9658] netlink: 'syz.3.1122': attribute type 4 has an invalid length. [ 258.268763][ T9658] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1122'. [ 258.313772][ T9662] netlink: 'syz.3.1122': attribute type 1 has an invalid length. [ 258.335436][ T9662] netlink: 'syz.3.1122': attribute type 4 has an invalid length. [ 258.351127][ T9662] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1122'. [ 258.968332][ T9685] IPv6: Can't replace route, no match found [ 259.802070][ T9704] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1141'. [ 260.060266][ T9714] wg2: entered promiscuous mode [ 260.082655][ T9714] wg2: entered allmulticast mode [ 261.602681][ T9764] netlink: 'syz.6.1172': attribute type 3 has an invalid length. [ 261.638081][ T9764] netlink: 'syz.6.1172': attribute type 1 has an invalid length. [ 261.666508][ T9764] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.1172'. [ 261.869329][ T9774] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1175'. [ 262.068655][ T9781] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 263.786438][ T9839] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1203'. [ 265.558206][ T9901] netlink: 'syz.3.1230': attribute type 21 has an invalid length. [ 265.571301][ T9901] netlink: 'syz.3.1230': attribute type 1 has an invalid length. [ 265.580915][ T9901] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1230'. [ 266.259207][ T9918] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1238'. [ 267.898593][ T9985] ±ÿ: renamed from team_slave_1 (while UP) [ 269.729246][T10038] pim6reg1: entered promiscuous mode [ 269.735961][T10038] pim6reg1: entered allmulticast mode [ 270.086299][T10047] netlink: 'syz.3.1294': attribute type 3 has an invalid length. [ 270.105486][T10047] netlink: 'syz.3.1294': attribute type 1 has an invalid length. [ 270.124679][T10047] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1294'. [ 271.937667][T10088] wg2: left promiscuous mode [ 272.005943][T10088] wg2: left allmulticast mode [ 272.514748][T10109] netlink: 'syz.3.1325': attribute type 21 has an invalid length. [ 272.544680][T10109] netlink: 'syz.3.1325': attribute type 1 has an invalid length. [ 272.568818][T10109] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1325'. [ 272.816747][T10119] syz.3.1331[10119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.817452][T10119] syz.3.1331[10119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.602380][T10142] pim6reg1: entered promiscuous mode [ 273.627542][T10142] pim6reg1: entered allmulticast mode [ 276.895403][T10229] netlink: 'syz.3.1384': attribute type 3 has an invalid length. [ 276.917343][T10229] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1384'. [ 277.040784][T10234] netlink: 'syz.4.1386': attribute type 10 has an invalid length. [ 277.065094][T10234] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1386'. [ 277.336867][T10243] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1391'. [ 278.072356][T10271] netlink: 'syz.5.1404': attribute type 3 has an invalid length. [ 278.095576][T10271] netlink: 'syz.5.1404': attribute type 1 has an invalid length. [ 278.107895][T10271] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.1404'. [ 278.352583][T10283] syz.4.1410[10283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.352725][T10283] syz.4.1410[10283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.374782][T10283] syz.4.1410[10283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.397265][T10283] syz.4.1410[10283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.458342][T10355] netlink: 'syz.4.1443': attribute type 21 has an invalid length. [ 280.516607][T10355] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1443'. [ 280.543216][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1443'. [ 281.599968][T10386] netlink: 'syz.5.1456': attribute type 21 has an invalid length. [ 281.613786][T10386] netlink: 'syz.5.1456': attribute type 6 has an invalid length. [ 281.627935][T10386] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1456'. [ 283.409821][T10445] netlink: 'syz.5.1484': attribute type 7 has an invalid length. [ 283.642406][T10450] syz.5.1487[10450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.642533][T10450] syz.5.1487[10450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.010774][T10457] syz.3.1490[10457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.033359][T10457] syz.3.1490[10457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.061557][ T5770] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 284.094225][ T5770] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 284.102596][ T5770] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 284.110954][ T5770] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 284.133389][ T5770] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 284.140831][ T5770] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 284.334492][ T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 284.476417][T10458] chnl_net:caif_netlink_parms(): no params data found [ 284.611444][T10458] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.629443][T10458] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.641286][T10458] bridge_slave_0: entered allmulticast mode [ 284.649625][T10458] bridge_slave_0: entered promiscuous mode [ 284.659259][T10458] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.667137][T10458] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.675317][T10458] bridge_slave_1: entered allmulticast mode [ 284.683271][T10458] bridge_slave_1: entered promiscuous mode [ 284.745285][T10458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.775317][T10458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.880141][T10458] team0: Port device team_slave_0 added [ 284.902009][T10458] team0: Port device team_slave_1 added [ 284.971206][T10492] IPv6: Can't replace route, no match found [ 284.982225][T10458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.998999][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.034627][T10458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.061194][T10458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.072055][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.133113][T10458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.364577][T10458] hsr_slave_0: entered promiscuous mode [ 285.379129][T10458] hsr_slave_1: entered promiscuous mode [ 285.388812][T10458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.419421][T10458] Cannot create hsr debugfs directory [ 285.902830][T10516] IPv6: Can't replace route, no match found [ 286.088639][T10458] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 286.193499][ T5770] Bluetooth: hci4: command tx timeout [ 286.223478][T10458] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 286.263687][T10458] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 286.350581][T10458] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 286.645232][T10458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.716643][T10458] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.819851][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.828770][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.925476][ T8494] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.932687][ T8494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.497616][T10458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.611997][T10579] syz_tun: refused to change device tx_queue_len [ 287.839534][T10585] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280 [ 288.273822][ T5770] Bluetooth: hci4: command tx timeout [ 288.441197][T10458] veth0_vlan: entered promiscuous mode [ 288.499121][T10458] veth1_vlan: entered promiscuous mode [ 288.584415][T10458] veth0_macvtap: entered promiscuous mode [ 288.648658][T10458] veth1_macvtap: entered promiscuous mode [ 288.718974][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.761936][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.783540][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.801168][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.820780][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.832236][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.845172][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.858698][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.887934][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.913877][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.946557][T10458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.995989][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.014273][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.025204][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.037077][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.051555][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.073670][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.085274][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.096868][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.108196][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.119204][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.150322][T10458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.200100][T10626] macvtap0: refused to change device tx_queue_len [ 289.229328][T10458] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.270681][T10458] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.299063][T10458] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.310699][T10458] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.360834][T10632] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1558'. [ 289.561802][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.584168][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.800678][T10638] syzkaller0: entered promiscuous mode [ 289.839089][T10638] syzkaller0: entered allmulticast mode [ 289.851192][ T7953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.869356][ T7953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.358012][ T5770] Bluetooth: hci4: command tx timeout [ 292.436602][ T5770] Bluetooth: hci4: command tx timeout [ 292.666484][T10653] netlink: 'syz.4.1568': attribute type 10 has an invalid length. [ 292.682252][T10653] veth1_macvtap: left promiscuous mode [ 293.248489][ T2964] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.437856][ T2964] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.485199][T10686] netlink: 'syz.7.1580': attribute type 7 has an invalid length. [ 293.665854][ T2964] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.842350][ T2964] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.334433][T10758] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1615'. [ 295.923545][T10778] IPv6: Can't replace route, no match found [ 296.274260][T10792] syz.3.1630[10792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 296.274383][T10792] syz.3.1630[10792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 296.451916][ T2964] hsr_slave_0: left promiscuous mode [ 296.544753][ T2964] hsr_slave_1: left promiscuous mode [ 296.563831][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.571314][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.606384][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.631391][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.651719][ T2964] bridge_slave_1: left allmulticast mode [ 296.658407][ T2964] bridge_slave_1: left promiscuous mode [ 296.665849][ T2964] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.697650][ T2964] veth1_macvtap: left promiscuous mode [ 296.704597][ T2964] veth0_macvtap: left promiscuous mode [ 296.710426][ T2964] veth1_vlan: left promiscuous mode [ 296.717023][ T2964] veth0_vlan: left promiscuous mode [ 297.395235][ T2964] team0 (unregistering): Port device team_slave_1 removed [ 297.450403][ T2964] team0 (unregistering): Port device team_slave_0 removed [ 297.507898][ T2964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.564695][ T2964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.061736][ T2964] bond0 (unregistering): Released all slaves [ 299.086583][T10852] €Â: renamed from vlan0 (while UP) [ 299.088233][T10855] syz.5.1660[10855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.092355][T10855] syz.5.1660[10855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.285442][T10936] netlink: 'syz.7.1700': attribute type 5 has an invalid length. [ 301.797618][T10961] netlink: 'syz.4.1711': attribute type 25 has an invalid length. [ 301.812681][T10961] netlink: 'syz.4.1711': attribute type 1 has an invalid length. [ 301.825082][T10961] bridge0: port 1(bridge_slave_0) entered learning state [ 302.051565][T10975] syz.5.1718[10975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.051688][T10975] syz.5.1718[10975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.322508][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.562158][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.915435][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.970654][T11006] netlink: 'syz.4.1733': attribute type 7 has an invalid length. [ 303.332628][ T61] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.768311][T11106] netlink: 'syz.3.1780': attribute type 5 has an invalid length. [ 305.791567][T11108] netlink: 'syz.5.1781': attribute type 7 has an invalid length. [ 305.929306][ T61] hsr_slave_0: left promiscuous mode [ 305.952157][ T61] batman_adv: batadv0: Removing interface: team0 [ 305.969360][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.978114][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.991772][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.013196][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.069264][ T61] bridge_slave_1: left allmulticast mode [ 306.078489][ T61] bridge_slave_1: left promiscuous mode [ 306.102742][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.127641][ T61] bridge_slave_0: left allmulticast mode [ 306.134110][ T61] bridge_slave_0: left promiscuous mode [ 306.139929][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.187770][ T61] veth1_macvtap: left promiscuous mode [ 306.205205][ T61] veth0_macvtap: left promiscuous mode [ 306.221565][ T61] veth1_vlan: left promiscuous mode [ 307.126522][ T61] team0 (unregistering): Port device team_slave_1 removed [ 307.216840][ T61] team0 (unregistering): Port device team_slave_0 removed [ 308.261916][T11171] syz.7.1806[11171] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.262074][T11171] syz.7.1806[11171] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.458629][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.650336][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.846524][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.068263][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.273962][T11227] syzkaller0: entered promiscuous mode [ 311.279726][T11227] syzkaller0: entered allmulticast mode [ 313.961560][T11267] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 313.972532][T11267] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 313.981815][T11267] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 313.990990][T11267] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 314.000167][T11267] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 314.009372][T11267] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 314.018661][T11267] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 314.027935][T11267] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 314.037624][T11267] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 314.047205][T11267] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 315.360237][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 315.698028][T11271] sit0: entered promiscuous mode [ 317.132356][T11296] pim6reg1: entered promiscuous mode [ 317.144490][T11296] pim6reg1: entered allmulticast mode [ 317.341933][T11309] pim6reg1: entered promiscuous mode [ 317.365154][T11309] pim6reg1: entered allmulticast mode [ 317.477864][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.488103][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.901902][T11315] syzkaller0: entered promiscuous mode [ 317.916647][T11315] syzkaller0: entered allmulticast mode [ 319.470712][T11331] syz.7.1865[11331] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.470841][T11331] syz.7.1865[11331] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.496473][T11331] syz.7.1865[11331] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.508557][T11331] syz.7.1865[11331] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.705747][ T61] bond0: (slave wlan1): Releasing backup interface [ 321.969989][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.985718][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.005774][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.014002][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.030383][ T61] bridge0: port 1(team0) entered disabled state [ 322.047382][ T61] bridge_slave_1: left allmulticast mode [ 322.053646][ T61] bridge_slave_1: left promiscuous mode [ 322.059460][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.089101][ T61] veth1_macvtap: left promiscuous mode [ 322.434540][ T61] geneve1 (unregistering): left promiscuous mode [ 322.441566][ T61] geneve1 (unregistering): left allmulticast mode [ 322.461085][ T61] team0 (unregistering): Port device geneve1 removed [ 322.906757][ T61] team_slave_1 (unregistering): left promiscuous mode [ 322.915605][ T61] team_slave_1 (unregistering): left allmulticast mode [ 322.928451][ T61] team0 (unregistering): Port device team_slave_1 removed [ 322.992839][ T61] team_slave_0 (unregistering): left promiscuous mode [ 323.000017][ T61] team_slave_0 (unregistering): left allmulticast mode [ 323.008389][ T61] team0 (unregistering): Port device team_slave_0 removed [ 323.081360][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.146632][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.322484][ T61] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 323.580950][ T61] bond0 (unregistering): Released all slaves [ 323.667628][T11370] net_ratelimit: 3320 callbacks suppressed [ 323.667645][T11370] veth0_macvtap: mtu greater than device maximum [ 326.928381][T11394] veth0_vlan: entered allmulticast mode [ 327.184550][T11396] pim6reg1: entered promiscuous mode [ 327.200758][T11396] pim6reg1: entered allmulticast mode [ 330.798009][T11464] pim6reg1: entered promiscuous mode [ 330.817402][T11464] pim6reg1: entered allmulticast mode [ 331.213361][T11470] wg2: entered promiscuous mode [ 331.223140][T11470] wg2: entered allmulticast mode [ 331.448297][T11479] pim6reg1: entered promiscuous mode [ 331.466622][T11479] pim6reg1: entered allmulticast mode [ 334.809554][T11496] wg2: left promiscuous mode [ 334.821586][T11496] wg2: left allmulticast mode [ 335.388209][T11498] wg2: entered promiscuous mode [ 335.403645][T11498] wg2: entered allmulticast mode [ 335.474993][T11499] veth0_vlan: entered allmulticast mode [ 338.535965][T11546] bond_slave_1: mtu less than device minimum [ 339.052230][T11554] syz.5.1944[11554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.052448][T11554] syz.5.1944[11554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.028499][T11594] syzkaller0: entered promiscuous mode [ 346.172723][T11604] veth0_vlan: left promiscuous mode [ 346.261221][T11604] veth0_vlan: entered promiscuous mode [ 346.563168][ T8494] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 348.853710][T11648] sit0: entered allmulticast mode [ 348.995088][T11648] sit0: entered promiscuous mode [ 350.031215][T11677] syzkaller0: entered promiscuous mode [ 354.760253][T11725] netlink: 'syz.7.2001': attribute type 4 has an invalid length. [ 354.781139][T11725] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2001'. [ 354.897524][T11725] : renamed from bond0 (while UP) [ 355.357830][T11731] ÿ: renamed from bond_slave_0 (while UP) [ 355.392927][T11736] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2004'. [ 355.405707][ T5770] Bluetooth: hci1: command 0x0406 tx timeout [ 355.405722][ T5082] Bluetooth: hci0: command 0x0406 tx timeout [ 363.359650][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.368492][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.377027][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.386250][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.395213][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 363.403322][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.531451][T11750] chnl_net:caif_netlink_parms(): no params data found [ 363.597538][T11750] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.604808][T11750] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.611954][T11750] bridge_slave_0: entered allmulticast mode [ 363.619376][T11750] bridge_slave_0: entered promiscuous mode [ 363.627016][T11750] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.634693][T11750] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.641899][T11750] bridge_slave_1: entered allmulticast mode [ 363.648631][T11750] bridge_slave_1: entered promiscuous mode [ 363.673819][T11750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.685446][T11750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.717239][T11750] team0: Port device team_slave_0 added [ 363.724921][T11750] team0: Port device team_slave_1 added [ 363.748629][T11750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.755926][T11750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.783228][T11750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.798546][T11750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.805824][T11750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.832215][T11750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.867764][T11750] hsr_slave_0: entered promiscuous mode [ 363.874624][T11750] hsr_slave_1: entered promiscuous mode [ 363.880788][T11750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.888551][T11750] Cannot create hsr debugfs directory [ 364.008597][T11750] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 364.019265][T11750] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 364.029349][T11750] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 364.039768][T11750] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 364.065829][T11750] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.072922][T11750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.080550][T11750] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.087748][T11750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.146652][T11750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.162715][ T7953] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.171498][ T7953] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.189880][T11750] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.217251][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.224480][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.240804][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.248018][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.092071][T11777] pim6reg1: entered promiscuous mode [ 365.240452][T11777] pim6reg1: entered allmulticast mode [ 365.493602][ T5764] Bluetooth: hci2: command tx timeout [ 366.162301][T11750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.558583][ T5764] Bluetooth: hci2: command tx timeout [ 368.936245][T11750] veth0_vlan: entered promiscuous mode [ 368.970463][T11750] veth1_vlan: entered promiscuous mode [ 369.169472][T11750] veth0_macvtap: entered promiscuous mode [ 369.201752][T11750] veth1_macvtap: entered promiscuous mode [ 369.296006][T11750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.343449][T11750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.390365][T11750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.437050][T11750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.494793][T11750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.533367][T11750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.580992][T11750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.640706][ T5764] Bluetooth: hci2: command tx timeout [ 369.710252][T11750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.727326][T11750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.770376][T11750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.800022][T11750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.844884][T11750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.880702][T11750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.894602][T11750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.950979][T11750] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.015409][T11750] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.181015][T11750] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.311961][T11750] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.853523][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.862196][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.958736][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.997367][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.467701][T11857] syzkaller0: entered promiscuous mode [ 371.713146][ T5764] Bluetooth: hci2: command tx timeout [ 375.768766][T11903] sit0: entered allmulticast mode [ 376.040639][T11915] bond_slave_1: mtu less than device minimum [ 377.630977][ T7953] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 378.920365][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.926852][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.604424][T11962] sit0: entered allmulticast mode [ 386.313382][T11996] bond_slave_1: mtu less than device minimum [ 386.767753][T12001] pim6reg1: entered promiscuous mode [ 386.774534][T12001] pim6reg1: entered allmulticast mode [ 386.781413][T12008] bond_slave_1: mtu less than device minimum [ 395.379276][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 395.389754][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 395.401004][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 395.474096][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 395.504315][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 395.516814][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 396.348024][T12067] chnl_net:caif_netlink_parms(): no params data found [ 396.815163][T12067] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.822436][T12067] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.837425][T12067] bridge_slave_0: entered allmulticast mode [ 396.845044][T12067] bridge_slave_0: entered promiscuous mode [ 396.863779][T12067] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.872821][T12067] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.880225][T12067] bridge_slave_1: entered allmulticast mode [ 396.888592][T12067] bridge_slave_1: entered promiscuous mode [ 396.931732][T12067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.949967][T12067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.996685][T12067] team0: Port device team_slave_0 added [ 397.006862][T12067] team0: Port device team_slave_1 added [ 397.044045][T12067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.051284][T12067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.079307][T12067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.092144][T12067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.099156][T12067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.125559][T12067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.176721][ T61] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.205597][T12067] hsr_slave_0: entered promiscuous mode [ 397.211970][T12067] hsr_slave_1: entered promiscuous mode [ 397.218698][T12067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.226401][T12067] Cannot create hsr debugfs directory [ 397.250574][ T61] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.336440][ T61] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.418380][ T61] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.447004][T12067] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 397.458721][T12067] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 397.468878][T12067] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 397.480129][T12067] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 397.634388][ T5764] Bluetooth: hci5: command tx timeout [ 397.708733][T12067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.743415][T12067] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.766156][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.773344][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.788350][ T7953] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.795507][ T7953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.019242][T12067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.257704][T12067] veth0_vlan: entered promiscuous mode [ 398.284933][T12067] veth1_vlan: entered promiscuous mode [ 398.315005][T12067] veth0_macvtap: entered promiscuous mode [ 398.326997][T12067] veth1_macvtap: entered promiscuous mode [ 398.368424][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.379148][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.389007][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.399503][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.412136][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.423177][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.437235][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.448530][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.461059][T12067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.474806][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.488407][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.499372][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.510875][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.521359][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.531953][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.542011][T12067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.553222][T12067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.564592][T12067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.585186][T12067] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.595335][T12067] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.604401][T12067] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.614545][T12067] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.723525][ T8494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.733354][ T8494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.741779][ T61] hsr_slave_0: left promiscuous mode [ 398.750446][ T61] hsr_slave_1: left promiscuous mode [ 398.760404][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.768260][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.778413][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.786211][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.794265][ T61] bridge_slave_1: left allmulticast mode [ 398.799932][ T61] bridge_slave_1: left promiscuous mode [ 398.805769][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.816693][ T61] bridge_slave_0: left allmulticast mode [ 398.822369][ T61] bridge_slave_0: left promiscuous mode [ 398.829737][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.852788][ T61] veth1_macvtap: left promiscuous mode [ 398.858516][ T61] veth0_macvtap: left promiscuous mode [ 398.864898][ T61] veth1_vlan: left promiscuous mode [ 398.870328][ T61] veth0_vlan: left promiscuous mode [ 399.421284][ T61] team0 (unregistering): Port device team_slave_1 removed [ 399.471711][ T61] team0 (unregistering): Port device team_slave_0 removed [ 399.525492][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.579789][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.720948][ T5764] Bluetooth: hci5: command tx timeout [ 400.119625][ T61] bond0 (unregistering): Released all slaves [ 400.227835][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.244463][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.804751][ T5764] Bluetooth: hci5: command tx timeout [ 403.893725][ T5764] Bluetooth: hci5: command tx timeout [ 404.195454][T12158] pim6reg1: entered promiscuous mode [ 404.200818][T12158] pim6reg1: entered allmulticast mode [ 405.863354][T12177] macsec0: entered promiscuous mode [ 405.868812][T12177] macsec0: entered allmulticast mode [ 405.923383][T12177] veth1_macvtap: entered allmulticast mode [ 406.061159][T12179] pim6reg1: entered promiscuous mode [ 406.084811][T12179] pim6reg1: entered allmulticast mode [ 406.289501][T12181] syzkaller0: entered allmulticast mode [ 406.599794][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 408.866985][ T2964] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 414.318696][T12246] pim6reg1: entered promiscuous mode [ 414.324208][T12246] pim6reg1: entered allmulticast mode [ 414.416499][T12248] pim6reg1: entered promiscuous mode [ 414.424446][T12248] pim6reg1: entered allmulticast mode [ 414.556732][T12252] pim6reg1: entered promiscuous mode [ 414.562081][T12252] pim6reg1: entered allmulticast mode [ 420.622547][T12328] sit0: left promiscuous mode [ 420.892461][T12329] sit0: entered promiscuous mode [ 421.564304][T12339] sit0: entered allmulticast mode [ 422.255062][T12372] sit0: entered allmulticast mode [ 428.210241][T12451] veth0_macvtap: mtu greater than device maximum [ 428.574356][T12457] sit0: entered promiscuous mode [ 432.416497][T12475] bridge0: port 3(hsr_slave_1) entered blocking state [ 432.453141][T12475] bridge0: port 3(hsr_slave_1) entered disabled state [ 432.557782][T12475] hsr_slave_1: entered allmulticast mode [ 432.596571][T12475] hsr_slave_1: left allmulticast mode [ 433.704054][T12490] veth1_macvtap: left promiscuous mode [ 434.269536][T12496] veth0_macvtap: mtu greater than device maximum [ 435.010685][T12500] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 435.226880][T12500] syzkaller0: entered promiscuous mode [ 435.515561][T12500] syzkaller0: entered allmulticast mode [ 440.085160][ T2905] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 440.365227][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.371672][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.167725][T12648] bridge0: port 3(hsr_slave_1) entered blocking state [ 449.178037][T12648] bridge0: port 3(hsr_slave_1) entered disabled state [ 449.186737][T12648] hsr_slave_1: entered allmulticast mode [ 449.209935][T12648] hsr_slave_1: left allmulticast mode [ 453.358397][T12694] wg2: left promiscuous mode [ 453.447247][T12694] wg2: left allmulticast mode [ 470.046224][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 470.058548][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 470.068834][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 470.083335][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 470.101308][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 470.109866][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 472.203918][ T51] Bluetooth: hci2: command tx timeout [ 472.432263][ T8494] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 474.274015][ T51] Bluetooth: hci2: command tx timeout [ 476.363142][ T51] Bluetooth: hci2: command tx timeout [ 477.524449][ T5764] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 477.543354][ T5764] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 477.558719][ T5764] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 477.568735][ T5764] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 477.576632][ T5764] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 477.589471][ T5764] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 477.931270][T12779] chnl_net:caif_netlink_parms(): no params data found [ 478.443630][ T5764] Bluetooth: hci2: command tx timeout [ 479.425722][T12779] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.432895][T12779] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.444364][T12779] bridge_slave_0: entered allmulticast mode [ 479.451632][T12779] bridge_slave_0: entered promiscuous mode [ 479.470860][T12819] chnl_net:caif_netlink_parms(): no params data found [ 479.490014][T12779] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.497449][T12779] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.504919][T12779] bridge_slave_1: entered allmulticast mode [ 479.512726][T12779] bridge_slave_1: entered promiscuous mode [ 479.539157][ T48] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.633509][ T5764] Bluetooth: hci6: command tx timeout [ 479.703882][T12779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.749197][ T48] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.782562][T12779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.877174][ T48] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.939952][T12779] team0: Port device team_slave_0 added [ 480.059158][ T48] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.086150][T12779] team0: Port device team_slave_1 added [ 480.106501][T12819] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.118475][T12819] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.128518][T12819] bridge_slave_0: entered allmulticast mode [ 480.138661][T12819] bridge_slave_0: entered promiscuous mode [ 480.164015][T12819] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.171178][T12819] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.197318][T12819] bridge_slave_1: entered allmulticast mode [ 480.211705][T12819] bridge_slave_1: entered promiscuous mode [ 480.346467][T12779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.356816][T12779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.383189][T12779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.397095][T12779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.405207][T12779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.435461][T12779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.469938][T12819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.496811][T12819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.608850][T12819] team0: Port device team_slave_0 added [ 480.618237][T12819] team0: Port device team_slave_1 added [ 480.682684][T12779] hsr_slave_0: entered promiscuous mode [ 480.689626][T12779] hsr_slave_1: entered promiscuous mode [ 480.697373][T12779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.705006][T12779] Cannot create hsr debugfs directory [ 480.811188][T12819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.818481][T12819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.845849][T12819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.862052][T12819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.869109][T12819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.896384][T12819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.027095][T12819] hsr_slave_0: entered promiscuous mode [ 481.035996][T12819] hsr_slave_1: entered promiscuous mode [ 481.042733][T12819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.051748][T12819] Cannot create hsr debugfs directory [ 481.713602][ T5764] Bluetooth: hci6: command tx timeout [ 482.168325][T12779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 482.200851][T12779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 482.225731][T12779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 482.246323][ T48] hsr_slave_0: left promiscuous mode [ 482.252263][ T48] hsr_slave_1: left promiscuous mode [ 482.258459][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.266563][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.278078][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.285594][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.293566][ T48] bridge_slave_1: left allmulticast mode [ 482.299244][ T48] bridge_slave_1: left promiscuous mode [ 482.305401][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.314987][ T48] bridge_slave_0: left allmulticast mode [ 482.320834][ T48] bridge_slave_0: left promiscuous mode [ 482.327108][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.354257][ T48] veth1_macvtap: left promiscuous mode [ 482.359879][ T48] veth0_macvtap: left promiscuous mode [ 482.369106][ T48] veth1_vlan: left promiscuous mode [ 482.375202][ T48] veth0_vlan: left promiscuous mode [ 482.925817][ T48] team0 (unregistering): Port device 26±ÿ removed [ 482.970491][ T48] team0 (unregistering): Port device team_slave_0 removed [ 483.022834][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.072397][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.456422][ T48] team0 (unregistering): Port device bond0 removed [ 483.596093][ T48] bond0 (unregistering): Released all slaves [ 483.673419][T12779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 483.804141][ T5764] Bluetooth: hci6: command tx timeout [ 483.812442][T12779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.848064][T12779] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.859018][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.866199][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.896370][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.903572][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.079277][T12819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 484.090017][T12819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 484.125602][T12819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 484.141765][T12819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 484.280470][ T48] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.321234][T12819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.357182][ T48] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.391234][T12779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.401214][T12819] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.427885][ T48] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.454891][ T8494] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.462031][ T8494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.475587][ T8494] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.482774][ T8494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.521790][ T48] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.598391][T12779] veth0_vlan: entered promiscuous mode [ 484.621613][T12779] veth1_vlan: entered promiscuous mode [ 484.705526][T12779] veth0_macvtap: entered promiscuous mode [ 484.739252][T12779] veth1_macvtap: entered promiscuous mode [ 484.802723][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.817766][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.827727][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.842892][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.854725][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.865874][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.888086][T12779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.947963][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.959245][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.969163][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.979960][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.989836][T12779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.000535][T12779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.012281][T12779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.052075][T12779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.061104][T12779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.070033][T12779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.079640][T12779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.109310][T12819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.239515][ T8494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.256593][ T8494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.276415][T12819] veth0_vlan: entered promiscuous mode [ 485.296627][T12819] veth1_vlan: entered promiscuous mode [ 485.338456][ T2905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.358452][ T2905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.383332][T12819] veth0_macvtap: entered promiscuous mode [ 485.394227][T12819] veth1_macvtap: entered promiscuous mode [ 485.457717][T12819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.510884][T12819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.520891][T12819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.531495][T12819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.549425][T12819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.564188][T12819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.588915][T12819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.599939][T12819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.622184][T12819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.787169][T12819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.808966][T12819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.832332][T12819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.852538][T12819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.865854][T12819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.877319][ T5764] Bluetooth: hci6: command tx timeout [ 485.891757][T12819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.901675][T12819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.925436][T12819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.938108][T12819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.175887][T12819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.204086][T12819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.213284][T12819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.222099][T12819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.735534][ T48] hsr_slave_0: left promiscuous mode [ 486.822568][ T48] hsr_slave_1: left promiscuous mode [ 486.980153][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.102206][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.175775][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.263727][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.361638][ T48] bridge_slave_1: left allmulticast mode [ 487.379413][ T48] bridge_slave_1: left promiscuous mode [ 487.398054][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.435367][ T48] bridge_slave_0: left allmulticast mode [ 487.441059][ T48] bridge_slave_0: left promiscuous mode [ 487.462712][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.525324][ T48] veth0_macvtap: left promiscuous mode [ 487.531010][ T48] veth1_vlan: left promiscuous mode [ 487.543118][ T48] veth0_vlan: left promiscuous mode [ 488.215493][ T48] team0 (unregistering): Port device team_slave_1 removed [ 488.266370][ T48] team0 (unregistering): Port device team_slave_0 removed [ 488.312475][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.364860][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.894989][ T48] bond0 (unregistering): Released all slaves [ 489.008232][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.028229][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.079034][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.089451][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.584582][T12905] pim6reg1: entered promiscuous mode [ 490.589927][T12905] pim6reg1: entered allmulticast mode [ 493.609390][T12922] pim6reg1: entered promiscuous mode [ 493.627715][T12922] pim6reg1: entered allmulticast mode [ 494.753401][ T29] INFO: task syz.3.1975:11644 blocked for more than 143 seconds. [ 494.761292][ T29] Not tainted syzkaller #0 [ 494.795133][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.820404][ T29] task:syz.3.1975 state:D stack:23080 pid:11644 ppid:5766 flags:0x00004006 [ 494.846903][ T29] Call Trace: [ 494.853392][ T29] [ 494.859772][ T29] __schedule+0x14d2/0x44d0 [ 494.876500][ T29] ? rcu_is_watching+0x15/0xb0 [ 494.890573][ T29] ? asan.module_dtor+0x20/0x20 [ 494.907809][ T29] ? trace_contention_end+0x39/0xe0 [ 494.926860][ T29] ? perf_event_ctx_lock_nested+0x460/0x460 [ 494.941841][ T29] ? task_work_cancel+0xa3/0x240 [ 494.957239][ T29] ? task_work_cancel_func+0x210/0x210 [ 494.978468][ T29] schedule+0xbd/0x170 [ 494.983825][ T29] ? _free_event+0xfe/0xf30 [ 494.996238][ T29] _free_event+0x174/0xf30 [ 495.008870][ T29] perf_event_release_kernel+0x836/0x8c0 [ 495.030187][ T29] ? __might_sleep+0xe0/0xe0 [ 495.046458][ T29] ? calc_timer_values+0x400/0x400 [ 495.059501][ T29] ? perf_mmap+0x1630/0x1630 [ 495.075912][ T29] perf_release+0x3b/0x40 [ 495.087059][ T29] __fput+0x234/0x970 [ 495.099315][ T29] task_work_run+0x1ce/0x250 [ 495.116963][ T29] ? task_work_cancel+0x240/0x240 [ 495.122266][ T29] get_signal+0x1235/0x1400 [ 495.139718][ T29] ? create_io_thread+0x140/0x140 [ 495.150941][ T29] arch_do_signal_or_restart+0x9c/0x7b0 [ 495.164613][ T29] ? __x64_sys_clone+0x18c/0x1e0 [ 495.188502][ T29] ? get_sigframe_size+0x20/0x20 [ 495.200249][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 495.216602][ T29] exit_to_user_mode_loop+0x70/0x110 [ 495.237947][ T29] exit_to_user_mode_prepare+0xf6/0x180 [ 495.250982][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 495.267496][ T29] do_syscall_64+0x61/0xb0 [ 495.282858][ T29] ? clear_bhb_loop+0x40/0x90 [ 495.298311][ T29] ? clear_bhb_loop+0x40/0x90 [ 495.306054][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.312140][ T29] RIP: 0033:0x7feab558f749 [ 495.318363][ T29] RSP: 002b:00007feab63aafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 495.330629][ T29] RAX: fffffffffffffffc RBX: 00007feab57e5fa0 RCX: 00007feab558f749 [ 495.340412][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042164000 [ 495.357614][ T29] RBP: 00007feab5613f91 R08: 0000000000000000 R09: 0000000000000000 [ 495.370862][ T29] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 495.386191][ T29] R13: 00007feab57e6038 R14: 00007feab57e5fa0 R15: 00007fffcc65f3e8 [ 495.396352][ T29] [ 495.411848][ T29] [ 495.411848][ T29] Showing all locks held in the system: [ 495.421698][ T29] 1 lock held by khungtaskd/29: [ 495.428835][ T29] #0: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 495.444551][ T29] 2 locks held by getty/5523: [ 495.449454][ T29] #0: ffff88802ceca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 495.470028][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 495.487784][ T29] 3 locks held by kworker/1:6/5915: [ 495.493553][ T29] 3 locks held by kworker/u4:15/8494: [ 495.498999][ T29] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 495.515517][ T29] #1: ffffc90018d97d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 495.528530][ T29] #2: ffffffff8dfa8610 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 495.541583][ T29] 2 locks held by kworker/0:5/12077: [ 495.549241][ T29] #0: ffff888017872538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 495.582450][ T29] #1: ffffc90003457d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 495.626911][ T29] 2 locks held by syz.2.2377/12903: [ 495.639026][ T29] 1 lock held by syz.4.2386/12926: [ 495.654826][ T29] #0: ffffffff8cd358f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830 [ 495.690583][ T29] [ 495.702244][ T29] ============================================= [ 495.702244][ T29] [ 495.710998][ T29] NMI backtrace for cpu 1 [ 495.715411][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 495.722724][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 495.732878][ T29] Call Trace: [ 495.736163][ T29] [ 495.739174][ T29] dump_stack_lvl+0x16c/0x230 [ 495.743850][ T29] ? preempt_count_add+0x91/0x1a0 [ 495.748879][ T29] ? show_regs_print_info+0x20/0x20 [ 495.754069][ T29] ? load_image+0x3b0/0x3b0 [ 495.758570][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 495.763498][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 495.769726][ T29] ? _printk+0xd0/0x110 [ 495.773991][ T29] ? load_image+0x3b0/0x3b0 [ 495.778581][ T29] ? load_image+0x3b0/0x3b0 [ 495.783102][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 495.789222][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 495.795208][ T29] watchdog+0xf41/0xf80 [ 495.799374][ T29] ? watchdog+0x1e1/0xf80 [ 495.803699][ T29] kthread+0x2fa/0x390 [ 495.807757][ T29] ? hungtask_pm_notify+0x90/0x90 [ 495.812772][ T29] ? kthread_blkcg+0xd0/0xd0 [ 495.817351][ T29] ret_from_fork+0x48/0x80 [ 495.821769][ T29] ? kthread_blkcg+0xd0/0xd0 [ 495.826358][ T29] ret_from_fork_asm+0x11/0x20 [ 495.831123][ T29] [ 495.835379][ T29] Sending NMI from CPU 1 to CPUs 0: [ 495.840634][ C0] NMI backtrace for cpu 0 [ 495.840644][ C0] CPU: 0 PID: 2964 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 495.840665][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 495.840675][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 495.840697][ C0] RIP: 0010:mark_lock+0x66/0x320 [ 495.840716][ C0] Code: b6 47 02 24 03 3c 01 bd 09 00 00 00 83 dd 00 41 bc 01 00 00 00 89 e9 41 d3 e4 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 0f b6 04 28 <84> c0 0f 85 22 02 00 00 41 8b 07 41 89 c7 41 81 e7 ff 1f 00 00 c1 [ 495.840731][ C0] RSP: 0018:ffffc9000bdf7920 EFLAGS: 00000802 [ 495.840744][ C0] RAX: 0000000000000000 RBX: ffff88802bfe3c00 RCX: 0000000000000002 [ 495.840754][ C0] RDX: 0000000000000002 RSI: ffff88802bfe4708 RDI: ffff88802bfe3c00 [ 495.840765][ C0] RBP: 0000000000000002 R08: ffffffff90d94517 R09: 1ffffffff21b28a2 [ 495.840776][ C0] R10: dffffc0000000000 R11: fffffbfff21b28a3 R12: 0000000000000004 [ 495.840787][ C0] R13: dffffc0000000000 R14: ffff88802bfe4708 R15: ffff88802bfe4728 [ 495.840799][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 495.840812][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 495.840823][ C0] CR2: 000000110c362428 CR3: 0000000079e62000 CR4: 00000000003506f0 [ 495.840837][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 495.840846][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 495.840856][ C0] Call Trace: [ 495.840861][ C0] [ 495.840870][ C0] lockdep_hardirqs_on_prepare+0x240/0x760 [ 495.840889][ C0] ? lock_chain_count+0x20/0x20 [ 495.840906][ C0] ? rcu_is_watching+0x15/0xb0 [ 495.840925][ C0] trace_hardirqs_on+0x28/0x40 [ 495.840945][ C0] kasan_quarantine_put+0xd8/0x220 [ 495.840967][ C0] slab_free_freelist_hook+0x130/0x1b0 [ 495.840991][ C0] ? ieee80211_iface_work+0x788/0xc70 [ 495.841008][ C0] kmem_cache_free+0xf8/0x280 [ 495.841029][ C0] ieee80211_iface_work+0x788/0xc70 [ 495.841046][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 495.841066][ C0] cfg80211_wiphy_work+0x225/0x260 [ 495.841086][ C0] ? process_scheduled_works+0x957/0x15b0 [ 495.841104][ C0] process_scheduled_works+0xa45/0x15b0 [ 495.841133][ C0] ? assign_work+0x400/0x400 [ 495.841152][ C0] ? assign_work+0x39e/0x400 [ 495.841171][ C0] worker_thread+0xa55/0xfc0 [ 495.841189][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 495.841206][ C0] ? _raw_spin_unlock+0x40/0x40 [ 495.841221][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 495.841246][ C0] kthread+0x2fa/0x390 [ 495.841259][ C0] ? pr_cont_work+0x560/0x560 [ 495.841276][ C0] ? kthread_blkcg+0xd0/0xd0 [ 495.841290][ C0] ret_from_fork+0x48/0x80 [ 495.841307][ C0] ? kthread_blkcg+0xd0/0xd0 [ 495.841321][ C0] ret_from_fork_asm+0x11/0x20 [ 495.841346][ C0] [ 495.841724][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 496.121911][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 496.129429][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 496.140255][ T29] Call Trace: [ 496.143548][ T29] [ 496.146477][ T29] dump_stack_lvl+0x16c/0x230 [ 496.151158][ T29] ? show_regs_print_info+0x20/0x20 [ 496.156359][ T29] ? load_image+0x3b0/0x3b0 [ 496.160889][ T29] panic+0x2c0/0x710 [ 496.164880][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 496.171130][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 496.175630][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 496.181358][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 496.187510][ T29] watchdog+0xf80/0xf80 [ 496.191663][ T29] ? watchdog+0x1e1/0xf80 [ 496.195992][ T29] kthread+0x2fa/0x390 [ 496.200052][ T29] ? hungtask_pm_notify+0x90/0x90 [ 496.205075][ T29] ? kthread_blkcg+0xd0/0xd0 [ 496.209791][ T29] ret_from_fork+0x48/0x80 [ 496.214209][ T29] ? kthread_blkcg+0xd0/0xd0 [ 496.218995][ T29] ret_from_fork_asm+0x11/0x20 [ 496.223769][ T29] [ 496.227132][ T29] Kernel Offset: disabled [ 496.231539][ T29] Rebooting in 86400 seconds..