last executing test programs: 7m0.736161152s ago: executing program 2 (id=3): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xfdef) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0xfdef) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f00000013c0)="b9ff0331684426", 0x0, 0x51, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000011c0)={0xffffffffffffffff, &(0x7f00000010c0)="5c9110c88720c58180f0e4e0a0b196f782a5f9aced57dfc21d3f89ee57fde207e7a571f40a2ade5bc69de0804f44a5c84778e7909abc979c73f2ba4f8e95b85bcf1dd20295633ff3e145ff7f71656db1439eeea9f760d2ab19f42ffd727677c351c9d2537bf323d1d435c7f0ea813676fdbd9e36ddcddf11", &(0x7f0000001180)=""/59}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r1, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000008000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m59.528518982s ago: executing program 2 (id=7): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000fc"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000800)={&(0x7f0000000240), &(0x7f0000000440)=""/221, 0x0, &(0x7f0000000640), 0x5}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7b, 0x8, 0x0, 0x0, 0x0, 0x0, 0xa140, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x3, 0x100}, 0x0, 0x0, 0x0, 0x5, 0x4c7f, 0x7fffffff, 0x9, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x31000800, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2}, 0x1647, 0x0, 0x0, 0x0, 0x0, 0xa9}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) 6m58.879141098s ago: executing program 2 (id=9): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @local}) 6m58.732094422s ago: executing program 2 (id=11): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40086602, 0x110e22fff6) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x24, '\x00', 0x0, @sk_skb}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="a8ec16d16a6c47dee1f76ed64b9c8dad61369b885e14d514a6d65e94069e00037ee4f27bbf0475057b95c7572f7252a02987b2be4894dfd826b3f3f9f9614650fba925d3009a6e43ac146be20240bbea25a2db79197adc9e07f754f708add9c537f765ab427315b8639fc0e1", @ANYRES64=0x0], 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)}], 0x1}, 0x20000040) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/14, 0xe}, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110e50, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x15, 0xa, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x11, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) r8 = openat$cgroup_procs(r5, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000880), 0x12) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) 6m57.312324277s ago: executing program 2 (id=14): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x100220, 0x0, 0x80000000, 0x3, 0x2, 0x72a0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="02"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0xa1, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x3c, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000700)={0xffffffffffffffff, 0x1}, 0x5f) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xc}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x50) socketpair(0x1, 0x1, 0x0, 0x0) 6m42.009839989s ago: executing program 32 (id=14): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x100220, 0x0, 0x80000000, 0x3, 0x2, 0x72a0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="02"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0xa1, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x3c, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000700)={0xffffffffffffffff, 0x1}, 0x5f) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xc}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x50) socketpair(0x1, 0x1, 0x0, 0x0) 7.59093583s ago: executing program 1 (id=2339): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd5, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x10000, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, 0x0, 0x0) r4 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x6a) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)={@map, 0xffffffffffffffff, 0x38, 0x10}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000e00000000000000", @ANYRES8, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) 5.500728172s ago: executing program 1 (id=2344): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.399381955s ago: executing program 0 (id=2345): r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x2}, 0xfa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1005e2, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/318], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x17, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000", @ANYRESOCT=r1, @ANYBLOB="000000000000db5cb16a0000e5b428000000008fde004472d5690406aeba8500000084000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x4}, 0x10, 0x0, 0x0, 0x4}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x3}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000040)='!=[\\\\}#\x00') r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="0100000002"], 0x40) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x12412, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5.322471427s ago: executing program 1 (id=2346): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa1000000000000070100"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, 0x0}, 0xfffffffffffffe7c) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb21c1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x2, @perf_bp={0x0, 0xa}, 0x20, 0x7fffffff, 0x0, 0x0, 0x7, 0x17}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 2.615561544s ago: executing program 4 (id=2352): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000002850000001b"], 0x0, 0x0, 0x5c, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.574217775s ago: executing program 4 (id=2353): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd5, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x10000, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, 0x0, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x6a) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)={@map, 0xffffffffffffffff, 0x38, 0x10}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000e00000000000000", @ANYRES8, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) 2.3884788s ago: executing program 4 (id=2355): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x5, 0x8, 0x6}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.298274843s ago: executing program 4 (id=2357): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000880), 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000680)=[0x0, 0x0], 0x0, 0x0, 0xbd, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000840), 0x8, 0x6c, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xc, 0x17, &(0x7f0000000cc0)=ANY=[@ANYRESHEX, @ANYBLOB="000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100004b938209f681d812dcaa5fec71abe3f31999b9", @ANYRES16, @ANYRESOCT, @ANYBLOB="0000000000000000b7020000000000008500000007000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', r3, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, '\x00', r3, r4, 0x2, 0x4, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0xd, 0x3, 0x0, 0x2}, @ldst={0x1, 0x1, 0x4, 0x4, 0x8, 0x10, 0xffffffffffffffff}, @generic={0xf8, 0x6, 0xa, 0x0, 0x2}]}, &(0x7f0000000540)='GPL\x00', 0x7, 0xfd, &(0x7f00000005c0)=""/253, 0x41100, 0x1, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0x0, 0xff53, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r2, r2, 0x1], 0x0, 0x10, 0x2}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000000880), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1b, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000080000000000000000095000000000000001c1d7c884169ad6f"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) openat$cgroup_pressure(r5, &(0x7f0000000480)='memory.pressure\x00', 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x2100, 0x0) ioctl$TUNSETDEBUG(r9, 0x400454c9, &(0x7f0000000340)=0x8) write$cgroup_subtree(r8, 0x0, 0x4) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 2.198320974s ago: executing program 3 (id=2358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) 1.927377192s ago: executing program 0 (id=2359): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.767822125s ago: executing program 3 (id=2360): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xc, 0x5, 0x2, 0xc1, 0xffffffffffffffff, 0x1000000}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) 1.719144797s ago: executing program 3 (id=2361): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10001) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c13c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c77aa"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 1.622616889s ago: executing program 0 (id=2362): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe81}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000140)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), 0x0}, 0x20) recvmsg$kcm(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/117, 0x75}], 0x1}, 0x102) 1.518299651s ago: executing program 1 (id=2363): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd5, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x10000, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, 0x0, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x6a) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)={@map, 0xffffffffffffffff, 0x38, 0x10}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000e00000000000000", @ANYRES8, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) 1.473462593s ago: executing program 3 (id=2364): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.327018457s ago: executing program 3 (id=2365): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="5aee41def8ffffff50dfef84420b", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xaa526, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xfe4a}, 0x0, 0x6, 0x0, 0x5, 0x1, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 913.538257ms ago: executing program 0 (id=2366): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000002440)="a72d11a15c048c0a7d78aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x29, 0x32}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}, 0x0) 652.976083ms ago: executing program 0 (id=2367): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)}, 0x10) 519.438877ms ago: executing program 1 (id=2368): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r2, &(0x7f00000004c0), 0x0}, 0x20) 470.332258ms ago: executing program 0 (id=2369): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 447.840098ms ago: executing program 4 (id=2370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80d00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 395.37913ms ago: executing program 3 (id=2371): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 62.496298ms ago: executing program 1 (id=2372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 0s ago: executing program 4 (id=2373): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. [ 65.281664][ T5760] cgroup: Unknown subsys name 'net' [ 65.426855][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.759756][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.122198][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.130829][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.138006][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.145977][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.160702][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.168108][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.178553][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.188727][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.211262][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.220202][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.228475][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.240716][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.242602][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.250751][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.261758][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.269823][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.270764][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.280429][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.285301][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.292168][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.305819][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.313450][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.314651][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.328511][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.705002][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 68.781330][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 68.862211][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 68.907123][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 68.962762][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.970535][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.977936][ T5774] bridge_slave_0: entered allmulticast mode [ 68.984978][ T5774] bridge_slave_0: entered promiscuous mode [ 69.012067][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.019219][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.026586][ T5780] bridge_slave_0: entered allmulticast mode [ 69.033586][ T5780] bridge_slave_0: entered promiscuous mode [ 69.042150][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.049334][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.056706][ T5780] bridge_slave_1: entered allmulticast mode [ 69.064139][ T5780] bridge_slave_1: entered promiscuous mode [ 69.071581][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.078668][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.086174][ T5774] bridge_slave_1: entered allmulticast mode [ 69.093071][ T5774] bridge_slave_1: entered promiscuous mode [ 69.179552][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.206889][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.218003][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.238648][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.246036][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.253316][ T5772] bridge_slave_0: entered allmulticast mode [ 69.260117][ T5772] bridge_slave_0: entered promiscuous mode [ 69.275982][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.295373][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.302810][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.309937][ T5772] bridge_slave_1: entered allmulticast mode [ 69.317367][ T5772] bridge_slave_1: entered promiscuous mode [ 69.334951][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.342137][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.349307][ T5776] bridge_slave_0: entered allmulticast mode [ 69.356513][ T5776] bridge_slave_0: entered promiscuous mode [ 69.376629][ T5780] team0: Port device team_slave_0 added [ 69.401030][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.408306][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.416196][ T5776] bridge_slave_1: entered allmulticast mode [ 69.423230][ T5776] bridge_slave_1: entered promiscuous mode [ 69.455282][ T5780] team0: Port device team_slave_1 added [ 69.463309][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.475570][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.489241][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.502217][ T5774] team0: Port device team_slave_0 added [ 69.518192][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.538317][ T5774] team0: Port device team_slave_1 added [ 69.581587][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.588570][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.615654][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.639720][ T5776] team0: Port device team_slave_0 added [ 69.656655][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.663730][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.692401][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.706278][ T5772] team0: Port device team_slave_0 added [ 69.714277][ T5776] team0: Port device team_slave_1 added [ 69.740563][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.747545][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.773781][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.795377][ T5772] team0: Port device team_slave_1 added [ 69.824040][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.831197][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.857186][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.870651][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.877629][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.903818][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.929264][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.936624][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.962878][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.998232][ T5780] hsr_slave_0: entered promiscuous mode [ 70.005115][ T5780] hsr_slave_1: entered promiscuous mode [ 70.013845][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.020957][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.047211][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.065002][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.072180][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.098353][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.153472][ T5774] hsr_slave_0: entered promiscuous mode [ 70.159924][ T5774] hsr_slave_1: entered promiscuous mode [ 70.166248][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.174564][ T5774] Cannot create hsr debugfs directory [ 70.236297][ T5776] hsr_slave_0: entered promiscuous mode [ 70.242613][ T5776] hsr_slave_1: entered promiscuous mode [ 70.249209][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.257100][ T5776] Cannot create hsr debugfs directory [ 70.275669][ T5772] hsr_slave_0: entered promiscuous mode [ 70.282003][ T5772] hsr_slave_1: entered promiscuous mode [ 70.288029][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.297344][ T5772] Cannot create hsr debugfs directory [ 70.380271][ T5775] Bluetooth: hci1: command tx timeout [ 70.380329][ T5083] Bluetooth: hci2: command tx timeout [ 70.385988][ T5775] Bluetooth: hci0: command tx timeout [ 70.392305][ T5083] Bluetooth: hci3: command tx timeout [ 70.689667][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.703117][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.718859][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.728805][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.803692][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.821498][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.835468][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.844620][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.909315][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.929491][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.966236][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.977581][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.040315][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.054481][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.064731][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.077064][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.123371][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.199349][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.214884][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.235820][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.243205][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.261691][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.268817][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.310369][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.323575][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.358482][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.365666][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.389959][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.397118][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.418791][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.470335][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.477460][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.503891][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.511113][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.577604][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.585487][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.636216][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.655828][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.703800][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.746017][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.753251][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.802946][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.810157][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.875401][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.979392][ T5780] veth0_vlan: entered promiscuous mode [ 71.998590][ T5780] veth1_vlan: entered promiscuous mode [ 72.044393][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.093143][ T5780] veth0_macvtap: entered promiscuous mode [ 72.122358][ T5780] veth1_macvtap: entered promiscuous mode [ 72.177472][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.227380][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.246147][ T5774] veth0_vlan: entered promiscuous mode [ 72.260589][ T5774] veth1_vlan: entered promiscuous mode [ 72.282746][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.295286][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.306276][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.316883][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.358136][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.425998][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.450456][ T5083] Bluetooth: hci3: command tx timeout [ 72.455910][ T5083] Bluetooth: hci0: command tx timeout [ 72.460589][ T5777] Bluetooth: hci2: command tx timeout [ 72.461611][ T5083] Bluetooth: hci1: command tx timeout [ 72.478013][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.489468][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.512351][ T5774] veth0_macvtap: entered promiscuous mode [ 72.527912][ T5774] veth1_macvtap: entered promiscuous mode [ 72.582670][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.593987][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.610827][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.623673][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.635163][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.645793][ T5776] veth0_vlan: entered promiscuous mode [ 72.662818][ T5776] veth1_vlan: entered promiscuous mode [ 72.676609][ T5772] veth0_vlan: entered promiscuous mode [ 72.691398][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.708621][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.724817][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.768656][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.791673][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.815515][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.826040][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.867631][ T5772] veth1_vlan: entered promiscuous mode [ 72.977388][ T5776] veth0_macvtap: entered promiscuous mode [ 73.034978][ T5772] veth0_macvtap: entered promiscuous mode [ 73.051197][ T5776] veth1_macvtap: entered promiscuous mode [ 73.067644][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.077439][ T5772] veth1_macvtap: entered promiscuous mode [ 73.085951][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.150919][ T5837] syzkaller0: entered promiscuous mode [ 73.156445][ T5837] syzkaller0: entered allmulticast mode [ 73.169411][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.183475][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.193696][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.204826][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.216254][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.242131][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.254998][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.265199][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.276605][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.286696][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.299355][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.311480][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.325931][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.337181][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.348353][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.350007][ C1] hrtimer: interrupt took 38932 ns [ 73.368378][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.379685][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.412592][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.425793][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.435864][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.447893][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.458248][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.468876][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.480690][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.489115][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.492525][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.506656][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.507139][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.523536][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.532762][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.556510][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.565485][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.575586][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.586241][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.532318][ T5775] Bluetooth: hci1: command tx timeout [ 74.538050][ T5775] Bluetooth: hci0: command tx timeout [ 74.542641][ T5083] Bluetooth: hci2: command tx timeout [ 74.544623][ T5777] Bluetooth: hci3: command tx timeout [ 74.802041][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.809936][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.028366][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.075534][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.101739][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.135980][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.285814][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.300372][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.457402][ T5854] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 76.552608][ T5867] warning: `syz.2.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.615465][ T5777] Bluetooth: hci3: command tx timeout [ 76.615493][ T5775] Bluetooth: hci0: command tx timeout [ 76.620928][ T5083] Bluetooth: hci1: command tx timeout [ 76.620956][ T5083] Bluetooth: hci2: command tx timeout [ 80.217304][ T5893] syzkaller0: entered promiscuous mode [ 80.241458][ T5893] syzkaller0: entered allmulticast mode [ 81.843626][ T9] cfg80211: failed to load regulatory.db [ 83.047570][ T5910] syz_tun: entered promiscuous mode [ 83.059920][ T5910] syz_tun: entered allmulticast mode [ 86.167717][ T5919] syzkaller0: entered promiscuous mode [ 86.178064][ T5919] syzkaller0: entered allmulticast mode [ 87.305130][ T5931] sit0: entered allmulticast mode [ 87.327840][ T5932] sit0: entered promiscuous mode [ 94.810821][ T5778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.822164][ T5778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.831237][ T5778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.842156][ T5778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.850219][ T5778] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.883839][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.127680][ T5975] syzkaller0: entered promiscuous mode [ 95.190228][ T5975] syzkaller0: entered allmulticast mode [ 97.011950][ T5778] Bluetooth: hci4: command tx timeout [ 98.666967][ T5976] chnl_net:caif_netlink_parms(): no params data found [ 99.090857][ T5778] Bluetooth: hci4: command tx timeout [ 99.363592][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.374276][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.384015][ T5976] bridge_slave_0: entered allmulticast mode [ 99.396221][ T5976] bridge_slave_0: entered promiscuous mode [ 99.408515][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.419595][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.429435][ T5976] bridge_slave_1: entered allmulticast mode [ 99.457665][ T5976] bridge_slave_1: entered promiscuous mode [ 99.737888][ T5976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.762118][ T5976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.844177][ T5976] team0: Port device team_slave_0 added [ 99.854553][ T5976] team0: Port device team_slave_1 added [ 99.997563][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.020996][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.057546][ T5976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.120711][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.127883][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.167211][ T5976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.298638][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.475040][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.501314][ T5976] hsr_slave_0: entered promiscuous mode [ 100.508167][ T5976] hsr_slave_1: entered promiscuous mode [ 100.519008][ T5976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.527032][ T5976] Cannot create hsr debugfs directory [ 100.595712][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.729516][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.768482][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.848471][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.856390][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.171226][ T5778] Bluetooth: hci4: command tx timeout [ 101.617726][ T6042] syzkaller0: entered promiscuous mode [ 101.653396][ T6042] syzkaller0: entered allmulticast mode [ 101.676539][ T5976] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.877539][ T5976] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.902472][ T5976] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.976018][ T5976] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.250474][ T5778] Bluetooth: hci4: command tx timeout [ 103.936380][ T6066] syzkaller0: entered promiscuous mode [ 103.942909][ T6066] syzkaller0: entered allmulticast mode [ 104.051252][ T3488] wlan1: Trigger new scan to find an IBSS to join [ 106.125854][ T6083] syzkaller0: entered promiscuous mode [ 106.155012][ T6083] syzkaller0: entered allmulticast mode [ 106.845520][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.021958][ T3488] wlan1: Trigger new scan to find an IBSS to join [ 107.971706][ T3488] wlan1: Creating new IBSS network, BSSID a6:23:c6:16:94:32 [ 109.264292][ T42] hsr_slave_0: left promiscuous mode [ 109.287563][ T42] hsr_slave_1: left promiscuous mode [ 109.304252][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.325297][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.337265][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.346585][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.483546][ T42] bridge_slave_1: left allmulticast mode [ 109.489271][ T42] bridge_slave_1: left promiscuous mode [ 109.528375][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.547183][ T42] bridge_slave_0: left allmulticast mode [ 109.554171][ T42] bridge_slave_0: left promiscuous mode [ 109.559942][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.604455][ T42] veth1_macvtap: left promiscuous mode [ 109.616520][ T42] veth0_macvtap: left promiscuous mode [ 109.625297][ T42] veth1_vlan: left promiscuous mode [ 109.641401][ T42] veth0_vlan: left promiscuous mode [ 110.495673][ T42] team0 (unregistering): Port device team_slave_1 removed [ 110.532749][ T42] team0 (unregistering): Port device team_slave_0 removed [ 110.568114][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.605481][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.847901][ T42] bond0 (unregistering): Released all slaves [ 111.037787][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.088930][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.096144][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.136476][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.143802][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.565433][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.682912][ T5976] veth0_vlan: entered promiscuous mode [ 112.773874][ T5976] veth1_vlan: entered promiscuous mode [ 112.876671][ T5976] veth0_macvtap: entered promiscuous mode [ 112.921739][ T5976] veth1_macvtap: entered promiscuous mode [ 112.998350][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.053398][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.110295][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.144636][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.181598][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.214385][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.240808][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.304699][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.319778][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.340207][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.430189][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.517284][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.564737][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.608220][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.692727][ T5976] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.790043][ T5976] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.798807][ T5976] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.834065][ T5976] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.091159][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.108428][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.152977][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.170189][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.101401][ T6279] wg2: entered promiscuous mode [ 120.107090][ T6279] wg2: entered allmulticast mode [ 124.797583][ T6393] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.846717][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.853972][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.034150][ T3488] wlan1: Trigger new scan to find an IBSS to join [ 130.911099][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.992795][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.000064][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.741281][ T6506] syzkaller0: entered promiscuous mode [ 131.776972][ T6506] syzkaller0: entered allmulticast mode [ 133.020351][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.029850][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.051434][ T995] wlan1: Trigger new scan to find an IBSS to join [ 133.956205][ T995] wlan1: Creating new IBSS network, BSSID 9a:f3:c1:5d:44:80 [ 135.687079][ T6576] syzkaller0: entered promiscuous mode [ 135.728122][ T6576] syzkaller0: entered allmulticast mode [ 137.844870][ T6590] syzkaller0: entered promiscuous mode [ 137.853697][ T6590] syzkaller0: entered allmulticast mode [ 139.312292][ T6627] syzkaller0: entered promiscuous mode [ 139.317798][ T6627] syzkaller0: entered allmulticast mode [ 141.991584][ T6698] syzkaller0: entered promiscuous mode [ 142.007391][ T6698] syzkaller0: entered allmulticast mode [ 142.151556][ T6703] syzkaller0: entered promiscuous mode [ 142.160220][ T6703] syzkaller0: entered allmulticast mode [ 145.682114][ T6735] syzkaller0: entered promiscuous mode [ 145.693428][ T6735] syzkaller0: entered allmulticast mode [ 145.953723][ T6728] syzkaller0: entered promiscuous mode [ 145.974824][ T6728] syzkaller0: entered allmulticast mode [ 149.423897][ T6798] wg2: entered promiscuous mode [ 149.428873][ T6798] wg2: entered allmulticast mode [ 151.223491][ T6820] syzkaller0: entered promiscuous mode [ 151.228998][ T6820] syzkaller0: entered allmulticast mode [ 153.509736][ T6858] syzkaller0: entered promiscuous mode [ 153.515383][ T6858] syzkaller0: entered allmulticast mode [ 155.740512][ T6890] wg2: entered promiscuous mode [ 155.745438][ T6890] wg2: entered allmulticast mode [ 156.242059][ T6906] syzkaller0: entered promiscuous mode [ 156.253410][ T6906] syzkaller0: entered allmulticast mode [ 158.292950][ T6916] wg2: entered promiscuous mode [ 158.297866][ T6916] wg2: entered allmulticast mode [ 159.582198][ T6956] syzkaller0: entered promiscuous mode [ 159.604362][ T6956] syzkaller0: entered allmulticast mode [ 159.781424][ T6953] syzkaller0: entered promiscuous mode [ 159.786958][ T6953] syzkaller0: entered allmulticast mode [ 163.949537][ T7008] syzkaller0: entered promiscuous mode [ 163.955383][ T7008] syzkaller0: entered allmulticast mode [ 165.524534][ T7016] syzkaller0: entered promiscuous mode [ 165.530257][ T7016] syzkaller0: entered allmulticast mode [ 167.650663][ T7048] syzkaller0: entered promiscuous mode [ 167.662362][ T7048] syzkaller0: entered allmulticast mode [ 169.783591][ T7060] netlink: 40 bytes leftover after parsing attributes in process `syz.4.293'. [ 169.800388][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.293'. [ 171.156026][ T7090] syzkaller0: entered promiscuous mode [ 171.197989][ T7090] syzkaller0: entered allmulticast mode [ 175.248943][ T7142] syzkaller0: entered promiscuous mode [ 175.283354][ T7142] syzkaller0: entered allmulticast mode [ 179.062524][ T7195] syzkaller0: entered promiscuous mode [ 179.068080][ T7195] syzkaller0: entered allmulticast mode [ 180.278712][ T7214] syz.1.354 (7214) used greatest stack depth: 20880 bytes left [ 183.309472][ T7249] syzkaller0: entered promiscuous mode [ 183.339247][ T7249] syzkaller0: entered allmulticast mode [ 183.662672][ T7260] syzkaller0: entered promiscuous mode [ 183.668505][ T7260] syzkaller0: entered allmulticast mode [ 187.697689][ T7299] syzkaller0: entered promiscuous mode [ 187.705806][ T7299] syzkaller0: entered allmulticast mode [ 191.415293][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 191.422813][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 191.424867][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 191.861448][ T7359] netlink: 4079 bytes leftover after parsing attributes in process `syz.3.405'. [ 192.027600][ T7357] syzkaller0: entered promiscuous mode [ 192.063856][ T7357] syzkaller0: entered allmulticast mode [ 194.457152][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.463792][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.992206][ T7413] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.421'. [ 195.312941][ T7419] syzkaller0: entered promiscuous mode [ 195.328779][ T7419] syzkaller0: entered allmulticast mode [ 197.855112][ T7461] syzkaller0: entered promiscuous mode [ 197.875182][ T7461] syzkaller0: entered allmulticast mode [ 200.778190][ T7506] syzkaller0: entered promiscuous mode [ 200.832231][ T7506] syzkaller0: entered allmulticast mode [ 203.685318][ T7551] syzkaller0: entered promiscuous mode [ 203.712796][ T7551] syzkaller0: entered allmulticast mode [ 206.670509][ T7606] syzkaller0: entered promiscuous mode [ 206.676064][ T7606] syzkaller0: entered allmulticast mode [ 212.924877][ T7736] syzkaller0: entered promiscuous mode [ 212.935296][ T7736] syzkaller0: entered allmulticast mode [ 215.782468][ T7779] syzkaller0: entered promiscuous mode [ 215.788014][ T7779] syzkaller0: entered allmulticast mode [ 215.834807][ T5083] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 217.278461][ T7787] syzkaller0: entered promiscuous mode [ 217.290985][ T7787] syzkaller0: entered allmulticast mode [ 218.337987][ T5083] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7 [ 218.909998][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 219.575796][ T7829] syzkaller0: entered promiscuous mode [ 219.610359][ T7829] syzkaller0: entered allmulticast mode [ 219.720325][ T5083] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7 [ 221.317825][ T7855] syzkaller0: entered promiscuous mode [ 221.336424][ T7855] syzkaller0: entered allmulticast mode [ 222.133868][ T5083] Bluetooth: hci4: command 0x0406 tx timeout [ 223.577784][ T7886] syzkaller0: entered promiscuous mode [ 223.586309][ T7886] syzkaller0: entered allmulticast mode [ 225.640103][ T7913] syzkaller0: entered promiscuous mode [ 225.645797][ T7913] syzkaller0: entered allmulticast mode [ 228.954673][ T7973] syzkaller0: entered promiscuous mode [ 228.961534][ T7973] syzkaller0: entered allmulticast mode [ 232.089388][ T8034] syzkaller0: entered promiscuous mode [ 232.095255][ T8034] syzkaller0: entered allmulticast mode [ 233.941715][ T8045] netlink: 132 bytes leftover after parsing attributes in process `syz.3.654'. [ 234.056515][ T8057] syzkaller0: entered promiscuous mode [ 234.074338][ T8057] syzkaller0: entered allmulticast mode [ 236.333271][ T8092] syzkaller0: entered promiscuous mode [ 236.338817][ T8092] syzkaller0: entered allmulticast mode [ 238.446984][ T8122] syzkaller0: entered promiscuous mode [ 238.453354][ T8122] syzkaller0: entered allmulticast mode [ 240.437102][ T8159] syzkaller0: entered promiscuous mode [ 240.462553][ T8159] syzkaller0: entered allmulticast mode [ 242.336641][ T8188] syzkaller0: entered promiscuous mode [ 242.346230][ T8188] syzkaller0: entered allmulticast mode [ 242.746169][ T8204] syzkaller0: entered promiscuous mode [ 242.766949][ T8204] syzkaller0: entered allmulticast mode [ 245.465148][ T8255] syzkaller0: entered promiscuous mode [ 245.485506][ T8255] syzkaller0: entered allmulticast mode [ 247.212486][ T8265] syzkaller0: entered promiscuous mode [ 247.218026][ T8265] syzkaller0: entered allmulticast mode [ 249.242145][ T8304] syzkaller0: entered promiscuous mode [ 249.254717][ T8304] syzkaller0: entered allmulticast mode [ 249.736928][ T5775] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 251.237297][ T8331] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.743'. [ 252.148642][ T8361] syzkaller0: entered promiscuous mode [ 252.185537][ T8361] syzkaller0: entered allmulticast mode [ 254.088488][ T5775] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7 [ 254.618619][ T8409] syzkaller0: entered promiscuous mode [ 254.631914][ T8409] syzkaller0: entered allmulticast mode [ 254.963783][ T5775] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 255.895152][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.908757][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.585577][ T5775] Bluetooth: hci4: unexpected event 0x20 length: 15 > 7 [ 257.728519][ T8437] syzkaller0: entered promiscuous mode [ 257.741134][ T8437] syzkaller0: entered allmulticast mode [ 258.554800][ T5775] Bluetooth: hci4: unexpected event 0x20 length: 15 > 7 [ 260.885561][ T8478] syzkaller0: entered promiscuous mode [ 260.912309][ T8478] syzkaller0: entered allmulticast mode [ 261.105121][ T5775] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7 [ 262.804104][ T8523] syzkaller0: entered promiscuous mode [ 262.830050][ T8523] syzkaller0: entered allmulticast mode [ 263.005775][ T5775] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7 [ 264.250020][ T5775] Bluetooth: hci4: unexpected event 0x20 length: 15 > 7 [ 265.638528][ T8554] syzkaller0: entered promiscuous mode [ 265.670100][ T8554] syzkaller0: entered allmulticast mode [ 265.967688][ T5775] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7 [ 267.698628][ T8607] syzkaller0: entered promiscuous mode [ 267.723724][ T8607] syzkaller0: entered allmulticast mode [ 268.079050][ T5775] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 270.016830][ T8636] syzkaller0: entered promiscuous mode [ 270.029543][ T8636] syzkaller0: entered allmulticast mode [ 270.169041][ T8655] Driver unsupported XDP return value 0 on prog (id 340) dev N/A, expect packet loss! [ 271.915407][ T8673] syzkaller0: entered promiscuous mode [ 271.937194][ T8673] syzkaller0: entered allmulticast mode [ 273.768394][ T8697] ipvlan1: entered promiscuous mode [ 273.774851][ T8697] ipvlan1: entered allmulticast mode [ 273.781088][ T8697] veth0_vlan: entered allmulticast mode [ 274.057818][ T8706] syzkaller0: entered promiscuous mode [ 274.064172][ T8706] syzkaller0: entered allmulticast mode [ 274.237082][ T8713] netlink: 'syz.3.880': attribute type 39 has an invalid length. [ 276.423521][ T8724] netlink: 'syz.4.884': attribute type 21 has an invalid length. [ 276.431481][ T8724] netlink: 'syz.4.884': attribute type 6 has an invalid length. [ 276.439152][ T8724] netlink: 132 bytes leftover after parsing attributes in process `syz.4.884'. [ 276.769862][ T8736] syzkaller0: entered promiscuous mode [ 276.793745][ T8736] syzkaller0: entered allmulticast mode [ 278.792158][ T8754] syzkaller0: entered promiscuous mode [ 278.797686][ T8754] syzkaller0: entered allmulticast mode [ 280.642095][ T8790] syzkaller0: entered promiscuous mode [ 280.664534][ T8790] syzkaller0: entered allmulticast mode [ 280.710668][ T8795] netlink: 'syz.0.906': attribute type 21 has an invalid length. [ 280.732028][ T8795] netlink: 'syz.0.906': attribute type 6 has an invalid length. [ 280.760827][ T8795] netlink: 132 bytes leftover after parsing attributes in process `syz.0.906'. [ 282.385298][ T8809] syzkaller0: entered promiscuous mode [ 282.396202][ T8809] syzkaller0: entered allmulticast mode [ 284.237061][ T8836] syzkaller1: tun_chr_ioctl cmd 1074025675 [ 284.243134][ T8836] syzkaller1: persist disabled [ 284.832802][ T5775] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7 [ 285.227478][ T8864] syzkaller0: entered promiscuous mode [ 285.270113][ T8864] syzkaller0: entered allmulticast mode [ 286.027233][ T5775] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7 [ 287.629038][ T5775] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7 [ 288.235965][ T8928] syzkaller0: entered promiscuous mode [ 288.266235][ T8928] syzkaller0: entered allmulticast mode [ 288.413151][ T8937] netlink: 60 bytes leftover after parsing attributes in process `syz.0.957'. [ 288.447378][ T8937] netlink: 60 bytes leftover after parsing attributes in process `syz.0.957'. [ 289.791691][ T8938] netlink: 60 bytes leftover after parsing attributes in process `syz.0.957'. [ 290.043204][ T5775] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 291.429602][ T5775] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7 [ 292.256841][ T5775] Bluetooth: hci4: unexpected event 0x20 length: 15 > 7 [ 293.447520][ T5775] Bluetooth: hci4: unexpected event 0x20 length: 15 > 7 [ 294.263251][ T5775] Bluetooth: hci4: unexpected event 0x20 length: 15 > 7 [ 294.320501][ T5775] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 295.040256][ T5775] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7 [ 295.188348][ T5775] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 295.809151][ T5775] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7 [ 296.356435][ T5775] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 298.156489][ T5775] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7 [ 299.665965][ T5775] Bluetooth: hci4: unexpected event 0x20 length: 15 > 7 [ 300.112298][ T9218] Zero length message leads to an empty skb [ 300.351025][ T5775] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 300.571224][ T5775] Bluetooth: hci4: unexpected event 0x20 length: 15 > 7 [ 300.863539][ T9240] syzkaller0: entered promiscuous mode [ 300.890069][ T9240] syzkaller0: entered allmulticast mode [ 301.239777][ T5775] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 301.574744][ T5775] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7 [ 302.371582][ T5775] Bluetooth: hci1: command 0x0406 tx timeout [ 303.255298][ T5083] Bluetooth: hci0: command 0x0406 tx timeout [ 303.379560][ T5778] Bluetooth: hci4: unexpected event 0x20 length: 15 > 7 [ 303.452486][ T5778] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 303.837122][ T9301] syzkaller0: entered promiscuous mode [ 303.857044][ T9301] syzkaller0: entered allmulticast mode [ 304.352870][ T5778] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 305.374781][ T5778] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 306.289981][ T9314] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1111'. [ 306.447100][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1127'. [ 306.907878][ T5778] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 307.333168][ T5778] Bluetooth: hci4: unexpected event 0x23 length: 15 > 13 [ 307.372925][ T9377] syzkaller0: entered promiscuous mode [ 307.400147][ T9377] syzkaller0: entered allmulticast mode [ 308.215312][ T5778] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 308.488039][ T5778] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 310.013189][ T9389] syzkaller0: entered promiscuous mode [ 310.026412][ T9389] syzkaller0: entered allmulticast mode [ 310.321920][ T5778] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7 [ 311.574764][ T9413] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1148'. [ 311.919506][ T9440] syzkaller0: entered promiscuous mode [ 311.933606][ T9440] syzkaller0: entered allmulticast mode [ 311.962740][ T5778] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7 [ 312.615770][ T5778] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 312.836504][ T5778] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 313.380696][ T5778] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 313.632772][ T5778] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 315.016186][ T5778] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 315.056715][ T5778] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7 [ 315.408508][ T9535] syzkaller0: entered promiscuous mode [ 315.421707][ T9535] syzkaller0: entered allmulticast mode [ 315.486827][ T9542] syzkaller0: entered promiscuous mode [ 315.492634][ T9542] syzkaller0: entered allmulticast mode [ 315.677654][ T5778] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255 [ 315.710986][ T5778] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 317.347547][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.361488][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.966337][ T5778] Bluetooth: hci4: unexpected event 0x20 length: 15 > 7 [ 319.114880][ T5778] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7 [ 319.935130][ T5778] Bluetooth: hci4: unexpected event 0x20 length: 15 > 7 [ 320.458688][ T5778] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 320.694955][ T9644] syzkaller0: entered promiscuous mode [ 320.704253][ T9644] syzkaller0: entered allmulticast mode [ 320.727838][ T5778] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 321.564857][ T5778] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255 [ 323.335868][ T9689] syzkaller0: entered promiscuous mode [ 323.342536][ T9689] syzkaller0: entered allmulticast mode [ 323.630629][ T5778] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 325.026168][ T5778] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 326.177929][ T9719] syzkaller0: entered promiscuous mode [ 326.190637][ T9719] syzkaller0: entered allmulticast mode [ 326.289398][ T5778] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 327.195392][ T5778] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 328.547681][ T9776] syzkaller0: entered promiscuous mode [ 328.567323][ T9776] syzkaller0: entered allmulticast mode [ 328.790860][ T5778] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255 [ 329.202105][ T9820] netlink: 'syz.1.1312': attribute type 29 has an invalid length. [ 330.244347][ T9820] netlink: 'syz.1.1312': attribute type 29 has an invalid length. [ 330.356570][ T9826] syzkaller0: entered promiscuous mode [ 330.376902][ T9826] syzkaller0: entered allmulticast mode [ 330.976052][ T5778] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 332.754771][ T5778] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 333.146293][ T9893] syzkaller0: entered promiscuous mode [ 333.155013][ T9893] syzkaller0: entered allmulticast mode [ 333.290100][ T9897] syzkaller0: entered promiscuous mode [ 333.301689][ T9897] syzkaller0: entered allmulticast mode [ 333.582990][ T5778] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 335.735716][ T5778] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 336.832609][ T9947] syzkaller0: entered promiscuous mode [ 336.858580][ T9947] syzkaller0: entered allmulticast mode [ 337.175958][ T5778] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255 [ 339.380075][ T5778] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 339.605876][T10014] syzkaller0: entered promiscuous mode [ 339.622013][T10014] syzkaller0: entered allmulticast mode [ 339.844732][T10019] syzkaller0: entered promiscuous mode [ 339.850572][T10019] syzkaller0: entered allmulticast mode [ 343.347847][T10047] syzkaller0: entered promiscuous mode [ 343.360205][T10047] syzkaller0: entered allmulticast mode [ 345.167081][T10083] syzkaller0: entered promiscuous mode [ 345.201863][T10083] syzkaller0: entered allmulticast mode [ 347.411579][T10114] syzkaller0: entered promiscuous mode [ 347.438534][T10114] syzkaller0: entered allmulticast mode [ 349.561973][T10144] syzkaller0: entered promiscuous mode [ 349.567570][T10144] syzkaller0: entered allmulticast mode [ 351.493617][T10183] syzkaller0: entered promiscuous mode [ 351.515941][T10183] syzkaller0: entered allmulticast mode [ 353.164887][T10194] syzkaller0: entered promiscuous mode [ 353.171747][T10194] syzkaller0: entered allmulticast mode [ 354.424979][ T5778] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7 [ 355.455333][T10214] syzkaller0: entered promiscuous mode [ 355.468967][T10214] syzkaller0: entered allmulticast mode [ 355.487187][T10232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.321662][ T5778] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 357.409783][T10238] netlink: 'syz.4.1453': attribute type 10 has an invalid length. [ 357.430196][T10238] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.452017][T10238] bridge_slave_1: left allmulticast mode [ 357.458512][T10238] bridge_slave_1: left promiscuous mode [ 357.464963][T10238] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.478031][T10238] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 357.596493][T10257] syzkaller0: entered promiscuous mode [ 357.603355][T10257] syzkaller0: entered allmulticast mode [ 358.486954][ T5778] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7 [ 360.829747][T10293] netlink: 'syz.3.1473': attribute type 10 has an invalid length. [ 360.926949][T10293] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.967315][T10293] bridge_slave_1: left allmulticast mode [ 360.983051][T10293] bridge_slave_1: left promiscuous mode [ 360.992364][T10293] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.055188][T10293] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 361.203875][T10293] syz.3.1473 (10293) used greatest stack depth: 20712 bytes left [ 361.280599][T10312] netlink: 'syz.3.1481': attribute type 10 has an invalid length. [ 361.288496][T10312] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1481'. [ 361.318770][T10312] hsr0: entered promiscuous mode [ 361.331721][T10312] bridge0: port 2(hsr0) entered blocking state [ 361.339127][T10312] bridge0: port 2(hsr0) entered disabled state [ 361.352722][T10312] hsr0: entered allmulticast mode [ 361.357827][T10312] hsr_slave_0: entered allmulticast mode [ 361.379405][T10312] hsr_slave_1: entered allmulticast mode [ 361.407388][T10312] bridge0: port 2(hsr0) entered blocking state [ 361.413836][T10312] bridge0: port 2(hsr0) entered forwarding state [ 361.906857][T10336] netlink: 'syz.0.1490': attribute type 10 has an invalid length. [ 361.986961][T10336] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.007847][T10336] bridge_slave_1: left allmulticast mode [ 362.023985][T10336] bridge_slave_1: left promiscuous mode [ 362.046289][T10336] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.155646][T10336] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 362.446414][T10336] syz.0.1490 (10336) used greatest stack depth: 20328 bytes left [ 363.195278][T10377] tap0: tun_chr_ioctl cmd 1074025677 [ 363.210177][T10377] tap0: linktype set to 825 [ 368.130391][T10514] netlink: 'syz.4.1559': attribute type 10 has an invalid length. [ 368.138500][T10514] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1559'. [ 368.148013][T10514] hsr0: entered promiscuous mode [ 368.154038][T10514] bridge0: port 2(hsr0) entered blocking state [ 368.162715][T10514] bridge0: port 2(hsr0) entered disabled state [ 368.169271][T10514] hsr0: entered allmulticast mode [ 368.175551][T10514] hsr_slave_0: entered allmulticast mode [ 368.181734][T10514] hsr_slave_1: entered allmulticast mode [ 368.191447][T10514] bridge0: port 2(hsr0) entered blocking state [ 368.197827][T10514] bridge0: port 2(hsr0) entered forwarding state [ 368.774412][T10531] bridge0: port 2(hsr0) entered disabled state [ 368.780846][T10531] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.796150][T10531] bridge0: entered allmulticast mode [ 368.842126][T10527] hsr0: left allmulticast mode [ 368.871596][T10527] hsr_slave_0: left allmulticast mode [ 368.877490][T10527] hsr_slave_1: left allmulticast mode [ 368.901535][T10527] bridge0: port 2(hsr0) entered disabled state [ 368.981884][T10527] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.757289][T10557] netlink: 'syz.0.1574': attribute type 10 has an invalid length. [ 369.770983][T10557] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1574'. [ 369.784660][T10557] hsr0: entered promiscuous mode [ 369.801044][T10557] bridge0: port 2(hsr0) entered blocking state [ 369.823044][T10557] bridge0: port 2(hsr0) entered disabled state [ 369.835274][T10557] hsr0: entered allmulticast mode [ 369.845585][T10557] hsr_slave_0: entered allmulticast mode [ 369.856843][T10557] hsr_slave_1: entered allmulticast mode [ 369.875701][T10557] bridge0: port 2(hsr0) entered blocking state [ 369.882169][T10557] bridge0: port 2(hsr0) entered forwarding state [ 370.727552][T10591] syzkaller0: entered promiscuous mode [ 370.759586][T10591] syzkaller0: entered allmulticast mode [ 373.988452][T10663] syzkaller0: entered promiscuous mode [ 374.007494][T10663] syzkaller0: entered allmulticast mode [ 377.679472][T10726] syzkaller0: entered promiscuous mode [ 377.700191][T10726] syzkaller0: entered allmulticast mode [ 378.777633][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.784221][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.748536][T10784] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.758108][T10784] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.782095][T10784] bridge0: entered allmulticast mode [ 380.933410][T10788] bridge_slave_1: left allmulticast mode [ 380.941240][T10788] bridge_slave_1: left promiscuous mode [ 380.954044][T10788] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.968988][T10788] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.504150][T10798] syzkaller0: entered promiscuous mode [ 381.509690][T10798] syzkaller0: entered allmulticast mode [ 383.637354][T10827] bridge0: port 2(hsr0) entered disabled state [ 383.645676][T10827] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.659708][T10827] bridge0: entered allmulticast mode [ 383.716463][T10834] hsr0: left allmulticast mode [ 383.721734][T10834] hsr_slave_0: left allmulticast mode [ 383.727219][T10834] hsr_slave_1: left allmulticast mode [ 383.733373][T10834] bridge0: port 2(hsr0) entered disabled state [ 383.860209][T10834] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.856311][T10859] syzkaller0: entered promiscuous mode [ 384.869940][T10859] syzkaller0: entered allmulticast mode [ 388.395859][T10921] syzkaller0: entered promiscuous mode [ 388.401904][T10921] syzkaller0: entered allmulticast mode [ 395.908458][T11091] syzkaller0: entered promiscuous mode [ 395.914327][T11091] syzkaller0: entered allmulticast mode [ 399.161204][T11160] bridge0: port 2(hsr0) entered disabled state [ 399.167914][T11160] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.207207][T11160] bridge0: entered allmulticast mode [ 399.321165][T11163] hsr0: left allmulticast mode [ 399.339477][T11163] hsr_slave_0: left allmulticast mode [ 399.356617][T11163] hsr_slave_1: left allmulticast mode [ 399.366982][T11163] bridge0: port 2(hsr0) entered disabled state [ 399.427589][T11163] bridge_slave_0: left allmulticast mode [ 399.447212][T11163] bridge_slave_0: left promiscuous mode [ 399.528089][T11163] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.017924][T11305] syzkaller0: entered promiscuous mode [ 405.023734][T11305] syzkaller0: entered allmulticast mode [ 414.540294][T11487] syzkaller0: entered promiscuous mode [ 414.545925][T11487] syzkaller0: entered allmulticast mode [ 414.575441][T11487] syzkaller0: tun_net_xmit 1280 [ 414.585678][T11487] syzkaller0: create flow: hash 3882106151 index 1 [ 414.666897][T11486] syzkaller0: delete flow: hash 3882106151 index 1 [ 416.378355][T11524] syz.4.1911[11524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.378589][T11524] syz.4.1911[11524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.175178][T11568] syzkaller0: entered promiscuous mode [ 418.232432][T11568] syzkaller0: entered allmulticast mode [ 421.177643][T11651] syzkaller0: entered promiscuous mode [ 421.183429][T11651] syzkaller0: entered allmulticast mode [ 430.547643][T11818] macsec0: entered promiscuous mode [ 430.553377][T11818] macsec0: entered allmulticast mode [ 430.558807][T11818] veth1_macvtap: entered allmulticast mode [ 432.998814][T11858] syzkaller0: entered promiscuous mode [ 433.004956][T11858] syzkaller0: entered allmulticast mode [ 433.061880][T11860] syzkaller0: entered promiscuous mode [ 433.067417][T11860] syzkaller0: entered allmulticast mode [ 437.429201][T11931] syzkaller0: entered promiscuous mode [ 437.435050][T11931] syzkaller0: entered allmulticast mode [ 440.096772][T11975] cgroup: fork rejected by pids controller in /syz0 [ 440.241287][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.257918][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.852250][T11986] : port 1(ip6gretap0) entered blocking state [ 441.858596][T11986] : port 1(ip6gretap0) entered disabled state [ 441.865174][T11986] ip6gretap0: entered allmulticast mode [ 441.873574][T11986] ip6gretap0: entered promiscuous mode [ 442.429294][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.584654][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.862265][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.589269][ T5083] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 443.593325][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.608220][ T5083] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 443.624310][ T5083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 443.644828][ T5083] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 443.652941][ T5083] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 443.660862][ T5083] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 443.904786][T12011] sit0: entered allmulticast mode [ 444.279645][T12026] IPv6: pim6reg1: Disabled Multicast RS [ 445.188076][T12062] veth0_vlan: entered allmulticast mode [ 445.276007][T12009] chnl_net:caif_netlink_parms(): no params data found [ 445.445381][T12062] veth0_vlan: left promiscuous mode [ 445.462316][T12062] veth0_vlan: entered promiscuous mode [ 445.810227][ T5778] Bluetooth: hci1: command tx timeout [ 445.838407][T12009] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.850021][T12009] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.857587][T12009] bridge_slave_0: entered allmulticast mode [ 445.865195][T12009] bridge_slave_0: entered promiscuous mode [ 445.874386][T12009] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.881877][T12009] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.889450][T12009] bridge_slave_1: entered allmulticast mode [ 445.897401][T12009] bridge_slave_1: entered promiscuous mode [ 445.951817][T12009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.979393][T12009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.068872][T12009] team0: Port device team_slave_0 added [ 446.079426][T12009] team0: Port device team_slave_1 added [ 446.313939][T12009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.360196][T12009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.407822][T12009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.647176][T12009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.666720][T12009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.729303][T12009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.877397][ T42] hsr_slave_0: left promiscuous mode [ 446.902584][ T42] hsr_slave_1: left promiscuous mode [ 446.908871][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.933826][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.946010][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.958364][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.054139][ T42] veth1_macvtap: left promiscuous mode [ 447.059737][ T42] veth0_macvtap: left promiscuous mode [ 447.073541][ T42] veth1_vlan: left promiscuous mode [ 447.079063][ T42] veth0_vlan: left promiscuous mode [ 447.892057][ T5778] Bluetooth: hci1: command tx timeout [ 448.823272][ T42] team0 (unregistering): Port device team_slave_1 removed [ 448.906876][ T42] team0 (unregistering): Port device team_slave_0 removed [ 448.978872][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.056668][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.098065][ T42] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 449.343318][ T42] bond0 (unregistering): Released all slaves [ 449.386885][T12009] hsr_slave_0: entered promiscuous mode [ 449.393228][T12009] hsr_slave_1: entered promiscuous mode [ 449.399336][T12009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.407802][T12009] Cannot create hsr debugfs directory [ 449.975428][ T5778] Bluetooth: hci1: command tx timeout [ 450.415989][T12009] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 450.435988][T12009] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 450.725364][T12009] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 450.819882][T12009] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 451.223140][T12009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.300710][T12009] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.344858][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.352105][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.381627][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.388906][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.050551][ T5778] Bluetooth: hci1: command tx timeout [ 452.243023][T12009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.489991][T12009] veth0_vlan: entered promiscuous mode [ 452.563597][T12009] veth1_vlan: entered promiscuous mode [ 452.986762][T12009] veth0_macvtap: entered promiscuous mode [ 453.037140][T12009] veth1_macvtap: entered promiscuous mode [ 453.158692][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.229967][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.287870][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.319340][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.343312][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.369421][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.382122][T12009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.362900][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.385581][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.403017][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.485793][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.506535][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.528498][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.541575][T12009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.757216][T12009] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.767756][T12009] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.776728][T12009] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.785840][T12009] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.797194][T12269] SŪ÷: renamed from bond_slave_0 (while UP) [ 457.529847][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.537718][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.635846][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.654199][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.464801][T12374] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.477091][T12374] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.550986][T12374] bridge0: entered allmulticast mode [ 460.688854][T12380] bridge_slave_1: left allmulticast mode [ 460.695336][T12380] bridge_slave_1: left promiscuous mode [ 460.708935][T12380] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.719406][T12380] bridge_slave_0: left allmulticast mode [ 460.725215][T12380] bridge_slave_0: left promiscuous mode [ 460.735924][T12380] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.987754][T12404] sit0: entered allmulticast mode [ 468.017920][T12548] syzkaller0: entered promiscuous mode [ 468.040140][T12548] syzkaller0: entered allmulticast mode [ 475.486344][T12664] syzkaller0: entered promiscuous mode [ 475.548467][T12664] syzkaller0: entered allmulticast mode [ 480.344958][T12738] sit0: entered promiscuous mode [ 487.435334][T12892] syzkaller0: entered promiscuous mode [ 487.444448][T12892] syzkaller0: entered allmulticast mode [ 489.961423][T12922] syzkaller0: entered promiscuous mode [ 489.966971][T12922] syzkaller0: entered allmulticast mode [ 493.245473][T12967] tap0: tun_chr_ioctl cmd 1074025692 [ 495.282019][T13007] ================================================================== [ 495.290221][T13007] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 495.298232][T13007] Write of size 48 at addr ffff88802fa21a90 by task syz.3.2371/13007 [ 495.306299][T13007] [ 495.308719][T13007] CPU: 1 PID: 13007 Comm: syz.3.2371 Not tainted syzkaller #0 [ 495.316241][T13007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 495.326334][T13007] Call Trace: [ 495.329696][T13007] [ 495.332711][T13007] dump_stack_lvl+0x18c/0x250 [ 495.337545][T13007] ? read_lock_is_recursive+0x20/0x20 [ 495.343028][T13007] ? show_regs_print_info+0x20/0x20 [ 495.348247][T13007] ? load_image+0x420/0x420 [ 495.352815][T13007] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 495.358381][T13007] ? __virt_addr_valid+0x10c/0x380 [ 495.363508][T13007] ? __virt_addr_valid+0x10c/0x380 [ 495.368640][T13007] ? __virt_addr_valid+0x10c/0x380 [ 495.373774][T13007] print_report+0xa8/0x210 [ 495.378208][T13007] ? __bpf_get_stackid+0x6c7/0x900 [ 495.383346][T13007] kasan_report+0x117/0x150 [ 495.387916][T13007] ? __bpf_get_stackid+0x6c7/0x900 [ 495.393043][T13007] kasan_check_range+0x241/0x290 [ 495.397981][T13007] ? __bpf_get_stackid+0x6c7/0x900 [ 495.403092][T13007] __asan_memcpy+0x40/0x70 [ 495.407506][T13007] __bpf_get_stackid+0x6c7/0x900 [ 495.412444][T13007] bpf_get_stackid_pe+0x343/0x410 [ 495.417466][T13007] bpf_prog_6611c23d801ea08d+0x29/0x3e [ 495.422932][T13007] bpf_overflow_handler+0x1fc/0x510 [ 495.428127][T13007] ? bpf_overflow_handler+0xde/0x510 [ 495.433406][T13007] ? tp_perf_event_destroy+0x20/0x20 [ 495.438719][T13007] ? __perf_event_account_interrupt+0x187/0x280 [ 495.444960][T13007] __perf_event_overflow+0x461/0x660 [ 495.450244][T13007] perf_swevent_event+0x319/0x570 [ 495.455263][T13007] ? perf_tp_event+0x1550/0x1550 [ 495.460193][T13007] ? __lock_acquire+0x1336/0x7d80 [ 495.465212][T13007] ___perf_sw_event+0x4ab/0x730 [ 495.470055][T13007] ? ___perf_sw_event+0x19e/0x730 [ 495.475069][T13007] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 495.481475][T13007] ? __lock_acquire+0x1336/0x7d80 [ 495.486493][T13007] ? __put_user_4+0x11/0x20 [ 495.490993][T13007] ? perf_unpin_context+0x70/0x70 [ 495.496041][T13007] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 495.502016][T13007] ? lock_chain_count+0x20/0x20 [ 495.506861][T13007] __perf_sw_event+0x139/0x270 [ 495.511621][T13007] do_user_addr_fault+0x1242/0x12d0 [ 495.516816][T13007] ? rcu_is_watching+0x15/0xb0 [ 495.521579][T13007] exc_page_fault+0x64/0x100 [ 495.526168][T13007] asm_exc_page_fault+0x26/0x30 [ 495.531128][T13007] RIP: 0010:__put_user_4+0x11/0x20 [ 495.536277][T13007] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 495.555913][T13007] RSP: 0018:ffffc9000c797c58 EFLAGS: 00050246 [ 495.562026][T13007] RAX: 00000000000005f2 RBX: 0000000000000000 RCX: 0000000000000000 [ 495.569987][T13007] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d0ca0 [ 495.577952][T13007] RBP: ffffc9000c797d90 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 495.585933][T13007] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: 1ffff920018f2f94 [ 495.593896][T13007] R13: dffffc0000000000 R14: 0000000041980000 R15: 00000000000005f2 [ 495.601867][T13007] kernel_clone+0x36c/0x8a0 [ 495.606392][T13007] ? create_io_thread+0x190/0x190 [ 495.611416][T13007] ? do_futex+0x35d/0x3e0 [ 495.615754][T13007] __x64_sys_clone+0x1b7/0x230 [ 495.620513][T13007] ? __ia32_sys_vfork+0x140/0x140 [ 495.625536][T13007] ? lock_chain_count+0x20/0x20 [ 495.630380][T13007] ? lockdep_hardirqs_on+0x98/0x150 [ 495.635571][T13007] do_syscall_64+0x55/0xb0 [ 495.639975][T13007] ? clear_bhb_loop+0x40/0x90 [ 495.644645][T13007] ? clear_bhb_loop+0x40/0x90 [ 495.649311][T13007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.655193][T13007] RIP: 0033:0x7faa7059e0d9 [ 495.659598][T13007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.679201][T13007] RSP: 002b:00007faa713a8fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 495.687638][T13007] RAX: ffffffffffffffda RBX: 00007faa70825fa0 RCX: 00007faa7059e0d9 [ 495.695602][T13007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041980000 [ 495.703562][T13007] RBP: 00007faa70635024 R08: 0000000000000000 R09: 0000000000000000 [ 495.711521][T13007] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 495.719495][T13007] R13: 00007faa70826038 R14: 00007faa70825fa0 R15: 00007ffe55d13838 [ 495.727478][T13007] [ 495.730493][T13007] [ 495.732808][T13007] Allocated by task 13007: [ 495.737288][T13007] kasan_set_track+0x4e/0x70 [ 495.741878][T13007] __kasan_kmalloc+0x8f/0xa0 [ 495.746462][T13007] __kmalloc_node+0xb6/0x240 [ 495.751069][T13007] bpf_map_area_alloc+0x5e/0x110 [ 495.756001][T13007] prealloc_elems_and_freelist+0x86/0x1c0 [ 495.761711][T13007] stack_map_alloc+0x32b/0x4b0 [ 495.766470][T13007] map_create+0x877/0x12f0 [ 495.770874][T13007] __sys_bpf+0x651/0x890 [ 495.775105][T13007] __x64_sys_bpf+0x7c/0x90 [ 495.779510][T13007] do_syscall_64+0x55/0xb0 [ 495.783915][T13007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.789802][T13007] [ 495.792117][T13007] The buggy address belongs to the object at ffff88802fa21a80 [ 495.792117][T13007] which belongs to the cache kmalloc-cg-64 of size 64 [ 495.806333][T13007] The buggy address is located 16 bytes inside of [ 495.806333][T13007] allocated 40-byte region [ffff88802fa21a80, ffff88802fa21aa8) [ 495.820341][T13007] [ 495.822650][T13007] The buggy address belongs to the physical page: [ 495.829110][T13007] page:ffffea0000be8840 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2fa21 [ 495.839251][T13007] memcg:ffff88807f018201 [ 495.843475][T13007] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 495.851383][T13007] page_type: 0xffffffff() [ 495.855720][T13007] raw: 00fff00000000800 ffff888017c4da00 ffffea00009748c0 0000000000000003 [ 495.864300][T13007] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88807f018201 [ 495.872870][T13007] page dumped because: kasan: bad access detected [ 495.879279][T13007] page_owner tracks the page as allocated [ 495.884981][T13007] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 995, tgid 995 (kworker/u4:5), ts 467493012269, free_ts 467466478753 [ 495.903293][T13007] post_alloc_hook+0x1c1/0x200 [ 495.908058][T13007] get_page_from_freelist+0x2181/0x22a0 [ 495.913590][T13007] __alloc_pages+0x1f0/0x460 [ 495.918168][T13007] alloc_slab_page+0x5d/0x180 [ 495.922831][T13007] new_slab+0x87/0x2d0 [ 495.926886][T13007] ___slab_alloc+0xc5c/0x12f0 [ 495.931548][T13007] __kmem_cache_alloc_node+0x11f/0x250 [ 495.936999][T13007] __kmalloc_node+0xa6/0x240 [ 495.941581][T13007] kvmalloc_node+0x70/0x180 [ 495.946077][T13007] __nf_hook_entries_try_shrink+0x336/0x700 [ 495.952067][T13007] __nf_unregister_net_hook+0x4da/0x6d0 [ 495.957602][T13007] nf_unregister_net_hooks+0xcb/0x130 [ 495.962966][T13007] nf_ct_netns_put+0x2d2/0x520 [ 495.967785][T13007] nf_conncount_destroy+0x41/0x150 [ 495.972942][T13007] ovs_ct_exit+0x9c/0x200 [ 495.977334][T13007] ovs_exit_net+0xed/0x7a0 [ 495.981741][T13007] page last free stack trace: [ 495.986393][T13007] free_unref_page_prepare+0x7d7/0x8f0 [ 495.991837][T13007] free_unref_page+0x32/0x2e0 [ 495.996498][T13007] vfree+0x1a7/0x340 [ 496.000380][T13007] bpf_check+0x6449/0xec30 [ 496.004786][T13007] bpf_prog_load+0x10fa/0x1610 [ 496.009533][T13007] __sys_bpf+0x5ba/0x890 [ 496.013763][T13007] __x64_sys_bpf+0x7c/0x90 [ 496.018165][T13007] do_syscall_64+0x55/0xb0 [ 496.022570][T13007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.028459][T13007] [ 496.030774][T13007] Memory state around the buggy address: [ 496.036456][T13007] ffff88802fa21980: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 496.044504][T13007] ffff88802fa21a00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 496.052551][T13007] >ffff88802fa21a80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 496.060595][T13007] ^ [ 496.065948][T13007] ffff88802fa21b00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 496.073997][T13007] ffff88802fa21b80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 496.082039][T13007] ================================================================== [ 496.090096][T13007] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 496.097279][T13007] CPU: 1 PID: 13007 Comm: syz.3.2371 Not tainted syzkaller #0 [ 496.104722][T13007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 496.114763][T13007] Call Trace: [ 496.118030][T13007] [ 496.120952][T13007] dump_stack_lvl+0x18c/0x250 [ 496.125623][T13007] ? show_regs_print_info+0x20/0x20 [ 496.130818][T13007] ? load_image+0x420/0x420 [ 496.135329][T13007] panic+0x2ca/0x720 [ 496.139219][T13007] ? __lock_acquire+0x7d80/0x7d80 [ 496.144235][T13007] ? bpf_jit_dump+0xd0/0xd0 [ 496.148736][T13007] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 496.154625][T13007] ? _raw_spin_unlock+0x40/0x40 [ 496.159474][T13007] ? __bpf_get_stackid+0x6c7/0x900 [ 496.164583][T13007] check_panic_on_warn+0x84/0xa0 [ 496.169600][T13007] ? __bpf_get_stackid+0x6c7/0x900 [ 496.174727][T13007] end_report+0x6f/0x130 [ 496.178963][T13007] kasan_report+0x128/0x150 [ 496.183454][T13007] ? __bpf_get_stackid+0x6c7/0x900 [ 496.188561][T13007] kasan_check_range+0x241/0x290 [ 496.193488][T13007] ? __bpf_get_stackid+0x6c7/0x900 [ 496.198589][T13007] __asan_memcpy+0x40/0x70 [ 496.203000][T13007] __bpf_get_stackid+0x6c7/0x900 [ 496.207936][T13007] bpf_get_stackid_pe+0x343/0x410 [ 496.212954][T13007] bpf_prog_6611c23d801ea08d+0x29/0x3e [ 496.218407][T13007] bpf_overflow_handler+0x1fc/0x510 [ 496.223601][T13007] ? bpf_overflow_handler+0xde/0x510 [ 496.228884][T13007] ? tp_perf_event_destroy+0x20/0x20 [ 496.234166][T13007] ? __perf_event_account_interrupt+0x187/0x280 [ 496.240403][T13007] __perf_event_overflow+0x461/0x660 [ 496.245684][T13007] perf_swevent_event+0x319/0x570 [ 496.250703][T13007] ? perf_tp_event+0x1550/0x1550 [ 496.255638][T13007] ? __lock_acquire+0x1336/0x7d80 [ 496.260676][T13007] ___perf_sw_event+0x4ab/0x730 [ 496.265519][T13007] ? ___perf_sw_event+0x19e/0x730 [ 496.270533][T13007] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 496.276937][T13007] ? __lock_acquire+0x1336/0x7d80 [ 496.281954][T13007] ? __put_user_4+0x11/0x20 [ 496.286456][T13007] ? perf_unpin_context+0x70/0x70 [ 496.291469][T13007] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 496.297442][T13007] ? lock_chain_count+0x20/0x20 [ 496.302283][T13007] __perf_sw_event+0x139/0x270 [ 496.307040][T13007] do_user_addr_fault+0x1242/0x12d0 [ 496.312247][T13007] ? rcu_is_watching+0x15/0xb0 [ 496.317004][T13007] exc_page_fault+0x64/0x100 [ 496.321588][T13007] asm_exc_page_fault+0x26/0x30 [ 496.326433][T13007] RIP: 0010:__put_user_4+0x11/0x20 [ 496.331538][T13007] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 496.351139][T13007] RSP: 0018:ffffc9000c797c58 EFLAGS: 00050246 [ 496.357197][T13007] RAX: 00000000000005f2 RBX: 0000000000000000 RCX: 0000000000000000 [ 496.365158][T13007] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d0ca0 [ 496.373146][T13007] RBP: ffffc9000c797d90 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 496.381108][T13007] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: 1ffff920018f2f94 [ 496.389067][T13007] R13: dffffc0000000000 R14: 0000000041980000 R15: 00000000000005f2 [ 496.397041][T13007] kernel_clone+0x36c/0x8a0 [ 496.401543][T13007] ? create_io_thread+0x190/0x190 [ 496.406560][T13007] ? do_futex+0x35d/0x3e0 [ 496.410882][T13007] __x64_sys_clone+0x1b7/0x230 [ 496.415639][T13007] ? __ia32_sys_vfork+0x140/0x140 [ 496.420657][T13007] ? lock_chain_count+0x20/0x20 [ 496.425506][T13007] ? lockdep_hardirqs_on+0x98/0x150 [ 496.430706][T13007] do_syscall_64+0x55/0xb0 [ 496.435112][T13007] ? clear_bhb_loop+0x40/0x90 [ 496.439781][T13007] ? clear_bhb_loop+0x40/0x90 [ 496.444456][T13007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.450341][T13007] RIP: 0033:0x7faa7059e0d9 [ 496.454747][T13007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.474346][T13007] RSP: 002b:00007faa713a8fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 496.482750][T13007] RAX: ffffffffffffffda RBX: 00007faa70825fa0 RCX: 00007faa7059e0d9 [ 496.490715][T13007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041980000 [ 496.498673][T13007] RBP: 00007faa70635024 R08: 0000000000000000 R09: 0000000000000000 [ 496.506633][T13007] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 496.514590][T13007] R13: 00007faa70826038 R14: 00007faa70825fa0 R15: 00007ffe55d13838 [ 496.522654][T13007] [ 496.525913][T13007] Kernel Offset: disabled [ 496.530223][T13007] Rebooting in 86400 seconds..