last executing test programs: 7m23.340838199s ago: executing program 1 (id=6749): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82744, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffe, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x401, 0x0, 0x9}, 0x0, 0x5, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800f3fe8000000000000000000000000000aa"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 7m23.2675626s ago: executing program 0 (id=6751): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8902, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x894a, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 7m23.075896983s ago: executing program 1 (id=6754): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x4a, &(0x7f0000000040), 0x3c}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) 7m23.069664484s ago: executing program 0 (id=6755): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 7m22.969231775s ago: executing program 1 (id=6758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, 0x0, 0x280) 7m22.112870638s ago: executing program 0 (id=6762): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000009b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), 0x0, 0x2}, 0x20) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x6, 0x44, 0x1, 0x0, 0x0, 0x3, 0x60014, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x9}, 0x20, 0x200, 0xfffffff9, 0x4, 0xc, 0x0, 0x200, 0x0, 0x40, 0x0, 0x7}, 0x0, 0xf, r2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlink(&(0x7f0000000180)='./cgroup/../file0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000200)='pids.current\x00', 0x275a, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2b, 'pids'}]}, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) 7m20.69919402s ago: executing program 0 (id=6765): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000009b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), 0x0, 0x2}, 0x20) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x6, 0x44, 0x1, 0x0, 0x0, 0x3, 0x60014, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x9}, 0x20, 0x200, 0xfffffff9, 0x4, 0xc, 0x0, 0x200, 0x0, 0x40, 0x0, 0x7}, 0x0, 0xf, r2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlink(&(0x7f0000000180)='./cgroup/../file0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000200)='pids.current\x00', 0x275a, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2b, 'pids'}]}, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x2a020600, &(0x7f0000000300)="4e159d92ce4e466744ae3704fbcbecdf6d177309d6887a9d4f6083f01ff4b38bc7e0302ffc3a39d616b8f204f4e6067102b40bf64b442dedd91fed311fefd48b50ae9b46d11c86ae78e3f153dacb1199b2571171df725d2ec1048be9f8fdf137cdd907342f06a2943b9338ccc1477223fd60082c2fa879c1b419eb567cfc2d6b1cbef6b22c9ad3910b62a564ca93c66b38d442893508c6daf8a3537fe54b130ec3d9d6ea10aba5b7f5c2d4205e74424f", 0xb0, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f00000004c0)="df2239a5abfe7f736463aa3ae5541525d85b9df771aae02a28043c0e57aead8f2a4b3a139507dd43ac6862d4dca5877e23f4111791863277a703b41bea7d69d3a8a7ca074f8c3f27cffde6d291cb265ddfc009e96d29") ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a1, &(0x7f0000000080)) 7m20.627773971s ago: executing program 1 (id=6766): socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x110684}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) recvmsg$unix(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x9}, 0x57, 0xc8, 0x0, 0x0, 0x0, 0xad4}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x6, &(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x488, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0xb, 0x4d81, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0, r0, 0xffffffffffffffff], &(0x7f00000002c0), 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) 7m19.787309333s ago: executing program 1 (id=6768): r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x1e498, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 7m19.718775245s ago: executing program 0 (id=6769): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) 7m19.40719665s ago: executing program 0 (id=6770): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0xfffe, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r3) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000f7ffffff00000000004000000000000000005bf973983483621c69189c4b41ddd55066b26eff531250e19d2f848778152b536e812b19c70222f3663353d952f670dd8f002de1e2b313f201b7506dde10bc24eec4f2df3f88e629b81aefec418d17b69a3cdc98cd58d59e73cf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x52}, 0x28) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000000d00)={&(0x7f0000000300), 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/226, 0xe2}], 0x1}, 0x3) 7m4.251946891s ago: executing program 32 (id=6770): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0xfffe, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r3) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000f7ffffff00000000004000000000000000005bf973983483621c69189c4b41ddd55066b26eff531250e19d2f848778152b536e812b19c70222f3663353d952f670dd8f002de1e2b313f201b7506dde10bc24eec4f2df3f88e629b81aefec418d17b69a3cdc98cd58d59e73cf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x52}, 0x28) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000000d00)={&(0x7f0000000300), 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/226, 0xe2}], 0x1}, 0x3) 7m4.207665342s ago: executing program 33 (id=6768): r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x1e498, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 6m37.372271903s ago: executing program 3 (id=6814): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x99, 0x99, 0x2, [@typedef={0xe}, @datasec={0xc, 0x5, 0x0, 0xf, 0x1, [{0x5, 0x4, 0x7}, {0x4, 0x10001, 0x7}, {0x1, 0x496, 0x7ff}, {0x2, 0x3, 0xfffffd94}, {0x5, 0x4}], '\b'}, @enum={0xf, 0x7, 0x0, 0x6, 0x4, [{0xc, 0xfffffff7}, {0xc, 0x5000000}, {0xa, 0xcf}, {0xa, 0x5}, {0x7, 0x7b}, {0xc, 0x4}, {0x2, 0x8}]}]}}, 0x0, 0xb6, 0x0, 0x1, 0xff}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a80)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7", @ANYBLOB="0000faffffffffffb6020000030061916eb2692581b100001811000029282fa41364c06ab6040b3d461f6cfc9d517668e4773ebb4270c54351baad1bcc77df6ace1766c9b5d258eaafcc7722494cd50feb52e8b17f148eaaec6d1b0e3832dfa8bd63eb60f7f0068af43d7eaa2a9aec474ea620579ca661903fae1b92d7c9b0519a19cdc07c1c46b76c94eb5004941c28f221034e57f13526e73f1925b015a9db9cb7ef22435dd0ae07d5b52fdad81def15050b1ea49d6195dc5ddbf6dc79eb53b7caff842e9fc8efa1d7"], &(0x7f0000000040)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x11, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000200)={'a', ' *:* ', 'rm\x00'}, 0x9) 6m36.128984622s ago: executing program 3 (id=6816): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x99, 0x99, 0x2, [@typedef={0xe}, @datasec={0xc, 0x5, 0x0, 0xf, 0x1, [{0x5, 0x4, 0x7}, {0x4, 0x10001, 0x7}, {0x1, 0x496, 0x7ff}, {0x2, 0x3, 0xfffffd94}, {0x5, 0x4}], '\b'}, @enum={0xf, 0x7, 0x0, 0x6, 0x4, [{0xc, 0xfffffff7}, {0xc, 0x5000000}, {0xa, 0xcf}, {0xa, 0x5}, {0x7, 0x7b}, {0xc, 0x4}, {0x2, 0x8}]}]}}, 0x0, 0xb6, 0x0, 0x1, 0xff}, 0x28) 6m35.058453428s ago: executing program 3 (id=6818): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x99, 0x99, 0x2, [@typedef={0xe}, @datasec={0xc, 0x5, 0x0, 0xf, 0x1, [{0x5, 0x4, 0x7}, {0x4, 0x10001, 0x7}, {0x1, 0x496, 0x7ff}, {0x2, 0x3, 0xfffffd94}, {0x5, 0x4}], '\b'}, @enum={0xf, 0x7, 0x0, 0x6, 0x4, [{0xc, 0xfffffff7}, {0xc, 0x5000000}, {0xa, 0xcf}, {0xa, 0x5}, {0x7, 0x7b}, {0xc, 0x4}, {0x2, 0x8}]}]}}, 0x0, 0xb6, 0x0, 0x1, 0xff}, 0x28) 6m34.745872233s ago: executing program 3 (id=6809): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x2, &(0x7f0000000180)=@raw=[@alu={0x4, 0x1, 0x4, 0x4, 0x2, 0x40}, @exit], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="070000000463c4ac400200000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x86, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xfff0000000000001, 0xffffffffffffffff, 0x3) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r2, r1, 0x4, r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='bcache_alloc\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f0000000040)="8905c229cbfb2e6d8b2596f529f59132410c1cc903ebb2378305056906123692383130e87a49d90d0212ce880ffdf507"}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 6m28.43440522s ago: executing program 3 (id=6825): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbffd, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) close(r0) 6m27.621593532s ago: executing program 3 (id=6817): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 6m11.558928248s ago: executing program 34 (id=6817): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 2m56.700902452s ago: executing program 6 (id=8263): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1}, 0x8040) close(r0) 2m56.531439565s ago: executing program 6 (id=8267): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, 0x0, &(0x7f0000000600)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) r3 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000880), 0x12) 2m55.579377009s ago: executing program 6 (id=8272): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 2m55.253900154s ago: executing program 6 (id=8275): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f0000000040), &(0x7f0000000400)}, 0x20) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x2e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x1, @perf_config_ext}, 0x0, 0xffffffffefffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x23) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b40)={{r5}, &(0x7f0000000980), &(0x7f0000001b00)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 2m53.771306676s ago: executing program 6 (id=8291): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0130014010ff"}) 2m51.540811431s ago: executing program 6 (id=8297): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079108600000000000700000002000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd0, &(0x7f0000000680)=""/208, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x1e498, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xfffffffc}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000000850000008700000085000000050000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x418000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="660a00000000000061114e0000000000850000008c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 2m36.347165244s ago: executing program 35 (id=8297): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079108600000000000700000002000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd0, &(0x7f0000000680)=""/208, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x1e498, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xfffffffc}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000000850000008700000085000000050000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x418000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="660a00000000000061114e0000000000850000008c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 1m46.28838828s ago: executing program 5 (id=8511): close(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r0, 0x0, 0x800000}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socketpair(0x1, 0x1, 0x8000, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100020, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 1m45.145746057s ago: executing program 5 (id=8513): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="284467d33efd02154deb0d5d64da48cdd7089e34e75332686d785f52d389d387d9c4e3419af3a1407ef82d8b36e9784d47ea06f7e8160595c95308c0e5ab537c9f6a505319983af70ba0952617ffeb25c2e8eb430755d7f782f109870b9dc2fc70d1f28dfa803e62"], 0x0, 0x0, 0x0, 0x0, 0x8ba11251a873a241, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0, 0x0, 0x5}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000000000008500"], &(0x7f0000000080)='GPL\x00', 0x8, 0x32, &(0x7f00000001c0)=""/50, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8}, 0x94) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000004c0)) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x4008744b, 0xf0ff1f00000000) 1m42.799412913s ago: executing program 5 (id=8518): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1m40.039610306s ago: executing program 5 (id=8521): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/cgroup\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r1, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x50) close(r6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m38.986862501s ago: executing program 2 (id=8523): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b6fffec850000006d0000008500000008"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) 1m38.025991696s ago: executing program 2 (id=8524): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0130014010ff"}) 1m35.024092063s ago: executing program 2 (id=8527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) 1m34.766593126s ago: executing program 2 (id=8529): socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x2, 0x0, 0x0, 0x7fef, 0x82, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48dfff", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180311d916e0dab44e", @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00080325000000a4000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) r5 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r5) 1m31.012320604s ago: executing program 5 (id=8531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) 1m31.009663884s ago: executing program 2 (id=8540): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/cgroup\x00') bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x50) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r5) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m27.745509694s ago: executing program 5 (id=8532): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/cgroup\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r1, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x50) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r5) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m22.489225964s ago: executing program 2 (id=8548): bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000000, 0x180}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x7f, 0xffffffff, 0x10000, 0xffffffffffffffff, 0x3a, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0xf}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m12.293105171s ago: executing program 36 (id=8532): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/cgroup\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r1, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x50) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r5) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m7.372183976s ago: executing program 37 (id=8548): bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000000, 0x180}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x7f, 0xffffffff, 0x10000, 0xffffffffffffffff, 0x3a, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0xf}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.9690148s ago: executing program 9 (id=8937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f", 0xd5}], 0x1}, 0x0) 1.872546782s ago: executing program 9 (id=8939): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000006"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) sendmsg$unix(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) sendmsg$unix(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc11"], 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b06, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000006000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) 1.624056816s ago: executing program 9 (id=8942): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x1820a6, 0x20000000000ca, 0x0, 0x0, 0x4, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x4, @perf_bp={0x0, 0xa}, 0x2018, 0x3, 0x0, 0x9, 0x0, 0x0, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001"], 0x0, 0x4a, 0x0, 0x1}, 0x28) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca0d"], 0x9a) 1.378324739s ago: executing program 4 (id=8946): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x2, 0x0, 0x0, 0x0, 0x3, 0x481, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x7baf376a, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r2, 0x5452, &(0x7f00000013c0)) 1.278221021s ago: executing program 9 (id=8948): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00'}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0xffffffff, 0x0, 0x0, 0x0, 0x579}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000001700)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000e7ff0000009500000000000000b0aace595edc31d28609506d57a9e25b5b42f5e8390f37b162ef67ba095cbf9ab831dcd2696dd89981a96593485f9e35"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, &(0x7f0000000040)) syz_clone(0xc0080180, &(0x7f0000000280)="6ef7c02cd2888040b0ebc48d5458dd7e1e5abfe65def9939a35ead9db51564e5dbe8d56308650470e63844e4796917b93f1507a36398395ab2fd1f4b59023cb5398bacedfb3c01554d1bb200004a7ec93d938cde93adb82b368fd0754135ecac4b99e34c548c6743caa6d0f7fb0c246170b5f3", 0x73, 0x0, &(0x7f0000000380), &(0x7f00000003c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.277567501s ago: executing program 4 (id=8949): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6a) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="d4686c6b491cbd33ffffff0000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x40000}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x4, 0x9, 0x3, 0x1, 0x0, 0xffff, 0x10000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0xa028, 0x9, 0xd6d9, 0x0, 0x812, 0x5, 0x5, 0x0, 0x6, 0x0, 0x101}, 0x0, 0x8, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x42) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x6c}, @initr0, @exit]}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) close(r4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, r4, 0x2, 0x0, 0x4000}, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x1ff) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x5, 0xe, 0x0, &(0x7f0000000280)="6a370000000000001f71a76d2688", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) 1.234595421s ago: executing program 7 (id=8950): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1, 0x4}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000010071121c000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0xa01, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.072391534s ago: executing program 4 (id=8952): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xa, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da", 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x14}, 0x28) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x45}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @broadcast}) 1.010405275s ago: executing program 7 (id=8953): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x945, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 861.300677ms ago: executing program 7 (id=8955): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 860.855377ms ago: executing program 8 (id=8956): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 855.007757ms ago: executing program 4 (id=8957): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x40000000000, 0x90000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x8, 0x80, 0x7, 0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r1}, 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xc0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 619.789851ms ago: executing program 9 (id=8958): close(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r0, 0x0, 0x800000}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socketpair(0x1, 0x1, 0x8000, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100020, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 608.962701ms ago: executing program 8 (id=8959): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f", 0xd5}], 0x1}, 0x0) 583.773031ms ago: executing program 7 (id=8960): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6a) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="d4686c6b491cbd33ffffff0000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x40000}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x4, 0x9, 0x3, 0x1, 0x0, 0xffff, 0x10000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0xa028, 0x9, 0xd6d9, 0x0, 0x812, 0x5, 0x5, 0x0, 0x6, 0x0, 0x101}, 0x0, 0x8, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x42) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x6c}, @initr0, @exit]}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) close(r4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, r4, 0x2, 0x0, 0x4000}, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x1ff) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x5, 0xe, 0x0, &(0x7f0000000280)="6a370000000000001f71a76d2688", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) 551.278822ms ago: executing program 8 (id=8961): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x2, 0x0, 0x0, 0x0, 0x3, 0x481, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x7baf376a, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r2, 0x5452, &(0x7f00000013c0)) 483.708813ms ago: executing program 4 (id=8962): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x4204, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 391.908934ms ago: executing program 8 (id=8963): socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x2, 0x0, 0x0, 0x7fef, 0x82, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180311d916e0dab44e", @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00080325000000a4000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) r5 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r5) 276.087066ms ago: executing program 8 (id=8964): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000001177fbac141416e000030a89079f03b18000440c0503e0845013f2325f009409050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 265.485556ms ago: executing program 7 (id=8965): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x63, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000240), &(0x7f00000003c0)=r1}, 0x20) 244.819807ms ago: executing program 9 (id=8973): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6a) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="d4686c6b491cbd33ffffff0000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x40000}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x4, 0x9, 0x3, 0x1, 0x0, 0xffff, 0x10000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0xa028, 0x9, 0xd6d9, 0x0, 0x812, 0x5, 0x5, 0x0, 0x6, 0x0, 0x101}, 0x0, 0x8, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x42) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x6c}, @initr0, @exit]}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) close(r4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, r4, 0x2, 0x0, 0x4000}, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x1ff) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x5, 0xe, 0x0, &(0x7f0000000280)="6a370000000000001f71a76d2688", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) 167.984328ms ago: executing program 4 (id=8966): syz_clone(0x80052c00, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x2}, 0x4ff8fd3b558fa691, 0x0, 0x80000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000005"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) 129.167688ms ago: executing program 7 (id=8967): perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 8 (id=8968): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) kernel console output (not intermixed with test programs): port 6081 - 0 [ 884.332624][T18797] chnl_net:caif_netlink_parms(): no params data found [ 884.475062][T18797] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.488580][T18797] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.511194][T18797] bridge_slave_0: entered allmulticast mode [ 884.520185][ T5794] Bluetooth: hci1: command tx timeout [ 884.534934][T18797] bridge_slave_0: entered promiscuous mode [ 884.553754][T18797] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.562378][T18797] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.570820][T18797] bridge_slave_1: entered allmulticast mode [ 884.578170][T18797] bridge_slave_1: entered promiscuous mode [ 884.638985][T18797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.674212][T18797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.742520][T18821] syzkaller0: tun_chr_ioctl cmd 1074033745 [ 884.785448][T18797] team0: Port device team_slave_0 added [ 884.795555][T18797] team0: Port device team_slave_1 added [ 884.921574][T18797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.939682][T18797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.971886][T18797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.989001][T18797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.998832][T18797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.032539][T18797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.289793][T18797] hsr_slave_0: entered promiscuous mode [ 885.296589][T18797] hsr_slave_1: entered promiscuous mode [ 885.303722][T18797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 885.314747][T18797] Cannot create hsr debugfs directory [ 886.042347][ T5794] Bluetooth: hci2: command tx timeout [ 886.599672][ T5794] Bluetooth: hci1: command tx timeout [ 886.840018][ T11] hsr_slave_0: left promiscuous mode [ 886.845952][ T11] hsr_slave_1: left promiscuous mode [ 886.852606][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.860678][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.868407][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.876871][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.894931][ T11] veth1_vlan: left promiscuous mode [ 887.316216][ T11] team0 (unregistering): Port device team_slave_1 removed [ 887.354773][ T11] team0 (unregistering): Port device team_slave_0 removed [ 887.393877][ T11]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 887.806582][ T11]  (unregistering): Released all slaves [ 887.847494][T18797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 887.858795][T18797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 887.872374][T18797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 887.883734][T18797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 888.017505][T18797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.037797][T18797] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.081524][T15141] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.088728][T15141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.120214][ T5794] Bluetooth: hci2: command tx timeout [ 888.143286][T15141] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.150507][T15141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.438654][T18797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.519242][T18797] veth0_vlan: entered promiscuous mode [ 888.541612][T18797] veth1_vlan: entered promiscuous mode [ 888.588480][T18797] veth0_macvtap: entered promiscuous mode [ 888.603727][T18797] veth1_macvtap: entered promiscuous mode [ 888.632186][T18797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.643393][T18797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.653706][T18797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.664838][T18797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.675028][T18797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.688983][T18797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.702813][T18797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.719215][T18797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.731017][T18797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.742420][T18797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.753099][T18797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.763876][T18797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.778719][T18797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.795570][T18797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.816279][T18797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.826677][T18797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.842526][T18797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.852156][T18797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.944899][T15141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.960217][T15141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.991375][T15141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.007597][T15141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.019807][T18205] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 890.033988][T18205] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 890.060273][T18205] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 890.091437][T18205] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 890.103635][T18205] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 890.115138][T18205] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 890.206160][ T5794] Bluetooth: hci2: command tx timeout [ 890.957729][T18981] team0: Port device team_slave_0 removed [ 890.987938][T18981] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 891.058221][T15141] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.088018][T18982] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4995'. [ 891.105515][T18948] chnl_net:caif_netlink_parms(): no params data found [ 891.228363][T15141] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.203194][ T5794] Bluetooth: hci3: command tx timeout [ 892.283170][ T5794] Bluetooth: hci2: command tx timeout [ 892.860559][T15141] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.984641][T15141] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.095802][T19012] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5007'. [ 893.201801][T18948] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.208969][T18948] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.241509][T18948] bridge_slave_0: entered allmulticast mode [ 893.249015][T18948] bridge_slave_0: entered promiscuous mode [ 893.278399][T18948] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.303843][T18948] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.314257][T18948] bridge_slave_1: entered allmulticast mode [ 893.346166][T18948] bridge_slave_1: entered promiscuous mode [ 893.593060][T18948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.631783][T18948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.850912][T18948] team0: Port device team_slave_0 added [ 893.871440][T18948] team0: Port device team_slave_1 added [ 894.245127][T19040] veth0_vlan: entered allmulticast mode [ 894.290745][ T5794] Bluetooth: hci3: command tx timeout [ 894.716277][T18948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.731159][T18948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.779471][T18948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.797938][T19057] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5021'. [ 894.914072][T18948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.929589][T18948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.956516][T18948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.192576][T18948] hsr_slave_0: entered promiscuous mode [ 895.780144][T18948] hsr_slave_1: entered promiscuous mode [ 896.018614][T19082] pim6reg1: entered promiscuous mode [ 896.039931][T19082] pim6reg1: entered allmulticast mode [ 896.361687][ T5794] Bluetooth: hci3: command tx timeout [ 896.514141][T15141] hsr_slave_0: left promiscuous mode [ 896.520666][T15141] hsr_slave_1: left promiscuous mode [ 896.526949][T15141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.541036][T15141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.549226][T15141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.558704][T15141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.581876][T15141] veth1_vlan: left promiscuous mode [ 896.723610][T15141] geneve1 (unregistering): left promiscuous mode [ 896.730784][T15141] geneve1 (unregistering): left allmulticast mode [ 896.739790][T15141] team0 (unregistering): Port device geneve1 removed [ 897.034382][T15141] team_slave_1 (unregistering): left promiscuous mode [ 897.041397][T15141] team_slave_1 (unregistering): left allmulticast mode [ 897.050243][T15141] team0 (unregistering): Port device team_slave_1 removed [ 897.096362][T15141] team_slave_0 (unregistering): left promiscuous mode [ 897.105084][T15141] team_slave_0 (unregistering): left allmulticast mode [ 897.114422][T15141] team0 (unregistering): Port device team_slave_0 removed [ 897.153335][T15141]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.554033][T15141]  (unregistering): Released all slaves [ 897.889122][T18948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 897.919569][T18948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 897.932635][T18948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 897.952380][T18948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 898.075153][T18948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.103370][T18948] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.118918][T15141] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.126146][T15141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.142935][T15141] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.150203][T15141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.215781][T18948] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 898.228610][T18948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 898.439756][ T5794] Bluetooth: hci3: command tx timeout [ 898.459479][T18948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.539197][T18948] veth0_vlan: entered promiscuous mode [ 898.555637][T18948] veth1_vlan: entered promiscuous mode [ 898.615035][T18948] veth0_macvtap: entered promiscuous mode [ 898.633770][T18948] veth1_macvtap: entered promiscuous mode [ 898.671742][T18948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.687678][T18948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.699586][T18948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.715165][T18948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.725310][T18948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.739842][T18948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.755667][T18948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.776103][T18948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.788076][T18948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.802619][T18948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.816438][T18948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.832017][T18948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.845149][T18948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.860793][T18948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.881583][T18948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.895167][T18948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.905395][T18948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.914539][T18948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.019699][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.027591][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.076991][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.088153][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.389224][T19152] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5034'. [ 899.740602][T19158] pim6reg1: entered promiscuous mode [ 899.746003][T19158] pim6reg1: entered allmulticast mode [ 900.691571][T19190] pim6reg1: entered promiscuous mode [ 900.838660][T19190] pim6reg1: entered allmulticast mode [ 906.974353][T19293] wg2: entered promiscuous mode [ 906.979306][T19293] wg2: entered allmulticast mode [ 913.584687][T19387] syzkaller0: entered promiscuous mode [ 913.607639][T19387] syzkaller0: entered allmulticast mode [ 916.351001][T19423] syz.2.5139[19423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 916.351096][T19423] syz.2.5139[19423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 917.015999][T19423] veth0_vlan: entered allmulticast mode [ 919.193686][T19481] sit0: entered allmulticast mode [ 919.588697][T19484] sit0: entered promiscuous mode [ 921.256314][T19495] pim6reg1: entered promiscuous mode [ 921.262322][T19495] pim6reg1: entered allmulticast mode [ 925.055414][T19572] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.063094][T19572] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.076456][T19572] bridge0: entered allmulticast mode [ 930.551514][T19699] syz.1.5251[19699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 930.551735][T19699] syz.1.5251[19699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 931.565220][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.583057][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.216595][T19738] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.224241][T19738] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.233252][T19738] bridge0: entered allmulticast mode [ 942.985412][T19920] veth0_vlan: entered allmulticast mode [ 943.448997][T19923] veth0_vlan: left promiscuous mode [ 943.677882][T19923] veth0_vlan: entered promiscuous mode [ 944.121660][T19931] syz.3.5338[19931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 944.121783][T19931] syz.3.5338[19931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 944.854147][T19943] pim6reg1: entered promiscuous mode [ 944.871109][T19943] pim6reg1: entered allmulticast mode [ 946.821761][T19961] pim6reg1: entered promiscuous mode [ 946.827117][T19961] pim6reg1: entered allmulticast mode [ 947.112102][T19966] pim6reg1: entered promiscuous mode [ 947.117497][T19966] pim6reg1: entered allmulticast mode [ 951.027745][T19998] veth0_vlan: entered allmulticast mode [ 951.276330][T20001] veth0_vlan: left promiscuous mode [ 951.358396][T20001] veth0_vlan: entered promiscuous mode [ 952.651907][T20020] pim6reg1: entered promiscuous mode [ 952.682727][T20020] pim6reg1: entered allmulticast mode [ 954.096102][T20037] pim6reg1: entered promiscuous mode [ 954.101562][T20037] pim6reg1: entered allmulticast mode [ 957.454803][T20048] bridge_slave_1: left allmulticast mode [ 957.460695][T20048] bridge_slave_1: left promiscuous mode [ 957.466546][T20048] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.477426][T20048] bridge_slave_0: left allmulticast mode [ 957.483490][T20048] bridge_slave_0: left promiscuous mode [ 957.489310][T20048] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.666576][T20122] wg2: left promiscuous mode [ 961.674186][T20122] wg2: left allmulticast mode [ 961.704221][T20122] wg2: entered promiscuous mode [ 961.713134][T20122] wg2: entered allmulticast mode [ 963.970149][T20167] bridge_slave_1: left allmulticast mode [ 963.975931][T20167] bridge_slave_1: left promiscuous mode [ 963.982681][T20167] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.992400][T20167] bridge_slave_0: left allmulticast mode [ 963.998066][T20167] bridge_slave_0: left promiscuous mode [ 964.007574][T20167] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.448067][T20182] pim6reg1: entered promiscuous mode [ 964.453729][T20182] pim6reg1: entered allmulticast mode [ 967.078554][T20253] sit0: left promiscuous mode [ 968.153850][T20255] sit0: entered promiscuous mode [ 979.726206][T18205] Bluetooth: hci4: command 0x0406 tx timeout [ 984.639243][T20448] wg2: entered promiscuous mode [ 984.660318][T20448] wg2: entered allmulticast mode [ 986.986722][T20471] sit0: entered allmulticast mode [ 987.485256][T20479] sit0: entered promiscuous mode [ 993.130129][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.139880][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.155985][T20526] sit0: entered allmulticast mode [ 995.583864][T20533] sit0: entered promiscuous mode [ 1005.481819][T18205] Bluetooth: hci1: command 0x0406 tx timeout [ 1010.626206][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 1012.718821][T20629] wg2: left promiscuous mode [ 1012.771895][T20629] wg2: left allmulticast mode [ 1012.905916][T20633] wg2: entered promiscuous mode [ 1012.931148][T20633] wg2: entered allmulticast mode [ 1013.647346][T20654] syz.3.5606[20654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1013.647602][T20654] syz.3.5606[20654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1015.645951][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 1030.357846][T20805] GPL: port 1(erspan0) entered blocking state [ 1030.364809][T20805] GPL: port 1(erspan0) entered disabled state [ 1030.371345][T20805] erspan0: entered allmulticast mode [ 1030.377886][T20805] erspan0: entered promiscuous mode [ 1030.386997][T20810] GPL: port 1(erspan0) entered blocking state [ 1030.393372][T20810] GPL: port 1(erspan0) entered forwarding state [ 1031.564069][T20827] pim6reg1: entered promiscuous mode [ 1031.597938][T20827] pim6reg1: entered allmulticast mode [ 1035.721153][T20860] GPL: port 1(erspan0) entered blocking state [ 1035.732062][T20860] GPL: port 1(erspan0) entered disabled state [ 1035.738587][T20860] erspan0: entered allmulticast mode [ 1035.749867][T20860] erspan0: entered promiscuous mode [ 1035.759242][T20863] GPL: port 1(erspan0) entered blocking state [ 1035.765545][T20863] GPL: port 1(erspan0) entered forwarding state [ 1036.187622][T20875] syzkaller0: entered promiscuous mode [ 1036.206793][T20875] syzkaller0: entered allmulticast mode [ 1041.980446][T20908] GPL: port 1(erspan0) entered blocking state [ 1041.989207][T20908] GPL: port 1(erspan0) entered disabled state [ 1042.004918][T20908] erspan0: entered allmulticast mode [ 1042.012431][T20908] erspan0: entered promiscuous mode [ 1042.026190][T20908] GPL: port 1(erspan0) entered blocking state [ 1042.032480][T20908] GPL: port 1(erspan0) entered forwarding state [ 1043.646712][T20929] syzkaller0: entered promiscuous mode [ 1043.653935][T20929] syzkaller0: entered allmulticast mode [ 1048.357309][T20956] GPL: port 1(erspan0) entered blocking state [ 1048.387658][T20956] GPL: port 1(erspan0) entered disabled state [ 1048.417313][T20956] erspan0: entered allmulticast mode [ 1048.500869][T20956] erspan0: entered promiscuous mode [ 1048.680560][T20953] GPL: port 1(erspan0) entered blocking state [ 1048.686781][T20953] GPL: port 1(erspan0) entered forwarding state [ 1054.173120][T21027] syzkaller0: entered promiscuous mode [ 1054.178678][T21027] syzkaller0: entered allmulticast mode [ 1054.477198][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.485049][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1069.147340][T21136] sit0: entered allmulticast mode [ 1083.060010][T21304] pim6reg1: entered promiscuous mode [ 1083.091981][T21304] pim6reg1: entered allmulticast mode [ 1084.896109][T21336] sit0: left promiscuous mode [ 1085.722383][T21340] sit0: entered promiscuous mode [ 1087.525287][T21360] veth0_vlan: left promiscuous mode [ 1087.532402][T21360] veth0_vlan: entered promiscuous mode [ 1087.564250][T21361] sit0: entered promiscuous mode [ 1088.588757][T21370] sit0: left promiscuous mode [ 1088.872747][T21372] sit0: entered promiscuous mode [ 1091.405615][T21396] syzkaller0: entered promiscuous mode [ 1091.416072][T21396] syzkaller0: entered allmulticast mode [ 1093.542090][T21407] veth0_vlan: left promiscuous mode [ 1093.562425][T21407] veth0_vlan: entered promiscuous mode [ 1093.789195][T21413] macsec0: entered promiscuous mode [ 1093.794748][T21413] macsec0: entered allmulticast mode [ 1093.807171][T21413] veth1_macvtap: entered allmulticast mode [ 1095.724237][T21465] veth0_vlan: left promiscuous mode [ 1095.810038][T21465] veth0_vlan: entered promiscuous mode [ 1096.617527][T21475] €Â0: renamed from pim6reg1 [ 1101.642545][T21529] syzkaller0: entered promiscuous mode [ 1101.648077][T21529] syzkaller0: entered allmulticast mode [ 1101.925540][T21534] syz.1.5903[21534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1101.925686][T21534] syz.1.5903[21534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1103.385603][T21534] veth0_vlan: left promiscuous mode [ 1103.554631][T21534] veth0_vlan: entered promiscuous mode [ 1109.303364][T21591] veth1_macvtap: left allmulticast mode [ 1109.309234][T21591] veth1_macvtap: left promiscuous mode [ 1109.333121][T21591] macsec0: left promiscuous mode [ 1110.412615][T21610] @ÿ: renamed from bond_slave_0 (while UP) [ 1110.560727][T21614] syz.1.5932[21614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1110.560870][T21614] syz.1.5932[21614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1110.816330][T21613] veth0_vlan: left promiscuous mode [ 1110.841588][T21613] veth0_vlan: entered promiscuous mode [ 1113.581684][T21662] syz.1.5952[21662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1113.581913][T21662] syz.1.5952[21662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1115.842694][T21717] netlink: 'syz.3.5977': attribute type 10 has an invalid length. [ 1115.884337][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.890876][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.076043][T21717] team0 (unregistering): Port device team_slave_0 removed [ 1116.098811][T21717] team0 (unregistering): Port device team_slave_1 removed [ 1117.576797][T21782] netlink: 'syz.2.6009': attribute type 21 has an invalid length. [ 1117.608382][T21782] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6009'. [ 1120.320994][T21865] IPv6: Can't replace route, no match found [ 1120.576605][T21873] netlink: 'syz.3.6049': attribute type 10 has an invalid length. [ 1120.812795][T21883] syz.0.6053[21883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1120.812953][T21883] syz.0.6053[21883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1123.502612][T21907] netlink: 'syz.1.6065': attribute type 21 has an invalid length. [ 1123.522524][T21907] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6065'. [ 1124.357155][T21947] wg2: entered promiscuous mode [ 1124.369613][T21947] wg2: entered allmulticast mode [ 1124.538864][T21955] IPv6: Can't replace route, no match found [ 1125.405175][T21992] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6103'. [ 1125.966897][T22013] syz.3.6113[22013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1125.967044][T22013] syz.3.6113[22013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1126.274699][T22019] Â: renamed from pim6reg1 [ 1126.292443][T22024] syz.2.6117[22024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1126.292570][T22024] syz.2.6117[22024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1126.448746][T22029] syz.3.6121[22029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1126.471796][T22029] syz.3.6121[22029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1126.574386][T22034] netlink: 'syz.2.6122': attribute type 10 has an invalid length. [ 1126.635337][T22034] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6122'. [ 1126.662183][T22034] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1127.016900][T22046] netlink: 'syz.2.6129': attribute type 39 has an invalid length. [ 1127.248537][T22052] Q±6ã×\b‹¡Y­4: renamed from lo (while UP) [ 1127.405168][T22063] IPv6: Can't replace route, no match found [ 1128.001419][T22089] syzkaller0: entered promiscuous mode [ 1128.006975][T22089] syzkaller0: entered allmulticast mode [ 1128.716506][T22119] netlink: 'syz.2.6162': attribute type 13 has an invalid length. [ 1128.731804][T22119] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6162'. [ 1128.745402][T22119] erspan0: refused to change device tx_queue_len [ 1128.753572][T22119] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1128.799593][T22123] IPv6: Can't replace route, no match found [ 1129.110187][T22138] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6171'. [ 1129.163049][T22141] syz.0.6174[22141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1129.163179][T22141] syz.0.6174[22141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1129.197740][T22141] syz.0.6174[22141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1129.220357][T22142] wg2: left promiscuous mode [ 1129.239650][T22141] syz.0.6174[22141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1129.285412][T22142] wg2: left allmulticast mode [ 1129.741138][T22153] pim6reg1: entered promiscuous mode [ 1129.754772][T22153] pim6reg1: entered allmulticast mode [ 1130.140180][T22167] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6184'. [ 1131.682328][T22221] syz.2.6209[22221] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1131.682485][T22221] syz.2.6209[22221] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1131.840376][T22226] netlink: 'syz.0.6211': attribute type 21 has an invalid length. [ 1131.898722][T22226] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6211'. [ 1133.010738][T22278] netlink: 'syz.1.6235': attribute type 21 has an invalid length. [ 1133.019535][T22278] IPv6: NLM_F_CREATE should be specified when creating new route [ 1134.208707][T22330] netlink: 'syz.1.6258': attribute type 1 has an invalid length. [ 1134.255055][T22330] netlink: 'syz.1.6258': attribute type 4 has an invalid length. [ 1134.284121][T22330] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.6258'. [ 1134.522713][T22334] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6260'. [ 1134.743447][T22339] IPv6: Can't replace route, no match found [ 1136.240103][T22362] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6273'. [ 1136.514741][T22374] pim6reg1: entered promiscuous mode [ 1136.544531][T22374] pim6reg1: entered allmulticast mode [ 1138.249157][T22421] pim6reg1: entered promiscuous mode [ 1138.264928][T22421] pim6reg1: entered allmulticast mode [ 1138.388875][T22429] macsec0: entered promiscuous mode [ 1138.394275][T22429] macsec0: left allmulticast mode [ 1145.648494][T22639] sit0: left promiscuous mode [ 1145.780750][T22641] sit0: entered promiscuous mode [ 1147.571766][T22716] batadv0: entered promiscuous mode [ 1147.648681][T22720] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6436'. [ 1147.782951][T22724] netlink: 'syz.1.6438': attribute type 10 has an invalid length. [ 1147.842032][T22724] team0: Device ipvlan1 failed to register rx_handler [ 1147.951585][T22724] syz.1.6438 (22724) used greatest stack depth: 17840 bytes left [ 1149.932668][T22782] netlink: 'syz.3.6461': attribute type 10 has an invalid length. [ 1149.983651][T22782] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1150.099808][T22786] netlink: 'syz.2.6463': attribute type 39 has an invalid length. [ 1150.112709][T22786] veth0_macvtap: left promiscuous mode [ 1150.605420][T22805] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.6470'. [ 1151.471899][T22830] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6481'. [ 1153.335666][T22878] syzkaller0: entered promiscuous mode [ 1153.341369][T22878] syzkaller0: entered allmulticast mode [ 1153.415738][T22886] mac80211_hwsim hwsim14 »»»»»»: renamed from wlan0 [ 1153.663090][T22891] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6506'. [ 1156.072503][T22913] netlink: 'syz.3.6514': attribute type 39 has an invalid length. [ 1156.126865][T22913] veth0_macvtap: left promiscuous mode [ 1156.198212][T22914] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6514'. [ 1157.024778][T22934] sit0: left promiscuous mode [ 1157.220217][T22935] sit0: entered promiscuous mode [ 1157.383265][T22939] sit0: left promiscuous mode [ 1157.633007][T22940] sit0: entered promiscuous mode [ 1157.730088][T22942] netlink: 'syz.1.6526': attribute type 6 has an invalid length. [ 1158.083753][T22956] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6531'. [ 1158.906646][T22986] netlink: 'syz.2.6545': attribute type 1 has an invalid length. [ 1159.088882][T22996] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6550'. [ 1159.146700][T22996] netlink: 'syz.2.6550': attribute type 16 has an invalid length. [ 1159.166372][T22996] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6550'. [ 1159.183339][T22996] bridge_slave_0: entered allmulticast mode [ 1159.195375][T22998] IPv6: NLM_F_CREATE should be specified when creating new route [ 1159.209752][T22998] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6551'. [ 1159.276293][T23002] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6553'. [ 1160.540431][T23045] À: port 1(vlan0) entered blocking state [ 1160.546377][T23045] À: port 1(vlan0) entered disabled state [ 1160.561936][T23045] vlan0: entered allmulticast mode [ 1160.568800][T23045] vlan0: entered promiscuous mode [ 1161.937010][T23087] netlink: 'syz.0.6587': attribute type 3 has an invalid length. [ 1161.947403][T23087] netlink: 'syz.0.6587': attribute type 7 has an invalid length. [ 1161.984956][T23087] netlink: 'syz.0.6587': attribute type 8 has an invalid length. [ 1162.002944][T23087] netlink: 'syz.0.6587': attribute type 7 has an invalid length. [ 1162.040962][T23087] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.6587'. [ 1163.004596][T23122] netlink: 'syz.2.6600': attribute type 39 has an invalid length. [ 1163.091553][T23122] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6600'. [ 1163.344621][T23131] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6604'. [ 1167.786238][T23219] sit0: left promiscuous mode [ 1167.846918][T23223] sit0: entered promiscuous mode [ 1171.306197][T23275] sit0: left promiscuous mode [ 1171.351661][T23278] sit0: entered promiscuous mode [ 1171.526474][T23293] wg2: entered promiscuous mode [ 1171.533465][T23293] wg2: entered allmulticast mode [ 1171.771542][T23304] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1171.800356][T23304] syzkaller0: entered promiscuous mode [ 1171.819524][T23304] syzkaller0: entered allmulticast mode [ 1173.777949][T23320] syzkaller0: entered promiscuous mode [ 1173.783598][T23320] syzkaller0: entered allmulticast mode [ 1173.940947][T23333] sit0: left promiscuous mode [ 1174.056661][T23335] sit0: entered promiscuous mode [ 1177.338077][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.345920][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.242596][T23451] sit0: left promiscuous mode [ 1186.987750][T23554] pim6reg1: entered promiscuous mode [ 1186.993260][T23554] pim6reg1: entered allmulticast mode [ 1201.702660][T23595] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1201.712589][T23595] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1201.720769][T23595] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1201.729213][T23595] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1201.740696][T23595] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1201.748316][T23595] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1202.124411][T23595] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1202.134655][T23595] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1202.143531][T23595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1202.153012][T23595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1202.181812][T23595] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1202.189199][T23595] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1202.707667][T23594] chnl_net:caif_netlink_parms(): no params data found [ 1203.469072][T23594] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.484938][T23594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.510646][T23594] bridge_slave_0: entered allmulticast mode [ 1203.518102][T23594] bridge_slave_0: entered promiscuous mode [ 1203.587224][T23594] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.595691][T23594] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.603451][T23594] bridge_slave_1: entered allmulticast mode [ 1203.611579][T23594] bridge_slave_1: entered promiscuous mode [ 1203.801584][T23595] Bluetooth: hci0: command tx timeout [ 1203.820551][T23594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1203.865615][T23594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1203.956416][T23594] team0: Port device team_slave_0 added [ 1203.983765][T23594] team0: Port device team_slave_1 added [ 1204.101432][ T3541] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.173304][T23594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1204.213255][T23594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1204.291849][T23595] Bluetooth: hci5: command tx timeout [ 1204.389485][T23594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1204.407458][T23598] chnl_net:caif_netlink_parms(): no params data found [ 1204.741825][ T3541] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.101895][T23594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1205.114013][T23594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1205.151609][T23594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1205.355869][ T3541] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.732227][ T3541] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.879832][T23595] Bluetooth: hci0: command tx timeout [ 1205.933455][T23594] hsr_slave_0: entered promiscuous mode [ 1205.941299][T23594] hsr_slave_1: entered promiscuous mode [ 1205.948869][T23594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1205.959330][T23594] Cannot create hsr debugfs directory [ 1206.333377][T23598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.348498][T23598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.356685][T23598] bridge_slave_0: entered allmulticast mode [ 1206.370019][T23595] Bluetooth: hci5: command tx timeout [ 1206.374224][T23598] bridge_slave_0: entered promiscuous mode [ 1206.447867][T23598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.469807][T23598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.477745][T23598] bridge_slave_1: entered allmulticast mode [ 1206.506251][T23598] bridge_slave_1: entered promiscuous mode [ 1206.934175][T23598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.956236][T23598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1207.156168][T23598] team0: Port device team_slave_0 added [ 1207.181901][T23598] team0: Port device team_slave_1 added [ 1207.856320][T23598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1207.863563][T23598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1207.898813][T23598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1207.959636][T23595] Bluetooth: hci0: command tx timeout [ 1208.047925][T23598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1208.073792][T23598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1208.106781][T23598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1208.439623][T23595] Bluetooth: hci5: command tx timeout [ 1208.446614][ T3541] GPL: port 1(erspan0) entered disabled state [ 1208.484165][ T3541] erspan0 (unregistering): left allmulticast mode [ 1208.492203][ T3541] erspan0 (unregistering): left promiscuous mode [ 1208.498662][ T3541] GPL: port 1(erspan0) entered disabled state [ 1208.544885][T23598] hsr_slave_0: entered promiscuous mode [ 1208.570568][T23598] hsr_slave_1: entered promiscuous mode [ 1208.577386][T23598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1208.594059][T23598] Cannot create hsr debugfs directory [ 1208.730813][T23594] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1208.754770][T23594] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1208.940980][T23594] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1209.028222][T23594] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1209.371563][ T3541] vlan0: left allmulticast mode [ 1209.376532][ T3541] vlan0: left promiscuous mode [ 1209.410311][ T3541] À: port 1(vlan0) entered disabled state [ 1209.428110][ T3541] hsr_slave_0: left promiscuous mode [ 1209.435498][ T3541] hsr_slave_1: left promiscuous mode [ 1209.453828][ T3541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1209.472110][ T3541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1209.480577][ T3541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1209.495570][ T3541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1209.557842][ T3541] veth0_macvtap: left promiscuous mode [ 1209.569818][ T3541] veth1_vlan: left promiscuous mode [ 1209.575151][ T3541] veth0_vlan: left promiscuous mode [ 1210.044837][T23595] Bluetooth: hci0: command tx timeout [ 1210.402866][ T3541] team0 (unregistering): Port device team_slave_1 removed [ 1210.477829][ T3541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1210.523592][T23595] Bluetooth: hci5: command tx timeout [ 1210.532575][ T3541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1210.986898][ T3541] bond0 (unregistering): Released all slaves [ 1211.213753][T23598] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1211.223851][T23598] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1211.237102][T23598] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1211.252525][T23598] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1211.310713][T23594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1211.343777][T23594] 8021q: adding VLAN 0 to HW filter on device team0 [ 1211.385980][T15141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.393162][T15141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1211.415564][T15141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.422831][T15141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1211.533566][T23598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1211.580232][ T3541] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.610660][T23598] 8021q: adding VLAN 0 to HW filter on device team0 [ 1211.646100][ T3541] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.666137][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.673370][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1211.696142][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.703366][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1211.751451][ T3541] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.840689][ T3541] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.872517][T23594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1212.211781][T23598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1212.501601][T23594] veth0_vlan: entered promiscuous mode [ 1212.523667][T23594] veth1_vlan: entered promiscuous mode [ 1212.589262][T23594] veth0_macvtap: entered promiscuous mode [ 1212.604036][T23594] veth1_macvtap: entered promiscuous mode [ 1212.662026][T23594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1212.676294][T23594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.688230][T23594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1212.699523][T23594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.709455][T23594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1212.719947][T23594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.731461][T23594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1212.773725][T23594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1212.788739][T23594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.799902][T23594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1212.810427][T23594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.820418][T23594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1212.831811][T23594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.844357][T23594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1212.857656][T23594] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.866587][T23594] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.875453][T23594] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.885937][T23594] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.904721][ T3541] GPL: port 1(erspan0) entered disabled state [ 1212.921392][ T3541] erspan0 (unregistering): left allmulticast mode [ 1212.927845][ T3541] erspan0 (unregistering): left promiscuous mode [ 1212.938407][ T3541] GPL: port 1(erspan0) entered disabled state [ 1212.968890][T23598] veth0_vlan: entered promiscuous mode [ 1212.998648][T23598] veth1_vlan: entered promiscuous mode [ 1213.064888][T23598] veth0_macvtap: entered promiscuous mode [ 1213.116751][T23598] veth1_macvtap: entered promiscuous mode [ 1213.184788][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.198455][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.223096][T23598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.234315][T23598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.245804][T23598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.257261][T23598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.267199][T23598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.277833][T23598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.287719][T23598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.298225][T23598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.310002][T23598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1213.363983][T23598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.374607][T23598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.387546][T23598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.403580][T23598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.414057][T23598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.427808][T23598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.438255][T23598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.450024][T23598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.461826][T23598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1213.473826][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.487147][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.542084][T23598] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.555715][T23598] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.566155][T23598] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.575303][T23598] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.667301][ T3541] hsr_slave_0: left promiscuous mode [ 1213.687691][ T3541] hsr_slave_1: left promiscuous mode [ 1213.697294][ T3541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1213.709253][ T3541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1213.729890][ T3541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1213.737394][ T3541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1213.785672][ T3541] veth1_macvtap: left promiscuous mode [ 1213.795599][ T3541] veth0_macvtap: left promiscuous mode [ 1213.815932][ T3541] veth1_vlan: left promiscuous mode [ 1214.439627][ T3541] team0 (unregistering): Port device team_slave_1 removed [ 1214.486638][ T3541] team0 (unregistering): Port device team_slave_0 removed [ 1214.531217][ T3541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1214.574300][ T3541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1215.003432][ T3541] bond0 (unregistering): Released all slaves [ 1215.742043][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1215.781278][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.030343][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.080212][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.613449][T23717] veth0_vlan: entered allmulticast mode [ 1230.475401][T23771] veth0_vlan: entered allmulticast mode [ 1238.772097][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.778598][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1253.351576][T23909] sit0: entered allmulticast mode [ 1253.937086][T23910] sit0: entered promiscuous mode [ 1256.830328][T18205] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1256.843220][T18205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1256.854212][T18205] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1256.862886][T18205] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1256.871238][T18205] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1256.879454][T18205] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1258.999877][T18205] Bluetooth: hci1: command tx timeout [ 1260.768313][T23917] chnl_net:caif_netlink_parms(): no params data found [ 1261.080021][T18205] Bluetooth: hci1: command tx timeout [ 1261.390340][T23917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.399693][T23917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.406931][T23917] bridge_slave_0: entered allmulticast mode [ 1261.418711][T23917] bridge_slave_0: entered promiscuous mode [ 1261.439992][T23917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.447212][T23917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.455441][T23917] bridge_slave_1: entered allmulticast mode [ 1261.462919][T23917] bridge_slave_1: entered promiscuous mode [ 1261.762585][T23917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1261.775710][T23917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1261.826724][T23917] team0: Port device team_slave_0 added [ 1261.836186][T23917] team0: Port device team_slave_1 added [ 1261.891667][T23917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.898650][T23917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.926322][T23917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.947532][T23917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.954865][T23917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.992863][T23917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.373410][T23917] hsr_slave_0: entered promiscuous mode [ 1262.383975][T23917] hsr_slave_1: entered promiscuous mode [ 1262.390442][T23917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1262.398003][T23917] Cannot create hsr debugfs directory [ 1262.671906][ T2906] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.878046][ T2906] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.037801][ T2906] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.118759][ T2906] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.159665][T18205] Bluetooth: hci1: command tx timeout [ 1263.214433][T23917] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1263.234977][T23917] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1263.254620][T23917] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1263.275320][T23917] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1263.614438][T23917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1263.702649][T23917] 8021q: adding VLAN 0 to HW filter on device team0 [ 1263.762845][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.770052][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1263.786321][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.793526][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1264.055525][ T2906] GPL: port 1(erspan0) entered disabled state [ 1264.075735][ T2906] erspan0 (unregistering): left allmulticast mode [ 1264.082797][ T2906] erspan0 (unregistering): left promiscuous mode [ 1264.089201][ T2906] GPL: port 1(erspan0) entered disabled state [ 1264.118443][T23917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.404883][T23917] veth0_vlan: entered promiscuous mode [ 1264.423353][T23917] veth1_vlan: entered promiscuous mode [ 1264.453238][ T2906] bond0: (slave wlan1): Releasing backup interface [ 1264.488977][T23917] veth0_macvtap: entered promiscuous mode [ 1264.504063][T23917] veth1_macvtap: entered promiscuous mode [ 1264.549300][T23917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.561106][T23917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.572571][T23917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.583092][T23917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.592968][T23917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.603818][T23917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.613730][T23917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.624260][T23917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.636408][T23917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1264.658160][T23917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.682213][T23917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.693155][T23917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.703683][T23917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.714038][T23917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.724581][T23917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.736856][T23917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.747528][T23917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.758999][T23917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1264.773275][T23917] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.782602][T23917] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.797005][T23917] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.805909][T23917] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.825947][ T2906] hsr_slave_0: left promiscuous mode [ 1264.832259][ T2906] hsr_slave_1: left promiscuous mode [ 1264.838726][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1264.847070][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1264.855342][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1264.862904][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1264.883217][ T2906] veth1_macvtap: left promiscuous mode [ 1264.888820][ T2906] veth1_vlan: left promiscuous mode [ 1265.241119][T18205] Bluetooth: hci1: command tx timeout [ 1265.478058][ T2906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1265.523608][ T2906] bond0 (unregistering): (slave 0@ÿ): Releasing backup interface [ 1265.861547][ T2906] bond0 (unregistering): Released all slaves [ 1266.015937][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.053554][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.092426][T16245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.100538][T16245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.695570][T23968] sit0: left promiscuous mode [ 1268.011263][T23970] sit0: entered promiscuous mode [ 1268.736259][T23988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.743917][T23988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.813805][T23988] bridge0: entered allmulticast mode [ 1269.057423][T23988] bridge_slave_1: left allmulticast mode [ 1269.082277][T23988] bridge_slave_1: left promiscuous mode [ 1269.129769][T23988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.278272][T23988] bridge_slave_0: left allmulticast mode [ 1269.339534][T23988] bridge_slave_0: left promiscuous mode [ 1269.345875][T23988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.503021][T23996] sit0: entered allmulticast mode [ 1269.694377][T23997] sit0: entered promiscuous mode [ 1270.496266][T24003] sit0: entered allmulticast mode [ 1271.281973][T24005] sit0: entered promiscuous mode [ 1273.538641][T24049] sit0: left promiscuous mode [ 1274.073666][T24057] sit0: entered promiscuous mode [ 1274.706429][T24069] sit0: left promiscuous mode [ 1275.551632][T24073] sit0: entered promiscuous mode [ 1278.417246][T24100] sit0: entered promiscuous mode [ 1278.914055][T24106] sit0: left promiscuous mode [ 1279.081012][T24111] sit0: entered promiscuous mode [ 1279.356229][T24113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.363989][T24113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.378263][T24113] bridge0: entered allmulticast mode [ 1279.459619][T24108] bridge_slave_1: left allmulticast mode [ 1279.481633][T24108] bridge_slave_1: left promiscuous mode [ 1279.505200][T24108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.614614][T24108] bridge_slave_0: left allmulticast mode [ 1279.628412][T24108] bridge_slave_0: left promiscuous mode [ 1279.649263][T24108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.898107][T24118] veth0_vlan: left promiscuous mode [ 1280.924671][T24118] veth0_vlan: entered promiscuous mode [ 1280.978911][T24122] sit0: left promiscuous mode [ 1281.110886][T24126] sit0: entered promiscuous mode [ 1284.768661][T24156] veth0_vlan: left promiscuous mode [ 1284.898549][T24156] veth0_vlan: entered promiscuous mode [ 1289.547010][T24174] sit0: left promiscuous mode [ 1289.759033][T24177] sit0: entered promiscuous mode [ 1291.537856][T24190] veth0_vlan: entered allmulticast mode [ 1291.743600][T24196] veth0_vlan: left promiscuous mode [ 1291.864947][T24196] veth0_vlan: entered promiscuous mode [ 1293.032017][T24209] sit0: left promiscuous mode [ 1296.033462][T24233] veth0_vlan: left promiscuous mode [ 1296.117758][T24233] veth0_vlan: entered promiscuous mode [ 1296.312294][T24237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.320007][T24237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.385125][T24237] bridge0: entered allmulticast mode [ 1296.428323][T24242] sit0: entered promiscuous mode [ 1297.146908][T24238] bridge_slave_1: left allmulticast mode [ 1297.180350][T24238] bridge_slave_1: left promiscuous mode [ 1297.191790][T24238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.220518][T24238] bridge_slave_0: left allmulticast mode [ 1297.226936][T24238] bridge_slave_0: left promiscuous mode [ 1297.235583][T24238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.323128][T24241] sit0: left promiscuous mode [ 1298.766382][T24277] @ÿ: renamed from bond_slave_0 (while UP) [ 1300.384641][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.391235][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.243137][T24311] @ÿ: renamed from bond_slave_0 (while UP) [ 1313.091400][T24416] sit0: entered promiscuous mode [ 1314.497745][T24434] @ÿ: renamed from bond_slave_0 (while UP) [ 1315.196227][T24457] sit0: left promiscuous mode [ 1315.352116][T24458] sit0: entered promiscuous mode [ 1315.990036][T24466] @ÿ: renamed from bond_slave_0 (while UP) [ 1320.941917][T24499] sit0: left promiscuous mode [ 1321.225963][T24500] sit0: entered promiscuous mode [ 1324.836942][T24554] sit0: left promiscuous mode [ 1325.468983][T24556] sit0: entered promiscuous mode [ 1326.294284][T24575] sit0: left promiscuous mode [ 1327.882967][T24567] Bluetooth: hci5: command 0x0406 tx timeout [ 1327.891223][T24567] Bluetooth: hci0: command 0x0406 tx timeout [ 1329.184823][T24604] sit0: left promiscuous mode [ 1329.439867][T24606] sit0: entered promiscuous mode [ 1331.741940][T24662] sit0: left promiscuous mode [ 1332.110170][T24665] sit0: entered promiscuous mode [ 1333.871619][T24705] sit0: left promiscuous mode [ 1334.337157][T24708] sit0: entered promiscuous mode [ 1335.402337][T24737] sit0: left promiscuous mode [ 1337.996141][T24782] sit0: entered promiscuous mode [ 1340.796060][T24814] sit0: entered promiscuous mode [ 1344.689915][T24859] sit0: left promiscuous mode [ 1345.283220][T24860] sit0: entered promiscuous mode [ 1348.530386][T24892] sit0: left promiscuous mode [ 1348.813746][T24890] sit0: entered promiscuous mode [ 1353.605013][T24930] sit0: left promiscuous mode [ 1353.789607][T24929] sit0: entered promiscuous mode [ 1359.510316][T24949] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7183'. [ 1360.131614][T24962] sit0: left promiscuous mode [ 1360.242974][T24962] sit0: entered promiscuous mode [ 1361.671327][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.677830][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.893828][T24985] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7196'. [ 1363.909936][T24993] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7200'. [ 1365.733760][T25010] sit0: left promiscuous mode [ 1365.970829][T25013] sit0: entered promiscuous mode [ 1366.896257][T25018] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7210'. [ 1367.149550][T25023] netlink: 176 bytes leftover after parsing attributes in process `syz.6.7209'. [ 1368.031738][T25046] sit0: left promiscuous mode [ 1368.301519][T25050] sit0: entered promiscuous mode [ 1368.807153][T25054] netlink: 'syz.6.7224': attribute type 21 has an invalid length. [ 1368.815287][T25054] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7224'. [ 1368.824865][T25056] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7225'. [ 1369.938538][T25081] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7235'. [ 1369.958558][T25080] sit0: left promiscuous mode [ 1370.093214][T25082] sit0: entered promiscuous mode [ 1370.690116][T25087] netlink: 'syz.2.7237': attribute type 21 has an invalid length. [ 1370.698041][T25087] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7237'. [ 1371.628863][T25114] netlink: 176 bytes leftover after parsing attributes in process `syz.6.7250'. [ 1372.035876][T25127] sit0: left promiscuous mode [ 1373.503336][T25155] sit0: left promiscuous mode [ 1375.951853][T25192] sit0: left promiscuous mode [ 1377.346646][T25223] netlink: 'syz.2.7294': attribute type 21 has an invalid length. [ 1377.389115][T25223] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7294'. [ 1378.579204][T25243] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7304'. [ 1379.082142][T23595] Bluetooth: hci1: command 0x0406 tx timeout [ 1389.899483][T25409] netlink: 176 bytes leftover after parsing attributes in process `syz.5.7368'. [ 1390.420048][T25439] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7383'. [ 1391.019155][T25471] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7397'. [ 1391.606198][T25505] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7413'. [ 1392.511838][T23595] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1392.526715][T23595] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1392.535372][T23595] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1392.547798][T23595] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1392.555650][T23595] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1392.563105][T23595] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1392.666771][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.699727][T25542] netlink: 176 bytes leftover after parsing attributes in process `syz.6.7431'. [ 1392.816539][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.936305][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.055070][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.544508][T25536] chnl_net:caif_netlink_parms(): no params data found [ 1393.761246][T25590] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7449'. [ 1393.771142][T25589] netlink: 'syz.6.7451': attribute type 10 has an invalid length. [ 1393.850487][T25589] team0: Device ipvlan1 failed to register rx_handler [ 1394.003380][T25536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.026234][T25536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.048474][T25536] bridge_slave_0: entered allmulticast mode [ 1394.062504][T25536] bridge_slave_0: entered promiscuous mode [ 1394.141249][T25536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.155699][T25536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.179525][T25536] bridge_slave_1: entered allmulticast mode [ 1394.197097][T25536] bridge_slave_1: entered promiscuous mode [ 1394.617710][T25536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1394.681136][T18205] Bluetooth: hci2: command tx timeout [ 1394.691516][T25536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1394.834838][T25536] team0: Port device team_slave_0 added [ 1394.910895][T25536] team0: Port device team_slave_1 added [ 1395.016233][ T42] GPL: port 1(erspan0) entered disabled state [ 1395.067275][ T42] erspan0 (unregistering): left allmulticast mode [ 1395.095920][ T42] erspan0 (unregistering): left promiscuous mode [ 1395.121308][ T42] GPL: port 1(erspan0) entered disabled state [ 1395.155207][T25536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1395.201578][T25536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1395.242597][T25536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1395.277079][T25536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1395.284177][T25536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1395.311175][T25536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1395.671047][T25536] hsr_slave_0: entered promiscuous mode [ 1395.679774][T25536] hsr_slave_1: entered promiscuous mode [ 1395.776438][T25642] netlink: 'syz.6.7473': attribute type 10 has an invalid length. [ 1395.832794][T25642] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1396.023337][ T42] hsr_slave_0: left promiscuous mode [ 1396.045496][ T42] hsr_slave_1: left promiscuous mode [ 1396.064689][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1396.073012][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1396.092114][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1396.100229][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1396.140821][ T42] veth1_macvtap: left promiscuous mode [ 1396.146816][ T42] veth1_vlan: left promiscuous mode [ 1396.152308][ T42] veth0_vlan: left promiscuous mode [ 1396.759808][T18205] Bluetooth: hci2: command tx timeout [ 1396.808222][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1396.855301][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1396.900643][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1396.947242][ T42] bond0 (unregistering): (slave 0@ÿ): Releasing backup interface [ 1397.424445][ T42] bond0 (unregistering): Released all slaves [ 1398.407602][T25536] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1398.440796][T25536] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1398.502812][T25536] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1398.520096][T25536] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1398.839648][T18205] Bluetooth: hci2: command tx timeout [ 1399.168434][T25536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1399.224814][T25536] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.257111][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.264326][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.311232][T24129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.318391][T24129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1399.382301][T25725] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7505'. [ 1399.460174][T25536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1399.886891][T25536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1400.001325][T25536] veth0_vlan: entered promiscuous mode [ 1400.033163][T25536] veth1_vlan: entered promiscuous mode [ 1400.110404][T25536] veth0_macvtap: entered promiscuous mode [ 1400.126008][T25536] veth1_macvtap: entered promiscuous mode [ 1400.158060][T25536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1400.181881][T25536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.192080][T25536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1400.203072][T25536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.213316][T25536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1400.223801][T25536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.235454][T25536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1400.261667][T25536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.289910][T25536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.314593][T25536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.344420][T25536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.374232][T25536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.393680][T25536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.411155][T25536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1400.484943][T25536] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.504320][T25536] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.529540][T25536] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.548639][T25536] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.756735][T24129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.802908][T24129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.920547][T18205] Bluetooth: hci2: command tx timeout [ 1400.959707][T25772] netlink: 176 bytes leftover after parsing attributes in process `syz.6.7525'. [ 1400.975001][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.983078][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.055431][T25774] netlink: 'syz.4.7526': attribute type 39 has an invalid length. [ 1401.076502][T25774] veth0_macvtap: left promiscuous mode [ 1401.108794][T25775] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.7526'. [ 1402.918200][T25830] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7549'. [ 1403.277420][T25851] @ÿ: renamed from bond_slave_0 (while UP) [ 1403.505036][T25863] IPv6: NLM_F_CREATE should be specified when creating new route [ 1403.524727][T25863] netlink: 1 bytes leftover after parsing attributes in process `syz.5.7565'. [ 1403.740549][T25877] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7572'. [ 1405.174996][T25936] netlink: 176 bytes leftover after parsing attributes in process `syz.6.7597'. [ 1405.299097][T25941] netlink: 'syz.6.7600': attribute type 3 has an invalid length. [ 1405.329611][T25941] netlink: 'syz.6.7600': attribute type 7 has an invalid length. [ 1405.337413][T25941] netlink: 'syz.6.7600': attribute type 8 has an invalid length. [ 1405.358096][T25941] netlink: 'syz.6.7600': attribute type 7 has an invalid length. [ 1405.377218][T25941] netlink: 198112 bytes leftover after parsing attributes in process `syz.6.7600'. [ 1406.194112][T25968] netlink: 'syz.6.7611': attribute type 39 has an invalid length. [ 1406.230581][T25968] veth0_macvtap: left promiscuous mode [ 1406.245457][T25973] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.7611'. [ 1406.504251][T25980] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7615'. [ 1407.211581][T26012] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7630'. [ 1407.743673][T26039] netlink: 176 bytes leftover after parsing attributes in process `syz.5.7642'. [ 1408.283630][T26068] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7655'. [ 1409.028442][T26102] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7670'. [ 1409.623241][T26129] wg2: entered promiscuous mode [ 1409.649596][T26129] wg2: entered allmulticast mode [ 1409.730313][T26137] netlink: 176 bytes leftover after parsing attributes in process `syz.5.7687'. [ 1410.105174][T26155] sit0: entered promiscuous mode [ 1410.341427][T26167] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7701'. [ 1410.966645][T26197] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7715'. [ 1411.565716][T26229] netlink: 176 bytes leftover after parsing attributes in process `syz.5.7730'. [ 1412.107449][T26255] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7742'. [ 1412.771972][T26292] netlink: 176 bytes leftover after parsing attributes in process `syz.5.7758'. [ 1413.518723][T26318] netlink: 176 bytes leftover after parsing attributes in process `syz.6.7769'. [ 1415.002206][T26359] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7785'. [ 1415.199748][T26366] netlink: 'syz.4.7791': attribute type 10 has an invalid length. [ 1415.290713][T26366] team0: Device ipvlan1 failed to register rx_handler [ 1415.940874][T26386] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7799'. [ 1416.367823][T26402] netlink: 'syz.2.7806': attribute type 10 has an invalid length. [ 1416.463523][T26402] team0: Device ipvlan1 failed to register rx_handler [ 1417.118595][T26418] netlink: 176 bytes leftover after parsing attributes in process `syz.6.7812'. [ 1417.628990][T26435] netlink: 'syz.5.7819': attribute type 10 has an invalid length. [ 1417.726647][T26435] team0: Device ipvlan1 failed to register rx_handler [ 1417.926690][T26447] netlink: 176 bytes leftover after parsing attributes in process `syz.6.7822'. [ 1418.312498][T26457] netlink: 'syz.5.7826': attribute type 10 has an invalid length. [ 1418.375485][T26457] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1418.819718][T26475] netlink: 176 bytes leftover after parsing attributes in process `syz.6.7835'. [ 1419.536534][T26498] netlink: 'syz.2.7841': attribute type 10 has an invalid length. [ 1419.585585][T26498] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1419.907973][T26512] netlink: 176 bytes leftover after parsing attributes in process `syz.5.7849'. [ 1420.889192][T26546] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7861'. [ 1421.803920][T26579] netlink: 176 bytes leftover after parsing attributes in process `syz.6.7874'. [ 1422.671214][T26612] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7886'. [ 1423.039593][T26628] netlink: 'syz.6.7890': attribute type 39 has an invalid length. [ 1423.068166][T26628] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.7890'. [ 1423.086948][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.096219][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.237021][T26635] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7897'. [ 1424.048517][T26661] netlink: 'syz.5.7906': attribute type 39 has an invalid length. [ 1424.074148][T26661] veth0_macvtap: left promiscuous mode [ 1424.121318][T26664] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.7906'. [ 1424.542325][T26674] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7910'. [ 1425.482058][T26702] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7926'. [ 1425.785237][T26719] netlink: 176 bytes leftover after parsing attributes in process `syz.5.7941'. [ 1425.997393][T26728] IPv6: NLM_F_CREATE should be specified when creating new route [ 1426.019491][T26728] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7937'. [ 1426.806802][T26749] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7945'. [ 1427.675206][T26778] netlink: 176 bytes leftover after parsing attributes in process `syz.6.7959'. [ 1428.367395][T26809] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7972'. [ 1429.257019][T26841] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7984'. [ 1429.648524][T26858] netlink: 'syz.5.7992': attribute type 3 has an invalid length. [ 1429.690895][T26858] netlink: 'syz.5.7992': attribute type 7 has an invalid length. [ 1429.719644][T26858] netlink: 'syz.5.7992': attribute type 8 has an invalid length. [ 1429.748174][T26858] netlink: 'syz.5.7992': attribute type 7 has an invalid length. [ 1429.784533][T26858] netlink: 198112 bytes leftover after parsing attributes in process `syz.5.7992'. [ 1430.228816][T26877] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7999'. [ 1430.253283][T26874] netlink: 'syz.5.7997': attribute type 39 has an invalid length. [ 1430.292172][T26880] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.7997'. [ 1430.703994][T26896] netlink: 'syz.4.8008': attribute type 3 has an invalid length. [ 1430.740055][T26896] netlink: 'syz.4.8008': attribute type 7 has an invalid length. [ 1430.750004][T26896] netlink: 'syz.4.8008': attribute type 8 has an invalid length. [ 1430.769404][T26896] netlink: 'syz.4.8008': attribute type 7 has an invalid length. [ 1430.782862][T26896] netlink: 198112 bytes leftover after parsing attributes in process `syz.4.8008'. [ 1430.796546][T26901] netlink: 176 bytes leftover after parsing attributes in process `syz.6.8011'. [ 1430.959181][T26907] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8020'. [ 1430.976950][T26905] netlink: 'syz.4.8012': attribute type 39 has an invalid length. [ 1431.019122][T26905] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.8012'. [ 1433.193967][T26991] __nla_validate_parse: 4 callbacks suppressed [ 1433.193987][T26991] netlink: 176 bytes leftover after parsing attributes in process `syz.4.8049'. [ 1433.352913][T27000] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.8053'. [ 1434.239980][T27025] netlink: 176 bytes leftover after parsing attributes in process `syz.4.8064'. [ 1434.506479][T27040] netlink: 201372 bytes leftover after parsing attributes in process `syz.6.8071'. [ 1434.797017][T27051] wg2: entered promiscuous mode [ 1434.803154][T27051] wg2: entered allmulticast mode [ 1434.923646][T27059] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8079'. [ 1434.994669][T27061] sit0: entered promiscuous mode [ 1435.385742][T27072] validate_nla: 7 callbacks suppressed [ 1435.385761][T27072] netlink: 'syz.6.8085': attribute type 3 has an invalid length. [ 1435.431470][T27072] netlink: 201372 bytes leftover after parsing attributes in process `syz.6.8085'. [ 1435.705111][T27086] netlink: 176 bytes leftover after parsing attributes in process `syz.6.8091'. [ 1435.833065][T27090] wg2: entered promiscuous mode [ 1435.839189][T27090] wg2: entered allmulticast mode [ 1436.020542][T27101] netlink: 176 bytes leftover after parsing attributes in process `syz.4.8104'. [ 1436.099621][T27102] sit0: left promiscuous mode [ 1436.280507][T27112] netlink: 'syz.2.8100': attribute type 3 has an invalid length. [ 1436.288449][T27112] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.8100'. [ 1436.446592][T27108] sit0: entered promiscuous mode [ 1437.147024][T27126] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8108'. [ 1437.348698][T27138] netlink: 'syz.4.8115': attribute type 3 has an invalid length. [ 1437.509766][T27146] sit0: left promiscuous mode [ 1437.738797][T27151] sit0: entered promiscuous mode [ 1438.375184][T27157] __nla_validate_parse: 1 callbacks suppressed [ 1438.375200][T27157] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8122'. [ 1438.841336][T27181] netlink: 'syz.2.8129': attribute type 3 has an invalid length. [ 1438.863723][T27181] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.8129'. [ 1439.059447][T27188] netlink: 176 bytes leftover after parsing attributes in process `syz.6.8135'. [ 1440.046762][T27219] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8145'. [ 1440.286670][T27231] netlink: 176 bytes leftover after parsing attributes in process `syz.4.8159'. [ 1440.376308][T27236] netlink: 'syz.6.8154': attribute type 3 has an invalid length. [ 1440.397820][T27236] netlink: 201372 bytes leftover after parsing attributes in process `syz.6.8154'. [ 1441.170036][T27259] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8164'. [ 1441.755512][T27283] netlink: 'syz.5.8174': attribute type 3 has an invalid length. [ 1441.773518][T27283] netlink: 201372 bytes leftover after parsing attributes in process `syz.5.8174'. [ 1441.815076][T27288] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8176'. [ 1442.384708][T27312] netlink: 176 bytes leftover after parsing attributes in process `syz.6.8186'. [ 1443.168472][T27344] netlink: 'syz.4.8202': attribute type 3 has an invalid length. [ 1443.183237][T27344] netlink: 'syz.4.8202': attribute type 7 has an invalid length. [ 1443.195934][T27344] netlink: 'syz.4.8202': attribute type 8 has an invalid length. [ 1443.205173][T27344] netlink: 'syz.4.8202': attribute type 7 has an invalid length. [ 1443.433295][T27352] veth0_vlan: entered allmulticast mode [ 1444.263718][T27373] __nla_validate_parse: 2 callbacks suppressed [ 1444.263736][T27373] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8213'. [ 1444.322664][T27376] netlink: 'syz.5.8215': attribute type 3 has an invalid length. [ 1444.355922][T27376] netlink: 'syz.5.8215': attribute type 7 has an invalid length. [ 1444.371000][T27376] netlink: 'syz.5.8215': attribute type 8 has an invalid length. [ 1444.389100][T27376] netlink: 'syz.5.8215': attribute type 7 has an invalid length. [ 1444.409536][T27376] netlink: 198112 bytes leftover after parsing attributes in process `syz.5.8215'. [ 1444.976284][T27400] netlink: 176 bytes leftover after parsing attributes in process `syz.6.8227'. [ 1445.197760][T27411] netlink: 'syz.2.8229': attribute type 3 has an invalid length. [ 1445.219857][T27411] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.8229'. [ 1445.910819][T27433] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8239'. [ 1446.744639][T27450] netlink: 198112 bytes leftover after parsing attributes in process `syz.6.8243'. [ 1446.964839][T27462] netlink: 176 bytes leftover after parsing attributes in process `syz.6.8249'. [ 1447.987100][T27488] validate_nla: 7 callbacks suppressed [ 1447.987117][T27488] netlink: 'syz.6.8258': attribute type 3 has an invalid length. [ 1448.000671][T27488] netlink: 'syz.6.8258': attribute type 7 has an invalid length. [ 1448.008429][T27488] netlink: 'syz.6.8258': attribute type 8 has an invalid length. [ 1448.016358][T27488] netlink: 'syz.6.8258': attribute type 7 has an invalid length. [ 1448.024585][T27488] netlink: 198112 bytes leftover after parsing attributes in process `syz.6.8258'. [ 1448.351519][T27498] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8262'. [ 1448.906675][T27515] netlink: 'syz.5.8269': attribute type 3 has an invalid length. [ 1448.919824][T27515] netlink: 'syz.5.8269': attribute type 7 has an invalid length. [ 1448.928969][T27515] netlink: 'syz.5.8269': attribute type 8 has an invalid length. [ 1448.956576][T27515] netlink: 'syz.5.8269': attribute type 7 has an invalid length. [ 1448.976441][T27515] netlink: 198112 bytes leftover after parsing attributes in process `syz.5.8269'. [ 1449.576086][T27523] netlink: 'syz.4.8280': attribute type 3 has an invalid length. [ 1449.589602][T27523] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.8280'. [ 1449.620612][T27527] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8273'. [ 1449.943154][T27538] netlink: 176 bytes leftover after parsing attributes in process `syz.4.8284'. [ 1450.636470][T27559] netlink: 'syz.4.8286': attribute type 3 has an invalid length. [ 1450.658109][T27559] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.8286'. [ 1451.545075][T27562] syzkaller0: entered promiscuous mode [ 1451.550666][T27562] syzkaller0: entered allmulticast mode [ 1451.563419][T27567] netlink: 176 bytes leftover after parsing attributes in process `syz.4.8290'. [ 1453.699372][T27592] netlink: 'syz.5.8298': attribute type 3 has an invalid length. [ 1453.707336][T27592] netlink: 201372 bytes leftover after parsing attributes in process `syz.5.8298'. [ 1457.652827][T27602] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8301'. [ 1459.839584][T27636] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8311'. [ 1461.948044][T27654] netlink: 176 bytes leftover after parsing attributes in process `syz.4.8320'. [ 1465.025887][T27689] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8329'. [ 1468.281091][T27719] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8340'. [ 1468.466289][T27724] netlink: 'syz.5.8341': attribute type 3 has an invalid length. [ 1468.532693][T27724] netlink: 'syz.5.8341': attribute type 7 has an invalid length. [ 1468.586056][T27724] netlink: 'syz.5.8341': attribute type 8 has an invalid length. [ 1468.634369][T27724] netlink: 'syz.5.8341': attribute type 7 has an invalid length. [ 1468.672803][T27724] netlink: 198112 bytes leftover after parsing attributes in process `syz.5.8341'. [ 1469.470117][T23595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1469.480873][T23595] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1469.488863][T23595] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1469.497118][T23595] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1469.507238][T23595] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1469.514670][T23595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1469.646588][T27749] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8352'. [ 1469.973778][T27754] netlink: 'syz.4.8353': attribute type 3 has an invalid length. [ 1469.999558][T27754] netlink: 'syz.4.8353': attribute type 7 has an invalid length. [ 1470.018051][T27754] netlink: 'syz.4.8353': attribute type 8 has an invalid length. [ 1470.026810][T27755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.045316][T27755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.097510][T27754] netlink: 'syz.4.8353': attribute type 7 has an invalid length. [ 1470.108021][T27754] netlink: 198112 bytes leftover after parsing attributes in process `syz.4.8353'. [ 1470.519715][T27757] bridge_slave_1: left allmulticast mode [ 1470.525454][T27757] bridge_slave_1: left promiscuous mode [ 1470.579564][T27757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.595655][T27757] bridge_slave_0: left allmulticast mode [ 1470.602477][T27757] bridge_slave_0: left promiscuous mode [ 1470.608352][T27757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.907199][T27744] chnl_net:caif_netlink_parms(): no params data found [ 1471.559607][T23595] Bluetooth: hci3: command tx timeout [ 1471.635416][T27744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1471.642752][T27744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.651344][T27744] bridge_slave_0: entered allmulticast mode [ 1471.658869][T27744] bridge_slave_0: entered promiscuous mode [ 1471.878893][T27744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1471.890827][T27744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.898002][T27744] bridge_slave_1: entered allmulticast mode [ 1471.907778][T27744] bridge_slave_1: entered promiscuous mode [ 1472.171604][T27744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1472.184125][T27744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1472.494213][T27744] team0: Port device team_slave_0 added [ 1472.503768][T27744] team0: Port device team_slave_1 added [ 1472.533642][T27744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1472.540718][T27744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1472.566825][T27744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1472.853564][T27744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1472.860837][T27744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1472.889343][T27744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1473.185901][T27744] hsr_slave_0: entered promiscuous mode [ 1473.192998][T27744] hsr_slave_1: entered promiscuous mode [ 1473.199191][T27744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1473.206867][T27744] Cannot create hsr debugfs directory [ 1473.639857][T23595] Bluetooth: hci3: command tx timeout [ 1473.681592][T27744] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1473.730056][T27744] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1473.759085][T27744] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1473.770349][T27744] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1473.897208][T27744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1473.937345][T27744] 8021q: adding VLAN 0 to HW filter on device team0 [ 1473.969967][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.977115][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1473.991218][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.998342][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1474.080061][T27744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1474.296332][T27744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1474.697100][T27744] veth0_vlan: entered promiscuous mode [ 1474.711741][T27744] veth1_vlan: entered promiscuous mode [ 1474.742644][T27744] veth0_macvtap: entered promiscuous mode [ 1474.754601][T27744] veth1_macvtap: entered promiscuous mode [ 1474.776936][T27744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.787581][T27744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.797785][T27744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.808587][T27744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.818583][T27744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.829161][T27744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.839021][T27744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.849992][T27744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.861905][T27744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1474.877037][T27744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1474.887744][T27744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.897636][T27744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1474.908110][T27744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.918115][T27744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1474.930672][T27744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.940599][T27744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1474.951056][T27744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.962435][T27744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1474.977880][T27744] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.986635][T27744] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.995399][T27744] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.004792][T27744] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.067953][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.079238][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.113546][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.125762][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.232085][T27782] netlink: 'syz.4.8363': attribute type 3 has an invalid length. [ 1475.241278][T27782] netlink: 'syz.4.8363': attribute type 7 has an invalid length. [ 1475.249184][T27782] netlink: 'syz.4.8363': attribute type 8 has an invalid length. [ 1475.257177][T27782] netlink: 'syz.4.8363': attribute type 7 has an invalid length. [ 1475.278530][T27782] netlink: 198112 bytes leftover after parsing attributes in process `syz.4.8363'. [ 1475.723024][T23595] Bluetooth: hci3: command tx timeout [ 1475.850212][T27800] netlink: 176 bytes leftover after parsing attributes in process `syz.4.8362'. [ 1476.242547][T27807] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8374'. [ 1476.571993][T27813] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8376'. [ 1477.402645][T27831] netlink: 'syz.5.8370': attribute type 3 has an invalid length. [ 1477.470673][T27831] netlink: 'syz.5.8370': attribute type 7 has an invalid length. [ 1477.478462][T27831] netlink: 'syz.5.8370': attribute type 8 has an invalid length. [ 1477.554869][T27831] netlink: 'syz.5.8370': attribute type 7 has an invalid length. [ 1477.652724][T27831] netlink: 198112 bytes leftover after parsing attributes in process `syz.5.8370'. [ 1477.799704][T23595] Bluetooth: hci3: command tx timeout [ 1479.065802][T27856] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8380'. [ 1479.342476][T27861] netlink: 'syz.5.8383': attribute type 3 has an invalid length. [ 1479.439376][T27861] netlink: 'syz.5.8383': attribute type 7 has an invalid length. [ 1479.507001][T27861] netlink: 198112 bytes leftover after parsing attributes in process `syz.5.8383'. [ 1479.795800][T27869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.826889][T27869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.137723][T27873] bridge_slave_1: left allmulticast mode [ 1480.181404][T27873] bridge_slave_1: left promiscuous mode [ 1480.209151][T27873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.468516][T27873] bridge_slave_0: left allmulticast mode [ 1480.582153][T27873] bridge_slave_0: left promiscuous mode [ 1480.643933][T27873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.790783][T27878] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8391'. [ 1481.346322][T27899] validate_nla: 2 callbacks suppressed [ 1481.346342][T27899] netlink: 'syz.4.8397': attribute type 3 has an invalid length. [ 1481.382366][T27899] netlink: 'syz.4.8397': attribute type 7 has an invalid length. [ 1481.427577][T27899] netlink: 'syz.4.8397': attribute type 8 has an invalid length. [ 1481.469722][T27899] netlink: 'syz.4.8397': attribute type 7 has an invalid length. [ 1481.496856][T27899] netlink: 198112 bytes leftover after parsing attributes in process `syz.4.8397'. [ 1482.433601][T27913] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8401'. [ 1483.464371][T27930] netlink: 'syz.4.8407': attribute type 3 has an invalid length. [ 1483.512334][T27930] netlink: 'syz.4.8407': attribute type 7 has an invalid length. [ 1483.533900][T27930] netlink: 'syz.4.8407': attribute type 8 has an invalid length. [ 1483.547038][T27930] netlink: 'syz.4.8407': attribute type 7 has an invalid length. [ 1483.575009][T27930] netlink: 198112 bytes leftover after parsing attributes in process `syz.4.8407'. [ 1483.931570][T27938] sit0: left promiscuous mode [ 1484.086808][T27939] sit0: entered promiscuous mode [ 1484.571333][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.577724][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.708637][T27946] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8413'. [ 1487.815922][T27967] netlink: 'syz.2.8420': attribute type 3 has an invalid length. [ 1487.839623][T27967] netlink: 'syz.2.8420': attribute type 7 has an invalid length. [ 1487.847397][T27967] netlink: 'syz.2.8420': attribute type 8 has an invalid length. [ 1487.871939][T27967] netlink: 'syz.2.8420': attribute type 7 has an invalid length. [ 1487.899394][T27967] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.8420'. [ 1488.081178][T27971] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8422'. [ 1489.301968][T27993] netlink: 'syz.2.8431': attribute type 3 has an invalid length. [ 1489.310101][T27993] netlink: 'syz.2.8431': attribute type 7 has an invalid length. [ 1489.317979][T27993] netlink: 'syz.2.8431': attribute type 8 has an invalid length. [ 1489.326347][T27993] netlink: 'syz.2.8431': attribute type 7 has an invalid length. [ 1489.379431][T27993] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.8431'. [ 1490.821519][T27997] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8433'. [ 1492.032493][T28019] netlink: 'syz.7.8440': attribute type 3 has an invalid length. [ 1492.065101][T28019] netlink: 'syz.7.8440': attribute type 7 has an invalid length. [ 1492.078096][T28019] netlink: 198112 bytes leftover after parsing attributes in process `syz.7.8440'. [ 1492.297464][T28026] sit0: entered allmulticast mode [ 1492.327383][T28028] netlink: 176 bytes leftover after parsing attributes in process `syz.7.8444'. [ 1492.412808][T28026] sit0: entered promiscuous mode [ 1493.916699][T28035] @ÿ: renamed from bond_slave_0 (while UP) [ 1494.431904][T28048] validate_nla: 2 callbacks suppressed [ 1494.431920][T28048] netlink: 'syz.5.8450': attribute type 3 has an invalid length. [ 1494.566570][T28048] netlink: 201372 bytes leftover after parsing attributes in process `syz.5.8450'. [ 1495.097367][T28055] netlink: 176 bytes leftover after parsing attributes in process `syz.7.8453'. [ 1497.844961][T28072] sit0: left promiscuous mode [ 1498.027556][T28076] sit0: entered promiscuous mode [ 1498.814617][T28087] sit0: left promiscuous mode [ 1499.153915][T28089] sit0: entered promiscuous mode [ 1500.024724][T28096] netlink: 176 bytes leftover after parsing attributes in process `syz.7.8463'. [ 1500.100735][T28090] syzkaller0: entered promiscuous mode [ 1500.122630][T28090] syzkaller0: entered allmulticast mode [ 1500.220743][T28099] netlink: 'syz.7.8464': attribute type 3 has an invalid length. [ 1500.238882][T28099] netlink: 201372 bytes leftover after parsing attributes in process `syz.7.8464'. [ 1503.641800][T28119] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8473'. [ 1504.462715][T28133] netlink: 'syz.4.8476': attribute type 3 has an invalid length. [ 1504.478935][T28133] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.8476'. [ 1505.899962][T28143] sit0: entered allmulticast mode [ 1506.072795][T28147] netlink: 'syz.4.8488': attribute type 3 has an invalid length. [ 1506.089768][T28147] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.8488'. [ 1506.179882][T28143] sit0: entered promiscuous mode [ 1507.014488][T28156] netlink: 176 bytes leftover after parsing attributes in process `syz.4.8483'. [ 1509.916860][T28175] syzkaller0: entered promiscuous mode [ 1509.926030][T28175] syzkaller0: entered allmulticast mode [ 1510.204425][T28187] netlink: 'syz.4.8493': attribute type 3 has an invalid length. [ 1510.247056][T28187] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.8493'. [ 1512.622477][T28194] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8495'. [ 1512.967396][T28199] sit0: left promiscuous mode [ 1513.146978][T28200] sit0: entered promiscuous mode [ 1517.321520][T18205] Bluetooth: hci2: command 0x0406 tx timeout [ 1517.757925][T28230] netlink: 'syz.4.8506': attribute type 3 has an invalid length. [ 1517.766479][T28230] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.8506'. [ 1518.062688][T28232] netlink: 176 bytes leftover after parsing attributes in process `syz.7.8507'. [ 1519.764055][T28237] syzkaller0: entered promiscuous mode [ 1519.769635][T28237] syzkaller0: entered allmulticast mode [ 1522.249207][T28259] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8516'. [ 1522.398891][T28267] netlink: 'syz.5.8518': attribute type 3 has an invalid length. [ 1522.425511][T28267] netlink: 201372 bytes leftover after parsing attributes in process `syz.5.8518'. [ 1523.268626][T28266] syzkaller0: entered promiscuous mode [ 1523.274535][T28266] syzkaller0: entered allmulticast mode [ 1530.255509][T28291] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8527'. [ 1531.246233][T28305] netlink: 'syz.4.8530': attribute type 3 has an invalid length. [ 1531.259297][T28305] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.8530'. [ 1535.379194][T28312] syzkaller0: entered promiscuous mode [ 1535.386682][T28312] syzkaller0: entered allmulticast mode [ 1538.175275][T28328] veth0_vlan: entered allmulticast mode [ 1539.265497][T28333] netlink: 176 bytes leftover after parsing attributes in process `syz.4.8537'. [ 1540.234373][T28338] syzkaller0: entered promiscuous mode [ 1540.248321][T28338] syzkaller0: entered allmulticast mode [ 1544.053488][T28366] netlink: 176 bytes leftover after parsing attributes in process `syz.7.8551'. [ 1545.974926][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.987792][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.796521][T28389] sit0: left promiscuous mode [ 1548.288844][T28390] sit0: entered promiscuous mode [ 1554.090213][T18205] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1554.119471][T18205] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1554.136602][T18205] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1554.161302][T18205] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1554.179546][T18205] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1554.191646][T18205] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1554.756277][T24129] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.188703][T24129] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.551217][T24129] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.043401][T24129] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.285421][T18205] Bluetooth: hci4: command tx timeout [ 1557.534330][T28400] chnl_net:caif_netlink_parms(): no params data found [ 1558.365461][T18205] Bluetooth: hci4: command tx timeout [ 1559.076055][T23595] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1559.097793][T23595] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1559.120284][T23595] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1559.143403][T23595] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1559.164839][T23595] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1559.173835][T23595] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1560.439412][T18205] Bluetooth: hci4: command tx timeout [ 1561.218028][T28400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1561.225808][T28400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.233335][T28400] bridge_slave_0: entered allmulticast mode [ 1561.241416][T28400] bridge_slave_0: entered promiscuous mode [ 1561.250995][T18205] Bluetooth: hci0: command tx timeout [ 1561.262451][T28400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1561.270237][T28400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.277512][T28400] bridge_slave_1: entered allmulticast mode [ 1561.285740][T28400] bridge_slave_1: entered promiscuous mode [ 1561.458561][T28400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1561.505116][T28400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1561.727672][T28400] team0: Port device team_slave_0 added [ 1561.743742][T28400] team0: Port device team_slave_1 added [ 1561.896036][T28400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1561.905384][T28400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1561.931374][T28400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1561.977586][T28400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1561.985005][T28400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1562.012512][T28400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1562.251098][T24129] bond0: (slave wlan1): Releasing backup interface [ 1562.333501][T28400] hsr_slave_0: entered promiscuous mode [ 1562.354294][T28400] hsr_slave_1: entered promiscuous mode [ 1562.367626][T28400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1562.400927][T28400] Cannot create hsr debugfs directory [ 1562.429188][T28411] chnl_net:caif_netlink_parms(): no params data found [ 1562.519846][T18205] Bluetooth: hci4: command tx timeout [ 1562.706937][T24129] hsr_slave_0: left promiscuous mode [ 1562.717079][T24129] hsr_slave_1: left promiscuous mode [ 1562.729131][T24129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1562.745959][T24129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1562.757817][T24129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1562.773781][T24129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1562.828543][T24129] veth1_macvtap: left promiscuous mode [ 1562.834572][T24129] veth1_vlan: left promiscuous mode [ 1563.323795][T18205] Bluetooth: hci0: command tx timeout [ 1564.156622][T24129] team0 (unregistering): Port device team_slave_1 removed [ 1564.198837][T24129] team0 (unregistering): Port device team_slave_0 removed [ 1564.245537][T24129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1564.293709][T24129] bond0 (unregistering): (slave 0@ÿ): Releasing backup interface [ 1564.788476][T24129] bond0 (unregistering): Released all slaves [ 1564.963639][T28411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.971551][T28411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.978783][T28411] bridge_slave_0: entered allmulticast mode [ 1564.986194][T28411] bridge_slave_0: entered promiscuous mode [ 1564.995652][T28411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.002906][T28411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.010266][T28411] bridge_slave_1: entered allmulticast mode [ 1565.017587][T28411] bridge_slave_1: entered promiscuous mode [ 1565.073738][T28442] sit0: left promiscuous mode [ 1565.355564][T28443] sit0: entered promiscuous mode [ 1565.399363][T18205] Bluetooth: hci0: command tx timeout [ 1565.894081][T28411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1565.956328][T28411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1566.081552][T28411] team0: Port device team_slave_0 added [ 1566.122090][T28411] team0: Port device team_slave_1 added [ 1566.219082][T28400] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1566.230769][T28411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1566.237735][T28411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1566.265145][T28411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1566.278286][T28411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1566.288056][T28411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1566.316680][T28411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1566.358876][T28400] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1566.404779][T28400] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1566.417725][T28400] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1566.527536][T28411] hsr_slave_0: entered promiscuous mode [ 1566.539072][T28411] hsr_slave_1: entered promiscuous mode [ 1566.545820][T28411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1566.553946][T28411] Cannot create hsr debugfs directory [ 1566.956367][T24129] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.359181][T24129] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.479664][T18205] Bluetooth: hci0: command tx timeout [ 1567.485438][T28464] sit0: left promiscuous mode [ 1567.871906][T24129] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.966721][T28462] sit0: entered promiscuous mode [ 1568.218387][T24129] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.306090][T28411] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1568.345429][T28411] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1568.418752][T28400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1568.437864][T28411] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1568.467766][T28411] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1568.552899][T28400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1568.626978][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1568.634157][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1568.780850][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.788061][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1569.472954][T28411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1569.923985][T28411] 8021q: adding VLAN 0 to HW filter on device team0 [ 1570.152159][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.159382][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1570.222161][T28400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1570.468618][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.475897][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1571.200017][T24129] bond0: (slave wlan1): Releasing backup interface [ 1571.628624][T24129] hsr_slave_0: left promiscuous mode [ 1571.656547][T24129] hsr_slave_1: left promiscuous mode [ 1571.674021][T24129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1571.689508][T24129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1571.701901][T24129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1571.713705][T24129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1571.755629][T24129] veth1_macvtap: left promiscuous mode [ 1571.764323][T24129] veth0_macvtap: left promiscuous mode [ 1571.770347][T24129] veth1_vlan: left promiscuous mode [ 1572.368462][T24129] team0 (unregistering): Port device team_slave_1 removed [ 1572.411635][T24129] team0 (unregistering): Port device team_slave_0 removed [ 1572.455754][T24129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1572.497000][T24129] bond0 (unregistering): (slave 0@ÿ): Releasing backup interface [ 1572.942466][T24129] bond0 (unregistering): Released all slaves [ 1572.978083][T28400] veth0_vlan: entered promiscuous mode [ 1573.197758][T28400] veth1_vlan: entered promiscuous mode [ 1573.353991][T28400] veth0_macvtap: entered promiscuous mode [ 1573.392986][T28400] veth1_macvtap: entered promiscuous mode [ 1573.456985][T28411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1573.493899][T28400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1573.519247][T28400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1573.529084][T28400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1573.545348][T28400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1573.557183][T28400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1573.575963][T28400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1573.590619][T28400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1573.648629][T28400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1573.662857][T28400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1573.672784][T28400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1573.685031][T28400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1573.695924][T28400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1573.711928][T28400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1573.726114][T28400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1573.801599][T28400] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.824334][T28400] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.839018][T28400] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.847842][T28400] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.099757][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1574.107628][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1574.116411][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1574.169480][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1574.568051][T28411] veth0_vlan: entered promiscuous mode [ 1574.773488][T28411] veth1_vlan: entered promiscuous mode [ 1575.111154][T28411] veth0_macvtap: entered promiscuous mode [ 1575.151085][T28525] netlink: 176 bytes leftover after parsing attributes in process `syz.8.8561'. [ 1575.169113][T28411] veth1_macvtap: entered promiscuous mode [ 1575.274969][T28527] netlink: 188 bytes leftover after parsing attributes in process `syz.7.8585'. [ 1575.288821][T28411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1575.435043][T28411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.449770][T28411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1575.496544][T28411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.572237][T28411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1575.699503][T28411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.813248][T28411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1575.919591][T28411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.983982][T28411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1576.072237][T28411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1576.116346][T28411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1576.181768][T28411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1576.205925][T28411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1576.228462][T28411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1576.261248][T28411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1576.287950][T28411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1576.312633][T28411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1576.330163][T28411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1576.403940][T28542] netlink: 'syz.7.8589': attribute type 10 has an invalid length. [ 1576.556036][T28411] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.575660][T28411] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.590516][T28411] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.609684][T28411] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.891327][T28551] netlink: 176 bytes leftover after parsing attributes in process `syz.7.8591'. [ 1577.109139][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1577.128681][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1577.172838][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1577.192796][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1577.964544][T28578] netlink: 'syz.8.8600': attribute type 10 has an invalid length. [ 1578.659762][T28584] netlink: 176 bytes leftover after parsing attributes in process `syz.8.8602'. [ 1579.502526][T18205] Bluetooth: hci4: unexpected event 0x33 length: 15 > 10 [ 1579.659866][T28606] tap0: tun_chr_ioctl cmd 2148553947 [ 1579.733098][T28608] netlink: 176 bytes leftover after parsing attributes in process `syz.7.8616'. [ 1580.042059][T28619] netlink: 'syz.4.8614': attribute type 10 has an invalid length. [ 1582.923185][T28636] netlink: 176 bytes leftover after parsing attributes in process `syz.7.8627'. [ 1582.937174][T28654] wg2: entered promiscuous mode [ 1582.947432][T28654] wg2: entered allmulticast mode [ 1583.390029][T28670] syzkaller0: entered promiscuous mode [ 1583.395561][T28670] syzkaller0: entered allmulticast mode [ 1584.803941][T18205] Bluetooth: hci4: unexpected event 0x14 length: 15 > 6 [ 1585.571519][T18205] Bluetooth: hci5: unexpected event 0x36 length: 15 > 7 [ 1585.621063][T18205] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 1586.938595][T28763] wg2: entered promiscuous mode [ 1586.971298][T28763] wg2: entered allmulticast mode [ 1591.249810][T28845] wg2: entered promiscuous mode [ 1591.279424][T28845] wg2: entered allmulticast mode [ 1592.880257][T28876] wg2: left promiscuous mode [ 1592.885260][T28876] wg2: left allmulticast mode [ 1593.102097][T28876] wg2: entered promiscuous mode [ 1593.117273][T28876] wg2: entered allmulticast mode [ 1594.120629][T23595] Bluetooth: hci3: command 0x0406 tx timeout [ 1607.408278][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.414696][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.564657][T18205] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9 [ 1610.674929][T29138] sit0: entered allmulticast mode [ 1610.774308][T18205] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 1614.448039][T29182] sit0: left promiscuous mode [ 1614.521586][T29183] sit0: entered promiscuous mode [ 1614.846705][T29188] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode [ 1614.867837][T29188] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 1615.358210][T18205] Bluetooth: hci4: Malformed HCI Event [ 1615.476598][T29213] sit0: entered allmulticast mode [ 1615.583745][T18205] Bluetooth: hci5: unexpected event 0x32 length: 15 > 9 [ 1615.953462][T29226] sock: sock_timestamping_bind_phc: sock not bind to device [ 1617.910351][T18205] Bluetooth: hci3: Malformed HCI Event [ 1618.197784][T29245] wg2: entered promiscuous mode [ 1618.259534][T29245] wg2: entered allmulticast mode [ 1619.026201][T29249] sit0: left promiscuous mode [ 1619.368587][T29263] sit0: entered promiscuous mode [ 1619.420116][T29265] netlink: 'syz.7.8890': attribute type 3 has an invalid length. [ 1619.427908][T29265] netlink: 201372 bytes leftover after parsing attributes in process `syz.7.8890'. [ 1620.021369][T29276] pim6reg1: entered promiscuous mode [ 1620.040919][T29276] pim6reg1: entered allmulticast mode [ 1620.708761][T18205] Bluetooth: hci5: ISO packet too small [ 1620.791606][T29308] mac80211_hwsim hwsim29 »»»»»»: renamed from wlan0 (while UP) [ 1621.415711][T18205] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 1623.618126][T18205] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1625.959429][ T29] INFO: task syz.6.8297:27590 blocked for more than 143 seconds. [ 1626.010585][ T29] Not tainted 6.6.96-syzkaller #0 [ 1626.069408][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1626.135422][ T29] task:syz.6.8297 state:D stack:23464 pid:27590 ppid:23917 flags:0x00004006 [ 1626.148062][ T29] Call Trace: [ 1626.152160][ T29] [ 1626.155209][ T29] __schedule+0x14e2/0x4580 [ 1626.159940][ T29] ? trace_contention_end+0x3e/0xe0 [ 1626.165320][ T29] ? asan.module_dtor+0x20/0x20 [ 1626.170553][ T29] ? perf_event_ctx_lock_nested+0x460/0x460 [ 1626.176929][ T29] ? task_work_cancel+0xa3/0x240 [ 1626.182046][ T29] ? task_work_cancel_func+0x210/0x210 [ 1626.187714][ T29] schedule+0xbd/0x170 [ 1626.191968][ T29] ? _free_event+0xfe/0xf30 [ 1626.196599][ T29] _free_event+0x174/0xf30 [ 1626.217106][ T29] perf_event_release_kernel+0x836/0x8c0 [ 1626.227652][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1626.239992][ T29] ? calc_timer_values+0x400/0x400 [ 1626.245264][ T29] ? __fput+0x187/0x970 [ 1626.253933][ T29] ? perf_mmap+0x1510/0x1510 [ 1626.258667][ T29] perf_release+0x3b/0x40 [ 1626.264249][ T29] __fput+0x234/0x970 [ 1626.268445][ T29] task_work_run+0x1ce/0x250 [ 1626.277463][ T29] ? task_work_cancel+0x240/0x240 [ 1626.284070][ T29] ? kernel_clone+0x235/0x840 [ 1626.288871][ T29] ? hrtimer_interrupt+0x597/0x9c0 [ 1626.294339][ T29] get_signal+0x1235/0x1400 [ 1626.298944][ T29] ? create_io_thread+0x140/0x140 [ 1626.304196][ T29] arch_do_signal_or_restart+0x96/0x780 [ 1626.310112][ T29] ? get_sigframe_size+0x20/0x20 [ 1626.315178][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 1626.320793][ T29] exit_to_user_mode_loop+0x70/0x110 [ 1626.326208][ T29] exit_to_user_mode_prepare+0xb1/0x140 [ 1626.332047][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 1626.337652][ T29] do_syscall_64+0x61/0xb0 [ 1626.343383][ T29] ? clear_bhb_loop+0x40/0x90 [ 1626.348200][ T29] ? clear_bhb_loop+0x40/0x90 [ 1626.353077][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1626.359085][ T29] RIP: 0033:0x7f60cf18e929 [ 1626.363681][ T29] RSP: 002b:00007f60d0040fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1626.376441][ T29] RAX: fffffffffffffffc RBX: 00007f60cf3b5fa0 RCX: 00007f60cf18e929 [ 1626.384557][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000043001000 [ 1626.393918][ T29] RBP: 00007f60cf210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1626.406567][ T29] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1626.414967][ T29] R13: 0000000000000000 R14: 00007f60cf3b5fa0 R15: 00007fff0d2429e8 [ 1626.427684][ T29] [ 1626.432417][ T29] [ 1626.432417][ T29] Showing all locks held in the system: [ 1626.443657][ T29] 1 lock held by khungtaskd/29: [ 1626.448627][ T29] #0: ffffffff8cd2f760 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1626.462192][ T29] 3 locks held by kworker/u4:7/2906: [ 1626.467666][ T29] #0: ffff8880b8e3c458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1626.477848][ T29] #1: ffffffff8cd2f760 (rcu_read_lock){....}-{1:2}, at: ___perf_sw_event+0x161/0x6f0 [ 1626.490886][ T29] #2: ffff8880b8e297d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x73b/0xdb0 [ 1626.500047][ T29] 2 locks held by getty/5546: [ 1626.504829][ T29] #0: ffff88802d5fe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1626.514981][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 1626.525313][ T29] 2 locks held by syz.9.8948/29413: [ 1626.530747][ T29] [ 1626.533151][ T29] ============================================= [ 1626.533151][ T29] [ 1626.541744][ T29] NMI backtrace for cpu 1 [ 1626.546101][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.6.96-syzkaller #0 [ 1626.553927][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1626.564017][ T29] Call Trace: [ 1626.567312][ T29] [ 1626.570262][ T29] dump_stack_lvl+0x16c/0x230 [ 1626.574964][ T29] ? preempt_count_add+0x91/0x1a0 [ 1626.580039][ T29] ? show_regs_print_info+0x20/0x20 [ 1626.585270][ T29] ? load_image+0x3b0/0x3b0 [ 1626.589838][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 1626.594829][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1626.601066][ T29] ? _printk+0xd0/0x110 [ 1626.605288][ T29] ? load_image+0x3b0/0x3b0 [ 1626.609837][ T29] ? load_image+0x3b0/0x3b0 [ 1626.614374][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1626.620488][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1626.626509][ T29] watchdog+0xf41/0xf80 [ 1626.630706][ T29] ? watchdog+0x1e1/0xf80 [ 1626.635077][ T29] kthread+0x2fa/0x390 [ 1626.639438][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1626.644500][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1626.649197][ T29] ret_from_fork+0x48/0x80 [ 1626.653644][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1626.658418][ T29] ret_from_fork_asm+0x11/0x20 [ 1626.663216][ T29] [ 1626.667230][ T29] Sending NMI from CPU 1 to CPUs 0: [ 1626.672755][ C0] NMI backtrace for cpu 0 [ 1626.672777][ C0] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted 6.6.96-syzkaller #0 [ 1626.672795][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1626.672805][ C0] Workqueue: bat_events batadv_nc_worker [ 1626.672833][ C0] RIP: 0010:lockdep_hardirqs_on+0x21/0x150 [ 1626.672853][ C0] Code: cc cc cc cc cc cc cc cc cc f3 0f 1e fa 41 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 48 8b 1d bf 51 95 75 <83> 3d 14 4c dc 03 00 0f 84 90 00 00 00 65 8b 05 b3 51 95 75 a9 00 [ 1626.672868][ C0] RSP: 0018:ffffc900001079f8 EFLAGS: 00000082 [ 1626.672881][ C0] RAX: fdad3d7c26788e00 RBX: ffff888019e7bc00 RCX: fdad3d7c26788e00 [ 1626.672894][ C0] RDX: dffffc0000000000 RSI: ffffffff8aaac440 RDI: ffffffff8151814e [ 1626.672906][ C0] RBP: ffffc90000107ab8 R08: ffffffff90da55ff R09: 1ffffffff21b4abf [ 1626.672918][ C0] R10: dffffc0000000000 R11: fffffbfff21b4ac0 R12: ffffffff8a373261 [ 1626.672931][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff92000020f44 [ 1626.672943][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1626.672958][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1626.672969][ C0] CR2: 00007f88ef182178 CR3: 000000002f5fc000 CR4: 00000000003506f0 [ 1626.672984][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1626.672993][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1626.673003][ C0] Call Trace: [ 1626.673009][ C0] [ 1626.673017][ C0] __local_bh_enable_ip+0x12e/0x1c0 [ 1626.673035][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1626.673052][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 1626.673075][ C0] ? batadv_nc_purge_paths+0x311/0x3a0 [ 1626.673100][ C0] ? batadv_nc_purge_paths+0x3a0/0x3a0 [ 1626.673126][ C0] batadv_nc_purge_paths+0x311/0x3a0 [ 1626.673158][ C0] batadv_nc_worker+0x328/0x610 [ 1626.673185][ C0] ? process_scheduled_works+0x957/0x15b0 [ 1626.673217][ C0] process_scheduled_works+0xa45/0x15b0 [ 1626.673253][ C0] ? assign_work+0x400/0x400 [ 1626.673277][ C0] ? assign_work+0x39e/0x400 [ 1626.673298][ C0] worker_thread+0xa55/0xfc0 [ 1626.673333][ C0] kthread+0x2fa/0x390 [ 1626.673346][ C0] ? pr_cont_work+0x560/0x560 [ 1626.673366][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1626.673381][ C0] ret_from_fork+0x48/0x80 [ 1626.673400][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1626.673415][ C0] ret_from_fork_asm+0x11/0x20 [ 1626.673447][ C0] [ 1626.673888][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1626.917182][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.6.96-syzkaller #0 [ 1626.925007][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1626.935061][ T29] Call Trace: [ 1626.938347][ T29] [ 1626.941291][ T29] dump_stack_lvl+0x16c/0x230 [ 1626.945987][ T29] ? show_regs_print_info+0x20/0x20 [ 1626.951197][ T29] ? load_image+0x3b0/0x3b0 [ 1626.955715][ T29] panic+0x2c0/0x710 [ 1626.959619][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1626.965265][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1626.969764][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1626.975316][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1626.981481][ T29] watchdog+0xf80/0xf80 [ 1626.985666][ T29] ? watchdog+0x1e1/0xf80 [ 1626.990002][ T29] kthread+0x2fa/0x390 [ 1626.994068][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1626.999119][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1627.003713][ T29] ret_from_fork+0x48/0x80 [ 1627.008139][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1627.012732][ T29] ret_from_fork_asm+0x11/0x20 [ 1627.017541][ T29] [ 1627.020874][ T29] Kernel Offset: disabled [ 1627.025199][ T29] Rebooting in 86400 seconds..