last executing test programs: 2m49.711417569s ago: executing program 0 (id=23): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 2m49.406037594s ago: executing program 0 (id=25): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7, 0x1, 0xf8, 0x40, 0x0, 0x9, 0x8800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb603, 0x2}, 0x0, 0x3, 0x2, 0x8, 0x0, 0x1001, 0x6, 0x0, 0xfffffffc, 0x0, 0x28}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="f4a29ec0538ea00d68e28f8dcc87704fc5b2a459b8663f", 0x17, 0x2000}, 0x84000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m47.424486213s ago: executing program 0 (id=30): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 2m47.132147027s ago: executing program 0 (id=33): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m46.654627986s ago: executing program 0 (id=42): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'batadv_slave_0\x00', @random="02ff02001e00"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r4, &(0x7f0000000980), 0x20000992) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x16004, 0x0, 0x81, 0x5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000000000000000000000001812", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x25c9, 0x40000000, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000000, 0x180}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e01000000", @ANYRES32, @ANYBLOB=':\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, 0x0, 0x0}, 0x20) 2m44.653632897s ago: executing program 0 (id=41): r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="660a00000000000061114e0000000000850000008c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001740)=ANY=[], 0x0, 0x4d, 0x0, 0x3, 0x10000}, 0x28) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x5452, &(0x7f0000000a00)={'veth0_to_bridge\x00', @dev}) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000001380)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES64, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) 2m29.389628568s ago: executing program 32 (id=41): r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="660a00000000000061114e0000000000850000008c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001740)=ANY=[], 0x0, 0x4d, 0x0, 0x3, 0x10000}, 0x28) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x5452, &(0x7f0000000a00)={'veth0_to_bridge\x00', @dev}) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000001380)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES64, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) 2m29.370508369s ago: executing program 3 (id=52): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7, 0x1, 0xf8, 0x40, 0x0, 0x9, 0x8800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb603, 0x2}, 0x0, 0x3, 0x2, 0x8, 0x0, 0x1001, 0x6, 0x0, 0xfffffffc, 0x0, 0x28}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="f4a29ec0538ea00d68e28f8dcc87704fc5b2a459b8663f", 0x17, 0x2000}, 0x84000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m29.223478561s ago: executing program 3 (id=54): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffc000, 0x1, 0x1, 0xf}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2m25.302607367s ago: executing program 3 (id=69): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 2m25.088574124s ago: executing program 3 (id=72): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2bf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffe) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 2m24.123323493s ago: executing program 3 (id=64): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) 2m23.882878642s ago: executing program 3 (id=70): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x766073b3f9440989, 0x30000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2}, 0xc) close(r3) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m8.638446811s ago: executing program 33 (id=70): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x766073b3f9440989, 0x30000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2}, 0xc) close(r3) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m49.135386465s ago: executing program 4 (id=167): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 1m49.095916029s ago: executing program 2 (id=169): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r0}, 0xc) 1m48.916327963s ago: executing program 2 (id=170): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 1m48.743439167s ago: executing program 2 (id=171): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0xfffffe51) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc, 0x8b6d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) 1m45.903625096s ago: executing program 4 (id=173): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x4, 0x4, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) 1m45.902407717s ago: executing program 2 (id=181): write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000009e010000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3) 1m45.664312936s ago: executing program 4 (id=175): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x17e, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 1m45.303343714s ago: executing program 4 (id=178): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1m45.142790528s ago: executing program 4 (id=179): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m44.835336503s ago: executing program 2 (id=182): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0xfffffffffffffd45) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f50095"], 0x0}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) 1m44.646949087s ago: executing program 4 (id=183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m44.274215598s ago: executing program 34 (id=183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m44.237928961s ago: executing program 2 (id=185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d0000008500000007000000"], &(0x7f00000005c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='tlb_flush\x00'}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) write$cgroup_int(r7, &(0x7f00000001c0), 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) 1m43.86777609s ago: executing program 35 (id=185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d0000008500000007000000"], &(0x7f00000005c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='tlb_flush\x00'}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) write$cgroup_int(r7, &(0x7f00000001c0), 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) 1m31.027074108s ago: executing program 6 (id=209): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={0x0, 0xc}, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) 1m30.687585255s ago: executing program 6 (id=212): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 1m29.631455611s ago: executing program 6 (id=214): bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xa505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x64d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m29.409921538s ago: executing program 7 (id=186): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r1}, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r3, r2}, 0xc) 1m29.168964298s ago: executing program 7 (id=218): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x4}, 0x50) close(r1) 1m29.165143988s ago: executing program 6 (id=220): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe8000000000000010"], 0xfdef) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 1m29.006502661s ago: executing program 6 (id=222): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) 1m28.907377539s ago: executing program 7 (id=223): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) close(r0) 1m28.591048335s ago: executing program 7 (id=224): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 1m28.562926697s ago: executing program 6 (id=225): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r0, 0x2, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m28.15200971s ago: executing program 36 (id=224): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 1m28.107575334s ago: executing program 37 (id=225): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r0, 0x2, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 7.80621674s ago: executing program 8 (id=572): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='selinux_audited\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9}, 0x100904, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x4008b100, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) syz_clone(0x10222000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000340)="ec81178d76e1554846228ba0c5e7bf418f22e61086e1a0c647351ec305d39674dea9d0d6baa71cd6baba7c1dd1e9668c3b939a69e085b218488c1a4d4b061f1267911c5f2ca6844b6e35ff75df369ae1befb1b539adc3e9b36c85ca3d435513b8badfe") socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x6d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x58, &(0x7f0000000100)}, 0x10) 6.141751914s ago: executing program 8 (id=586): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d0f4700000000000055a1180015000600142603600e120900210000000401a80016", 0x33}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x38}, 0x200040c4) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000300)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 5.911144783s ago: executing program 9 (id=580): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) (fail_nth: 1) 5.019255574s ago: executing program 9 (id=583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x60980, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000005300000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00ef00850000009b0000009500"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000005300000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00ef00850000009b0000009500"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, 0x0) (async) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x2, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x2, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x0, 0x3, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r7, 0x0, 0x3, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 4.963043929s ago: executing program 8 (id=584): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2b, 0x1, 0x0) close(r1) socket$kcm(0x2, 0x5, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000008095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8e02c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0x4000000000000ca, 0x0, 0x0, 0x0, 0xe9b0, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x9a) 4.804783592s ago: executing program 5 (id=585): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='selinux_audited\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9}, 0x100904, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x4008b100, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) syz_clone(0x10222000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000340)="ec81178d76e1554846228ba0c5e7bf418f22e61086e1a0c647351ec305d39674dea9d0d6baa71cd6baba7c1dd1e9668c3b939a69e085b218488c1a4d4b061f1267911c5f2ca6844b6e35ff75df369ae1befb1b539adc3e9b36c85ca3d435513b8badfe") socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x6d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x58, &(0x7f0000000100)}, 0x10) 4.737032328s ago: executing program 1 (id=587): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0xe02}, 0x50) r0 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, r2, 0xa) r4 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x33, 0x0, 0x7, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000600), &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) close(r4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000bc0)="5c00000012006bab9e3fe3d86e17aa31076b876c1d00000700000064160af36504001a0038001d00120000009ee517d34460bc24eab556a705251e6182949a86a6d0bdd7a3d19f6a2b9b04e4a6b38aebb392ec996a4c6079599c865d77a5aecb5a1493edddd1d792a294520ba7d6b5badf034dce64752744de4501e00f9f2c7889a2923b234a8b65a329475bd6ba4d853415b78180dc06e0feac961b6670fd647b00", 0xa2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000008c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xdd\xe9\x15 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ\xa0\xfe\x0e>\xd9\x99\x88\xd8\xdd\xb8Y\xc3\a\xc6\x93\v\x04REY\xf41\xa1\v\x8d\x8e\x84R\xf2G\xdd_\xd0\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96\x00\x00\x00\x00\x00\x00\x00\x00\xb6\xf0\x01\xe3\xad`\xf1d\xed+\xc4u\x01:.\xdc\xe8\xf9\x06\xbds\x86\x818eF6Vl\x92\x8b\xb0\xc4<\xb7o\x00\x02I\x89g\x99\x02vi\xe6s\xc9\xca\x94\xad\xff\x1a\xfbI\t\x148IGD\xb0\xb7\xa3\x91]\xb1\\6\x0f\x83?\xa0\xf1 \xfb\xceJ\xa4\x13\x18k\xe6\x8f\xa5\xc5\xec\xbeo\xd0\x81\xde\a\xd9d\x1c\xb6\x0e\x1d\xdc\\\xc4%\xe8\xeb\xe3B}\xbbD\x85') socket$kcm(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.715871179s ago: executing program 8 (id=588): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6b, 0xfd, 0x0, 0x0, 0x0, 0x1bce, 0xe021, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xa, 0x4, @perf_config_ext={0x8, 0x6594}, 0x11e6e2, 0xfffffffffffff801, 0x3, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000300)}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x14, &(0x7f0000000000)=r5, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0xffffffffffffff7a, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0}, 0x4004090) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)}, 0x20000880) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000ebffffff340000000c00000c3f6eaebc0627cc8506db27600004000000fa550084fd5affff0a0000000000000002000000010000000500000004000000000000000000000105000000210000", @ANYRESDEC=0x0], 0x0, 0x58}, 0x28) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x3, 0x10) r7 = syz_clone(0x28842080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={r7, r0, 0x0, 0x1, &(0x7f0000000380)='\x00'}, 0x30) perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0xd, 0x80, 0x0, 0x1, 0x0, 0xcbba, 0x400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0x3}, 0x8046, 0x9, 0x7a, 0x5, 0x9, 0x5, 0x7, 0x0, 0xfcd1, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x1b) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x5dc}], 0x1}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r10}, 0x18) r11 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r11, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x2e, &(0x7f0000000000)=r12, 0x4) 4.611872188s ago: executing program 9 (id=589): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6b, 0xfd, 0x0, 0x0, 0x0, 0x1bce, 0xe021, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xa, 0x4, @perf_config_ext={0x8, 0x6594}, 0x11e6e2, 0xfffffffffffff801, 0x3, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000300)}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x14, &(0x7f0000000000)=r5, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0xffffffffffffff7a, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0}, 0x4004090) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)}, 0x20000880) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000ebffffff340000000c00000c3f6eaebc0627cc8506db27600004000000fa550084fd5affff0a0000000000000002000000010000000500000004000000000000000000000105000000210000", @ANYRESDEC=0x0], 0x0, 0x58}, 0x28) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x3, 0x10) r7 = syz_clone(0x28842080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={r7, r0, 0x0, 0x1, &(0x7f0000000380)='\x00'}, 0x30) perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0xd, 0x80, 0x0, 0x1, 0x0, 0xcbba, 0x400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0x3}, 0x8046, 0x9, 0x7a, 0x5, 0x9, 0x5, 0x7, 0x0, 0xfcd1, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x1b) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x5dc}], 0x1}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r10}, 0x18) r11 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r11, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r12, &(0x7f0000000340)={0x0, 0xffffff81, 0x0}, 0x102) 3.851832839s ago: executing program 5 (id=590): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 3.413964745s ago: executing program 5 (id=591): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x14, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc109, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.808005414s ago: executing program 1 (id=592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x94) (fail_nth: 1) 2.641865697s ago: executing program 5 (id=593): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d0f4700000000000055a1180015000600142603600e120900210000000401a80016", 0x33}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x38}, 0x200040c4) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000300)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.629455548s ago: executing program 8 (id=601): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0xe02}, 0x50) r0 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, r2, 0xa) r4 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x33, 0x0, 0x7, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000600), &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) close(r4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000bc0)="5c00000012006bab9e3fe3d86e17aa31076b876c1d00000700000064160af36504001a0038001d00120000009ee517d34460bc24eab556a705251e6182949a86a6d0bdd7a3d19f6a2b9b04e4a6b38aebb392ec996a4c6079599c865d77a5aecb5a1493edddd1d792a294520ba7d6b5badf034dce64752744de4501e00f9f2c7889a2923b234a8b65a329475bd6ba4d853415b78180dc06e0feac961b6670fd647b00", 0xa2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000400000004000e1ff95000000000000002ba76bb33123751c4e3409e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d046837d907b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca315f5b87e1ca6433a8acd715f5888b2007f0000000000000000010089937090c34410000000000000090000000000414027efc842b6d6f800005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdce57a79d6fce424c22001f6c3784a1975fa657d05003a32a4fd67ce446ac5430207db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bd2b5543ffc16695572361629d1022f722ec23812b70d72cd0010000007881bfa35b9fd6864e90ddb31f75f6324989cdc7044f563a1f74d4efe895fdbc463f747c08f40105869035000000000003000000000000000000000000000000000000080000003ddf4aa4b1c8b8a0ae6feb6737c275dc2740f742b5425f1d5819610608bbab35471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f15b8ee25a2a5ccf4a9b603c88e12ff25184d4e3c2f7f623559435b2c505fb7113400000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7a92a557ac2b44b8f7a49789906d922b3e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696abaa042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb328790700000021e041254f06bd7f000000000000000000000000000000282ffe000000000000000431e8e3204a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dfdb3d1179b4b"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000008c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xdd\xe9\x15 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ\xa0\xfe\x0e>\xd9\x99\x88\xd8\xdd\xb8Y\xc3\a\xc6\x93\v\x04REY\xf41\xa1\v\x8d\x8e\x84R\xf2G\xdd_\xd0\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96\x00\x00\x00\x00\x00\x00\x00\x00\xb6\xf0\x01\xe3\xad`\xf1d\xed+\xc4u\x01:.\xdc\xe8\xf9\x06\xbds\x86\x818eF6Vl\x92\x8b\xb0\xc4<\xb7o\x00\x02I\x89g\x99\x02vi\xe6s\xc9\xca\x94\xad\xff\x1a\xfbI\t\x148IGD\xb0\xb7\xa3\x91]\xb1\\6\x0f\x83?\xa0\xf1 \xfb\xceJ\xa4\x13\x18k\xe6\x8f\xa5\xc5\xec\xbeo\xd0\x81\xde\a\xd9d\x1c\xb6\x0e\x1d\xdc\\\xc4%\xe8\xeb\xe3B}\xbbD\x85') socket$kcm(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.422059694s ago: executing program 9 (id=594): r0 = socket$kcm(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x10, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@call={0x85, 0x0, 0x0, 0x60}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x61, '\x00', 0x0, @sock_ops}, 0x94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001140)={0xffffffffffffffff, 0x5811, 0x18}, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000801) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f1"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xe, 0x4, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000040), &(0x7f0000000540)=r2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8918, &(0x7f0000000000)={'ip_vti0\x00', @random="02000300"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001300)='cpu.stat\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x89a1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001180), &(0x7f00000011c0)='%-5lx \x00'}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x15, 0x8, 0x2, 0x5, 0x800, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{}, &(0x7f00000012c0), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x2, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f00000000c0)=""/4096, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001100)={0x5, 0x2, 0xe79f, 0x1000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001380)=[0x1, r1, r7, r8], 0x0, 0x10, 0xffffffff}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef437000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 2.275199686s ago: executing program 1 (id=595): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0xffffffffffffffff], 0x48) close(0x3) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r4, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x15, &(0x7f0000000380)=ANY=[@ANYBLOB="18110000", @ANYRES32=r5, @ANYBLOB="000000000000000018100000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000003581500010000000b7080000000000007b8af8ff00000000b7080000ff7f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r10}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000440)=ANY=[@ANYRESHEX=r10], &(0x7f0000000000)='syzkaller\x00', 0x800005, 0x93, &(0x7f00000005c0)=""/147, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r9}, 0x10) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f00000002c0)=r7) 2.053144594s ago: executing program 1 (id=596): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="660a00000000000061118f00000000001800000000000013000000000000000095000000000000004fd1798540664d6946951287b4f3ad5c75d3870200113a3fedfe6a4c93cae9be9af25f74677d328d7e9f"], &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) close(r2) socketpair(0x28, 0x800, 0x4, &(0x7f00000000c0)) 1.034096207s ago: executing program 9 (id=597): r0 = socket$kcm(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x10, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@call={0x85, 0x0, 0x0, 0x60}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x61, '\x00', 0x0, @sock_ops}, 0x94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001140)={0xffffffffffffffff, 0x5811, 0x18}, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000801) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f1"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xe, 0x4, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000040), &(0x7f0000000540)=r2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8918, &(0x7f0000000000)={'ip_vti0\x00', @random="02000300"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'nr0\x00', @multicast}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001180), &(0x7f00000011c0)='%-5lx \x00'}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x15, 0x8, 0x2, 0x5, 0x800, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{}, &(0x7f00000012c0), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x2, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f00000000c0)=""/4096, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001100)={0x5, 0x2, 0xe79f, 0x1000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001380)=[0x1, r1, r7, r8], 0x0, 0x10, 0xffffffff}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef437000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 1.029798407s ago: executing program 5 (id=606): r0 = socket$kcm(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x10, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@call={0x85, 0x0, 0x0, 0x60}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x61, '\x00', 0x0, @sock_ops}, 0x94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001140)={0xffffffffffffffff, 0x5811, 0x18}, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000801) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f1"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xe, 0x4, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000040), &(0x7f0000000540)=r2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8918, &(0x7f0000000000)={'ip_vti0\x00', @random="02000300"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001300)='cpu.stat\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'nr0\x00', @multicast}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x15, 0x8, 0x2, 0x5, 0x800, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{}, &(0x7f00000012c0), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x2, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f00000000c0)=""/4096, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001100)={0x5, 0x2, 0xe79f, 0x1000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001380)=[0x1, r1, 0xffffffffffffffff, r7], 0x0, 0x10, 0xffffffff}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef437000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 983.456941ms ago: executing program 1 (id=598): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='selinux_audited\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9}, 0x100904, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x4008b100, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) syz_clone(0x10222000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000340)="ec81178d76e1554846228ba0c5e7bf418f22e61086e1a0c647351ec305d39674dea9d0d6baa71cd6baba7c1dd1e9668c3b939a69e085b218488c1a4d4b061f1267911c5f2ca6844b6e35ff75df369ae1befb1b539adc3e9b36c85ca3d435513b8badfe") socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x6d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x58, &(0x7f0000000100)}, 0x10) 931.010655ms ago: executing program 8 (id=599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) write$cgroup_int(r4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x2e, 0xffffffffffffffc4, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00eb6b00632f77fbac140000800cab0000657b000000000000000000", 0x0, 0x21, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000006112c0000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 735.77842ms ago: executing program 9 (id=600): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0xe02}, 0x50) r0 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, r2, 0xa) r4 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x33, 0x0, 0x7, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000600), &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) close(r4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000bc0)="5c00000012006bab9e3fe3d86e17aa31076b876c1d00000700000064160af36504001a0038001d00120000009ee517d34460bc24eab556a705251e6182949a86a6d0bdd7a3d19f6a2b9b04e4a6b38aebb392ec996a4c6079599c865d77a5aecb5a1493edddd1d792a294520ba7d6b5badf034dce64752744de4501e00f9f2c7889a2923b234a8b65a329475bd6ba4d853415b78180dc06e0feac961b6670fd647b00", 0xa2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000008c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xdd\xe9\x15 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ\xa0\xfe\x0e>\xd9\x99\x88\xd8\xdd\xb8Y\xc3\a\xc6\x93\v\x04REY\xf41\xa1\v\x8d\x8e\x84R\xf2G\xdd_\xd0\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96\x00\x00\x00\x00\x00\x00\x00\x00\xb6\xf0\x01\xe3\xad`\xf1d\xed+\xc4u\x01:.\xdc\xe8\xf9\x06\xbds\x86\x818eF6Vl\x92\x8b\xb0\xc4<\xb7o\x00\x02I\x89g\x99\x02vi\xe6s\xc9\xca\x94\xad\xff\x1a\xfbI\t\x148IGD\xb0\xb7\xa3\x91]\xb1\\6\x0f\x83?\xa0\xf1 \xfb\xceJ\xa4\x13\x18k\xe6\x8f\xa5\xc5\xec\xbeo\xd0\x81\xde\a\xd9d\x1c\xb6\x0e\x1d\xdc\\\xc4%\xe8\xeb\xe3B}\xbbD\x85') socket$kcm(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 601.765411ms ago: executing program 5 (id=602): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6b, 0xfd, 0x0, 0x0, 0x0, 0x1bce, 0xe021, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xa, 0x4, @perf_config_ext={0x8, 0x6594}, 0x11e6e2, 0xfffffffffffff801, 0x3, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000300)}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x14, &(0x7f0000000000)=r5, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0xffffffffffffff7a, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0}, 0x4004090) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)}, 0x20000880) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000ebffffff340000000c00000c3f6eaebc0627cc8506db27600004000000fa550084fd5affff0a0000000000000002000000010000000500000004000000000000000000000105000000210000", @ANYRESDEC=0x0], 0x0, 0x58}, 0x28) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x3, 0x10) r7 = syz_clone(0x28842080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={r7, r0, 0x0, 0x1, &(0x7f0000000380)='\x00'}, 0x30) perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0xd, 0x80, 0x0, 0x1, 0x0, 0xcbba, 0x400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0x3}, 0x8046, 0x9, 0x7a, 0x5, 0x9, 0x5, 0x7, 0x0, 0xfcd1, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x1b) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x5dc}], 0x1}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r10}, 0x18) r11 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r11, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 0s ago: executing program 1 (id=603): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6b, 0xfd, 0x0, 0x0, 0x0, 0x1bce, 0xe021, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xa, 0x4, @perf_config_ext={0x8, 0x6594}, 0x11e6e2, 0xfffffffffffff801, 0x3, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000300)}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x14, &(0x7f0000000000)=r5, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0xffffffffffffff7a, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0}, 0x4004090) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)}, 0x20000880) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000ebffffff340000000c00000c3f6eaebc0627cc8506db27600004000000fa550084fd5affff0a0000000000000002000000010000000500000004000000000000000000000105000000210000", @ANYRESDEC=0x0], 0x0, 0x58}, 0x28) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x3, 0x10) r7 = syz_clone(0x28842080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={r7, r0, 0x0, 0x1, &(0x7f0000000380)='\x00'}, 0x30) perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0xd, 0x80, 0x0, 0x1, 0x0, 0xcbba, 0x400, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0x3}, 0x8046, 0x9, 0x7a, 0x5, 0x9, 0x5, 0x7, 0x0, 0xfcd1, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x1b) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x5dc}], 0x1}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r10}, 0x18) r11 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r11, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r12, &(0x7f0000000340)={0x0, 0xffffff81, 0x0}, 0x102) kernel console output (not intermixed with test programs): 00) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.969508][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.985273][ T5840] hsr_slave_0: entered promiscuous mode [ 418.991967][ T5840] hsr_slave_1: entered promiscuous mode [ 418.998332][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.006860][ T5840] Cannot create hsr debugfs directory [ 419.050753][ T5836] hsr_slave_0: entered promiscuous mode [ 419.057525][ T5836] hsr_slave_1: entered promiscuous mode [ 419.064000][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.073708][ T5836] Cannot create hsr debugfs directory [ 419.233020][ T5841] hsr_slave_0: entered promiscuous mode [ 419.239500][ T5841] hsr_slave_1: entered promiscuous mode [ 419.246143][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.254931][ T5841] Cannot create hsr debugfs directory [ 419.601157][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 419.616862][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 419.630716][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 419.643077][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 419.710826][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 419.725734][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 419.738885][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 419.755926][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 419.831868][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 419.862645][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 419.873712][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 419.903564][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 420.003229][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 420.014834][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 420.026348][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 420.059734][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 420.155821][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.227537][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.267517][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.275059][ T5877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.296207][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.308925][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.326778][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.334015][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.384778][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.406586][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.435690][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.442920][ T5877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.454092][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.461435][ T5877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.481650][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.509597][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.535073][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.542300][ T5877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.568724][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.575894][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.587399][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.594612][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.624929][ T2882] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.632201][ T2882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.823717][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 420.915727][ T5849] Bluetooth: hci0: command tx timeout [ 420.991237][ T5849] Bluetooth: hci1: command tx timeout [ 420.995126][ T5848] Bluetooth: hci2: command tx timeout [ 420.996966][ T5849] Bluetooth: hci3: command tx timeout [ 421.217508][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.293888][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.355931][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.393596][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.440993][ T5840] veth0_vlan: entered promiscuous mode [ 421.459341][ T5835] veth0_vlan: entered promiscuous mode [ 421.492014][ T5840] veth1_vlan: entered promiscuous mode [ 421.506408][ T5835] veth1_vlan: entered promiscuous mode [ 421.550582][ T5836] veth0_vlan: entered promiscuous mode [ 421.579735][ T5836] veth1_vlan: entered promiscuous mode [ 421.649758][ T5835] veth0_macvtap: entered promiscuous mode [ 421.663891][ T5840] veth0_macvtap: entered promiscuous mode [ 421.677279][ T5836] veth0_macvtap: entered promiscuous mode [ 421.693423][ T5836] veth1_macvtap: entered promiscuous mode [ 421.709888][ T5835] veth1_macvtap: entered promiscuous mode [ 421.720785][ T5840] veth1_macvtap: entered promiscuous mode [ 421.743865][ T5841] veth0_vlan: entered promiscuous mode [ 421.770811][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.787858][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.799742][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.814303][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.830635][ T5841] veth1_vlan: entered promiscuous mode [ 421.853900][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.868856][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.879077][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.888325][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.898911][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.926851][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.938228][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.948747][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.960835][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.973341][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.985258][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.996077][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.008678][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.018673][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.029767][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.040584][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.052173][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.064270][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.086710][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.095834][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.105104][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.118951][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.152978][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.162262][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.172030][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.180981][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.269719][ T5841] veth0_macvtap: entered promiscuous mode [ 422.290514][ T5841] veth1_macvtap: entered promiscuous mode [ 422.373111][ T5917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.383662][ T5917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.397483][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.411795][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.422225][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.434325][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.444407][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.454985][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.466627][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.479833][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.490489][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.500955][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.513942][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.524589][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.535495][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.548662][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.596900][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.598472][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.607318][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.625346][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.633228][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.636426][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.735114][ T5910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.756222][ T5910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.758656][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.772474][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.868598][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.892670][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.939919][ T5917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.967042][ T5917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.991310][ T5849] Bluetooth: hci0: command tx timeout [ 423.012868][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.041380][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.071667][ T5849] Bluetooth: hci2: command tx timeout [ 423.072313][ T5851] Bluetooth: hci1: command tx timeout [ 423.077121][ T5849] Bluetooth: hci3: command tx timeout [ 423.217416][ T5917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.234049][ T5917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.487370][ T5932] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 423.580979][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.592525][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.737645][ C1] hrtimer: interrupt took 67813 ns [ 423.766748][ T5939] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 423.797780][ T5939] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1'. [ 423.895700][ T5944] FAULT_INJECTION: forcing a failure. [ 423.895700][ T5944] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 423.917587][ T5944] CPU: 1 PID: 5944 Comm: syz.2.7 Not tainted 6.6.102-syzkaller #0 [ 423.925473][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 423.935907][ T5944] Call Trace: [ 423.939318][ T5944] [ 423.942482][ T5944] dump_stack_lvl+0x16c/0x230 [ 423.947227][ T5944] ? show_regs_print_info+0x20/0x20 [ 423.952477][ T5944] ? load_image+0x3b0/0x3b0 [ 423.957042][ T5944] ? __might_fault+0xaa/0x120 [ 423.961819][ T5944] ? __lock_acquire+0x7c80/0x7c80 [ 423.967008][ T5944] should_fail_ex+0x39d/0x4d0 [ 423.971755][ T5944] _copy_from_user+0x2f/0xe0 [ 423.976415][ T5944] __sys_bpf+0x1e9/0x800 [ 423.980699][ T5944] ? bpf_link_show_fdinfo+0x350/0x350 [ 423.986115][ T5944] ? lock_chain_count+0x20/0x20 [ 423.991097][ T5944] __x64_sys_bpf+0x7c/0x90 [ 423.995625][ T5944] do_syscall_64+0x55/0xb0 [ 424.000101][ T5944] ? clear_bhb_loop+0x40/0x90 [ 424.004804][ T5944] ? clear_bhb_loop+0x40/0x90 [ 424.009554][ T5944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.015592][ T5944] RIP: 0033:0x7fe5b478ebe9 [ 424.020123][ T5944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.039942][ T5944] RSP: 002b:00007fe5b5682038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 424.048992][ T5944] RAX: ffffffffffffffda RBX: 00007fe5b49b5fa0 RCX: 00007fe5b478ebe9 [ 424.057103][ T5944] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 424.065374][ T5944] RBP: 00007fe5b5682090 R08: 0000000000000000 R09: 0000000000000000 [ 424.073461][ T5944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.081462][ T5944] R13: 00007fe5b49b6038 R14: 00007fe5b49b5fa0 R15: 00007ffc275c7e48 [ 424.089490][ T5944] [ 424.270027][ T5949] netlink: 'syz.2.9': attribute type 29 has an invalid length. [ 424.299477][ T5949] netlink: 'syz.2.9': attribute type 29 has an invalid length. [ 425.077122][ T5849] Bluetooth: hci0: command tx timeout [ 425.151757][ T5851] Bluetooth: hci2: command tx timeout [ 425.157302][ T5849] Bluetooth: hci1: command tx timeout [ 425.167293][ T5851] Bluetooth: hci3: command tx timeout [ 426.025885][ T5969] syzkaller0: entered promiscuous mode [ 426.033262][ T5969] syzkaller0: entered allmulticast mode [ 426.066486][ T5973] pim6reg1: entered promiscuous mode [ 426.087342][ T5973] pim6reg1: entered allmulticast mode [ 428.634162][ T5991] pim6reg1: entered promiscuous mode [ 428.639773][ T5991] pim6reg1: entered allmulticast mode [ 428.723846][ T6001] syz.0.30[6001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.723989][ T6001] syz.0.30[6001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.820793][ T6001] wg2: entered promiscuous mode [ 428.861810][ T6001] wg2: entered allmulticast mode [ 431.547120][ T6034] syzkaller0: entered promiscuous mode [ 431.565488][ T6034] syzkaller0: entered allmulticast mode [ 440.544748][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.551629][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.385086][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 447.410023][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 447.421377][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 447.435987][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 447.443993][ T5851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 447.451762][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 448.886503][ T6094] chnl_net:caif_netlink_parms(): no params data found [ 448.965065][ T6094] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.972518][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.979749][ T6094] bridge_slave_0: entered allmulticast mode [ 448.987635][ T6094] bridge_slave_0: entered promiscuous mode [ 448.997243][ T6094] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.004541][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.013317][ T6094] bridge_slave_1: entered allmulticast mode [ 449.020485][ T6094] bridge_slave_1: entered promiscuous mode [ 449.059149][ T6094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.074761][ T6094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.116408][ T6094] team0: Port device team_slave_0 added [ 449.127472][ T6094] team0: Port device team_slave_1 added [ 449.159458][ T6094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.166788][ T6094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.192814][ T6094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.205826][ T6094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.213001][ T6094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.240563][ T6094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.288527][ T6094] hsr_slave_0: entered promiscuous mode [ 449.295210][ T6094] hsr_slave_1: entered promiscuous mode [ 449.301706][ T6094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.309470][ T6094] Cannot create hsr debugfs directory [ 449.478465][ T5849] Bluetooth: hci4: command tx timeout [ 449.480535][ T6094] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 449.496098][ T6094] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 449.506370][ T6094] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 449.518584][ T6094] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 449.557856][ T6094] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.565065][ T6094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.573474][ T6094] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.580725][ T6094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.654221][ T6094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.677946][ T6094] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.687723][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.697599][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.727806][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.735242][ T5877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.753476][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.760650][ T5910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.985412][ T6094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.266890][ T6094] veth0_vlan: entered promiscuous mode [ 450.280876][ T6094] veth1_vlan: entered promiscuous mode [ 450.320249][ T6094] veth0_macvtap: entered promiscuous mode [ 450.332816][ T6094] veth1_macvtap: entered promiscuous mode [ 450.352228][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.364113][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.375290][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.385949][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.395861][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.406517][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.416597][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.427498][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.439153][ T6094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.459285][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.469936][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.480170][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.490802][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.501552][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.512349][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.522261][ T6094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.533971][ T6094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.545392][ T6094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.558778][ T6094] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.568810][ T6094] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.577724][ T6094] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.586525][ T6094] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.655187][ T5877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.675640][ T5877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.706338][ T5910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.715048][ T5910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.102660][ T6133] pim6reg1: entered promiscuous mode [ 451.111226][ T6133] pim6reg1: entered allmulticast mode [ 451.551304][ T5849] Bluetooth: hci4: command tx timeout [ 452.178523][ T6144] syzkaller0: entered promiscuous mode [ 452.251308][ T6144] syzkaller0: entered allmulticast mode [ 453.631466][ T5849] Bluetooth: hci4: command tx timeout [ 455.715388][ T5849] Bluetooth: hci4: command tx timeout [ 455.763768][ T6164] bond_slave_1: mtu less than device minimum [ 457.557846][ T6176] pim6reg1: entered promiscuous mode [ 457.570185][ T6176] pim6reg1: entered allmulticast mode [ 459.447853][ T6196] syzkaller0: entered promiscuous mode [ 459.453575][ T6196] syzkaller0: entered allmulticast mode [ 467.040806][ T6268] bond_slave_1: mtu less than device minimum [ 468.662254][ T6284] macsec0: entered promiscuous mode [ 468.750621][ T6284] macsec0: entered allmulticast mode [ 468.994910][ T6284] veth1_macvtap: entered allmulticast mode [ 469.174233][ T6290] wg2: entered promiscuous mode [ 469.185913][ T6290] wg2: entered allmulticast mode [ 469.481775][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 469.491459][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 469.501056][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 469.519748][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 469.527878][ T5851] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 469.535563][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 470.261244][ T6295] chnl_net:caif_netlink_parms(): no params data found [ 471.633528][ T5851] Bluetooth: hci5: command tx timeout [ 472.440725][ T6322] pim6reg1: entered promiscuous mode [ 472.532869][ T6322] pim6reg1: entered allmulticast mode [ 473.014886][ T6336] pim6reg1: entered promiscuous mode [ 473.020318][ T6336] pim6reg1: entered allmulticast mode [ 473.078693][ T6341] bond_slave_1: mtu less than device minimum [ 473.324937][ T6295] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.338562][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.348337][ T6295] bridge_slave_0: entered allmulticast mode [ 473.361913][ T6295] bridge_slave_0: entered promiscuous mode [ 473.625696][ T6295] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.665262][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.696369][ T6295] bridge_slave_1: entered allmulticast mode [ 473.724597][ T6295] bridge_slave_1: entered promiscuous mode [ 473.732546][ T5851] Bluetooth: hci5: command tx timeout [ 475.801260][ T5851] Bluetooth: hci5: command tx timeout [ 475.858087][ T6347] wg2: left promiscuous mode [ 475.863064][ T6347] wg2: left allmulticast mode [ 475.970670][ T6295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.995796][ T6295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.105222][ T6295] team0: Port device team_slave_0 added [ 476.139870][ T6295] team0: Port device team_slave_1 added [ 476.584732][ T2882] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.640271][ T6295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.653360][ T6295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.686439][ T6295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.813986][ T2882] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.829326][ T6295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.837618][ T6295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.864271][ T6295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.881384][ T5851] Bluetooth: hci5: command tx timeout [ 480.112084][ T2882] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.263286][ T2882] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.338460][ T6295] hsr_slave_0: entered promiscuous mode [ 480.353551][ T6295] hsr_slave_1: entered promiscuous mode [ 480.374726][ T6295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.398135][ T6295] Cannot create hsr debugfs directory [ 481.765199][ T6295] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 481.821538][ T6295] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 481.845645][ T6295] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 481.859145][ T6295] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 482.244336][ T6295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.269114][ T6295] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.298274][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.305608][ T5877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.398678][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.406042][ T5862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.494207][ T2882] hsr_slave_0: left promiscuous mode [ 482.500474][ T2882] hsr_slave_1: left promiscuous mode [ 482.507352][ T2882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.517160][ T2882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.526340][ T2882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.534352][ T2882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.543600][ T2882] bridge_slave_1: left allmulticast mode [ 482.549808][ T2882] bridge_slave_1: left promiscuous mode [ 482.559708][ T2882] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.575325][ T2882] bridge_slave_0: left allmulticast mode [ 482.582560][ T2882] bridge_slave_0: left promiscuous mode [ 482.588507][ T2882] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.621245][ T2882] veth1_macvtap: left promiscuous mode [ 482.627231][ T2882] veth0_macvtap: left promiscuous mode [ 482.633106][ T2882] veth1_vlan: left promiscuous mode [ 482.638672][ T2882] veth0_vlan: left promiscuous mode [ 483.214508][ T2882] team0 (unregistering): Port device team_slave_1 removed [ 483.258015][ T2882] team0 (unregistering): Port device team_slave_0 removed [ 483.304363][ T2882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.359191][ T2882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.804132][ T2882] bond0 (unregistering): Released all slaves [ 483.969651][ T6295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.379002][ T6295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.839363][ T6295] veth0_vlan: entered promiscuous mode [ 484.867853][ T6295] veth1_vlan: entered promiscuous mode [ 484.939846][ T6295] veth0_macvtap: entered promiscuous mode [ 484.958379][ T6295] veth1_macvtap: entered promiscuous mode [ 484.980936][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.993337][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.004604][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.020108][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.032876][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.048690][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.060632][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.083012][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.099900][ T6295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.122977][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.138407][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.166319][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.179824][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.198864][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.210389][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.226738][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.238460][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.259233][ T6295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.300674][ T6295] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.319628][ T6295] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.335713][ T6295] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.345166][ T6295] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.469694][ T2882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.490780][ T2882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.538715][ T5862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.550064][ T5862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.650901][ T48] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.802870][ T48] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.954564][ T48] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.084143][ T48] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.622032][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 492.641346][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 492.654708][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 492.691203][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 492.701521][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 492.716693][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 492.964390][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 492.973935][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 492.982098][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 492.990459][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 493.000686][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 493.041551][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 493.095034][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 493.105697][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 493.115653][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 493.137816][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 493.146823][ T5851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 493.155687][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 493.696090][ T6554] ªªªªªª: renamed from vlan0 (while UP) [ 494.016174][ T6540] chnl_net:caif_netlink_parms(): no params data found [ 494.328113][ T6546] chnl_net:caif_netlink_parms(): no params data found [ 494.365170][ T48] hsr_slave_0: left promiscuous mode [ 494.372470][ T48] hsr_slave_1: left promiscuous mode [ 494.379482][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.401334][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.413710][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.422017][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.430142][ T48] bridge_slave_1: left allmulticast mode [ 494.435985][ T48] bridge_slave_1: left promiscuous mode [ 494.443304][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.453748][ T48] bridge_slave_0: left allmulticast mode [ 494.459525][ T48] bridge_slave_0: left promiscuous mode [ 494.469797][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.505212][ T48] veth1_macvtap: left allmulticast mode [ 494.515175][ T48] veth1_macvtap: left promiscuous mode [ 494.525070][ T48] veth0_macvtap: left promiscuous mode [ 494.530952][ T48] veth1_vlan: left promiscuous mode [ 494.547413][ T48] veth0_vlan: left promiscuous mode [ 494.751323][ T5851] Bluetooth: hci1: command tx timeout [ 495.151925][ T5851] Bluetooth: hci2: command tx timeout [ 495.231389][ T5851] Bluetooth: hci4: command tx timeout [ 495.274281][ T48] team0 (unregistering): Port device team_slave_1 removed [ 495.324983][ T48] team0 (unregistering): Port device team_slave_0 removed [ 495.368182][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.413159][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.879500][ T48] bond0 (unregistering): Released all slaves [ 496.038370][ T6544] chnl_net:caif_netlink_parms(): no params data found [ 496.098313][ T6540] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.106002][ T6540] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.120343][ T6540] bridge_slave_0: entered allmulticast mode [ 496.130478][ T6540] bridge_slave_0: entered promiscuous mode [ 496.178704][ T6540] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.193495][ T6540] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.201676][ T6540] bridge_slave_1: entered allmulticast mode [ 496.209329][ T6540] bridge_slave_1: entered promiscuous mode [ 496.350178][ T6540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.442424][ T6540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.578314][ T6546] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.585795][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.594951][ T6546] bridge_slave_0: entered allmulticast mode [ 496.602518][ T6546] bridge_slave_0: entered promiscuous mode [ 496.610919][ T6546] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.618233][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.625854][ T6546] bridge_slave_1: entered allmulticast mode [ 496.633614][ T6546] bridge_slave_1: entered promiscuous mode [ 496.664028][ T6540] team0: Port device team_slave_0 added [ 496.673929][ T6540] team0: Port device team_slave_1 added [ 496.708004][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.715306][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.722670][ T6544] bridge_slave_0: entered allmulticast mode [ 496.729765][ T6544] bridge_slave_0: entered promiscuous mode [ 496.757225][ T6546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.766904][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.775421][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.782803][ T6544] bridge_slave_1: entered allmulticast mode [ 496.789955][ T6544] bridge_slave_1: entered promiscuous mode [ 496.816052][ T6546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.832649][ T5851] Bluetooth: hci1: command tx timeout [ 496.868153][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.885319][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.912211][ T6540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.926148][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.933269][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.960119][ T6540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.002643][ T6544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.034135][ T6546] team0: Port device team_slave_0 added [ 497.044509][ T6544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.087771][ T6546] team0: Port device team_slave_1 added [ 497.131506][ T6540] hsr_slave_0: entered promiscuous mode [ 497.138064][ T6540] hsr_slave_1: entered promiscuous mode [ 497.144752][ T6540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 497.156176][ T6540] Cannot create hsr debugfs directory [ 497.180883][ T6544] team0: Port device team_slave_0 added [ 497.190537][ T6544] team0: Port device team_slave_1 added [ 497.231386][ T5851] Bluetooth: hci2: command tx timeout [ 497.270812][ T6546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.278291][ T6546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.304903][ T6546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.316566][ T5851] Bluetooth: hci4: command tx timeout [ 497.353515][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.366751][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.397151][ T6544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.409469][ T6546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.417116][ T6546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.444108][ T6546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.485264][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.516034][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.523512][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.556132][ T6544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.614821][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.692197][ T6544] hsr_slave_0: entered promiscuous mode [ 497.705125][ T6544] hsr_slave_1: entered promiscuous mode [ 497.711896][ T6544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 497.719592][ T6544] Cannot create hsr debugfs directory [ 497.767532][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.788076][ T6546] hsr_slave_0: entered promiscuous mode [ 497.795680][ T6546] hsr_slave_1: entered promiscuous mode [ 497.802727][ T6546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 497.810375][ T6546] Cannot create hsr debugfs directory [ 497.896014][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.220756][ T6540] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 498.254966][ T6544] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.295955][ T6540] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 498.321381][ T6540] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 498.333649][ T6540] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 498.369510][ T6544] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.444800][ T6544] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.525808][ T6544] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.552344][ T6540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.574565][ T6540] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.590827][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.598754][ T5910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.618070][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.625345][ T5910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.911333][ T5851] Bluetooth: hci1: command tx timeout [ 498.954507][ T6544] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 498.970793][ T6544] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 499.038753][ T6544] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 499.122778][ T6544] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 499.304214][ T6540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.312042][ T5851] Bluetooth: hci2: command tx timeout [ 499.312377][ T6546] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 499.329271][ T6546] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 499.380597][ T6546] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 499.396529][ T5851] Bluetooth: hci4: command tx timeout [ 499.397080][ T6546] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 499.824935][ T6544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.919893][ T6544] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.944660][ T6546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.980262][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.987494][ T5917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.050479][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.057704][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.136656][ T6546] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.176749][ T6540] veth0_vlan: entered promiscuous mode [ 500.218783][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.226216][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.267150][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.274581][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.307453][ T6540] veth1_vlan: entered promiscuous mode [ 500.337253][ T48] hsr_slave_0: left promiscuous mode [ 500.345882][ T48] hsr_slave_1: left promiscuous mode [ 500.355396][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.363524][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.373945][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.381821][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.390121][ T48] bridge_slave_1: left allmulticast mode [ 500.398105][ T48] bridge_slave_1: left promiscuous mode [ 500.404446][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.415348][ T48] bridge_slave_0: left allmulticast mode [ 500.421471][ T48] bridge_slave_0: left promiscuous mode [ 500.427392][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.452547][ T48] hsr_slave_0: left promiscuous mode [ 500.458897][ T48] hsr_slave_1: left promiscuous mode [ 500.465792][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.475291][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.484972][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.492648][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.500820][ T48] bridge_slave_1: left allmulticast mode [ 500.506858][ T48] bridge_slave_1: left promiscuous mode [ 500.513686][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.523488][ T48] bridge_slave_0: left allmulticast mode [ 500.529204][ T48] bridge_slave_0: left promiscuous mode [ 500.537279][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.580394][ T48] veth1_macvtap: left promiscuous mode [ 500.586272][ T48] veth0_macvtap: left promiscuous mode [ 500.593963][ T48] veth1_vlan: left promiscuous mode [ 500.599378][ T48] veth0_vlan: left promiscuous mode [ 500.607382][ T48] veth1_macvtap: left promiscuous mode [ 500.613175][ T48] veth0_macvtap: left promiscuous mode [ 500.618818][ T48] veth1_vlan: left promiscuous mode [ 500.624948][ T48] veth0_vlan: left promiscuous mode [ 500.991559][ T5851] Bluetooth: hci1: command tx timeout [ 501.367231][ T48] team0 (unregistering): Port device team_slave_1 removed [ 501.391615][ T5851] Bluetooth: hci2: command tx timeout [ 501.418291][ T48] team0 (unregistering): Port device team_slave_0 removed [ 501.464829][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.473532][ T5851] Bluetooth: hci4: command tx timeout [ 501.515814][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.955984][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.962599][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.989193][ T48] bond0 (unregistering): Released all slaves [ 502.479199][ T48] team0 (unregistering): Port device team_slave_1 removed [ 502.527656][ T48] team0 (unregistering): Port device team_slave_0 removed [ 502.569563][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.619182][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.089725][ T48] bond0 (unregistering): Released all slaves [ 503.354567][ T6540] veth0_macvtap: entered promiscuous mode [ 503.404550][ T6540] veth1_macvtap: entered promiscuous mode [ 503.488155][ T6540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.499087][ T6540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.509894][ T6540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.520752][ T6540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.533466][ T6540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.564088][ T6544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.661371][ T6540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.683410][ T6540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.706289][ T6540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.726389][ T6540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.745965][ T6540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.758864][ T6540] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.768351][ T6540] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.783937][ T6540] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.794038][ T6540] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.033408][ T5862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.063234][ T5862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.124051][ T5917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.141277][ T5917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.155952][ T6546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.501358][ T6544] veth0_vlan: entered promiscuous mode [ 504.556114][ T6544] veth1_vlan: entered promiscuous mode [ 504.694622][ T6544] veth0_macvtap: entered promiscuous mode [ 504.752293][ T6544] veth1_macvtap: entered promiscuous mode [ 504.818877][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.850784][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.871286][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.891056][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.921166][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.941077][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.965640][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.976962][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.998199][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.044936][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.081251][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.094593][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.110666][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.122968][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.160750][ T6544] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.176428][ T6544] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.191369][ T6544] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.200148][ T6544] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.384050][ T6546] veth0_vlan: entered promiscuous mode [ 505.469397][ T6546] veth1_vlan: entered promiscuous mode [ 505.500318][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.531057][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.597941][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.614590][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.638910][ T6546] veth0_macvtap: entered promiscuous mode [ 505.663509][ T6546] veth1_macvtap: entered promiscuous mode [ 505.698141][ T6546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.709052][ T6546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.732052][ T6546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.747590][ T6546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.759703][ T6546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.780815][ T6546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.790790][ T6546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.802068][ T6546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.823174][ T6546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.865119][ T6546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.891524][ T6546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.919983][ T6546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.938038][ T6546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.948852][ T6546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.962421][ T6546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.973333][ T6546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.985013][ T6546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.004995][ T6546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.057311][ T6546] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.094514][ T6546] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.114578][ T6546] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.125018][ T6546] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.317203][ T2882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.333030][ T2882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.466132][ T5862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.500947][ T5862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.538577][ T5917] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.035855][ T5917] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.174815][ T5917] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.199716][ T6700] pim6reg1: entered promiscuous mode [ 508.219117][ T6700] pim6reg1: entered allmulticast mode [ 508.344314][ T5917] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.572120][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 508.585117][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 508.596535][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 508.606145][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 508.614591][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 508.624652][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 508.724377][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 508.734452][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 508.743248][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 508.755126][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 508.763133][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 508.772989][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 510.563904][ T6731] bridge0: port 3(hsr_slave_1) entered blocking state [ 510.575126][ T6731] bridge0: port 3(hsr_slave_1) entered disabled state [ 510.582422][ T6731] hsr_slave_1: entered allmulticast mode [ 510.590788][ T6731] hsr_slave_1: left allmulticast mode [ 510.672234][ T5849] Bluetooth: hci1: command tx timeout [ 510.909175][ T6708] chnl_net:caif_netlink_parms(): no params data found [ 510.916886][ T5849] Bluetooth: hci4: command tx timeout [ 511.105094][ T6705] chnl_net:caif_netlink_parms(): no params data found [ 511.262265][ T6739] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.273942][ T6739] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.430772][ T6743] netlink: 'syz.1.241': attribute type 10 has an invalid length. [ 511.449474][ T6743] netlink: 55 bytes leftover after parsing attributes in process `syz.1.241'. [ 511.568347][ T5917] hsr_slave_0: left promiscuous mode [ 511.578814][ T5917] hsr_slave_1: left promiscuous mode [ 511.598563][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.609317][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.626745][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.638273][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.655153][ T5917] bridge_slave_1: left allmulticast mode [ 511.676460][ T5917] bridge_slave_1: left promiscuous mode [ 511.694432][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.729506][ T5917] bridge_slave_0: left allmulticast mode [ 511.739225][ T5917] bridge_slave_0: left promiscuous mode [ 511.745599][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.785041][ T5917] veth1_macvtap: left promiscuous mode [ 511.790661][ T5917] veth0_macvtap: left promiscuous mode [ 511.801694][ T5917] veth1_vlan: left promiscuous mode [ 511.807598][ T5917] veth0_vlan: left promiscuous mode [ 512.694004][ T5917] team0 (unregistering): Port device team_slave_1 removed [ 512.739437][ T5917] team0 (unregistering): Port device team_slave_0 removed [ 512.761187][ T5849] Bluetooth: hci1: command tx timeout [ 512.792757][ T5917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.840605][ T5917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.991469][ T5849] Bluetooth: hci4: command tx timeout [ 513.332689][ T5917] bond0 (unregistering): Released all slaves [ 513.540614][ T6753] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.548405][ T6753] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.571120][ T6754] netlink: 'syz.5.243': attribute type 10 has an invalid length. [ 513.582106][ T6754] netlink: 55 bytes leftover after parsing attributes in process `syz.5.243'. [ 513.683102][ T6705] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.690505][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.699119][ T6705] bridge_slave_0: entered allmulticast mode [ 513.707508][ T6705] bridge_slave_0: entered promiscuous mode [ 513.735992][ T6708] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.751683][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.760338][ T6708] bridge_slave_0: entered allmulticast mode [ 513.782964][ T6708] bridge_slave_0: entered promiscuous mode [ 513.812304][ T6705] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.819516][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.830748][ T6705] bridge_slave_1: entered allmulticast mode [ 513.838377][ T6705] bridge_slave_1: entered promiscuous mode [ 513.868200][ T6708] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.875823][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.884661][ T6708] bridge_slave_1: entered allmulticast mode [ 513.894192][ T6708] bridge_slave_1: entered promiscuous mode [ 513.939118][ T6705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.002228][ T6705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.121853][ T6708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.213153][ T6708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.375217][ T6705] team0: Port device team_slave_0 added [ 514.428102][ T6705] team0: Port device team_slave_1 added [ 514.474579][ T6708] team0: Port device team_slave_0 added [ 514.534633][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.544646][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.572488][ T6705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.586094][ T6708] team0: Port device team_slave_1 added [ 514.605701][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.617643][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.654616][ T6705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.834530][ T5849] Bluetooth: hci1: command tx timeout [ 515.043838][ T6708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.050950][ T6708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.071224][ T5849] Bluetooth: hci4: command tx timeout [ 515.126390][ T6708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.268717][ T6705] hsr_slave_0: entered promiscuous mode [ 515.296066][ T6705] hsr_slave_1: entered promiscuous mode [ 515.324932][ T6705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.333812][ T6705] Cannot create hsr debugfs directory [ 515.341349][ T6708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.348529][ T6708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.425836][ T6708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.611866][ T5917] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.817303][ T5917] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.065664][ T5917] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.097569][ T6708] hsr_slave_0: entered promiscuous mode [ 516.153631][ T6708] hsr_slave_1: entered promiscuous mode [ 516.168818][ T6708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 516.177046][ T6708] Cannot create hsr debugfs directory [ 516.419448][ T5917] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.911600][ T5849] Bluetooth: hci1: command tx timeout [ 517.151307][ T5849] Bluetooth: hci4: command tx timeout [ 517.244144][ T6705] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 517.256269][ T6705] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 517.359082][ T6705] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 517.448881][ T6705] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 518.081608][ T6708] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 518.327826][ T6708] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 518.729516][ T6708] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 518.755894][ T6708] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 519.549545][ T6705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.725281][ T5917] hsr_slave_0: left promiscuous mode [ 519.733801][ T5917] hsr_slave_1: left promiscuous mode [ 519.740602][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.749056][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.758583][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.779302][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.789717][ T5917] bridge_slave_1: left allmulticast mode [ 519.800335][ T5917] bridge_slave_1: left promiscuous mode [ 519.806950][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.818678][ T5917] bridge_slave_0: left allmulticast mode [ 519.831054][ T5917] bridge_slave_0: left promiscuous mode [ 519.854425][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.961201][ T5917] veth1_macvtap: left promiscuous mode [ 519.967052][ T5917] veth0_macvtap: left promiscuous mode [ 519.984894][ T5917] veth1_vlan: left promiscuous mode [ 519.996359][ T5917] veth0_vlan: left promiscuous mode [ 521.227567][ T5917] team0 (unregistering): Port device team_slave_1 removed [ 521.293198][ T5917] team0 (unregistering): Port device team_slave_0 removed [ 521.349366][ T5917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.447732][ T5917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.940880][ T5917] bond0 (unregistering): Released all slaves [ 522.024214][ T6828] bridge0: port 3(hsr_slave_1) entered blocking state [ 522.037998][ T6828] bridge0: port 3(hsr_slave_1) entered disabled state [ 522.050275][ T6828] hsr_slave_1: entered allmulticast mode [ 522.066609][ T6828] hsr_slave_1: left allmulticast mode [ 522.095349][ T6705] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.149804][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.157113][ T5910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.272935][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.280160][ T5910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.340007][ T6708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.787997][ T6834] wg2: entered promiscuous mode [ 522.795727][ T6834] wg2: entered allmulticast mode [ 522.915355][ T6835] syzkaller0: entered promiscuous mode [ 522.924594][ T6835] syzkaller0: entered allmulticast mode [ 525.228839][ T6708] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.287320][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.294626][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.366874][ T2882] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.374095][ T2882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.747335][ T6705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.181951][ T6708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.401600][ T6888] bond_slave_1: mtu less than device minimum [ 527.112129][ T6893] syzkaller0: entered promiscuous mode [ 527.141207][ T6893] syzkaller0: entered allmulticast mode [ 527.427656][ T6705] veth0_vlan: entered promiscuous mode [ 529.217444][ T6911] syz.1.296[6911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.217589][ T6911] syz.1.296[6911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 530.013356][ T6705] veth1_vlan: entered promiscuous mode [ 530.105648][ T6708] veth0_vlan: entered promiscuous mode [ 530.141615][ T6708] veth1_vlan: entered promiscuous mode [ 530.155825][ T6705] veth0_macvtap: entered promiscuous mode [ 530.168248][ T6705] veth1_macvtap: entered promiscuous mode [ 530.214231][ T6708] veth0_macvtap: entered promiscuous mode [ 530.228169][ T6708] veth1_macvtap: entered promiscuous mode [ 530.254823][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.268494][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.278948][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.289464][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.299617][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.310375][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.325620][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.349605][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.362479][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.373007][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.384085][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.394056][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.405025][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.415326][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.426155][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.440172][ T6708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.450427][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.465078][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.475128][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.485998][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.496254][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.507260][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.519243][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.541672][ T6705] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.550883][ T6705] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.561140][ T6705] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.569910][ T6705] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.584233][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.594885][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.605445][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.616444][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.626549][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.637757][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.647839][ T6708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.658803][ T6708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.670813][ T6708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.682825][ T6708] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.693170][ T6708] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.702362][ T6708] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.711694][ T6708] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.885112][ T2882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.902891][ T2882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.927776][ T2882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.942909][ T2882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.974746][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.989016][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.006214][ T2882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.025250][ T2882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.354513][ T6913] bond_slave_1: mtu less than device minimum [ 531.835250][ T6931] wg2: entered promiscuous mode [ 531.840407][ T6931] wg2: entered allmulticast mode [ 534.952311][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.959904][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.997930][ T6962] netlink: 'syz.9.309': attribute type 10 has an invalid length. [ 535.030570][ T6962] netlink: 55 bytes leftover after parsing attributes in process `syz.9.309'. [ 535.208603][ T6966] netlink: 'syz.5.312': attribute type 10 has an invalid length. [ 535.220554][ T6966] netlink: 55 bytes leftover after parsing attributes in process `syz.5.312'. [ 535.975262][ T6980] netlink: 'syz.9.316': attribute type 10 has an invalid length. [ 535.983497][ T6980] netlink: 55 bytes leftover after parsing attributes in process `syz.9.316'. [ 535.999011][ T6977] netlink: 'syz.1.324': attribute type 10 has an invalid length. [ 536.032425][ T6977] netlink: 55 bytes leftover after parsing attributes in process `syz.1.324'. [ 539.283972][ T7001] syzkaller0: entered promiscuous mode [ 539.289757][ T7001] syzkaller0: entered allmulticast mode [ 539.887451][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 539.894540][ T5102] Bluetooth: hci0: command 0x0406 tx timeout [ 541.291071][ T7012] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.298892][ T7012] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.332966][ T7013] netlink: 'syz.8.326': attribute type 10 has an invalid length. [ 541.340932][ T7013] netlink: 55 bytes leftover after parsing attributes in process `syz.8.326'. [ 541.563005][ T7018] netlink: 'syz.5.331': attribute type 10 has an invalid length. [ 541.571337][ T7018] netlink: 55 bytes leftover after parsing attributes in process `syz.5.331'. [ 541.852757][ T7023] netlink: 'syz.8.341': attribute type 10 has an invalid length. [ 541.860804][ T7023] netlink: 55 bytes leftover after parsing attributes in process `syz.8.341'. [ 542.510799][ T7031] netlink: 'syz.8.334': attribute type 10 has an invalid length. [ 542.534709][ T7031] netlink: 55 bytes leftover after parsing attributes in process `syz.8.334'. [ 545.368519][ T7061] netlink: 'syz.9.345': attribute type 10 has an invalid length. [ 545.381573][ T7061] netlink: 55 bytes leftover after parsing attributes in process `syz.9.345'. [ 545.431659][ T7063] warning: `syz.8.347' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 545.508691][ T7064] netlink: 'syz.8.347': attribute type 4 has an invalid length. [ 545.537833][ T7064] netlink: 152 bytes leftover after parsing attributes in process `syz.8.347'. [ 545.567538][ T7064] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 545.619522][ T7067] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 545.641428][ T7067] netlink: 'syz.1.348': attribute type 10 has an invalid length. [ 545.766940][ T7067] team0: Port device wlan1 added [ 545.939090][ T7067] syz.1.348 (7067) used greatest stack depth: 19568 bytes left [ 545.948197][ T7069] netlink: 'syz.9.359': attribute type 10 has an invalid length. [ 545.997868][ T7069] netlink: 55 bytes leftover after parsing attributes in process `syz.9.359'. [ 546.537394][ T7082] netlink: 'syz.9.362': attribute type 10 has an invalid length. [ 546.545867][ T7082] netlink: 55 bytes leftover after parsing attributes in process `syz.9.362'. [ 547.234335][ T7095] netlink: 'syz.5.361': attribute type 29 has an invalid length. [ 547.298197][ T7095] netlink: 'syz.5.361': attribute type 29 has an invalid length. [ 547.480278][ T7104] FAULT_INJECTION: forcing a failure. [ 547.480278][ T7104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.543825][ T7104] CPU: 0 PID: 7104 Comm: syz.8.367 Not tainted 6.6.102-syzkaller #0 [ 547.551898][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 547.562005][ T7104] Call Trace: [ 547.565327][ T7104] [ 547.568298][ T7104] dump_stack_lvl+0x16c/0x230 [ 547.573028][ T7104] ? show_regs_print_info+0x20/0x20 [ 547.578278][ T7104] ? load_image+0x3b0/0x3b0 [ 547.583020][ T7104] ? __might_fault+0xaa/0x120 [ 547.587922][ T7104] ? __lock_acquire+0x7c80/0x7c80 [ 547.592997][ T7104] ? __lock_acquire+0x7c80/0x7c80 [ 547.598162][ T7104] should_fail_ex+0x39d/0x4d0 [ 547.602902][ T7104] _copy_from_user+0x2f/0xe0 [ 547.607801][ T7104] perf_copy_attr+0x16a/0x840 [ 547.612543][ T7104] __se_sys_perf_event_open+0xf0/0x1c20 [ 547.618417][ T7104] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 547.624312][ T7104] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 547.630016][ T7104] ? lock_chain_count+0x20/0x20 [ 547.634924][ T7104] ? lockdep_hardirqs_on+0x98/0x150 [ 547.640275][ T7104] ? __x64_sys_perf_event_open+0x20/0xc0 [ 547.645972][ T7104] do_syscall_64+0x55/0xb0 [ 547.650451][ T7104] ? clear_bhb_loop+0x40/0x90 [ 547.655169][ T7104] ? clear_bhb_loop+0x40/0x90 [ 547.659895][ T7104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.665850][ T7104] RIP: 0033:0x7f09f5f8ebe9 [ 547.670392][ T7104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.690218][ T7104] RSP: 002b:00007f09f6ecd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 547.698727][ T7104] RAX: ffffffffffffffda RBX: 00007f09f61b5fa0 RCX: 00007f09f5f8ebe9 [ 547.706853][ T7104] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000004c0 [ 547.715320][ T7104] RBP: 00007f09f6ecd090 R08: 0000000000000001 R09: 0000000000000000 [ 547.723341][ T7104] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 547.731682][ T7104] R13: 00007f09f61b6038 R14: 00007f09f61b5fa0 R15: 00007ffd97655dc8 [ 547.739827][ T7104] [ 547.875006][ T7107] netlink: 'syz.9.368': attribute type 10 has an invalid length. [ 547.918362][ T7107] netlink: 55 bytes leftover after parsing attributes in process `syz.9.368'. [ 548.049443][ T7112] netlink: 180 bytes leftover after parsing attributes in process `syz.1.370'. [ 548.453438][ T7118] syzkaller0: tun_chr_ioctl cmd 35108 [ 548.499454][ T7118] syzkaller0: tun_chr_ioctl cmd 35107 [ 548.506676][ T7123] FAULT_INJECTION: forcing a failure. [ 548.506676][ T7123] name failslab, interval 1, probability 0, space 0, times 1 [ 548.520345][ T7123] CPU: 1 PID: 7123 Comm: syz.9.375 Not tainted 6.6.102-syzkaller #0 [ 548.528495][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 548.538790][ T7123] Call Trace: [ 548.542121][ T7123] [ 548.545093][ T7123] dump_stack_lvl+0x16c/0x230 [ 548.549827][ T7123] ? show_regs_print_info+0x20/0x20 [ 548.555087][ T7123] ? load_image+0x3b0/0x3b0 [ 548.559749][ T7123] ? __might_sleep+0xe0/0xe0 [ 548.564402][ T7123] ? __lock_acquire+0x7c80/0x7c80 [ 548.569530][ T7123] should_fail_ex+0x39d/0x4d0 [ 548.574278][ T7123] should_failslab+0x9/0x20 [ 548.578847][ T7123] slab_pre_alloc_hook+0x59/0x310 [ 548.584021][ T7123] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 548.589808][ T7123] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 548.595604][ T7123] __kmem_cache_alloc_node+0x53/0x260 [ 548.601107][ T7123] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 548.606905][ T7123] __kmalloc+0xa4/0x240 [ 548.611223][ T7123] tomoyo_realpath_from_path+0xe3/0x5d0 [ 548.616880][ T7123] tomoyo_path_number_perm+0x1ea/0x590 [ 548.622493][ T7123] ? tomoyo_path_number_perm+0x1ba/0x590 [ 548.628202][ T7123] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 548.633824][ T7123] ? ksys_write+0x1c1/0x250 [ 548.638498][ T7123] ? __fget_files+0x28/0x4d0 [ 548.643184][ T7123] security_file_ioctl+0x70/0xa0 [ 548.648184][ T7123] __se_sys_ioctl+0x48/0x170 [ 548.652842][ T7123] do_syscall_64+0x55/0xb0 [ 548.657300][ T7123] ? clear_bhb_loop+0x40/0x90 [ 548.662120][ T7123] ? clear_bhb_loop+0x40/0x90 [ 548.666853][ T7123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.672797][ T7123] RIP: 0033:0x7ff5ed58ebe9 [ 548.677259][ T7123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.697008][ T7123] RSP: 002b:00007ff5ee36b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.705482][ T7123] RAX: ffffffffffffffda RBX: 00007ff5ed7b5fa0 RCX: 00007ff5ed58ebe9 [ 548.713502][ T7123] RDX: 0000200000000080 RSI: 00000000401054d5 RDI: 0000000000000003 [ 548.721514][ T7123] RBP: 00007ff5ee36b090 R08: 0000000000000000 R09: 0000000000000000 [ 548.729742][ T7123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.737852][ T7123] R13: 00007ff5ed7b6038 R14: 00007ff5ed7b5fa0 R15: 00007ffeba9e8178 [ 548.746094][ T7123] [ 548.756633][ T7123] ERROR: Out of memory at tomoyo_realpath_from_path. [ 550.901301][ T7126] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 550.941315][ T7126] syzkaller0: linktype set to 65535 [ 551.314178][ T7134] netlink: 144316 bytes leftover after parsing attributes in process `syz.9.379'. [ 551.432037][ T7138] FAULT_INJECTION: forcing a failure. [ 551.432037][ T7138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.486932][ T7138] CPU: 0 PID: 7138 Comm: syz.5.380 Not tainted 6.6.102-syzkaller #0 [ 551.495174][ T7138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 551.505721][ T7138] Call Trace: [ 551.509056][ T7138] [ 551.512030][ T7138] dump_stack_lvl+0x16c/0x230 [ 551.516870][ T7138] ? show_regs_print_info+0x20/0x20 [ 551.522139][ T7138] ? load_image+0x3b0/0x3b0 [ 551.526735][ T7138] ? __might_fault+0xaa/0x120 [ 551.531550][ T7138] ? __lock_acquire+0x7c80/0x7c80 [ 551.536640][ T7138] should_fail_ex+0x39d/0x4d0 [ 551.541561][ T7138] _copy_from_user+0x2f/0xe0 [ 551.546269][ T7138] __sys_bpf+0x1e9/0x800 [ 551.550575][ T7138] ? bpf_link_show_fdinfo+0x350/0x350 [ 551.556011][ T7138] ? lock_chain_count+0x20/0x20 [ 551.561096][ T7138] __x64_sys_bpf+0x7c/0x90 [ 551.565566][ T7138] do_syscall_64+0x55/0xb0 [ 551.570025][ T7138] ? clear_bhb_loop+0x40/0x90 [ 551.574745][ T7138] ? clear_bhb_loop+0x40/0x90 [ 551.579479][ T7138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 551.585460][ T7138] RIP: 0033:0x7ff472f8ebe9 [ 551.590010][ T7138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.609933][ T7138] RSP: 002b:00007ff473d64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 551.618411][ T7138] RAX: ffffffffffffffda RBX: 00007ff4731b5fa0 RCX: 00007ff472f8ebe9 [ 551.626453][ T7138] RDX: 0000000000000021 RSI: 000020000000e000 RDI: 0000000000000005 [ 551.634457][ T7138] RBP: 00007ff473d64090 R08: 0000000000000000 R09: 0000000000000000 [ 551.642646][ T7138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.650655][ T7138] R13: 00007ff4731b6038 R14: 00007ff4731b5fa0 R15: 00007ffc3c2cf928 [ 551.658702][ T7138] [ 551.728843][ T7141] netlink: 'syz.8.381': attribute type 10 has an invalid length. [ 551.754638][ T7145] netlink: 'syz.9.383': attribute type 29 has an invalid length. [ 551.791687][ T7141] netlink: 55 bytes leftover after parsing attributes in process `syz.8.381'. [ 551.857351][ T7145] netlink: 'syz.9.383': attribute type 29 has an invalid length. [ 552.675864][ T7171] FAULT_INJECTION: forcing a failure. [ 552.675864][ T7171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.732726][ T7171] CPU: 0 PID: 7171 Comm: syz.8.391 Not tainted 6.6.102-syzkaller #0 [ 552.740814][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 552.750917][ T7171] Call Trace: [ 552.754241][ T7171] [ 552.757356][ T7171] dump_stack_lvl+0x16c/0x230 [ 552.762158][ T7171] ? show_regs_print_info+0x20/0x20 [ 552.767383][ T7171] ? load_image+0x3b0/0x3b0 [ 552.772001][ T7171] ? __might_fault+0xaa/0x120 [ 552.776699][ T7171] ? __lock_acquire+0x7c80/0x7c80 [ 552.782008][ T7171] should_fail_ex+0x39d/0x4d0 [ 552.786721][ T7171] _copy_from_user+0x2f/0xe0 [ 552.791423][ T7171] __sys_bpf+0x1e9/0x800 [ 552.795705][ T7171] ? bpf_link_show_fdinfo+0x350/0x350 [ 552.801315][ T7171] ? lock_chain_count+0x20/0x20 [ 552.806233][ T7171] __x64_sys_bpf+0x7c/0x90 [ 552.810680][ T7171] do_syscall_64+0x55/0xb0 [ 552.815118][ T7171] ? clear_bhb_loop+0x40/0x90 [ 552.819841][ T7171] ? clear_bhb_loop+0x40/0x90 [ 552.824555][ T7171] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.830572][ T7171] RIP: 0033:0x7f09f5f8ebe9 [ 552.835031][ T7171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.854754][ T7171] RSP: 002b:00007f09f6ecd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 552.863299][ T7171] RAX: ffffffffffffffda RBX: 00007f09f61b5fa0 RCX: 00007f09f5f8ebe9 [ 552.871483][ T7171] RDX: 000000000000000c RSI: 0000200000000240 RDI: 000000000000000a [ 552.879581][ T7171] RBP: 00007f09f6ecd090 R08: 0000000000000000 R09: 0000000000000000 [ 552.887578][ T7171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.895753][ T7171] R13: 00007f09f61b6038 R14: 00007f09f61b5fa0 R15: 00007ffd97655dc8 [ 552.903820][ T7171] [ 553.179405][ T7179] netlink: 'syz.8.395': attribute type 10 has an invalid length. [ 553.187814][ T7179] netlink: 55 bytes leftover after parsing attributes in process `syz.8.395'. [ 553.697754][ T7196] netlink: 'syz.8.402': attribute type 29 has an invalid length. [ 553.754352][ T7196] netlink: 'syz.8.402': attribute type 29 has an invalid length. [ 554.602642][ T7208] netlink: 'syz.9.407': attribute type 10 has an invalid length. [ 554.626816][ T7208] netlink: 55 bytes leftover after parsing attributes in process `syz.9.407'. [ 555.261739][ T7213] netlink: 'syz.1.409': attribute type 9 has an invalid length. [ 555.351264][ T7213] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.409'. [ 555.909349][ T7229] netlink: 'syz.9.418': attribute type 10 has an invalid length. [ 555.930453][ T7229] netlink: 55 bytes leftover after parsing attributes in process `syz.9.418'. [ 556.219993][ T7241] netlink: 'syz.9.422': attribute type 29 has an invalid length. [ 556.653863][ T7249] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.424'. [ 557.543205][ T7251] validate_nla: 2 callbacks suppressed [ 557.543246][ T7251] netlink: 'syz.1.425': attribute type 29 has an invalid length. [ 557.630093][ T7251] netlink: 'syz.1.425': attribute type 29 has an invalid length. [ 558.016921][ T7263] netlink: 'syz.5.431': attribute type 10 has an invalid length. [ 558.036819][ T7263] netlink: 55 bytes leftover after parsing attributes in process `syz.5.431'. [ 558.163309][ T7270] netlink: 'syz.9.432': attribute type 10 has an invalid length. [ 558.869799][ T7270] team0: Port device wlan1 added [ 559.136232][ T7276] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 559.181242][ T7276] netlink: 55 bytes leftover after parsing attributes in process `syz.1.443'. [ 559.527920][ T7285] netlink: 'syz.1.447': attribute type 10 has an invalid length. [ 559.586142][ T7285] netlink: 55 bytes leftover after parsing attributes in process `syz.1.447'. [ 560.085361][ T7295] netlink: 'syz.9.440': attribute type 4 has an invalid length. [ 560.110352][ T7295] netlink: 152 bytes leftover after parsing attributes in process `syz.9.440'. [ 560.181336][ T7295] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 560.809499][ T7310] netlink: 'syz.9.451': attribute type 10 has an invalid length. [ 560.841677][ T7310] netlink: 55 bytes leftover after parsing attributes in process `syz.9.451'. [ 562.407122][ T7332] netlink: 'syz.1.461': attribute type 10 has an invalid length. [ 562.423224][ T7332] netlink: 55 bytes leftover after parsing attributes in process `syz.1.461'. [ 563.401906][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.410468][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.858653][ T7349] netlink: 'syz.1.466': attribute type 29 has an invalid length. [ 563.893970][ T7349] netlink: 'syz.1.466': attribute type 29 has an invalid length. [ 565.433015][ T7363] netlink: 'syz.5.471': attribute type 29 has an invalid length. [ 565.453872][ T7359] netlink: 'syz.9.470': attribute type 29 has an invalid length. [ 565.468390][ T7363] netlink: 'syz.5.471': attribute type 29 has an invalid length. [ 565.523948][ T7359] netlink: 'syz.9.470': attribute type 29 has an invalid length. [ 565.894469][ T7371] FAULT_INJECTION: forcing a failure. [ 565.894469][ T7371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.948999][ T7371] CPU: 1 PID: 7371 Comm: syz.1.475 Not tainted 6.6.102-syzkaller #0 [ 565.957288][ T7371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 565.967385][ T7371] Call Trace: [ 565.970698][ T7371] [ 565.973664][ T7371] dump_stack_lvl+0x16c/0x230 [ 565.978480][ T7371] ? show_regs_print_info+0x20/0x20 [ 565.984069][ T7371] ? load_image+0x3b0/0x3b0 [ 565.988670][ T7371] ? __might_fault+0xaa/0x120 [ 565.993512][ T7371] ? __lock_acquire+0x7c80/0x7c80 [ 565.998636][ T7371] should_fail_ex+0x39d/0x4d0 [ 566.003443][ T7371] _copy_from_user+0x2f/0xe0 [ 566.008172][ T7371] __sys_bpf+0x1e9/0x800 [ 566.012460][ T7371] ? bpf_link_show_fdinfo+0x350/0x350 [ 566.017977][ T7371] ? lock_chain_count+0x20/0x20 [ 566.022882][ T7371] __x64_sys_bpf+0x7c/0x90 [ 566.027428][ T7371] do_syscall_64+0x55/0xb0 [ 566.032060][ T7371] ? clear_bhb_loop+0x40/0x90 [ 566.036781][ T7371] ? clear_bhb_loop+0x40/0x90 [ 566.041495][ T7371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 566.047539][ T7371] RIP: 0033:0x7fc19938ebe9 [ 566.051996][ T7371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.072182][ T7371] RSP: 002b:00007fc19a111038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 566.080655][ T7371] RAX: ffffffffffffffda RBX: 00007fc1995b5fa0 RCX: 00007fc19938ebe9 [ 566.088679][ T7371] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 566.096695][ T7371] RBP: 00007fc19a111090 R08: 0000000000000000 R09: 0000000000000000 [ 566.104739][ T7371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.112845][ T7371] R13: 00007fc1995b6038 R14: 00007fc1995b5fa0 R15: 00007ffc7f8c4d88 [ 566.120960][ T7371] [ 567.032531][ T7382] FAULT_INJECTION: forcing a failure. [ 567.032531][ T7382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.061087][ T7382] CPU: 0 PID: 7382 Comm: syz.9.479 Not tainted 6.6.102-syzkaller #0 [ 567.069324][ T7382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 567.079409][ T7382] Call Trace: [ 567.082709][ T7382] [ 567.085670][ T7382] dump_stack_lvl+0x16c/0x230 [ 567.090422][ T7382] ? show_regs_print_info+0x20/0x20 [ 567.095666][ T7382] ? load_image+0x3b0/0x3b0 [ 567.100222][ T7382] ? __lock_acquire+0x7c80/0x7c80 [ 567.105277][ T7382] ? snprintf+0xdb/0x120 [ 567.109641][ T7382] should_fail_ex+0x39d/0x4d0 [ 567.114350][ T7382] _copy_to_user+0x2f/0xa0 [ 567.118871][ T7382] simple_read_from_buffer+0xe7/0x150 [ 567.124289][ T7382] proc_fail_nth_read+0x1e3/0x250 [ 567.129345][ T7382] ? proc_fault_inject_write+0x340/0x340 [ 567.135003][ T7382] ? fsnotify_perm+0x271/0x5e0 [ 567.139878][ T7382] ? proc_fault_inject_write+0x340/0x340 [ 567.145530][ T7382] vfs_read+0x27e/0x920 [ 567.149711][ T7382] ? kernel_read+0x1e0/0x1e0 [ 567.154495][ T7382] ? __fget_files+0x28/0x4d0 [ 567.159114][ T7382] ? __fget_files+0x44a/0x4d0 [ 567.163831][ T7382] ? __fdget_pos+0x2a3/0x330 [ 567.168475][ T7382] ? ksys_read+0x75/0x250 [ 567.173007][ T7382] ksys_read+0x147/0x250 [ 567.177324][ T7382] ? vfs_write+0x940/0x940 [ 567.181778][ T7382] ? lockdep_hardirqs_on+0x98/0x150 [ 567.187076][ T7382] do_syscall_64+0x55/0xb0 [ 567.191518][ T7382] ? clear_bhb_loop+0x40/0x90 [ 567.196225][ T7382] ? clear_bhb_loop+0x40/0x90 [ 567.200919][ T7382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.206850][ T7382] RIP: 0033:0x7ff5ed58d5fc [ 567.211387][ T7382] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 567.231143][ T7382] RSP: 002b:00007ff5ee36b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 567.239585][ T7382] RAX: ffffffffffffffda RBX: 00007ff5ed7b5fa0 RCX: 00007ff5ed58d5fc [ 567.247576][ T7382] RDX: 000000000000000f RSI: 00007ff5ee36b0a0 RDI: 0000000000000005 [ 567.255665][ T7382] RBP: 00007ff5ee36b090 R08: 0000000000000000 R09: 0000000000000000 [ 567.263653][ T7382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.271650][ T7382] R13: 00007ff5ed7b6038 R14: 00007ff5ed7b5fa0 R15: 00007ffeba9e8178 [ 567.280376][ T7382] [ 567.439630][ T7386] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 567.526539][ T7389] netlink: 'syz.1.482': attribute type 29 has an invalid length. [ 567.564765][ T7389] netlink: 'syz.1.482': attribute type 29 has an invalid length. [ 567.994657][ T7394] FAULT_INJECTION: forcing a failure. [ 567.994657][ T7394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.018916][ T7394] CPU: 1 PID: 7394 Comm: syz.9.485 Not tainted 6.6.102-syzkaller #0 [ 568.027073][ T7394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 568.037401][ T7394] Call Trace: [ 568.040729][ T7394] [ 568.043778][ T7394] dump_stack_lvl+0x16c/0x230 [ 568.048515][ T7394] ? show_regs_print_info+0x20/0x20 [ 568.053779][ T7394] ? load_image+0x3b0/0x3b0 [ 568.058499][ T7394] ? __might_fault+0xaa/0x120 [ 568.063236][ T7394] ? __lock_acquire+0x7c80/0x7c80 [ 568.068404][ T7394] should_fail_ex+0x39d/0x4d0 [ 568.073133][ T7394] _copy_from_user+0x2f/0xe0 [ 568.077782][ T7394] ___sys_sendmsg+0x159/0x290 [ 568.082533][ T7394] ? __sys_sendmsg+0x270/0x270 [ 568.087730][ T7394] ? __lock_acquire+0x7c80/0x7c80 [ 568.093016][ T7394] __se_sys_sendmsg+0x1a5/0x270 [ 568.097922][ T7394] ? perf_trace_preemptirq_template+0x281/0x340 [ 568.104249][ T7394] ? __x64_sys_sendmsg+0x80/0x80 [ 568.109363][ T7394] ? lockdep_hardirqs_on+0x98/0x150 [ 568.114633][ T7394] do_syscall_64+0x55/0xb0 [ 568.119105][ T7394] ? clear_bhb_loop+0x40/0x90 [ 568.123830][ T7394] ? clear_bhb_loop+0x40/0x90 [ 568.128545][ T7394] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 568.134493][ T7394] RIP: 0033:0x7ff5ed58ebe9 [ 568.138947][ T7394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.158589][ T7394] RSP: 002b:00007ff5ee36b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.167209][ T7394] RAX: ffffffffffffffda RBX: 00007ff5ed7b5fa0 RCX: 00007ff5ed58ebe9 [ 568.175314][ T7394] RDX: 0000000000000004 RSI: 0000200000001000 RDI: 0000000000000003 [ 568.183406][ T7394] RBP: 00007ff5ee36b090 R08: 0000000000000000 R09: 0000000000000000 [ 568.191499][ T7394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.199492][ T7394] R13: 00007ff5ed7b6038 R14: 00007ff5ed7b5fa0 R15: 00007ffeba9e8178 [ 568.207508][ T7394] [ 568.672804][ T7401] netlink: 'syz.8.487': attribute type 29 has an invalid length. [ 568.723314][ T7401] netlink: 'syz.8.487': attribute type 29 has an invalid length. [ 569.409679][ T7405] lo: entered allmulticast mode [ 569.500871][ T7409] netlink: 'syz.9.489': attribute type 5 has an invalid length. [ 569.541351][ T7409] netlink: 168 bytes leftover after parsing attributes in process `syz.9.489'. [ 569.721439][ T7405] lo: entered promiscuous mode [ 569.764105][ T7405] lo: left allmulticast mode [ 569.942692][ T7420] FAULT_INJECTION: forcing a failure. [ 569.942692][ T7420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.004931][ T7420] CPU: 1 PID: 7420 Comm: syz.1.492 Not tainted 6.6.102-syzkaller #0 [ 570.012997][ T7420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 570.023112][ T7420] Call Trace: [ 570.026454][ T7420] [ 570.029429][ T7420] dump_stack_lvl+0x16c/0x230 [ 570.034259][ T7420] ? show_regs_print_info+0x20/0x20 [ 570.039688][ T7420] ? load_image+0x3b0/0x3b0 [ 570.044269][ T7420] ? __might_fault+0xaa/0x120 [ 570.048988][ T7420] ? __lock_acquire+0x7c80/0x7c80 [ 570.054331][ T7420] should_fail_ex+0x39d/0x4d0 [ 570.059068][ T7420] _copy_from_user+0x2f/0xe0 [ 570.063950][ T7420] ___sys_sendmsg+0x159/0x290 [ 570.068684][ T7420] ? __sys_sendmsg+0x270/0x270 [ 570.073538][ T7420] ? __lock_acquire+0x7c80/0x7c80 [ 570.078829][ T7420] __se_sys_sendmsg+0x1a5/0x270 [ 570.083739][ T7420] ? __x64_sys_sendmsg+0x80/0x80 [ 570.088762][ T7420] ? lockdep_hardirqs_on+0x98/0x150 [ 570.094099][ T7420] do_syscall_64+0x55/0xb0 [ 570.098539][ T7420] ? clear_bhb_loop+0x40/0x90 [ 570.103246][ T7420] ? clear_bhb_loop+0x40/0x90 [ 570.107956][ T7420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 570.113905][ T7420] RIP: 0033:0x7fc19938ebe9 [ 570.118343][ T7420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.138157][ T7420] RSP: 002b:00007fc1975f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.146598][ T7420] RAX: ffffffffffffffda RBX: 00007fc1995b6090 RCX: 00007fc19938ebe9 [ 570.154593][ T7420] RDX: 0000000000000804 RSI: 0000200000000040 RDI: 0000000000000003 [ 570.162593][ T7420] RBP: 00007fc1975f6090 R08: 0000000000000000 R09: 0000000000000000 [ 570.170676][ T7420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.178757][ T7420] R13: 00007fc1995b6128 R14: 00007fc1995b6090 R15: 00007ffc7f8c4d88 [ 570.186868][ T7420] [ 570.326640][ T7426] FAULT_INJECTION: forcing a failure. [ 570.326640][ T7426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.340116][ T7426] CPU: 0 PID: 7426 Comm: syz.5.497 Not tainted 6.6.102-syzkaller #0 [ 570.348144][ T7426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 570.358268][ T7426] Call Trace: [ 570.361584][ T7426] [ 570.364552][ T7426] dump_stack_lvl+0x16c/0x230 [ 570.369280][ T7426] ? show_regs_print_info+0x20/0x20 [ 570.374541][ T7426] ? load_image+0x3b0/0x3b0 [ 570.379103][ T7426] ? __might_fault+0xaa/0x120 [ 570.383824][ T7426] ? __lock_acquire+0x7c80/0x7c80 [ 570.388972][ T7426] should_fail_ex+0x39d/0x4d0 [ 570.393743][ T7426] _copy_from_user+0x2f/0xe0 [ 570.398467][ T7426] __sys_bpf+0x1e9/0x800 [ 570.402764][ T7426] ? bpf_link_show_fdinfo+0x350/0x350 [ 570.408379][ T7426] ? lock_chain_count+0x20/0x20 [ 570.413291][ T7426] __x64_sys_bpf+0x7c/0x90 [ 570.417841][ T7426] do_syscall_64+0x55/0xb0 [ 570.422401][ T7426] ? clear_bhb_loop+0x40/0x90 [ 570.427213][ T7426] ? clear_bhb_loop+0x40/0x90 [ 570.432015][ T7426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 570.437967][ T7426] RIP: 0033:0x7ff472f8ebe9 [ 570.442430][ T7426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.462094][ T7426] RSP: 002b:00007ff473d64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 570.470537][ T7426] RAX: ffffffffffffffda RBX: 00007ff4731b5fa0 RCX: 00007ff472f8ebe9 [ 570.478539][ T7426] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 570.486735][ T7426] RBP: 00007ff473d64090 R08: 0000000000000000 R09: 0000000000000000 [ 570.494735][ T7426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.502818][ T7426] R13: 00007ff4731b6038 R14: 00007ff4731b5fa0 R15: 00007ffc3c2cf928 [ 570.510908][ T7426] [ 571.185526][ T7438] netlink: 'syz.1.502': attribute type 29 has an invalid length. [ 571.207759][ T7438] netlink: 'syz.1.502': attribute type 29 has an invalid length. [ 573.242181][ T7465] netlink: 'syz.5.510': attribute type 4 has an invalid length. [ 573.270332][ T7465] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.510'. [ 573.580395][ T7475] netlink: 'syz.5.514': attribute type 10 has an invalid length. [ 573.603601][ T7475] netlink: 55 bytes leftover after parsing attributes in process `syz.5.514'. [ 573.663828][ T7480] netlink: 'syz.9.516': attribute type 29 has an invalid length. [ 573.694225][ T7480] netlink: 'syz.9.516': attribute type 29 has an invalid length. [ 574.214384][ T7489] FAULT_INJECTION: forcing a failure. [ 574.214384][ T7489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.273245][ T7489] CPU: 1 PID: 7489 Comm: syz.8.518 Not tainted 6.6.102-syzkaller #0 [ 574.281406][ T7489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 574.291601][ T7489] Call Trace: [ 574.294937][ T7489] [ 574.297900][ T7489] dump_stack_lvl+0x16c/0x230 [ 574.302634][ T7489] ? show_regs_print_info+0x20/0x20 [ 574.307885][ T7489] ? load_image+0x3b0/0x3b0 [ 574.312533][ T7489] ? __might_fault+0xaa/0x120 [ 574.317245][ T7489] ? __lock_acquire+0x7c80/0x7c80 [ 574.322315][ T7489] should_fail_ex+0x39d/0x4d0 [ 574.327044][ T7489] _copy_from_user+0x2f/0xe0 [ 574.331861][ T7489] ___sys_sendmsg+0x159/0x290 [ 574.336597][ T7489] ? __sys_sendmsg+0x270/0x270 [ 574.341685][ T7489] ? __lock_acquire+0x7c80/0x7c80 [ 574.346872][ T7489] __se_sys_sendmsg+0x1a5/0x270 [ 574.351767][ T7489] ? perf_trace_preemptirq_template+0x281/0x340 [ 574.358058][ T7489] ? __x64_sys_sendmsg+0x80/0x80 [ 574.363067][ T7489] ? lockdep_hardirqs_on+0x98/0x150 [ 574.368423][ T7489] do_syscall_64+0x55/0xb0 [ 574.372890][ T7489] ? clear_bhb_loop+0x40/0x90 [ 574.377603][ T7489] ? clear_bhb_loop+0x40/0x90 [ 574.382409][ T7489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 574.388358][ T7489] RIP: 0033:0x7f09f5f8ebe9 [ 574.392807][ T7489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.412546][ T7489] RSP: 002b:00007f09f6ecd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.421012][ T7489] RAX: ffffffffffffffda RBX: 00007f09f61b5fa0 RCX: 00007f09f5f8ebe9 [ 574.429030][ T7489] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 574.437121][ T7489] RBP: 00007f09f6ecd090 R08: 0000000000000000 R09: 0000000000000000 [ 574.445132][ T7489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.453145][ T7489] R13: 00007f09f61b6038 R14: 00007f09f61b5fa0 R15: 00007ffd97655dc8 [ 574.461176][ T7489] [ 575.906023][ T7505] FAULT_INJECTION: forcing a failure. [ 575.906023][ T7505] name failslab, interval 1, probability 0, space 0, times 0 [ 575.928715][ T7505] CPU: 1 PID: 7505 Comm: syz.9.521 Not tainted 6.6.102-syzkaller #0 [ 575.936945][ T7505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 575.947119][ T7505] Call Trace: [ 575.950469][ T7505] [ 575.953528][ T7505] dump_stack_lvl+0x16c/0x230 [ 575.958440][ T7505] ? show_regs_print_info+0x20/0x20 [ 575.963813][ T7505] ? load_image+0x3b0/0x3b0 [ 575.968377][ T7505] ? __might_sleep+0xe0/0xe0 [ 575.973208][ T7505] ? __lock_acquire+0x7c80/0x7c80 [ 575.978350][ T7505] should_fail_ex+0x39d/0x4d0 [ 575.983072][ T7505] should_failslab+0x9/0x20 [ 575.987622][ T7505] slab_pre_alloc_hook+0x59/0x310 [ 575.992687][ T7505] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 575.998715][ T7505] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 576.004564][ T7505] __kmem_cache_alloc_node+0x53/0x260 [ 576.009985][ T7505] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 576.015760][ T7505] __kmalloc+0xa4/0x240 [ 576.019938][ T7505] tomoyo_realpath_from_path+0xe3/0x5d0 [ 576.025545][ T7505] tomoyo_path_number_perm+0x1ea/0x590 [ 576.031142][ T7505] ? tomoyo_path_number_perm+0x1ba/0x590 [ 576.036832][ T7505] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 576.042333][ T7505] ? ksys_write+0x1c1/0x250 [ 576.047145][ T7505] ? __fget_files+0x28/0x4d0 [ 576.051830][ T7505] security_file_ioctl+0x70/0xa0 [ 576.057024][ T7505] __se_sys_ioctl+0x48/0x170 [ 576.061655][ T7505] do_syscall_64+0x55/0xb0 [ 576.066114][ T7505] ? clear_bhb_loop+0x40/0x90 [ 576.070821][ T7505] ? clear_bhb_loop+0x40/0x90 [ 576.075870][ T7505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.081896][ T7505] RIP: 0033:0x7ff5ed58ebe9 [ 576.086352][ T7505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.106351][ T7505] RSP: 002b:00007ff5ee329038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 576.114969][ T7505] RAX: ffffffffffffffda RBX: 00007ff5ed7b6180 RCX: 00007ff5ed58ebe9 [ 576.122983][ T7505] RDX: 0000200000001200 RSI: 0000000080047441 RDI: 0000000000000006 [ 576.130999][ T7505] RBP: 00007ff5ee329090 R08: 0000000000000000 R09: 0000000000000000 [ 576.139267][ T7505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.147359][ T7505] R13: 00007ff5ed7b6218 R14: 00007ff5ed7b6180 R15: 00007ffeba9e8178 [ 576.155400][ T7505] [ 576.160468][ T7505] ERROR: Out of memory at tomoyo_realpath_from_path. [ 577.659586][ T7493] netlink: 132 bytes leftover after parsing attributes in process `syz.8.519'. [ 577.965428][ T7515] netlink: 'syz.8.526': attribute type 10 has an invalid length. [ 577.973952][ T7515] netlink: 55 bytes leftover after parsing attributes in process `syz.8.526'. [ 578.211951][ T7525] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 578.274942][ T7525] netlink: 'syz.8.530': attribute type 10 has an invalid length. [ 578.279314][ T7529] FAULT_INJECTION: forcing a failure. [ 578.279314][ T7529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.296471][ T7525] netlink: 55 bytes leftover after parsing attributes in process `syz.8.530'. [ 578.320854][ T7529] CPU: 0 PID: 7529 Comm: syz.1.531 Not tainted 6.6.102-syzkaller #0 [ 578.328918][ T7529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 578.339197][ T7529] Call Trace: [ 578.342529][ T7529] [ 578.345501][ T7529] dump_stack_lvl+0x16c/0x230 [ 578.350245][ T7529] ? show_regs_print_info+0x20/0x20 [ 578.355679][ T7529] ? load_image+0x3b0/0x3b0 [ 578.360251][ T7529] ? __might_fault+0xaa/0x120 [ 578.364970][ T7529] ? __lock_acquire+0x7c80/0x7c80 [ 578.370234][ T7529] should_fail_ex+0x39d/0x4d0 [ 578.374975][ T7529] _copy_from_user+0x2f/0xe0 [ 578.379623][ T7529] ___sys_recvmsg+0x12f/0x510 [ 578.384370][ T7529] ? __sys_recvmsg+0x270/0x270 [ 578.389284][ T7529] ? ksys_write+0x1c1/0x250 [ 578.393825][ T7529] ? __fget_files+0x44a/0x4d0 [ 578.398548][ T7529] __x64_sys_recvmsg+0x1f2/0x2c0 [ 578.403546][ T7529] ? ___sys_recvmsg+0x510/0x510 [ 578.408445][ T7529] ? lockdep_hardirqs_on+0x98/0x150 [ 578.413848][ T7529] do_syscall_64+0x55/0xb0 [ 578.418289][ T7529] ? clear_bhb_loop+0x40/0x90 [ 578.422989][ T7529] ? clear_bhb_loop+0x40/0x90 [ 578.427683][ T7529] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 578.433716][ T7529] RIP: 0033:0x7fc19938ebe9 [ 578.438503][ T7529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.458138][ T7529] RSP: 002b:00007fc19a111038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 578.466579][ T7529] RAX: ffffffffffffffda RBX: 00007fc1995b5fa0 RCX: 00007fc19938ebe9 [ 578.474569][ T7529] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 578.482661][ T7529] RBP: 00007fc19a111090 R08: 0000000000000000 R09: 0000000000000000 [ 578.490744][ T7529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.498734][ T7529] R13: 00007fc1995b6038 R14: 00007fc1995b5fa0 R15: 00007ffc7f8c4d88 [ 578.506907][ T7529] [ 579.471632][ T7539] Zero length message leads to an empty skb [ 581.933825][ T7550] netlink: 'syz.8.538': attribute type 10 has an invalid length. [ 581.943507][ T7550] netlink: 55 bytes leftover after parsing attributes in process `syz.8.538'. [ 582.137305][ T7557] netlink: 'syz.1.540': attribute type 10 has an invalid length. [ 582.172968][ T7557] netlink: 55 bytes leftover after parsing attributes in process `syz.1.540'. [ 582.390582][ T7564] FAULT_INJECTION: forcing a failure. [ 582.390582][ T7564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.408471][ T7564] CPU: 1 PID: 7564 Comm: syz.1.551 Not tainted 6.6.102-syzkaller #0 [ 582.416703][ T7564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 582.426805][ T7564] Call Trace: [ 582.430132][ T7564] [ 582.433104][ T7564] dump_stack_lvl+0x16c/0x230 [ 582.437835][ T7564] ? show_regs_print_info+0x20/0x20 [ 582.443104][ T7564] ? load_image+0x3b0/0x3b0 [ 582.447666][ T7564] ? __might_fault+0xaa/0x120 [ 582.452408][ T7564] ? __lock_acquire+0x7c80/0x7c80 [ 582.457498][ T7564] should_fail_ex+0x39d/0x4d0 [ 582.462235][ T7564] _copy_from_user+0x2f/0xe0 [ 582.466893][ T7564] ___sys_sendmsg+0x159/0x290 [ 582.471642][ T7564] ? __sys_sendmsg+0x270/0x270 [ 582.476489][ T7564] ? __lock_acquire+0x7c80/0x7c80 [ 582.481592][ T7564] __se_sys_sendmsg+0x1a5/0x270 [ 582.486506][ T7564] ? __x64_sys_sendmsg+0x80/0x80 [ 582.491517][ T7564] ? lockdep_hardirqs_on+0x98/0x150 [ 582.496779][ T7564] do_syscall_64+0x55/0xb0 [ 582.501252][ T7564] ? clear_bhb_loop+0x40/0x90 [ 582.506153][ T7564] ? clear_bhb_loop+0x40/0x90 [ 582.510968][ T7564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 582.516930][ T7564] RIP: 0033:0x7fc19938ebe9 [ 582.521385][ T7564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.541218][ T7564] RSP: 002b:00007fc19a111038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.549775][ T7564] RAX: ffffffffffffffda RBX: 00007fc1995b5fa0 RCX: 00007fc19938ebe9 [ 582.557940][ T7564] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 582.566000][ T7564] RBP: 00007fc19a111090 R08: 0000000000000000 R09: 0000000000000000 [ 582.574034][ T7564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.582066][ T7564] R13: 00007fc1995b6038 R14: 00007fc1995b5fa0 R15: 00007ffc7f8c4d88 [ 582.590110][ T7564] [ 582.801219][ T5851] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 582.846931][ T7572] FAULT_INJECTION: forcing a failure. [ 582.846931][ T7572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.871150][ T7572] CPU: 0 PID: 7572 Comm: syz.9.545 Not tainted 6.6.102-syzkaller #0 [ 582.879317][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 582.889433][ T7572] Call Trace: [ 582.892773][ T7572] [ 582.895843][ T7572] dump_stack_lvl+0x16c/0x230 [ 582.900668][ T7572] ? show_regs_print_info+0x20/0x20 [ 582.906015][ T7572] ? load_image+0x3b0/0x3b0 [ 582.910582][ T7572] ? __might_fault+0xaa/0x120 [ 582.915351][ T7572] ? __lock_acquire+0x7c80/0x7c80 [ 582.920603][ T7572] should_fail_ex+0x39d/0x4d0 [ 582.925470][ T7572] _copy_from_user+0x2f/0xe0 [ 582.930204][ T7572] __sys_bpf+0x1e9/0x800 [ 582.934601][ T7572] ? bpf_link_show_fdinfo+0x350/0x350 [ 582.940137][ T7572] ? lock_chain_count+0x20/0x20 [ 582.945065][ T7572] __x64_sys_bpf+0x7c/0x90 [ 582.949531][ T7572] do_syscall_64+0x55/0xb0 [ 582.954009][ T7572] ? clear_bhb_loop+0x40/0x90 [ 582.958748][ T7572] ? clear_bhb_loop+0x40/0x90 [ 582.963493][ T7572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 582.969459][ T7572] RIP: 0033:0x7ff5ed58ebe9 [ 582.974017][ T7572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.993707][ T7572] RSP: 002b:00007ff5ee36b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 583.002185][ T7572] RAX: ffffffffffffffda RBX: 00007ff5ed7b5fa0 RCX: 00007ff5ed58ebe9 [ 583.010295][ T7572] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 583.018315][ T7572] RBP: 00007ff5ee36b090 R08: 0000000000000000 R09: 0000000000000000 [ 583.026466][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.034486][ T7572] R13: 00007ff5ed7b6038 R14: 00007ff5ed7b5fa0 R15: 00007ffeba9e8178 [ 583.042704][ T7572] [ 584.274580][ T7586] Driver unsupported XDP return value 0 on prog (id 500) dev N/A, expect packet loss! [ 584.435806][ T7590] FAULT_INJECTION: forcing a failure. [ 584.435806][ T7590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.470770][ T7590] CPU: 0 PID: 7590 Comm: syz.8.554 Not tainted 6.6.102-syzkaller #0 [ 584.478838][ T7590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 584.488952][ T7590] Call Trace: [ 584.492277][ T7590] [ 584.495267][ T7590] dump_stack_lvl+0x16c/0x230 [ 584.500006][ T7590] ? show_regs_print_info+0x20/0x20 [ 584.505262][ T7590] ? load_image+0x3b0/0x3b0 [ 584.510006][ T7590] ? __might_fault+0xaa/0x120 [ 584.514766][ T7590] ? __lock_acquire+0x7c80/0x7c80 [ 584.519867][ T7590] should_fail_ex+0x39d/0x4d0 [ 584.524624][ T7590] _copy_from_user+0x2f/0xe0 [ 584.529268][ T7590] __sys_bpf+0x1e9/0x800 [ 584.533573][ T7590] ? bpf_link_show_fdinfo+0x350/0x350 [ 584.539021][ T7590] ? lock_chain_count+0x20/0x20 [ 584.543943][ T7590] __x64_sys_bpf+0x7c/0x90 [ 584.548423][ T7590] do_syscall_64+0x55/0xb0 [ 584.552881][ T7590] ? clear_bhb_loop+0x40/0x90 [ 584.557594][ T7590] ? clear_bhb_loop+0x40/0x90 [ 584.562291][ T7590] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.568390][ T7590] RIP: 0033:0x7f09f5f8ebe9 [ 584.573007][ T7590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.592866][ T7590] RSP: 002b:00007f09f6ecd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 584.601401][ T7590] RAX: ffffffffffffffda RBX: 00007f09f61b5fa0 RCX: 00007f09f5f8ebe9 [ 584.609423][ T7590] RDX: 0000000000000007 RSI: 00002000000014c0 RDI: 000000000000000f [ 584.617421][ T7590] RBP: 00007f09f6ecd090 R08: 0000000000000000 R09: 0000000000000000 [ 584.625435][ T7590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.633426][ T7590] R13: 00007f09f61b6038 R14: 00007f09f61b5fa0 R15: 00007ffd97655dc8 [ 584.641435][ T7590] [ 587.351033][ T7612] netlink: 14 bytes leftover after parsing attributes in process `syz.8.561'. [ 587.520877][ T7620] FAULT_INJECTION: forcing a failure. [ 587.520877][ T7620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.540548][ T7620] CPU: 0 PID: 7620 Comm: syz.9.564 Not tainted 6.6.102-syzkaller #0 [ 587.548635][ T7620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 587.558804][ T7620] Call Trace: [ 587.562112][ T7620] [ 587.565059][ T7620] dump_stack_lvl+0x16c/0x230 [ 587.569755][ T7620] ? show_regs_print_info+0x20/0x20 [ 587.574985][ T7620] ? load_image+0x3b0/0x3b0 [ 587.579521][ T7620] ? __might_fault+0xaa/0x120 [ 587.584240][ T7620] ? __lock_acquire+0x7c80/0x7c80 [ 587.589290][ T7620] should_fail_ex+0x39d/0x4d0 [ 587.594079][ T7620] _copy_from_user+0x2f/0xe0 [ 587.598692][ T7620] __sys_bpf+0x1e9/0x800 [ 587.602968][ T7620] ? bpf_link_show_fdinfo+0x350/0x350 [ 587.608375][ T7620] ? lock_chain_count+0x20/0x20 [ 587.613279][ T7620] __x64_sys_bpf+0x7c/0x90 [ 587.617715][ T7620] do_syscall_64+0x55/0xb0 [ 587.622251][ T7620] ? clear_bhb_loop+0x40/0x90 [ 587.627038][ T7620] ? clear_bhb_loop+0x40/0x90 [ 587.631909][ T7620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.637869][ T7620] RIP: 0033:0x7ff5ed58ebe9 [ 587.642477][ T7620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.662291][ T7620] RSP: 002b:00007ff5ee36b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 587.670774][ T7620] RAX: ffffffffffffffda RBX: 00007ff5ed7b5fa0 RCX: 00007ff5ed58ebe9 [ 587.678768][ T7620] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 000000000000000f [ 587.686770][ T7620] RBP: 00007ff5ee36b090 R08: 0000000000000000 R09: 0000000000000000 [ 587.694759][ T7620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.702757][ T7620] R13: 00007ff5ed7b6038 R14: 00007ff5ed7b5fa0 R15: 00007ffeba9e8178 [ 587.710847][ T7620] [ 587.908448][ T7622] syzkaller0: entered allmulticast mode [ 588.038860][ T7628] netlink: 'syz.8.568': attribute type 10 has an invalid length. [ 588.111267][ T7628] netlink: 55 bytes leftover after parsing attributes in process `syz.8.568'. [ 588.164501][ T7635] netlink: 'syz.1.569': attribute type 10 has an invalid length. [ 588.202216][ T7635] netlink: 55 bytes leftover after parsing attributes in process `syz.1.569'. [ 588.368304][ T7640] netlink: 'syz.5.571': attribute type 10 has an invalid length. [ 588.376713][ T7640] netlink: 55 bytes leftover after parsing attributes in process `syz.5.571'. [ 588.528604][ T7645] netlink: 'syz.1.573': attribute type 29 has an invalid length. [ 588.555375][ T7645] netlink: 'syz.1.573': attribute type 29 has an invalid length. [ 590.374703][ T7667] FAULT_INJECTION: forcing a failure. [ 590.374703][ T7667] name failslab, interval 1, probability 0, space 0, times 0 [ 590.466434][ T7667] CPU: 1 PID: 7667 Comm: syz.9.580 Not tainted 6.6.102-syzkaller #0 [ 590.474512][ T7667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 590.484611][ T7667] Call Trace: [ 590.487930][ T7667] [ 590.490934][ T7667] dump_stack_lvl+0x16c/0x230 [ 590.495663][ T7667] ? show_regs_print_info+0x20/0x20 [ 590.500917][ T7667] ? load_image+0x3b0/0x3b0 [ 590.505479][ T7667] ? __might_sleep+0xe0/0xe0 [ 590.510118][ T7667] ? __lock_acquire+0x7c80/0x7c80 [ 590.515192][ T7667] should_fail_ex+0x39d/0x4d0 [ 590.519929][ T7667] should_failslab+0x9/0x20 [ 590.524563][ T7667] slab_pre_alloc_hook+0x59/0x310 [ 590.529726][ T7667] kmem_cache_alloc_node+0x60/0x330 [ 590.534977][ T7667] ? __alloc_skb+0x108/0x2c0 [ 590.539622][ T7667] __alloc_skb+0x108/0x2c0 [ 590.544089][ T7667] alloc_skb_with_frags+0xca/0x7c0 [ 590.549316][ T7667] ? mark_lock+0x94/0x320 [ 590.553711][ T7667] sock_alloc_send_pskb+0x857/0x990 [ 590.558974][ T7667] ? sock_kzfree_s+0x50/0x50 [ 590.563626][ T7667] tun_get_user+0x9dc/0x3bf0 [ 590.568270][ T7667] ? aa_file_perm+0x120/0xec0 [ 590.572994][ T7667] ? aa_file_perm+0x3e8/0xec0 [ 590.577722][ T7667] ? rcu_read_unlock+0xa0/0xa0 [ 590.582554][ T7667] ? tun_get+0x1c/0x2e0 [ 590.586763][ T7667] ? __lock_acquire+0x7c80/0x7c80 [ 590.592288][ T7667] ? tun_get+0x1c/0x2e0 [ 590.596494][ T7667] tun_chr_write_iter+0x119/0x200 [ 590.601560][ T7667] vfs_write+0x43b/0x940 [ 590.606027][ T7667] ? file_end_write+0x250/0x250 [ 590.610949][ T7667] ? __fget_files+0x44a/0x4d0 [ 590.615680][ T7667] ? __fdget_pos+0x1d8/0x330 [ 590.620384][ T7667] ? ksys_write+0x75/0x250 [ 590.624834][ T7667] ksys_write+0x147/0x250 [ 590.629194][ T7667] ? __ia32_sys_read+0x90/0x90 [ 590.634068][ T7667] ? lockdep_hardirqs_on+0x98/0x150 [ 590.639482][ T7667] do_syscall_64+0x55/0xb0 [ 590.643925][ T7667] ? clear_bhb_loop+0x40/0x90 [ 590.648618][ T7667] ? clear_bhb_loop+0x40/0x90 [ 590.653310][ T7667] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 590.659319][ T7667] RIP: 0033:0x7ff5ed58ebe9 [ 590.663760][ T7667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.683485][ T7667] RSP: 002b:00007ff5ee36b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 590.691924][ T7667] RAX: ffffffffffffffda RBX: 00007ff5ed7b5fa0 RCX: 00007ff5ed58ebe9 [ 590.699913][ T7667] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 590.708026][ T7667] RBP: 00007ff5ee36b090 R08: 0000000000000000 R09: 0000000000000000 [ 590.716013][ T7667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.724102][ T7667] R13: 00007ff5ed7b6038 R14: 00007ff5ed7b5fa0 R15: 00007ffeba9e8178 [ 590.732277][ T7667] [ 591.167463][ T7672] netlink: 'syz.5.582': attribute type 10 has an invalid length. [ 591.183743][ T7672] netlink: 55 bytes leftover after parsing attributes in process `syz.5.582'. [ 591.198767][ T7673] netlink: 132 bytes leftover after parsing attributes in process `syz.9.583'. [ 591.200276][ T5848] Bluetooth: hci1: unexpected event 0x20 length: 151 > 7 [ 591.222029][ T7675] netlink: 132 bytes leftover after parsing attributes in process `syz.9.583'. [ 591.481863][ T7683] netlink: 'syz.1.587': attribute type 29 has an invalid length. [ 591.500762][ T7683] netlink: 'syz.1.587': attribute type 29 has an invalid length. [ 593.390709][ T7698] FAULT_INJECTION: forcing a failure. [ 593.390709][ T7698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.413874][ T7698] CPU: 0 PID: 7698 Comm: syz.1.592 Not tainted 6.6.102-syzkaller #0 [ 593.422023][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 593.432126][ T7698] Call Trace: [ 593.435460][ T7698] [ 593.438445][ T7698] dump_stack_lvl+0x16c/0x230 [ 593.443176][ T7698] ? show_regs_print_info+0x20/0x20 [ 593.448499][ T7698] ? load_image+0x3b0/0x3b0 [ 593.453095][ T7698] ? __might_fault+0xaa/0x120 [ 593.457790][ T7698] ? __lock_acquire+0x7c80/0x7c80 [ 593.462845][ T7698] should_fail_ex+0x39d/0x4d0 [ 593.467560][ T7698] _copy_from_user+0x2f/0xe0 [ 593.472205][ T7698] __sys_bpf+0x1e9/0x800 [ 593.476587][ T7698] ? bpf_link_show_fdinfo+0x350/0x350 [ 593.482002][ T7698] ? lock_chain_count+0x20/0x20 [ 593.486983][ T7698] __x64_sys_bpf+0x7c/0x90 [ 593.491449][ T7698] do_syscall_64+0x55/0xb0 [ 593.495889][ T7698] ? clear_bhb_loop+0x40/0x90 [ 593.500590][ T7698] ? clear_bhb_loop+0x40/0x90 [ 593.505300][ T7698] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 593.511223][ T7698] RIP: 0033:0x7fc19938ebe9 [ 593.515673][ T7698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.535397][ T7698] RSP: 002b:00007fc19a111038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 593.543844][ T7698] RAX: ffffffffffffffda RBX: 00007fc1995b5fa0 RCX: 00007fc19938ebe9 [ 593.551862][ T7698] RDX: 0000000000000094 RSI: 00002000000013c0 RDI: 0000000000000005 [ 593.559895][ T7698] RBP: 00007fc19a111090 R08: 0000000000000000 R09: 0000000000000000 [ 593.568050][ T7698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.576237][ T7698] R13: 00007fc1995b6038 R14: 00007fc1995b5fa0 R15: 00007ffc7f8c4d88 [ 593.584550][ T7698] [ 593.672891][ T7702] netlink: 'syz.8.601': attribute type 29 has an invalid length. [ 593.709037][ T7702] netlink: 'syz.8.601': attribute type 29 has an invalid length. [ 594.058285][ T7705] netlink: 'syz.9.594': attribute type 10 has an invalid length. [ 594.154249][ T7705] netlink: 55 bytes leftover after parsing attributes in process `syz.9.594'. [ 595.183379][ T7714] netlink: 'syz.9.597': attribute type 10 has an invalid length. [ 595.207461][ T7714] netlink: 55 bytes leftover after parsing attributes in process `syz.9.597'. [ 595.340887][ T7721] syzkaller0: entered promiscuous mode [ 595.347133][ T7721] syzkaller0: entered allmulticast mode [ 595.367430][ T7722] netlink: 'syz.5.606': attribute type 10 has an invalid length. [ 595.380115][ T7722] netlink: 55 bytes leftover after parsing attributes in process `syz.5.606'. [ 595.419994][ T7726] netlink: 'syz.9.600': attribute type 29 has an invalid length. [ 597.321451][ T29] INFO: task syz.0.41:6037 blocked for more than 143 seconds. [ 597.329494][ T29] Not tainted 6.6.102-syzkaller #0 [ 597.337510][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 597.346526][ T29] task:syz.0.41 state:D stack:22256 pid:6037 ppid:5840 flags:0x00004006 [ 597.356218][ T29] Call Trace: [ 597.359534][ T29] [ 597.362575][ T29] __schedule+0x14d2/0x44d0 [ 597.367146][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 597.373605][ T29] ? lock_chain_count+0x20/0x20 [ 597.378660][ T29] ? asan.module_dtor+0x20/0x20 [ 597.383844][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 597.389145][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 597.395538][ T29] ? _free_event+0xfe/0xf30 [ 597.400108][ T29] ? _free_event+0x168/0xf30 [ 597.405801][ T29] schedule+0xbd/0x170 [ 597.409955][ T29] ? _free_event+0xfe/0xf30 [ 597.414648][ T29] _free_event+0x174/0xf30 [ 597.419399][ T29] perf_event_release_kernel+0x836/0x8c0 [ 597.425446][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 597.431880][ T29] ? calc_timer_values+0x400/0x400 [ 597.437479][ T29] ? perf_mmap+0x1630/0x1630 [ 597.442316][ T29] perf_release+0x3b/0x40 [ 597.446709][ T29] __fput+0x234/0x970 [ 597.450760][ T29] task_work_run+0x1ce/0x250 [ 597.456770][ T29] ? task_work_cancel+0x240/0x240 [ 597.462348][ T29] ? kernel_clone+0x235/0x840 [ 597.467098][ T29] get_signal+0x1235/0x1400 [ 597.472075][ T29] ? create_io_thread+0x140/0x140 [ 597.477268][ T29] arch_do_signal_or_restart+0x96/0x780 [ 597.483020][ T29] ? get_sigframe_size+0x20/0x20 [ 597.488043][ T29] exit_to_user_mode_loop+0x70/0x110 [ 597.493459][ T29] exit_to_user_mode_prepare+0xb1/0x140 [ 597.499057][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 597.505985][ T29] do_syscall_64+0x61/0xb0 [ 597.510550][ T29] ? clear_bhb_loop+0x40/0x90 [ 597.515368][ T29] ? clear_bhb_loop+0x40/0x90 [ 597.520095][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.526107][ T29] RIP: 0033:0x7f213eb8ebe9 [ 597.530565][ T29] RSP: 002b:00007f213fa44fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 597.539097][ T29] RAX: fffffffffffffffc RBX: 00007f213edb5fa0 RCX: 00007f213eb8ebe9 [ 597.547418][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 597.555601][ T29] RBP: 00007f213ec11e19 R08: 0000000000000000 R09: 0000000000000000 [ 597.563760][ T29] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 597.573058][ T29] R13: 00007f213edb6038 R14: 00007f213edb5fa0 R15: 00007ffc208d35a8 [ 597.581416][ T29] [ 597.592866][ T29] [ 597.592866][ T29] Showing all locks held in the system: [ 597.600892][ T29] 1 lock held by khungtaskd/29: [ 597.606730][ T29] #0: ffffffff8cd2fbe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 597.616945][ T29] 2 locks held by getty/5548: [ 597.621732][ T29] #0: ffff8880323ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 597.632263][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 597.642839][ T29] 2 locks held by kworker/1:1/5827: [ 597.648098][ T29] #0: ffff888017872538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 597.659271][ T29] #1: ffffc900049dfd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 597.671425][ T29] 2 locks held by syz.8.599/7720: [ 597.676469][ T29] #0: ffffffff8dfbba48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 597.685848][ T29] #1: ffffffff8cd35bb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x448/0x830 [ 597.697061][ T29] 2 locks held by syz.9.600/7726: [ 597.702320][ T29] #0: ffff888020e90688 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x810 [ 597.713785][ T29] #1: ffffffff8dfbba48 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0x71f/0xde0 [ 597.723912][ T29] 1 lock held by syz.5.602/7730: [ 597.728892][ T29] #0: ffffffff8dfbba48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 597.738487][ T29] 1 lock held by syz.1.603/7735: [ 597.743526][ T29] #0: ffffffff8dfbba48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 597.759383][ T29] [ 597.761888][ T29] ============================================= [ 597.761888][ T29] [ 597.770703][ T29] NMI backtrace for cpu 0 [ 597.775079][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.102-syzkaller #0 [ 597.783002][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 597.793105][ T29] Call Trace: [ 597.796430][ T29] [ 597.799382][ T29] dump_stack_lvl+0x16c/0x230 [ 597.804103][ T29] ? show_regs_print_info+0x20/0x20 [ 597.809356][ T29] ? load_image+0x3b0/0x3b0 [ 597.814069][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 597.819075][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 597.825342][ T29] ? _printk+0xd0/0x110 [ 597.829534][ T29] ? load_image+0x3b0/0x3b0 [ 597.834070][ T29] ? load_image+0x3b0/0x3b0 [ 597.838753][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 597.844854][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 597.850876][ T29] watchdog+0xf41/0xf80 [ 597.855161][ T29] ? watchdog+0x1e1/0xf80 [ 597.859522][ T29] kthread+0x2fa/0x390 [ 597.863617][ T29] ? hungtask_pm_notify+0x90/0x90 [ 597.868683][ T29] ? kthread_blkcg+0xd0/0xd0 [ 597.873384][ T29] ret_from_fork+0x48/0x80 [ 597.877826][ T29] ? kthread_blkcg+0xd0/0xd0 [ 597.882539][ T29] ret_from_fork_asm+0x11/0x20 [ 597.887359][ T29] [ 597.891444][ T29] Sending NMI from CPU 0 to CPUs 1: [ 597.896835][ C1] NMI backtrace for cpu 1 [ 597.896852][ C1] CPU: 1 PID: 61 Comm: kworker/u4:4 Not tainted 6.6.102-syzkaller #0 [ 597.896869][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 597.896880][ C1] Workqueue: events_unbound toggle_allocation_gate [ 597.896911][ C1] RIP: 0010:__lock_acquire+0x5d0/0x7c80 [ 597.896933][ C1] Code: 7c 24 10 0f 85 63 64 00 00 83 3d ca 9a 83 15 00 0f 84 f6 01 00 00 31 db 48 81 c3 c8 00 00 00 48 89 d8 48 c1 e8 03 0f b6 04 10 <84> c0 0f 85 1b 63 00 00 44 0f b6 33 48 8b 44 24 48 0f b6 04 10 84 [ 597.896949][ C1] RSP: 0018:ffffc900015a7640 EFLAGS: 00000806 [ 597.896962][ C1] RAX: 0000000000000000 RBX: ffffffff90714e18 RCX: ffffffff81670940 [ 597.896974][ C1] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff90da3510 [ 597.896986][ C1] RBP: ffffc900015a7888 R08: ffffffff90da3517 R09: 1ffffffff21b46a2 [ 597.896998][ C1] R10: dffffc0000000000 R11: fffffbfff21b46a3 R12: ffff8880186fe4c4 [ 597.897011][ C1] R13: ffff8880186fda00 R14: 0000000000000000 R15: ffff8880186fe550 [ 597.897023][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 597.897037][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 597.897049][ C1] CR2: 0000200000ffd000 CR3: 000000000cb30000 CR4: 00000000003506e0 [ 597.897064][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 597.897075][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 597.897085][ C1] Call Trace: [ 597.897091][ C1] [ 597.897108][ C1] ? smp_call_function_many_cond+0xb26/0x1130 [ 597.897128][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 597.897152][ C1] ? verify_lock_unused+0x140/0x140 [ 597.897169][ C1] ? smp_call_function_many_cond+0xe6d/0x1130 [ 597.897191][ C1] ? text_poke_sync+0x30/0x30 [ 597.897214][ C1] lock_acquire+0x197/0x410 [ 597.897231][ C1] ? prepare_to_wait_event+0x20/0x470 [ 597.897250][ C1] ? static_key_enable_cpuslocked+0x123/0x240 [ 597.897273][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 597.897291][ C1] ? read_lock_is_recursive+0x20/0x20 [ 597.897314][ C1] _raw_spin_lock_irqsave+0xa8/0xf0 [ 597.897340][ C1] ? prepare_to_wait_event+0x20/0x470 [ 597.897358][ C1] ? _raw_spin_lock+0x40/0x40 [ 597.897382][ C1] ? __might_sleep+0xe0/0xe0 [ 597.897402][ C1] ? rcu_read_lock_any_held+0xb4/0x120 [ 597.897421][ C1] prepare_to_wait_event+0x20/0x470 [ 597.897442][ C1] ? process_scheduled_works+0x957/0x15b0 [ 597.897463][ C1] toggle_allocation_gate+0x12a/0x250 [ 597.897488][ C1] ? show_object+0x70/0x70 [ 597.897510][ C1] ? wake_bit_function+0x200/0x200 [ 597.897531][ C1] ? process_scheduled_works+0x957/0x15b0 [ 597.897551][ C1] ? process_scheduled_works+0x957/0x15b0 [ 597.897571][ C1] process_scheduled_works+0xa45/0x15b0 [ 597.897604][ C1] ? assign_work+0x400/0x400 [ 597.897626][ C1] ? assign_work+0x39e/0x400 [ 597.897647][ C1] worker_thread+0xa55/0xfc0 [ 597.897678][ C1] kthread+0x2fa/0x390 [ 597.897698][ C1] ? pr_cont_work+0x560/0x560 [ 597.897717][ C1] ? kthread_blkcg+0xd0/0xd0 [ 597.897732][ C1] ret_from_fork+0x48/0x80 [ 597.897751][ C1] ? kthread_blkcg+0xd0/0xd0 [ 597.897766][ C1] ret_from_fork_asm+0x11/0x20 [ 597.897795][ C1] [ 597.906852][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 597.906870][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.102-syzkaller #0 [ 597.906894][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 597.906906][ T29] Call Trace: [ 597.906917][ T29] [ 597.906928][ T29] dump_stack_lvl+0x16c/0x230 [ 597.906970][ T29] ? show_regs_print_info+0x20/0x20 [ 597.906997][ T29] ? load_image+0x3b0/0x3b0 [ 597.907047][ T29] panic+0x2c0/0x710 [ 597.907078][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 597.907112][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 597.907142][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 597.907174][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 597.907210][ T29] watchdog+0xf80/0xf80 [ 597.907240][ T29] ? watchdog+0x1e1/0xf80 [ 597.907276][ T29] kthread+0x2fa/0x390 [ 597.907296][ T29] ? hungtask_pm_notify+0x90/0x90 [ 597.907325][ T29] ? kthread_blkcg+0xd0/0xd0 [ 597.907347][ T29] ret_from_fork+0x48/0x80 [ 597.907371][ T29] ? kthread_blkcg+0xd0/0xd0 [ 597.907394][ T29] ret_from_fork_asm+0x11/0x20 [ 597.907440][ T29] [ 597.910635][ T29] Kernel Offset: disabled [ 598.328115][ T29] Rebooting in 86400 seconds..