last executing test programs: 3m13.779816485s ago: executing program 1 (id=104): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'full', 0x20, 0x2000000007, 0x20, 0x10000000fffff}, 0x2f) r2 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) 3m13.079851821s ago: executing program 1 (id=119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x3, 0x7ffc, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xffff}}], {0x14, 0x14}}, 0x78}}, 0x0) 3m12.704921402s ago: executing program 1 (id=112): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r4, 0xc040ff0b, 0x200000000003) 3m12.310151387s ago: executing program 1 (id=114): socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff9}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x3, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 3m11.974680818s ago: executing program 1 (id=115): perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10102) socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x6, 0x6}, 0x0, 0x4, 0xfffffffd, 0x2, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 3m9.919066771s ago: executing program 1 (id=132): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000940)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='contention_begin\x00', r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r3, r2, 0x25, 0x8, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r4, 0x4) 3m9.613207583s ago: executing program 32 (id=132): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000940)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='contention_begin\x00', r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r3, r2, 0x25, 0x8, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r4, 0x4) 1m35.166803004s ago: executing program 4 (id=671): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close(r1) socket$kcm(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xb2) 1m34.895946599s ago: executing program 5 (id=676): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x5}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8000000004ca}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r0}, 0x38) 1m34.773207188s ago: executing program 0 (id=678): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1m34.251325058s ago: executing program 0 (id=679): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="b4002b7d5ecc56ffff"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000, 0xc}, {0x1000000a, 0x84}], 0x10, 0x4}, 0x94) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x1c) 1m34.034704629s ago: executing program 0 (id=680): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffd, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000060100"}) 1m33.973629967s ago: executing program 5 (id=681): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0)=r0, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0xe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 1m33.729539876s ago: executing program 5 (id=684): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000100)=r0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 1m31.352993249s ago: executing program 2 (id=689): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 1m30.997157572s ago: executing program 2 (id=690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10000) close(0x3) 1m30.949326097s ago: executing program 5 (id=691): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x1beea, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket(0x10, 0x803, 0x0) sendmsg$netlink(r3, 0x0, 0x80008c0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xa0ea1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10, 0x80000000, 0x10000000, 0xdbe, 0x300}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m30.918383809s ago: executing program 0 (id=692): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x82141, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x14104, 0x0, 0x0, 0x2, 0x9, 0x800000, 0x5, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1]}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) close(r0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) 1m30.880041634s ago: executing program 4 (id=694): socket$kcm(0xa, 0x2, 0x73) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100", @ANYRES32], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000040)="e06921", 0x0, 0xc7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1m30.643052048s ago: executing program 4 (id=696): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x80}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x6a}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m30.608228056s ago: executing program 2 (id=697): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x4) socket$kcm(0x23, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu&\t\t') 1m30.486491483s ago: executing program 0 (id=698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xd}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xb452e779) ioctl$TUNSETOFFLOAD(r3, 0x541b, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 1m30.337025059s ago: executing program 2 (id=699): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2000000008, 0x800}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x17, 0x301, 0x70bd24, 0xfffffffc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1m30.24688067s ago: executing program 5 (id=700): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x2, 0x0, 0x80000000, 0x3, 0x43fe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xbd, 0x1, 0x0, 0x0, 0x0, 0x5, 0x5811c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000090000000000000003000000850000001300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0x15, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e000081007e2288a8849088", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m30.120282139s ago: executing program 4 (id=702): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) close(r0) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$sock(r0, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x48044) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) 1m29.880032074s ago: executing program 2 (id=703): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, &(0x7f0000000000), 0x84) 1m29.75581025s ago: executing program 4 (id=704): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, 0x0, 0x4004080) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r2, 0x40107446, 0xf0ff1f00000000) 1m29.497865834s ago: executing program 2 (id=705): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) getpid() write$cgroup_subtree(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211057300fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) 1m29.088832081s ago: executing program 33 (id=705): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) getpid() write$cgroup_subtree(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211057300fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) 1m29.068349322s ago: executing program 0 (id=707): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x27, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x48) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000540)="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", 0x3192}], 0x1}, 0x40) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=' ', 0x1}], 0x1}, 0x11895) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m28.645931444s ago: executing program 34 (id=707): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x27, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x48) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000540)="7c603bb980ffa3251587ea157931a08af1a276dbb5be30d61824acf02ad2dc3520d5c3a124fb3d83dbdcb5bd3c43f57823f510fff4d20932a7b016fa1d2310b4044a3bd63896c5c9d6fe5929e319e7eca7d627597ce21ed8960e176b8a4f87c601369470bde8047864cee37515372d4f5e3ee4767f77d01a1f2e653a07b3e20c118caafc539598705c44e499346d00a574a8b5c24b31694b816af70dde7900c5f61779a6bafba45f052df09f16495e247dd2ea519def292d2adadb3f6d902dc1c2fc4b2afea7157f458952360b352e2939d85ed068584b6504ffcd388c0fcbe6893726c31a3e8fd4791b9d42c2400e0df37616d446a3bdd28fcbda7f90d51220be28b5df0cdd2e6d2751b7aa948b8b3790117d58e8fc6592d23b36edbef3c0a357fbc423f95bec1064dae1f79bf84eaa60a5f34376e9ad6e7724bf751faade801d9303e6a1887604c091a8faa7461ea94cfebd7ac56a67cad554df64d4083202c548cdd2178e39aff3a70c1a9e0c7ed5e69c6a02e1b0dd5351dc6f33eb5c2613973ecb53d9408ed73a72bb0f5650ec82538dcdafab2d48aff30ea238d8af97b6fd792e5f7498e058d0f36c277e07b83fc287353369c45ab9fdf267e0660191a39e09ad129363cd5f953a32373a0ed80905d7e4f7906878b477aebc011a91c5fa2b8e8f771f72afe702ea87a0aa5ccd6cf5915976e7ebed5b8e211bdd27860cbab458aade79564623652a6a30551e7621244a47d5321c395a5f94320eaf1a40c3263e1acb6d217aceab7d83bc0a7117ffda281d03f9bafb447caf5adaa902b1374cac52eab591255463fd1d9a4451196b8359a713d3d46cb8343d763e1466c69a0987b73e7a68907d51c06a5995749324a43b238291476551d3a09736ec7a419faba93e8efe1f34b92f079aac77e1d54a08a73ebf25e2723587516cd9326704f0cc8e63064670f71eae4c378552c09b3e8d24d2aa4192717767e75ef67705cdb97557f7f21b6d3dbf87e1687d189450efe1827f2c8a647eec8dfa7539eb1c1bea95b0d3378c29d8d4f85b47f06f1b363aa2e150daa988be3151f9f7651aaa22c3846e3713718b4af3897ec0322685ab898c9eaa48cea38471fe4169d8c182df391d6f74467d479c7ee4b2ca3e44dd44799b850e8323b8877ece79b60fcbd657a13701eb3742888e755f19f11d1ab710a5ad6381998d7364b51f3e7dad705672d7933939b4f10242940aebe80bca9f9d56ac87e09f3bdffb62b887ae294d5617ea1f695f1cdd7d57c92cb597322e3b25a1449fedb478ab8dabdeee7cb9565661f3de0c8edf479ce733c7304c1420501151ee8a092870ad3bcc738eb00b8e84c261865af7ea397a41651e7301fc03f6dbb356df59d9a3f9c18f9cf71453d93fa7e82eadd5596d183bb85f4909cc89d89f6e7763607f64d5d9cbe39b931fa006d134b3d040c5738ae18e24be20756cd2eae54bb9a2a1d7cc4448e5f15e2733b82949923ab13dac9c0319ab3078a3e79a8be510016605aef6fc132ca0b4e5d009d76f082afd2ef6d29f89695519606c99424d329077d3222fe41d967bf719a42671c4fd5841faf0d496cadf8a6fd2cbe6789622da0f6bd12a5ca2283dfa97260a62c495c7534dc0b6aea7df3b43b89a6455f2133c6d58d7d9c2d379868f4035e072724e9789a3469efff1a9fb89c10b70c1e44c852062b3b4541b713e6f607ae7eb1ad8a6c88391002b8c8cdde7467f22a9679daadd88319ecc1505b5a9ee774495865d946e58f8d7b2f09636a38c34af89b08f6c6cfb3bdf4ec30acb233c348ec86cfdda69a6f05bf387171b21e5df3b455f59867b8157e501487682b5987b3a8c5f3c43acbe0f158bcc294e6e77bb84a80acc12663ca12a899014216a64c002842195e439f32e86cbf46f7390230007447a505905a6b6b404f18360bb340b8e5dc6bb6aa3e95e6d236e9b57ad1d9e4fb0fe62a7a1109e7445940b49633055ab2096059720", 0x3192}], 0x1}, 0x40) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=' ', 0x1}], 0x1}, 0x11895) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m28.639953238s ago: executing program 5 (id=708): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 1m28.539311981s ago: executing program 35 (id=708): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 1m28.508259332s ago: executing program 4 (id=709): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m28.507895804s ago: executing program 36 (id=709): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 38.17666067s ago: executing program 8 (id=899): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x456c4997c6f4bb71, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8640, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047459, &(0x7f0000001200)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) bpf$ITER_CREATE(0x21, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000100), 0x9) 27.514624052s ago: executing program 6 (id=928): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x44) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 27.342271235s ago: executing program 8 (id=931): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x991, 0x6}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20048860) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000003e0007012dbd7000fddbdf25027c"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008010) 27.166385625s ago: executing program 6 (id=932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000380)={'pim6reg1\x00', @broadcast}) 26.468704249s ago: executing program 8 (id=935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0xd900, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x23, &(0x7f0000000000)=r5, 0x8) 25.398727471s ago: executing program 8 (id=939): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x7, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 25.216909309s ago: executing program 6 (id=941): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffff9, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x13, &(0x7f0000000200)=r3, 0x4) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2000c854) recvmsg$kcm(r0, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x40000122) 24.458540616s ago: executing program 6 (id=943): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000840)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 24.309615309s ago: executing program 8 (id=944): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x3c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x3, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f, 0x5f]}}, 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001aa542b149ce246e6000500000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c00018008000100636d700020000280080001401100000408000240000000010c00038006000100407300000900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 24.075226956s ago: executing program 6 (id=945): mkdir(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000040)="04ff03", &(0x7f0000000200), 0x2}, 0x20) 22.785635124s ago: executing program 8 (id=950): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 22.756961054s ago: executing program 6 (id=952): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) r1 = syz_clone(0x20000400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1bd, 0x459e, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x1, @perf_config_ext={0x76, 0xdc}, 0x11efa, 0x4, 0x98, 0x6, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r4}, 0x10) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00) 21.951751438s ago: executing program 37 (id=950): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 21.930382905s ago: executing program 38 (id=952): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) r1 = syz_clone(0x20000400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1bd, 0x459e, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x1, @perf_config_ext={0x76, 0xdc}, 0x11efa, 0x4, 0x98, 0x6, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r4}, 0x10) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00) 2.607386629s ago: executing program 7 (id=1039): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280100001700010025bd700003000000ff0100000000000000000000000000010000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000000a00006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aaff", @ANYRES32=0x0], 0x128}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x28040) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 2.606264589s ago: executing program 3 (id=1040): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r1, 0x0, r0}, 0x10) 2.479863049s ago: executing program 3 (id=1041): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000081) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$kcm(0x11, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.335938937s ago: executing program 9 (id=1042): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r1 = socket$kcm(0x2c, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x11b, 0x2, &(0x7f0000000040)=r2, 0x4) 2.048150622s ago: executing program 3 (id=1043): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x440c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETTXFILTER(r3, 0x400454d1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x20}) 1.981628878s ago: executing program 7 (id=1044): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10800, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x90480, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x4) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 1.89964701s ago: executing program 9 (id=1045): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x2, 0x1000000}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x106d4c8, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.739380777s ago: executing program 7 (id=1046): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r1) socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x2, 0x0, &(0x7f0000000180)="0005", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x9a) 1.526474757s ago: executing program 9 (id=1047): r0 = socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x2, 0x3, 0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x7}, 0x1112ba, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x24, 0x107, 0x70bd2d, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1946}, 0x10c00, 0x0, 0x0, 0x9, 0x7fff, 0x3, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(r0, 0x84, 0x8, &(0x7f0000000000), 0x8) 1.461619952s ago: executing program 3 (id=1048): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, 0x0, 0x4000040) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/143, 0x8f}], 0x1}, 0x2) 1.369819081s ago: executing program 7 (id=1049): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.028186038s ago: executing program 9 (id=1050): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 953.506601ms ago: executing program 9 (id=1051): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x4, 0x0, 0xfffffffffe, 0x828, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x7f, 0x1}, 0x4108, 0x3, 0x1, 0x6, 0x7, 0x401, 0x802, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r3, 0x5452, &(0x7f00000013c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00 \x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) recvmsg$unix(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=1056): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x6dd, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. [ 104.092195][ T5818] cgroup: Unknown subsys name 'net' [ 104.287705][ T5818] cgroup: Unknown subsys name 'cpuset' [ 104.299805][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 106.218868][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 108.867070][ T43] cfg80211: failed to load regulatory.db [ 110.426524][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.439372][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.449271][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.464028][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.475338][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.484348][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.487529][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.501565][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.510334][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.522778][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.531021][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.533170][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.543964][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.559173][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.561123][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.578319][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.578333][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.581153][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.590018][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.599895][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.612868][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.629770][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.644258][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.656074][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.672766][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.481486][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 111.625925][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 111.673067][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 111.945200][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.954661][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.965752][ T5839] bridge_slave_0: entered allmulticast mode [ 111.974653][ T5839] bridge_slave_0: entered promiscuous mode [ 111.986855][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 111.999525][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 112.049652][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.058378][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.066138][ T5839] bridge_slave_1: entered allmulticast mode [ 112.075350][ T5839] bridge_slave_1: entered promiscuous mode [ 112.177084][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.185334][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.192835][ T5836] bridge_slave_0: entered allmulticast mode [ 112.201042][ T5836] bridge_slave_0: entered promiscuous mode [ 112.211327][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.219600][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.229050][ T5838] bridge_slave_0: entered allmulticast mode [ 112.237024][ T5838] bridge_slave_0: entered promiscuous mode [ 112.295177][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.302799][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.311278][ T5836] bridge_slave_1: entered allmulticast mode [ 112.319379][ T5836] bridge_slave_1: entered promiscuous mode [ 112.328067][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.335452][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.343869][ T5838] bridge_slave_1: entered allmulticast mode [ 112.352188][ T5838] bridge_slave_1: entered promiscuous mode [ 112.363627][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.426586][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.517632][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.531677][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.568908][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.576472][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.584089][ T5835] bridge_slave_0: entered allmulticast mode [ 112.592261][ T5835] bridge_slave_0: entered promiscuous mode [ 112.603750][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.616327][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.629523][ T5839] team0: Port device team_slave_0 added [ 112.652482][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.660244][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.667991][ T5835] bridge_slave_1: entered allmulticast mode [ 112.676103][ T5835] bridge_slave_1: entered promiscuous mode [ 112.699023][ T5839] team0: Port device team_slave_1 added [ 112.713836][ T5843] Bluetooth: hci1: command tx timeout [ 112.714038][ T5853] Bluetooth: hci2: command tx timeout [ 112.726276][ T5847] Bluetooth: hci4: command tx timeout [ 112.737255][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.746238][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.754539][ T5837] bridge_slave_0: entered allmulticast mode [ 112.764531][ T5837] bridge_slave_0: entered promiscuous mode [ 112.785000][ T5853] Bluetooth: hci3: command tx timeout [ 112.785007][ T5847] Bluetooth: hci0: command tx timeout [ 112.837195][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.845359][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.852880][ T5837] bridge_slave_1: entered allmulticast mode [ 112.860926][ T5837] bridge_slave_1: entered promiscuous mode [ 112.886739][ T5836] team0: Port device team_slave_0 added [ 112.896631][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.925410][ T5838] team0: Port device team_slave_0 added [ 112.946312][ T5836] team0: Port device team_slave_1 added [ 112.955568][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.969956][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.978114][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.008250][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.023022][ T5838] team0: Port device team_slave_1 added [ 113.067977][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.075757][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.104302][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.132469][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.194335][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.206195][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.214206][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.242518][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.256757][ T5835] team0: Port device team_slave_0 added [ 113.265322][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.273593][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.301251][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.327339][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.334611][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.363277][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.376608][ T5835] team0: Port device team_slave_1 added [ 113.399738][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.407418][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.434891][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.514201][ T5837] team0: Port device team_slave_0 added [ 113.523035][ T5837] team0: Port device team_slave_1 added [ 113.529879][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.538003][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.566509][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.607773][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.615366][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.642515][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.660304][ T5839] hsr_slave_0: entered promiscuous mode [ 113.668082][ T5839] hsr_slave_1: entered promiscuous mode [ 113.736710][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.748958][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.777285][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.790458][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.797630][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.825680][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.869057][ T5836] hsr_slave_0: entered promiscuous mode [ 113.876302][ T5836] hsr_slave_1: entered promiscuous mode [ 113.884918][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 113.890815][ T5836] Cannot create hsr debugfs directory [ 113.911239][ T5838] hsr_slave_0: entered promiscuous mode [ 113.918208][ T5838] hsr_slave_1: entered promiscuous mode [ 113.924895][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 113.930782][ T5838] Cannot create hsr debugfs directory [ 114.024794][ T5835] hsr_slave_0: entered promiscuous mode [ 114.031790][ T5835] hsr_slave_1: entered promiscuous mode [ 114.039663][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 114.046352][ T5835] Cannot create hsr debugfs directory [ 114.118818][ T5837] hsr_slave_0: entered promiscuous mode [ 114.126611][ T5837] hsr_slave_1: entered promiscuous mode [ 114.133911][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 114.139760][ T5837] Cannot create hsr debugfs directory [ 114.681091][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.700871][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.728149][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.742403][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.783870][ T5853] Bluetooth: hci1: command tx timeout [ 114.783890][ T5847] Bluetooth: hci2: command tx timeout [ 114.785054][ T5843] Bluetooth: hci4: command tx timeout [ 114.844063][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 114.860792][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 114.869199][ T5853] Bluetooth: hci3: command tx timeout [ 114.875122][ T5853] Bluetooth: hci0: command tx timeout [ 114.893551][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 114.920537][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.018083][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.034429][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.050894][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.069433][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.209547][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.236110][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.265685][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.305221][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.431891][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.462470][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 115.481650][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 115.502293][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 115.519839][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 115.588273][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.630930][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.639525][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.667326][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.702036][ T2128] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.709870][ T2128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.748218][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.772212][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.823017][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.831557][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.887556][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.905346][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.913188][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.979877][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.988158][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.033002][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.040695][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.152573][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.300679][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.322257][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.354159][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.362205][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.428233][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.436224][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.520215][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.568511][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.608209][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.616693][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.718997][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.726867][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.843584][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.865823][ T5853] Bluetooth: hci1: command tx timeout [ 116.865854][ T5847] Bluetooth: hci2: command tx timeout [ 116.878834][ T5843] Bluetooth: hci4: command tx timeout [ 116.945282][ T5843] Bluetooth: hci0: command tx timeout [ 116.952685][ T5847] Bluetooth: hci3: command tx timeout [ 116.997308][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.017848][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.039613][ T5839] veth0_vlan: entered promiscuous mode [ 117.117069][ T5839] veth1_vlan: entered promiscuous mode [ 117.257607][ T5837] veth0_vlan: entered promiscuous mode [ 117.291259][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.310766][ T5837] veth1_vlan: entered promiscuous mode [ 117.390689][ T5839] veth0_macvtap: entered promiscuous mode [ 117.416032][ T5838] veth0_vlan: entered promiscuous mode [ 117.439105][ T5839] veth1_macvtap: entered promiscuous mode [ 117.497335][ T5838] veth1_vlan: entered promiscuous mode [ 117.566582][ T5837] veth0_macvtap: entered promiscuous mode [ 117.605554][ T5837] veth1_macvtap: entered promiscuous mode [ 117.627334][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.670818][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.685327][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.740037][ T3074] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.770927][ T3074] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.783687][ T3074] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.809009][ T3074] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.878634][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.900472][ T5838] veth0_macvtap: entered promiscuous mode [ 117.945453][ T5838] veth1_macvtap: entered promiscuous mode [ 117.965533][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.049377][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.092092][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.103772][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.140570][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.151613][ T5836] veth0_vlan: entered promiscuous mode [ 118.187944][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.204915][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.237799][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.271798][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.319309][ T5836] veth1_vlan: entered promiscuous mode [ 118.332512][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.346854][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.377329][ T1133] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.386985][ T1133] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.415331][ T1133] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.429224][ T1133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.491530][ T5835] veth0_vlan: entered promiscuous mode [ 118.502928][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.527315][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.572985][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 118.642514][ T5835] veth1_vlan: entered promiscuous mode [ 118.696495][ T4581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.710159][ T5836] veth0_macvtap: entered promiscuous mode [ 118.733634][ T4581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.797966][ T5836] veth1_macvtap: entered promiscuous mode [ 118.851541][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.886988][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.926880][ T5951] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.949167][ T5843] Bluetooth: hci2: command tx timeout [ 118.949897][ T5853] Bluetooth: hci4: command tx timeout [ 118.962429][ T5847] Bluetooth: hci1: command tx timeout [ 119.024393][ T5847] Bluetooth: hci3: command tx timeout [ 119.034946][ T5847] Bluetooth: hci0: command tx timeout [ 119.108060][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.136082][ T5835] veth0_macvtap: entered promiscuous mode [ 119.168658][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.184093][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.201337][ T5835] veth1_macvtap: entered promiscuous mode [ 119.201780][ C0] hrtimer: interrupt took 64661 ns [ 119.224955][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.415285][ T3074] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.458813][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.488782][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.528476][ T3074] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.603596][ T3074] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.679933][ T3074] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.716548][ T3074] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.775426][ T3074] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.788262][ T3074] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.813595][ T3074] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.842472][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.889890][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.123696][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.174288][ T5963] netlink: zone id is out of range [ 120.187897][ T5963] netlink: zone id is out of range [ 120.195484][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.235914][ T5963] netlink: zone id is out of range [ 120.259119][ T5963] netlink: zone id is out of range [ 120.275517][ T3074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.297422][ T5963] netlink: set zone limit has 8 unknown bytes [ 120.315577][ T3074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.437204][ T3074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.525486][ T3074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.381642][ T5984] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15'. [ 123.737766][ T6028] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 124.664810][ T6065] netlink: 'syz.0.35': attribute type 9 has an invalid length. [ 124.693479][ T6065] netlink: 'syz.0.35': attribute type 11 has an invalid length. [ 124.723148][ T6065] netlink: 'syz.0.35': attribute type 12 has an invalid length. [ 124.743860][ T6065] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.35'. [ 124.783221][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'. [ 128.279690][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 128.348274][ T5853] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11 [ 130.125274][ T5853] Bluetooth: hci3: unexpected event 0x01 length: 151 > 1 [ 133.709947][ T6143] -1: renamed from syzkaller0 [ 134.157347][ T6205] netlink: 52 bytes leftover after parsing attributes in process `syz.3.76'. [ 137.486867][ T6271] ======================================================= [ 137.486867][ T6271] WARNING: The mand mount option has been deprecated and [ 137.486867][ T6271] and is ignored by this kernel. Remove the mand [ 137.486867][ T6271] option from the mount to silence this warning. [ 137.486867][ T6271] ======================================================= [ 138.460599][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.119'. [ 139.587523][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.596150][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.255570][ T5853] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 140.451914][ T5853] Bluetooth: hci2: unexpected event 0x03 length: 151 > 11 [ 140.563926][ T5853] Bluetooth: hci3: unexpected event 0x23 length: 15 > 13 [ 140.608447][ T5853] Bluetooth: hci0: ISO packet for unknown connection handle 8 [ 140.812327][ T44] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.196714][ T44] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.847034][ T6345] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.131'. [ 142.066032][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 142.077602][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 142.085998][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 142.096751][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 142.107683][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 142.206416][ T44] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.304531][ T5847] Bluetooth: hci2: command 0x2016 tx timeout [ 142.372707][ T44] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.969550][ T6353] chnl_net:caif_netlink_parms(): no params data found [ 143.199861][ T44] bridge_slave_1: left allmulticast mode [ 143.243515][ T44] bridge_slave_1: left promiscuous mode [ 143.255207][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.324927][ T44] bridge_slave_0: left allmulticast mode [ 143.331125][ T44] bridge_slave_0: left promiscuous mode [ 143.363146][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.224459][ T5853] Bluetooth: hci4: command tx timeout [ 144.387231][ T5853] Bluetooth: hci2: command 0x2016 tx timeout [ 145.153399][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.185365][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.206964][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.157'. [ 145.222762][ T44] bond0 (unregistering): Released all slaves [ 146.304158][ T5847] Bluetooth: hci4: command tx timeout [ 146.597782][ T6353] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.638154][ T6353] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.653653][ T6353] bridge_slave_0: entered allmulticast mode [ 146.674003][ T6353] bridge_slave_0: entered promiscuous mode [ 146.763634][ T6353] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.771377][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.845397][ T6353] bridge_slave_1: entered allmulticast mode [ 146.893059][ T6353] bridge_slave_1: entered promiscuous mode [ 147.866262][ T6353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.978482][ T6353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.413540][ T5847] Bluetooth: hci4: command tx timeout [ 148.947005][ T6353] team0: Port device team_slave_0 added [ 149.230987][ T6353] team0: Port device team_slave_1 added [ 149.440157][ T44] hsr_slave_0: left promiscuous mode [ 150.134088][ T44] hsr_slave_1: left promiscuous mode [ 150.193629][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.209493][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.270391][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.281680][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.407106][ T44] veth1_macvtap: left promiscuous mode [ 150.419869][ T44] veth0_macvtap: left promiscuous mode [ 150.428805][ T44] veth1_vlan: left promiscuous mode [ 150.436054][ T44] veth0_vlan: left promiscuous mode [ 150.465928][ T5847] Bluetooth: hci4: command tx timeout [ 152.338277][ T44] team0 (unregistering): Port device team_slave_1 removed [ 152.429297][ T44] team0 (unregistering): Port device team_slave_0 removed [ 152.487416][ T6561] TCP: TCP_TX_DELAY enabled [ 153.018548][ T6532] warning: `syz.4.180' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 153.054575][ T6353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.086374][ T6353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.169638][ T6353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.251220][ T6353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.313433][ T6353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.446085][ T6353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.951175][ T6353] hsr_slave_0: entered promiscuous mode [ 153.990965][ T6353] hsr_slave_1: entered promiscuous mode [ 154.261947][ T6595] xt_l2tp: v2 tid > 0xffff: 16462212 [ 155.628530][ T6353] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.709315][ T6353] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.766064][ T6353] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.801123][ T6353] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 156.233253][ T6353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.350987][ T6353] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.407705][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.415313][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.470863][ T6054] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.479413][ T6054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.470063][ T6353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.510491][ T6353] veth0_vlan: entered promiscuous mode [ 158.536646][ T6353] veth1_vlan: entered promiscuous mode [ 158.644037][ T6353] veth0_macvtap: entered promiscuous mode [ 158.676396][ T6353] veth1_macvtap: entered promiscuous mode [ 158.760466][ T6353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.916301][ T6353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.975006][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.034516][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.069322][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.106452][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.681735][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.751892][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.015561][ T6055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.105216][ T6055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.678128][ T6768] tap0: tun_chr_ioctl cmd 1074025675 [ 161.694800][ T6768] tap0: persist enabled [ 161.723916][ T6768] tap0: tun_chr_ioctl cmd 1074025675 [ 161.730023][ T6768] tap0: persist disabled [ 162.168428][ T30] audit: type=1107 audit(1767228318.267:2): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ó¤kJL' [ 162.202381][ T30] audit: type=1107 audit(1767228318.287:3): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='V/ÒÀá' [ 163.307501][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 163.762103][ T6824] syzkaller0: entered allmulticast mode [ 167.698167][ T6886] netlink: 64 bytes leftover after parsing attributes in process `syz.5.286'. [ 175.286783][ T6977] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 175.389237][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 178.805849][ T7051] syz.0.356 (7051) used greatest stack depth: 17472 bytes left [ 179.489901][ T5847] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 180.080760][ T7088] syz.0.359 uses obsolete (PF_INET,SOCK_PACKET) [ 180.592795][ T7101] netlink: 20 bytes leftover after parsing attributes in process `syz.5.363'. [ 182.537539][ T7090] netlink: 763 bytes leftover after parsing attributes in process `syz.2.360'. [ 183.154518][ T7147] netlink: 'syz.0.384': attribute type 21 has an invalid length. [ 183.197638][ T7147] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.384'. [ 184.750357][ T7185] syzkaller0: entered promiscuous mode [ 184.757261][ T7185] syzkaller0: entered allmulticast mode [ 191.959954][ T7307] netlink: 'syz.4.420': attribute type 16 has an invalid length. [ 191.969409][ T7307] netlink: 48 bytes leftover after parsing attributes in process `syz.4.420'. [ 194.919313][ T7307] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.689160][ T7369] sctp: [Deprecated]: syz.2.444 (pid 7369) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.689160][ T7369] Use struct sctp_sack_info instead [ 196.232653][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 197.185684][ T7406] lo speed is unknown, defaulting to 1000 [ 197.369041][ T7406] lo speed is unknown, defaulting to 1000 [ 197.617108][ T7406] lo speed is unknown, defaulting to 1000 [ 198.261641][ T7421] netlink: 'syz.5.463': attribute type 23 has an invalid length. [ 198.817128][ T5847] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 198.966100][ T5949] lo speed is unknown, defaulting to 1000 [ 198.987562][ T7406] infiniband syz0: set active [ 199.022138][ T7406] infiniband syz0: added lo [ 199.282141][ T7406] RDS/IB: syz0: added [ 199.305997][ T7406] smc: adding ib device syz0 with port count 1 [ 199.328516][ T7406] smc: ib device syz0 port 1 has no pnetid [ 199.358490][ T5949] lo speed is unknown, defaulting to 1000 [ 199.400890][ T7406] lo speed is unknown, defaulting to 1000 [ 199.887032][ T7406] lo speed is unknown, defaulting to 1000 [ 200.713354][ T7406] lo speed is unknown, defaulting to 1000 [ 200.864168][ T5853] Bluetooth: hci4: command 0x2016 tx timeout [ 201.030636][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.037403][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.697739][ T7406] lo speed is unknown, defaulting to 1000 [ 202.253112][ T7406] lo speed is unknown, defaulting to 1000 [ 202.944384][ T5853] Bluetooth: hci4: command 0x2016 tx timeout [ 207.867782][ T5847] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 208.232088][ T7575] netlink: 'syz.2.509': attribute type 21 has an invalid length. [ 208.242244][ T7575] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.577617][ T7582] netlink: 'syz.5.510': attribute type 3 has an invalid length. [ 209.081216][ T7605] veth1_macvtap: left promiscuous mode [ 209.100594][ T7605] macsec0: entered promiscuous mode [ 209.903411][ T5847] Bluetooth: hci2: command 0x2016 tx timeout [ 211.983403][ T5853] Bluetooth: hci2: command 0x2016 tx timeout [ 213.361689][ T7634] veth1_macvtap: left promiscuous mode [ 213.394115][ T7634] macsec0: entered promiscuous mode [ 214.924969][ T7705] veth1_macvtap: left promiscuous mode [ 214.931577][ T7705] macsec0: entered promiscuous mode [ 221.596325][ T7763] syzkaller0: entered promiscuous mode [ 221.645703][ T7763] syzkaller0: entered allmulticast mode [ 223.731058][ T5836] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 225.608961][ T5847] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 227.107593][ T7845] syzkaller0: entered promiscuous mode [ 227.118923][ T7845] syzkaller0: entered allmulticast mode [ 228.641101][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.620'. [ 228.651834][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.620'. [ 229.388446][ T7906] netlink: 28 bytes leftover after parsing attributes in process `syz.5.626'. [ 232.889051][ T7965] syzkaller0: entered promiscuous mode [ 232.950564][ T7965] syzkaller0: entered allmulticast mode [ 233.833094][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 233.833519][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 233.847055][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 233.850818][ T5150] Bluetooth: hci2: command 0x2016 tx timeout [ 234.357334][ T5150] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 235.796664][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 236.036422][ T8013] Zero length message leads to an empty skb [ 236.208647][ T8013] netlink: 132 bytes leftover after parsing attributes in process `syz.2.670'. [ 236.554631][ T8025] netlink: 14 bytes leftover after parsing attributes in process `syz.3.675'. [ 240.465553][ T5150] Bluetooth: hci2: command 0x2016 tx timeout [ 242.507708][ T4581] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.646407][ T4581] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.757796][ T4581] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.958846][ T4581] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.973174][ T8094] netlink: 88 bytes leftover after parsing attributes in process `syz.3.712'. [ 243.005531][ T8094] netlink: 48 bytes leftover after parsing attributes in process `syz.3.712'. [ 243.214053][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.228328][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.238846][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.248555][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.265697][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.275355][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.286294][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.298924][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.336109][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.345788][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.382228][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.397085][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.415089][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.426009][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 243.437199][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.528880][ T8097] lo speed is unknown, defaulting to 1000 [ 243.546026][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.558264][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.567743][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.577466][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.594098][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 243.700065][ T4581] bridge_slave_1: left allmulticast mode [ 243.723589][ T4581] bridge_slave_1: left promiscuous mode [ 243.731194][ T4581] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.756959][ T4581] bridge_slave_0: left allmulticast mode [ 243.764322][ T4581] bridge_slave_0: left promiscuous mode [ 243.771519][ T4581] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.234288][ T4581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.248520][ T4581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.264198][ T4581] bond0 (unregistering): Released all slaves [ 244.360008][ T8109] netlink: 64 bytes leftover after parsing attributes in process `syz.3.715'. [ 244.389665][ T8095] lo speed is unknown, defaulting to 1000 [ 245.012003][ T8100] lo speed is unknown, defaulting to 1000 [ 245.343567][ T5150] Bluetooth: hci1: command tx timeout [ 245.423404][ T5150] Bluetooth: hci2: command tx timeout [ 245.503579][ T5150] Bluetooth: hci3: command tx timeout [ 245.673603][ T5150] Bluetooth: hci4: command tx timeout [ 245.689497][ T8105] lo speed is unknown, defaulting to 1000 [ 245.864791][ T8097] chnl_net:caif_netlink_parms(): no params data found [ 246.227802][ T8095] chnl_net:caif_netlink_parms(): no params data found [ 246.579096][ T8097] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.604307][ T8097] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.651972][ T8097] bridge_slave_0: entered allmulticast mode [ 246.664599][ T8097] bridge_slave_0: entered promiscuous mode [ 246.765549][ T8097] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.774865][ T8097] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.791598][ T8097] bridge_slave_1: entered allmulticast mode [ 246.805561][ T8097] bridge_slave_1: entered promiscuous mode [ 246.890627][ T4581] hsr_slave_0: left promiscuous mode [ 246.912239][ T4581] hsr_slave_1: left promiscuous mode [ 246.925576][ T4581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.948475][ T4581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.974405][ T4581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.005851][ T4581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.079197][ T4581] veth1_macvtap: left promiscuous mode [ 247.085139][ T4581] veth0_macvtap: left promiscuous mode [ 247.093059][ T4581] veth1_vlan: left promiscuous mode [ 247.099336][ T4581] veth0_vlan: left promiscuous mode [ 247.423665][ T5150] Bluetooth: hci1: command tx timeout [ 247.503796][ T5150] Bluetooth: hci2: command tx timeout [ 247.583626][ T5150] Bluetooth: hci3: command tx timeout [ 247.743433][ T5150] Bluetooth: hci4: command tx timeout [ 247.886790][ T4581] team0 (unregistering): Port device team_slave_1 removed [ 247.930678][ T4581] team0 (unregistering): Port device team_slave_0 removed [ 248.438949][ T8097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.486885][ T8097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.611479][ T8097] team0: Port device team_slave_0 added [ 248.704350][ T8181] syzkaller0: entered promiscuous mode [ 248.711469][ T8181] syzkaller0: entered allmulticast mode [ 248.721005][ T8097] team0: Port device team_slave_1 added [ 248.749066][ T8095] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.757328][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.764975][ T8095] bridge_slave_0: entered allmulticast mode [ 248.772747][ T8095] bridge_slave_0: entered promiscuous mode [ 249.503629][ T5150] Bluetooth: hci1: command tx timeout [ 249.593595][ T5150] Bluetooth: hci2: command tx timeout [ 249.673523][ T5150] Bluetooth: hci3: command tx timeout [ 249.833546][ T5150] Bluetooth: hci4: command tx timeout [ 250.252409][ T8095] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.261022][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.270587][ T8095] bridge_slave_1: entered allmulticast mode [ 250.280920][ T8095] bridge_slave_1: entered promiscuous mode [ 250.431374][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.441367][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.476329][ T8097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.500823][ T8095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.525696][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.535044][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.568192][ T8097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.625748][ T8095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.658926][ T8100] chnl_net:caif_netlink_parms(): no params data found [ 251.019042][ T8095] team0: Port device team_slave_0 added [ 251.063725][ T8097] hsr_slave_0: entered promiscuous mode [ 251.070889][ T8097] hsr_slave_1: entered promiscuous mode [ 251.091032][ T8097] debugfs: 'hsr0' already exists in 'hsr' [ 251.105903][ T8097] Cannot create hsr debugfs directory [ 251.150276][ T8095] team0: Port device team_slave_1 added [ 251.211275][ T8204] syz.3.735: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 251.235053][ T8204] CPU: 0 UID: 0 PID: 8204 Comm: syz.3.735 Not tainted syzkaller #0 PREEMPT(full) [ 251.235086][ T8204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.235110][ T8204] Call Trace: [ 251.235122][ T8204] [ 251.235135][ T8204] dump_stack_lvl+0x189/0x250 [ 251.235179][ T8204] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 251.235210][ T8204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.235255][ T8204] ? __pfx__printk+0x10/0x10 [ 251.235295][ T8204] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 251.235324][ T8204] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 251.235377][ T8204] warn_alloc+0x214/0x310 [ 251.235432][ T8204] ? stack_trace_save+0x9c/0xe0 [ 251.235481][ T8204] ? __pfx_warn_alloc+0x10/0x10 [ 251.235533][ T8204] ? kasan_save_track+0x4f/0x80 [ 251.235556][ T8204] ? kasan_save_track+0x3e/0x80 [ 251.235577][ T8204] ? __kasan_kmalloc+0x93/0xb0 [ 251.235600][ T8204] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 251.235623][ T8204] ? xskq_create+0x56/0x170 [ 251.235646][ T8204] ? xsk_setsockopt+0x57b/0x8d0 [ 251.235676][ T8204] ? do_sock_setsockopt+0x17c/0x1b0 [ 251.235703][ T8204] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 251.235736][ T8204] ? do_syscall_64+0xfa/0xf80 [ 251.235778][ T8204] __vmalloc_node_range_noprof+0x134/0x16a0 [ 251.235912][ T8204] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 251.235963][ T8204] ? __kasan_kmalloc+0x93/0xb0 [ 251.236010][ T8204] vmalloc_user_noprof+0xad/0xf0 [ 251.236035][ T8204] ? xskq_create+0xbf/0x170 [ 251.236061][ T8204] xskq_create+0xbf/0x170 [ 251.236094][ T8204] xsk_init_queue+0xb0/0x110 [ 251.236128][ T8204] xsk_setsockopt+0x57b/0x8d0 [ 251.236175][ T8204] ? __pfx_xsk_setsockopt+0x10/0x10 [ 251.236222][ T8204] ? __pfx_aa_sk_perm+0x10/0x10 [ 251.236264][ T8204] ? aa_sock_opt_perm+0xff/0x1a0 [ 251.236308][ T8204] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 251.236328][ T8204] ? __pfx_xsk_setsockopt+0x10/0x10 [ 251.236371][ T8204] do_sock_setsockopt+0x17c/0x1b0 [ 251.236413][ T8204] __x64_sys_setsockopt+0x13f/0x1b0 [ 251.236461][ T8204] do_syscall_64+0xfa/0xf80 [ 251.236493][ T8204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.236517][ T8204] ? clear_bhb_loop+0x60/0xb0 [ 251.236553][ T8204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.236577][ T8204] RIP: 0033:0x7f20bb98f749 [ 251.236604][ T8204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.236621][ T8204] RSP: 002b:00007f20b9bee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 251.236646][ T8204] RAX: ffffffffffffffda RBX: 00007f20bbbe5fa0 RCX: 00007f20bb98f749 [ 251.236664][ T8204] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 251.236677][ T8204] RBP: 00007f20bba13f91 R08: 0000000000000004 R09: 0000000000000000 [ 251.236688][ T8204] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 251.236700][ T8204] R13: 00007f20bbbe6038 R14: 00007f20bbbe5fa0 R15: 00007ffd07c443c8 [ 251.236778][ T8204] [ 251.236797][ T8204] Mem-Info: [ 251.597290][ T5150] Bluetooth: hci1: command tx timeout [ 251.673859][ T5150] Bluetooth: hci2: command tx timeout [ 251.684100][ T8204] active_anon:12086 inactive_anon:0 isolated_anon:0 [ 251.684100][ T8204] active_file:13192 inactive_file:39941 isolated_file:0 [ 251.684100][ T8204] unevictable:768 dirty:294 writeback:0 [ 251.684100][ T8204] slab_reclaimable:10641 slab_unreclaimable:100351 [ 251.684100][ T8204] mapped:29116 shmem:1364 pagetables:1168 [ 251.684100][ T8204] sec_pagetables:0 bounce:0 [ 251.684100][ T8204] kernel_misc_reclaimable:0 [ 251.684100][ T8204] free:1305557 free_pcp:13713 free_cma:0 [ 251.745339][ T5150] Bluetooth: hci3: command tx timeout [ 251.783760][ T8204] Node 0 active_anon:48344kB inactive_anon:0kB active_file:52768kB inactive_file:159556kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116464kB dirty:1176kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12636kB pagetables:4548kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 251.841698][ T4581] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.895504][ T8204] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 251.944004][ T5150] Bluetooth: hci4: command tx timeout [ 251.963620][ T8204] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.014403][ T8204] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 252.033832][ T8204] Node 0 DMA32 free:1308064kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48544kB inactive_anon:0kB active_file:52768kB inactive_file:159556kB unevictable:1536kB writepending:1176kB zspages:0kB present:3129332kB managed:2559344kB mlocked:0kB bounce:0kB free_pcp:33936kB local_pcp:20052kB free_cma:0kB [ 252.078238][ T8105] chnl_net:caif_netlink_parms(): no params data found [ 252.110233][ T8204] lowmem_reserve[]: 0 0 1 1 1 [ 252.117841][ T8204] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.156446][ T8204] lowmem_reserve[]: 0 0 0 0 0 [ 252.161610][ T8204] Node 1 Normal free:3898804kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19960kB local_pcp:14808kB free_cma:0kB [ 252.228018][ T8204] lowmem_reserve[]: 0 0 0 0 0 [ 252.237348][ T8204] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 252.279707][ T8204] Node 0 DMA32: 31*4kB (UME) 1327*8kB (UM) 1055*16kB (UME) 334*32kB (UME) 208*64kB (UM) 104*128kB (UME) 96*256kB (UME) 39*512kB (UM) 20*1024kB (UM) 19*2048kB (UM) 278*4096kB (M) = 1307556kB [ 252.310458][ T8204] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 252.328637][ T8204] Node 1 Normal: 111*4kB (UE) 59*8kB (UME) 34*16kB (UME) 84*32kB (UME) 28*64kB (UME) 7*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3898804kB [ 252.363550][ T8204] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 252.376791][ T8204] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 252.424436][ T8204] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 252.438726][ T8204] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 252.473453][ T8204] 54493 total pagecache pages [ 252.481272][ T8204] 0 pages in swap cache [ 252.486505][ T8204] Free swap = 124996kB [ 252.488536][ T8100] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.500691][ T8204] Total swap = 124996kB [ 252.508934][ T8204] 2097051 pages RAM [ 252.521936][ T8100] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.524334][ T8204] 0 pages HighMem/MovableOnly [ 252.534851][ T8100] bridge_slave_0: entered allmulticast mode [ 252.544206][ T8204] 425125 pages reserved [ 252.550942][ T8204] 0 pages cma reserved [ 252.563054][ T8100] bridge_slave_0: entered promiscuous mode [ 252.583520][ T8095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.601821][ T8095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.684278][ T8095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.749120][ T4581] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.827322][ T8217] netlink: 'syz.3.736': attribute type 7 has an invalid length. [ 252.871289][ T8100] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.886210][ T8100] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.895230][ T8100] bridge_slave_1: entered allmulticast mode [ 252.905370][ T8100] bridge_slave_1: entered promiscuous mode [ 252.916189][ T8095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.925046][ T8095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.956337][ T8095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.093745][ T4581] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.176877][ T8226] netlink: 'syz.3.737': attribute type 1 has an invalid length. [ 253.188284][ T8226] netlink: 'syz.3.737': attribute type 4 has an invalid length. [ 253.197489][ T8226] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.737'. [ 253.215240][ T8100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.256672][ T4581] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.316393][ T8105] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.340536][ T8105] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.349062][ T8105] bridge_slave_0: entered allmulticast mode [ 253.357606][ T8105] bridge_slave_0: entered promiscuous mode [ 253.371265][ T8100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.488091][ T8105] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.503582][ T8105] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.512281][ T8105] bridge_slave_1: entered allmulticast mode [ 253.547916][ T8105] bridge_slave_1: entered promiscuous mode [ 253.607411][ T8095] hsr_slave_0: entered promiscuous mode [ 253.615778][ T8095] hsr_slave_1: entered promiscuous mode [ 253.625505][ T8095] debugfs: 'hsr0' already exists in 'hsr' [ 253.633136][ T8095] Cannot create hsr debugfs directory [ 253.691474][ T8100] team0: Port device team_slave_0 added [ 253.741703][ T8100] team0: Port device team_slave_1 added [ 253.812182][ T8105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.881739][ T8105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.005616][ T8100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.015467][ T8100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.047361][ T8100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.125290][ T8100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.135951][ T8100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.191665][ T8100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.231605][ T8105] team0: Port device team_slave_0 added [ 254.286863][ T8105] team0: Port device team_slave_1 added [ 254.478250][ T8105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.488046][ T8105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.519115][ T8105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.549721][ T8100] hsr_slave_0: entered promiscuous mode [ 254.557455][ T8100] hsr_slave_1: entered promiscuous mode [ 254.567905][ T8100] debugfs: 'hsr0' already exists in 'hsr' [ 254.573927][ T8100] Cannot create hsr debugfs directory [ 254.605256][ T8105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.613801][ T8105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.640662][ T8105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.756869][ T4581] bridge_slave_1: left allmulticast mode [ 254.773948][ T4581] bridge_slave_1: left promiscuous mode [ 254.779882][ T4581] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.824646][ T4581] bridge_slave_0: left allmulticast mode [ 254.830533][ T4581] bridge_slave_0: left promiscuous mode [ 254.855040][ T4581] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.012507][ T4581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.030001][ T4581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.045252][ T4581] bond0 (unregistering): Released all slaves [ 257.467706][ T8097] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 257.687530][ T8097] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 257.702908][ T8097] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 257.739176][ T8105] hsr_slave_0: entered promiscuous mode [ 257.750935][ T8105] hsr_slave_1: entered promiscuous mode [ 257.768811][ T8105] debugfs: 'hsr0' already exists in 'hsr' [ 257.800928][ T8105] Cannot create hsr debugfs directory [ 257.885312][ T8097] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 258.758526][ T8095] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 258.807492][ T8095] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 258.906622][ T8095] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 259.034394][ T8095] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 259.101796][ T4581] hsr_slave_0: left promiscuous mode [ 259.112950][ T4581] hsr_slave_1: left promiscuous mode [ 259.120695][ T4581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.129437][ T4581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.140186][ T4581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.151185][ T4581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.186333][ T4581] veth0_macvtap: left promiscuous mode [ 259.200720][ T4581] veth1_vlan: left promiscuous mode [ 259.208716][ T4581] veth0_vlan: left promiscuous mode [ 259.759679][ T4581] team0 (unregistering): Port device team_slave_1 removed [ 259.809738][ T4581] team0 (unregistering): Port device team_slave_0 removed [ 260.543102][ T8100] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 260.609280][ T8100] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 260.642873][ T8100] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 260.761200][ T8100] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 261.006631][ T8105] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 261.046046][ T8105] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 261.122164][ T8097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.148660][ T8105] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 261.178899][ T8105] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 261.240666][ T8097] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.305456][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.312953][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.347012][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.354591][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.493140][ T8095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.546728][ T8332] netlink: set zone limit has 4 unknown bytes [ 261.728158][ T8095] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.814440][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.822152][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.858918][ T8100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.878149][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.886851][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.974987][ T8100] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.043993][ T8105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.061015][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.068757][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.100073][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.109187][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.258124][ T8105] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.316963][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.324929][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.369859][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.377536][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.468672][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.484628][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.575910][ T8097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.059710][ T8095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.513016][ T8100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.834393][ T8105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.192089][ T8097] veth0_vlan: entered promiscuous mode [ 264.278101][ T8097] veth1_vlan: entered promiscuous mode [ 264.430743][ T8097] veth0_macvtap: entered promiscuous mode [ 264.473095][ T8097] veth1_macvtap: entered promiscuous mode [ 264.580351][ T8097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.666462][ T8097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.717207][ T4581] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.749504][ T4581] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.783044][ T4581] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.101587][ T4581] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.409775][ T8095] veth0_vlan: entered promiscuous mode [ 266.511996][ T8100] veth0_vlan: entered promiscuous mode [ 266.559255][ T3074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.577843][ T3074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.577973][ T8095] veth1_vlan: entered promiscuous mode [ 266.645052][ T8100] veth1_vlan: entered promiscuous mode [ 266.745782][ T8105] veth0_vlan: entered promiscuous mode [ 266.769290][ T8105] veth1_vlan: entered promiscuous mode [ 266.820511][ T4581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.866765][ T4581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.991044][ T8105] veth0_macvtap: entered promiscuous mode [ 267.032944][ T8100] veth0_macvtap: entered promiscuous mode [ 267.084591][ T8105] veth1_macvtap: entered promiscuous mode [ 267.124180][ T8095] veth0_macvtap: entered promiscuous mode [ 267.162455][ T8100] veth1_macvtap: entered promiscuous mode [ 267.215666][ T8095] veth1_macvtap: entered promiscuous mode [ 267.261585][ T8105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.384058][ T8105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.463644][ T8100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.500043][ T8095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.553342][ T44] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.581455][ T8100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.636335][ T6048] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.674655][ T8095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.692626][ T6048] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.775742][ T6048] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.805201][ T6048] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.833593][ T6048] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.842839][ T6048] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.879618][ T6048] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.898289][ T6048] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.985771][ T6048] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.022553][ T6048] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.075196][ T6048] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.315372][ T6840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.373396][ T6840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.477907][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.488258][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.794778][ T6055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.830870][ T6055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.926107][ T4581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.953795][ T4581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.273079][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.335182][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.388739][ T6048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.478574][ T6048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.744583][ T8463] delete_channel: no stack [ 272.428518][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.8.788'. [ 272.492597][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.8.788'. [ 273.878221][ T8520] syzkaller0: entered promiscuous mode [ 273.887476][ T8520] syzkaller0: entered allmulticast mode [ 274.874268][ T8536] netlink: 'syz.9.802': attribute type 21 has an invalid length. [ 274.905726][ T8536] netlink: 100 bytes leftover after parsing attributes in process `syz.9.802'. [ 276.014991][ T8555] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 276.024613][ T8555] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 276.033808][ T8555] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 276.043332][ T8555] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 276.052550][ T8555] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 276.061917][ T8555] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 276.071158][ T8555] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 276.081036][ T8555] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 276.090549][ T8555] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 276.100019][ T8555] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 279.273088][ T8589] netlink: 'syz.6.826': attribute type 15 has an invalid length. [ 279.292255][ T8589] netlink: 'syz.6.826': attribute type 7 has an invalid length. [ 280.518078][ T8596] netlink: 28 bytes leftover after parsing attributes in process `syz.9.830'. [ 280.862388][ T8594] delete_channel: no stack [ 281.902293][ T8647] delete_channel: no stack [ 282.096717][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.7.847'. [ 282.115063][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.7.847'. [ 283.900996][ T8679] netlink: 'syz.9.858': attribute type 11 has an invalid length. [ 284.087445][ T6027] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.868020][ T6027] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.649236][ T6027] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.114916][ T8719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 286.126263][ T6027] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.285782][ T8719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 286.521586][ T8706] syzkaller0: entered promiscuous mode [ 286.554048][ T8706] syzkaller0: entered allmulticast mode [ 287.611515][ T8719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 287.734317][ T8744] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.875'. [ 287.885948][ T8747] net_ratelimit: 3319 callbacks suppressed [ 287.885977][ T8747] netlink: ct family unspecified [ 287.908912][ T8747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.843353][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.8.882'. [ 288.859417][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.8.882'. [ 289.111018][ T8761] netlink: 'syz.8.883': attribute type 19 has an invalid length. [ 289.120087][ T8761] netlink: 14552 bytes leftover after parsing attributes in process `syz.8.883'. [ 291.957353][ T5150] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 292.384638][ T6027] bridge_slave_1: left allmulticast mode [ 292.430914][ T6027] bridge_slave_1: left promiscuous mode [ 292.478473][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.827249][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.898'. [ 292.881247][ T8812] netlink: 'syz.6.898': attribute type 1 has an invalid length. [ 293.209491][ T6027] bridge_slave_0: left promiscuous mode [ 293.231898][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.565852][ T8822] delete_channel: no stack [ 294.300339][ T8837] netlink: 'syz.7.904': attribute type 3 has an invalid length. [ 294.311800][ T8837] netlink: 132 bytes leftover after parsing attributes in process `syz.7.904'. [ 294.659223][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.696212][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.749908][ T6027] bond0 (unregistering): Released all slaves [ 297.087214][ T8807] syzkaller0: entered promiscuous mode [ 297.092731][ T8807] syzkaller0: entered allmulticast mode [ 297.415799][ T8867] netlink: 'syz.9.915': attribute type 1 has an invalid length. [ 301.336401][ T8897] netlink: 'syz.6.922': attribute type 11 has an invalid length. [ 304.320720][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.8.931'. [ 306.244055][ T6027] hsr_slave_0: left promiscuous mode [ 306.260855][ T6027] hsr_slave_1: left promiscuous mode [ 306.310701][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.361973][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.681770][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.784290][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.849934][ T6027] veth1_macvtap: left promiscuous mode [ 306.868664][ T6027] veth0_macvtap: left promiscuous mode [ 306.885396][ T6027] veth1_vlan: left promiscuous mode [ 306.903929][ T6027] veth0_vlan: left promiscuous mode [ 307.699366][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 307.751870][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 309.107712][ T8991] netlink: 'syz.3.951': attribute type 4 has an invalid length. [ 309.377130][ T6027] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.715092][ T6027] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.147902][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.174327][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 310.184342][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.204388][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.212875][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.229740][ T6027] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.244622][ T5150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 310.256609][ T5150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 310.272595][ T5150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 310.297798][ T5150] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 310.306680][ T5150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 310.467480][ T6027] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.581146][ T9015] lo speed is unknown, defaulting to 1000 [ 311.208150][ T6027] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.429197][ T6027] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.583970][ T9016] lo speed is unknown, defaulting to 1000 [ 311.795976][ T6027] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.235646][ T6027] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.303510][ T5150] Bluetooth: hci2: command tx timeout [ 312.383482][ T5150] Bluetooth: hci3: command tx timeout [ 313.107221][ T9015] chnl_net:caif_netlink_parms(): no params data found [ 313.563078][ T6027] bridge_slave_1: left allmulticast mode [ 313.569251][ T6027] bridge_slave_1: left promiscuous mode [ 313.575876][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.605792][ T6027] bridge_slave_0: left allmulticast mode [ 313.612268][ T6027] bridge_slave_0: left promiscuous mode [ 313.622628][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.670207][ T6027] bridge_slave_1: left allmulticast mode [ 313.695218][ T6027] bridge_slave_1: left promiscuous mode [ 313.703605][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.778109][ T6027] bridge_slave_0: left allmulticast mode [ 313.786562][ T6027] bridge_slave_0: left promiscuous mode [ 313.792573][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.383658][ T5150] Bluetooth: hci2: command tx timeout [ 314.639603][ T5150] Bluetooth: hci3: command tx timeout [ 314.832359][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.9.985'. [ 315.371338][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.427941][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.465885][ T6027] bond0 (unregistering): Released all slaves [ 315.907485][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.919037][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.930437][ T6027] bond0 (unregistering): Released all slaves [ 315.952573][ T9102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.977'. [ 315.962122][ T9102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.977'. [ 316.037262][ T9145] wg2: entered promiscuous mode [ 316.042223][ T9145] wg2: entered allmulticast mode [ 316.076233][ T9149] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.464529][ T5150] Bluetooth: hci2: command tx timeout [ 316.703538][ T5150] Bluetooth: hci3: command tx timeout [ 316.760971][ T9015] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.779348][ T9015] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.789020][ T9015] bridge_slave_0: entered allmulticast mode [ 316.815849][ T9015] bridge_slave_0: entered promiscuous mode [ 316.951703][ T9015] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.977137][ T9015] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.000261][ T9015] bridge_slave_1: entered allmulticast mode [ 317.031288][ T9015] bridge_slave_1: entered promiscuous mode [ 317.190965][ T9016] chnl_net:caif_netlink_parms(): no params data found [ 317.361738][ T9015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.443142][ T9185] ªªªªª»: renamed from vlan0 (while UP) [ 317.537735][ T9015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.544796][ T5150] Bluetooth: hci2: command tx timeout [ 318.807410][ T5150] Bluetooth: hci3: command tx timeout [ 318.844463][ T9223] rdma_rxe: rxe_newlink: failed to add lo [ 318.891012][ T9015] team0: Port device team_slave_0 added [ 318.961193][ T9015] team0: Port device team_slave_1 added [ 319.170968][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.180044][ T9016] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.199598][ T9016] bridge_slave_0: entered allmulticast mode [ 319.209958][ T9016] bridge_slave_0: entered promiscuous mode [ 319.222241][ T9016] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.243718][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.251479][ T9016] bridge_slave_1: entered allmulticast mode [ 319.260972][ T9016] bridge_slave_1: entered promiscuous mode [ 319.277687][ T9227] ªªªªª»: renamed from vlan0 (while UP) [ 319.501440][ T9015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.516730][ T9015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.547737][ T9015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.693172][ T9015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.707757][ T9015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.739942][ T9015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.884758][ T9016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.935567][ T9016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.994895][ T9244] delete_channel: no stack [ 323.317788][ T9016] team0: Port device team_slave_0 added [ 323.327773][ T9016] team0: Port device team_slave_1 added [ 323.356068][ T9015] hsr_slave_0: entered promiscuous mode [ 323.363178][ T9015] hsr_slave_1: entered promiscuous mode [ 323.382323][ T6027] hsr_slave_0: left promiscuous mode [ 323.455477][ T6027] hsr_slave_1: left promiscuous mode [ 323.461738][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.485174][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.522007][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.554192][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.605686][ T6027] hsr_slave_0: left promiscuous mode [ 323.633361][ T6027] hsr_slave_1: left promiscuous mode [ 323.664239][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.683875][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.712459][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.741221][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.855394][ T6027] veth1_macvtap: left promiscuous mode [ 323.861051][ T6027] veth0_macvtap: left promiscuous mode [ 323.896803][ T6027] veth1_vlan: left promiscuous mode [ 323.902243][ T6027] veth0_vlan: left promiscuous mode [ 323.915124][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.924068][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.949747][ T6027] veth1_macvtap: left promiscuous mode [ 323.973530][ T6027] veth0_macvtap: left promiscuous mode [ 323.979348][ T6027] veth1_vlan: left promiscuous mode [ 324.013718][ T6027] veth0_vlan: left promiscuous mode [ 324.681055][ T9279] netlink: 'syz.3.1028': attribute type 11 has an invalid length. [ 325.528861][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 325.568708][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 326.233139][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 326.277164][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 326.675937][ T9278] lo speed is unknown, defaulting to 1000 [ 326.795601][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.802751][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.859953][ T9016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.035085][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.091703][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.146744][ T9016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.270889][ T9016] hsr_slave_0: entered promiscuous mode [ 328.323045][ T9016] hsr_slave_1: entered promiscuous mode [ 328.377754][ T9016] debugfs: 'hsr0' already exists in 'hsr' [ 328.417420][ T9016] Cannot create hsr debugfs directory [ 329.556464][ T5150] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 329.785807][ T5150] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 330.119697][ T9342] netlink: 'syz.9.1047': attribute type 2 has an invalid length. [ 330.139808][ T9342] netlink: 'syz.9.1047': attribute type 2 has an invalid length. [ 330.277113][ T9348] netlink: 'syz.7.1049': attribute type 9 has an invalid length. [ 330.293167][ T9348] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.1049'. [ 330.477116][ T9015] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 331.148067][ T9016] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.216123][ T9015] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 331.370358][ T9016] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.613491][ T5847] Bluetooth: hci1: command 0x2016 tx timeout [ 331.620469][ T5852] ================================================================== [ 331.628584][ T5852] BUG: KASAN: slab-use-after-free in hci_conn_drop+0x34/0x2b0 [ 331.636099][ T5852] Write of size 4 at addr ffff8880293d8010 by task kworker/u9:6/5852 [ 331.644192][ T5852] [ 331.646552][ T5852] CPU: 1 UID: 0 PID: 5852 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 331.646579][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 331.646595][ T5852] Workqueue: hci1 hci_cmd_sync_work [ 331.646627][ T5852] Call Trace: [ 331.646636][ T5852] [ 331.646646][ T5852] dump_stack_lvl+0x189/0x250 [ 331.646677][ T5852] ? __virt_addr_valid+0x1c8/0x5c0 [ 331.646708][ T5852] ? rcu_is_watching+0x15/0xb0 [ 331.646737][ T5852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.646762][ T5852] ? rcu_is_watching+0x15/0xb0 [ 331.646789][ T5852] ? lock_release+0x4b/0x3b0 [ 331.646810][ T5852] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 331.646835][ T5852] ? __virt_addr_valid+0x1c8/0x5c0 [ 331.646865][ T5852] ? __virt_addr_valid+0x4a5/0x5c0 [ 331.646904][ T5852] print_report+0xca/0x240 [ 331.646928][ T5852] ? hci_conn_drop+0x34/0x2b0 [ 331.646955][ T5852] kasan_report+0x118/0x150 [ 331.646985][ T5852] ? hci_conn_valid+0x21/0x230 [ 331.647015][ T5852] ? hci_conn_drop+0x34/0x2b0 [ 331.647049][ T5852] kasan_check_range+0x2b0/0x2c0 [ 331.647079][ T5852] hci_conn_drop+0x34/0x2b0 [ 331.647106][ T5852] ? __pfx_le_read_features_complete+0x10/0x10 [ 331.647132][ T5852] hci_cmd_sync_work+0x262/0x400 [ 331.647160][ T5852] ? process_scheduled_works+0x9ef/0x1770 [ 331.647185][ T5852] process_scheduled_works+0xad1/0x1770 [ 331.647224][ T5852] ? __pfx_process_scheduled_works+0x10/0x10 [ 331.647257][ T5852] worker_thread+0x8a0/0xda0 [ 331.647291][ T5852] ? __kthread_parkme+0x7b/0x200 [ 331.647322][ T5852] kthread+0x711/0x8a0 [ 331.647352][ T5852] ? __pfx_worker_thread+0x10/0x10 [ 331.647375][ T5852] ? __pfx_kthread+0x10/0x10 [ 331.647404][ T5852] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.647426][ T5852] ? lockdep_hardirqs_on+0x98/0x140 [ 331.647450][ T5852] ? __pfx_kthread+0x10/0x10 [ 331.647478][ T5852] ret_from_fork+0x599/0xb30 [ 331.647502][ T5852] ? __pfx_ret_from_fork+0x10/0x10 [ 331.647529][ T5852] ? __switch_to_asm+0x39/0x70 [ 331.647558][ T5852] ? __switch_to_asm+0x33/0x70 [ 331.647586][ T5852] ? __pfx_kthread+0x10/0x10 [ 331.647615][ T5852] ret_from_fork_asm+0x1a/0x30 [ 331.647653][ T5852] [ 331.647665][ T5852] [ 331.857031][ T5852] Allocated by task 5150: [ 331.861372][ T5852] kasan_save_track+0x3e/0x80 [ 331.866082][ T5852] __kasan_kmalloc+0x93/0xb0 [ 331.870714][ T5852] __kmalloc_cache_noprof+0x3e2/0x700 [ 331.876122][ T5852] __hci_conn_add+0x3c5/0x1b30 [ 331.881025][ T5852] le_conn_complete_evt+0x6f6/0x1420 [ 331.886348][ T5852] hci_le_enh_conn_complete_evt+0x189/0x4a0 [ 331.892272][ T5852] hci_event_packet+0x78f/0x1260 [ 331.897239][ T5852] hci_rx_work+0x3ee/0x1060 [ 331.901761][ T5852] process_scheduled_works+0xad1/0x1770 [ 331.907500][ T5852] worker_thread+0x8a0/0xda0 [ 331.912112][ T5852] kthread+0x711/0x8a0 [ 331.916208][ T5852] ret_from_fork+0x599/0xb30 [ 331.920819][ T5852] ret_from_fork_asm+0x1a/0x30 [ 331.925607][ T5852] [ 331.927950][ T5852] Freed by task 5150: [ 331.931941][ T5852] kasan_save_track+0x3e/0x80 [ 331.936636][ T5852] kasan_save_free_info+0x46/0x50 [ 331.941684][ T5852] __kasan_slab_free+0x5c/0x80 [ 331.946475][ T5852] kfree+0x1c0/0x660 [ 331.950387][ T5852] device_release+0x9e/0x1d0 [ 331.955088][ T5852] kobject_put+0x228/0x570 [ 331.959523][ T5852] hci_conn_del+0xc36/0x1240 [ 331.964141][ T5852] hci_disconn_complete_evt+0x64e/0x950 [ 331.969718][ T5852] hci_event_packet+0x7e3/0x1260 [ 331.974686][ T5852] hci_rx_work+0x3ee/0x1060 [ 331.979238][ T5852] process_scheduled_works+0xad1/0x1770 [ 331.984809][ T5852] worker_thread+0x8a0/0xda0 [ 331.989456][ T5852] kthread+0x711/0x8a0 [ 331.993561][ T5852] ret_from_fork+0x599/0xb30 [ 331.998168][ T5852] ret_from_fork_asm+0x1a/0x30 [ 332.002958][ T5852] [ 332.005306][ T5852] The buggy address belongs to the object at ffff8880293d8000 [ 332.005306][ T5852] which belongs to the cache kmalloc-8k of size 8192 [ 332.019393][ T5852] The buggy address is located 16 bytes inside of [ 332.019393][ T5852] freed 8192-byte region [ffff8880293d8000, ffff8880293da000) [ 332.033230][ T5852] [ 332.035585][ T5852] The buggy address belongs to the physical page: [ 332.042190][ T5852] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x293d8 [ 332.050976][ T5852] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 332.059501][ T5852] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 332.067062][ T5852] page_type: f5(slab) [ 332.071079][ T5852] raw: 00fff00000000040 ffff88813ffa7280 ffffea0001518600 dead000000000004 [ 332.079691][ T5852] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 332.088396][ T5852] head: 00fff00000000040 ffff88813ffa7280 ffffea0001518600 dead000000000004 [ 332.097090][ T5852] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 332.105793][ T5852] head: 00fff00000000003 ffffea0000a4f601 00000000ffffffff 00000000ffffffff [ 332.114481][ T5852] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 332.123170][ T5852] page dumped because: kasan: bad access detected [ 332.129615][ T5852] page_owner tracks the page as allocated [ 332.135430][ T5852] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7912, tgid 7911 (syz.5.629), ts 229916286848, free_ts 222585004010 [ 332.156116][ T5852] post_alloc_hook+0x234/0x290 [ 332.160913][ T5852] get_page_from_freelist+0x2365/0x2440 [ 332.166485][ T5852] __alloc_frozen_pages_noprof+0x181/0x370 [ 332.172320][ T5852] alloc_pages_mpol+0x232/0x4a0 [ 332.177202][ T5852] allocate_slab+0x86/0x3b0 [ 332.181731][ T5852] ___slab_alloc+0xf2b/0x1960 [ 332.186438][ T5852] __slab_alloc+0x65/0x100 [ 332.190879][ T5852] __kmalloc_node_track_caller_noprof+0x5d4/0x820 [ 332.197313][ T5852] kmalloc_reserve+0x136/0x290 [ 332.202101][ T5852] pskb_expand_head+0x19d/0x1160 [ 332.207072][ T5852] ip_tunnel_xmit+0x1acc/0x2390 [ 332.211952][ T5852] ipgre_xmit+0x89e/0xc50 [ 332.216302][ T5852] dev_hard_start_xmit+0x2cd/0x800 [ 332.221443][ T5852] __dev_queue_xmit+0x1493/0x3140 [ 332.226543][ T5852] __bpf_tx_skb+0x18e/0x260 [ 332.231082][ T5852] bpf_clone_redirect+0x313/0x4b0 [ 332.236128][ T5852] page last free pid 7790 tgid 7790 stack trace: [ 332.242489][ T5852] __free_frozen_pages+0xbc8/0xd30 [ 332.247629][ T5852] __put_partials+0x146/0x170 [ 332.252359][ T5852] put_cpu_partial+0x1f2/0x2d0 [ 332.257154][ T5852] __slab_free+0x288/0x2a0 [ 332.261615][ T5852] qlist_free_all+0x97/0x100 [ 332.266229][ T5852] kasan_quarantine_reduce+0x148/0x160 [ 332.271708][ T5852] __kasan_slab_alloc+0x22/0x80 [ 332.276585][ T5852] kmem_cache_alloc_noprof+0x37d/0x710 [ 332.282064][ T5852] getname_flags+0xb8/0x540 [ 332.286605][ T5852] __x64_sys_symlinkat+0x7a/0xb0 [ 332.291574][ T5852] do_syscall_64+0xfa/0xf80 [ 332.296112][ T5852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.302024][ T5852] [ 332.304366][ T5852] Memory state around the buggy address: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 332.310021][ T5852] ffff8880293d7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 332.318102][ T5852] ffff8880293d7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 332.326180][ T5852] >ffff8880293d8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.334252][ T5852] ^ [ 332.338852][ T5852] ffff8880293d8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.346926][ T5852] ffff8880293d8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.355003][ T5852] ================================================================== [ 332.404219][ T5852] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 332.411506][ T5852] CPU: 1 UID: 0 PID: 5852 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 332.421010][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 332.431105][ T5852] Workqueue: hci1 hci_cmd_sync_work [ 332.436353][ T5852] Call Trace: [ 332.439667][ T5852] [ 332.442634][ T5852] dump_stack_lvl+0x99/0x250 [ 332.447364][ T5852] ? __asan_memcpy+0x40/0x70 [ 332.451990][ T5852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.457221][ T5852] ? __pfx__printk+0x10/0x10 [ 332.461859][ T5852] vpanic+0x237/0x6d0 [ 332.465879][ T5852] ? __pfx_vpanic+0x10/0x10 [ 332.470441][ T5852] ? preempt_schedule+0xae/0xc0 [ 332.475324][ T5852] ? __pfx_preempt_schedule+0x10/0x10 [ 332.480733][ T5852] panic+0xb9/0xc0 [ 332.484505][ T5852] ? __pfx_panic+0x10/0x10 [ 332.488957][ T5852] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 332.494992][ T5852] ? is_module_address+0x17/0xf0 [ 332.499992][ T5852] ? hci_conn_drop+0x34/0x2b0 [ 332.504726][ T5852] check_panic_on_warn+0x89/0xb0 [ 332.509715][ T5852] ? hci_conn_drop+0x34/0x2b0 [ 332.514509][ T5852] end_report+0x6f/0x140 [ 332.518906][ T5852] kasan_report+0x129/0x150 [ 332.523470][ T5852] ? hci_conn_valid+0x21/0x230 [ 332.528301][ T5852] ? hci_conn_drop+0x34/0x2b0 [ 332.533043][ T5852] kasan_check_range+0x2b0/0x2c0 [ 332.538048][ T5852] hci_conn_drop+0x34/0x2b0 [ 332.542608][ T5852] ? __pfx_le_read_features_complete+0x10/0x10 [ 332.548803][ T5852] hci_cmd_sync_work+0x262/0x400 [ 332.553791][ T5852] ? process_scheduled_works+0x9ef/0x1770 [ 332.559576][ T5852] process_scheduled_works+0xad1/0x1770 [ 332.565195][ T5852] ? __pfx_process_scheduled_works+0x10/0x10 [ 332.571239][ T5852] worker_thread+0x8a0/0xda0 [ 332.575894][ T5852] ? __kthread_parkme+0x7b/0x200 [ 332.580889][ T5852] kthread+0x711/0x8a0 [ 332.585007][ T5852] ? __pfx_worker_thread+0x10/0x10 [ 332.590156][ T5852] ? __pfx_kthread+0x10/0x10 [ 332.594798][ T5852] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.600119][ T5852] ? lockdep_hardirqs_on+0x98/0x140 [ 332.605350][ T5852] ? __pfx_kthread+0x10/0x10 [ 332.610011][ T5852] ret_from_fork+0x599/0xb30 [ 332.614666][ T5852] ? __pfx_ret_from_fork+0x10/0x10 [ 332.619833][ T5852] ? __switch_to_asm+0x39/0x70 [ 332.624647][ T5852] ? __switch_to_asm+0x33/0x70 [ 332.629480][ T5852] ? __pfx_kthread+0x10/0x10 [ 332.634131][ T5852] ret_from_fork_asm+0x1a/0x30 [ 332.638982][ T5852] [ 332.642664][ T5852] Kernel Offset: disabled [ 332.646996][ T5852] Rebooting in 86400 seconds..