last executing test programs: 6m3.51019349s ago: executing program 1 (id=3143): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe4, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d990cf9318c1fd5b2ec22835c5e8325a415627a0d61727e644f3a6b68a2", 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r1, &(0x7f0000000280), 0x0}, 0x20) 6m3.422637137s ago: executing program 1 (id=3144): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 6m3.361848702s ago: executing program 1 (id=3146): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 6m2.285490629s ago: executing program 1 (id=3150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r0) 5m59.148283552s ago: executing program 1 (id=3153): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe4, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d990cf9318c1fd5b2ec22835c5e8325a415627a0d61727e644f3a6b68a2", 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r2, &(0x7f0000000280), 0x0}, 0x20) 5m59.060745598s ago: executing program 1 (id=3154): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000640), &(0x7f00000007c0)='%pi6 \x00'}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r2) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 5m56.754828974s ago: executing program 0 (id=3166): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x8, 0x6, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) 5m55.93916558s ago: executing program 0 (id=3167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="1e031800dd5c980128854d"], 0x22) 5m50.71989201s ago: executing program 0 (id=3178): perf_event_open(&(0x7f0000000380)={0x0, 0xbf, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x5}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa3a"], 0xfdef) bpf$MAP_CREATE(0x0, 0x0, 0x50) 5m50.368493289s ago: executing program 0 (id=3181): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 5m50.137956447s ago: executing program 0 (id=3183): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12e, 0x12e, 0x7, [@enum={0x1, 0x5, 0x0, 0x6, 0x4, [{0x5, 0x6}, {0x1, 0x17}, {0x4, 0x4}, {0xd, 0x10001}, {0x0, 0x1}]}, @struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x7, 0x2, 0xf37}]}, @union={0xb, 0x1, 0x0, 0x5, 0x1, 0xffffa80f, [{0xb, 0x1, 0x3ed9887c}]}, @datasec={0x9, 0x4, 0x0, 0xf, 0x2, [{0x1, 0x0, 0x10001}, {0x1, 0x1, 0x5}, {0x2, 0x3, 0xf}, {0x4, 0x8000, 0xc}], "62bb"}, @enum64={0xe, 0x6, 0x0, 0x13, 0x1, 0x6, [{0x5, 0x4c4f, 0x5}, {0x2, 0x1, 0x1}, {0x9, 0x50f, 0xe}, {0x1, 0x63b, 0x10001}, {0x1, 0x2, 0x9}, {0x3, 0x7, 0xffffff81}]}, @enum={0x8, 0x4, 0x0, 0x6, 0x4, [{0x7, 0x8}, {0x10, 0x4}, {0x7, 0x80}, {0x1, 0xc1}]}, @volatile={0xd, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x61, 0x0, 0x5f, 0x0, 0x0]}}, &(0x7f0000000640)=""/198, 0x14f, 0xc6, 0x0, 0x3ff, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe1, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xc0, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x36, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, r1, 0x0, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xe, 0x17, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x80, 0x5f, &(0x7f00000003c0)=""/95, 0x40f00, 0x25, '\x00', 0x0, @sk_skb=0x4, r3, 0x8, &(0x7f0000000780)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x2, 0x0, 0x9}, 0x10, r4, r2, 0x0, &(0x7f0000000880)=[r5], 0x0, 0x10, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m48.691859884s ago: executing program 0 (id=3190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/user\x00') ioctl$TUNSETIFF(r3, 0xb701, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000600)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x0, 0x69, 0x0, 0x0, 0x10, &(0x7f0000000980), 0x0, 0x0, 0x75, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00'}, 0x94) getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 5m43.475627245s ago: executing program 32 (id=3154): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000640), &(0x7f00000007c0)='%pi6 \x00'}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r2) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 5m33.10613127s ago: executing program 33 (id=3190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/user\x00') ioctl$TUNSETIFF(r3, 0xb701, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000600)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x0, 0x69, 0x0, 0x0, 0x10, &(0x7f0000000980), 0x0, 0x0, 0x75, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00'}, 0x94) getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 2m48.826089558s ago: executing program 5 (id=3734): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18060000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), &(0x7f0000000540)=r3}, 0x20) 2m48.447024049s ago: executing program 5 (id=3736): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 2m44.770890805s ago: executing program 5 (id=3749): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x8, 0x6, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10) 2m44.640022886s ago: executing program 5 (id=3751): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x2800000}, 0x2c) 2m44.4684049s ago: executing program 5 (id=3754): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlink(0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2b, 'pids'}]}, 0xb) 2m44.357972319s ago: executing program 5 (id=3756): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x101400, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x2d) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f0000000300)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000a17000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000", @ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250}, 0x23) 2m28.95297309s ago: executing program 34 (id=3756): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x101400, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x2d) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f0000000300)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000a17000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000", @ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000e000001000000000400000007010000080700007500fcff0000000095000000d3031a00041f8ea47c2eb2b7639c2ad3a4c89eb40634ab9b5ade7978eb59ff70cd62adbe9c31865cf39dc9e93813d9433f34dad576b1897b3533f883f9e873d9c435ab89afdd4ff0c24c0053f1721e9dc694f461734e10ea76584696317ca540336bc0e60e7d6d44484e01102b1c830d2630c3932755946ba8848b0d93caec1f4d89f99dcd2e9cb4d3646bc48d7ece5cbb87cdd67955cf5c813c05411a276d6afe065ac5849c64aebf30294fc59168bcb9a25164a1826a81cf45e576ef4dd94e292cbbf69d0787fa4b596ce132d7e976b136871cebb77ad2e34ffcf52557e6a0403769815ed13ca7b6c9f2fd7d11461997a57b35715cee9809008af9df0690f5d42d2e0f2d967aa4bc96a7d4b343411ef4d962699ffc5c434cf53339430fe9d668405875e14bea5c4aea70b9de7b9fb36561bdc896a0cc666f0d9b49832984ed9effda637edfb97defbd3219055f5a7ee877c79ec93133f0109e9746acd0cba749390a9b575a129f1838688c21ea8db8"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250}, 0x23) 14.946682826s ago: executing program 3 (id=4433): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) 14.018549511s ago: executing program 3 (id=4434): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 13.916282389s ago: executing program 3 (id=4437): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4a002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x403}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf4, 0x0, 0x0, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0x68, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x4, 0x0, 0x0, 0x504}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x42160110, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x2a}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r6}, 0x10) 9.020886863s ago: executing program 4 (id=4444): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x1c497, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200000, 0x4, @perf_bp={0x0, 0x8}, 0x7602, 0x7, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x2) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) perf_event_open(0x0, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000700000007000000013db1aee44f50c26ec1935f6760421f2a13824e68080c730485000000202365ffece2dc1a3cf4b8d1326e69ac90e86230e23c3271f0fd72a778a42fd7b43f46a510387a3f7b203693e4dcf4d89fa42f2c5a9b3bdd0d6819a777535097e5ba82909d7907677a70e09c48792c930b298c0f3cb80d535e60b54006af0ce38fdee4f45c13b751f21b8c5d65a4fb695089295d0d11a1c5cebb084ea3523d43a865f9fef8a765da69f09bdd93119aa07ca8f7efa8cd9dda8c0e0382f46ef8f6af57b1df3c6058775eba46614b68d7d57e9f004d64c06255f05561ab6acc30c72dc44d1bc8e2c1026d8b8196ba6cb57f2eef0dfa82ae319a9cd4702d713d0d61290b6acb13f6bf71104c42de42093ea1bdfd5babd06f9614ecfebf9246c1615939c9719ddc"], 0x48) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="000000000000e9ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, 0x0, 0x0) recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 7.837545599s ago: executing program 2 (id=4447): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x8, 0x6, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) 7.580822189s ago: executing program 2 (id=4449): bpf$ENABLE_STATS(0x20, &(0x7f00000006c0), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207bc7adc082cc0e8644a100000000000007010000f8ffbfffb70200000800ed00b703000000000000850000007b0000009522a9ad721fe6fedce7b4839608eaa19fc797351d89074db0a9c015e6d277ef4d6ee093e822e07cd75cbb4fc82c4b7c402237722c9939c47301282c0200c73a3bb4e359bae01acddb548b7f5a3edb6cab0048bd859877fce0a1598f02ef8154792c0a3e6c1401c37f3cb1ae46495e40d49263b956c3d12ca6cce1edfa96889a88f34a3edb5716fc94cea11f73390bc2a2f089"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x22, 0x0, &(0x7f0000000880)="e02742e8680d01000010762f080070e9b38c62d9158e36e28b3605bc409d3a677210", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000700)='ext4_shutdown\x00', r0, 0x0, 0x8000000000000001}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x2b, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0]}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x19, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa9e4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000340)='syzkaller\x00', 0x9, 0x9b, &(0x7f0000000380)=""/155, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x6, 0x7, 0xfffffff6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000005c0)=[{0x3, 0x5, 0x7, 0x2}, {0x1, 0x4, 0x7, 0xb}], 0x10, 0x40}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x4000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0}, 0x3000, 0x4, 0x0, 0x8, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$cgroup_devices(r4, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000240)={'c', ' *:* ', 'wm\x00'}, 0x9) openat$cgroup_devices(r4, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r6 = openat$cgroup_devices(r4, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='a *N* rwm\x00'], 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.874994186s ago: executing program 4 (id=4451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4cfb}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) 6.813117321s ago: executing program 6 (id=4452): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80010000}, 0x50) 6.605060628s ago: executing program 4 (id=4453): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) 5.83922343s ago: executing program 2 (id=4454): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000004000000e27f003c0dc100fab5405372335c9b010000955100000076e1264f2b080166d2d235b37652a730", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x24) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair(0x1d, 0x2, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x4018}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) 5.83474434s ago: executing program 6 (id=4455): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x2, 0xc, 0x2b, 0x7, 0x0, 0x1, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0xfffffffffffffffb, 0x5}, 0x524, 0x7, 0x76, 0x1, 0x1, 0x8, 0x2, 0x0, 0x3ff, 0x0, 0x80}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000040)=0x7f8) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x7, &(0x7f0000001ac0)=ANY=[@ANYRES64=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f00000009c0)="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", &(0x7f00000005c0)=""/126, &(0x7f0000000840)="f52547e0e6fdea28b0df2ff212684f3e784186fd28fd6936a00254fb5ef8cad76fdfc7cb66c958b33932e327d199ca17c4d247d2b7d9cb0ebc6056e4e0f9e13b1a2032313e4258a8d3df1216ec62c9563c8b50a5d77f4b9a8f481a15ed430b4ae9116438aa266e6854c0cc0f1e18d83389f379553846920b1c356b3f159e3f2afe0765eb2b36908d551654195c7f4cf892efa9d1110ed2f02101d41a44909b031f242e27c2666509096f1fe41b3f468ecc11ebf6b38d4ec25a76c1f91760289cac6b50cc1dba8c5c1159d7d7a812df59bda1a307e94a643542de0e", &(0x7f00000019c0), 0xfff}, 0x38) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r5}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) close(r7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.391708146s ago: executing program 4 (id=4456): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r0}, 0x10) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) close(r1) 5.255647927s ago: executing program 6 (id=4457): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x8, 0x6, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) 4.890467386s ago: executing program 2 (id=4458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000400000005000000000000", @ANYRES32, @ANYBLOB="00ffffffff000000000000000000e80000000000e3c8fdf126c379b4e92cb1ab55d4a627f8a12d150e3a1f988f9a9cb4", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0xfffffffc, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda3131"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x1003}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 4.889305666s ago: executing program 6 (id=4466): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x8, 0x6, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) 2.130039659s ago: executing program 3 (id=4459): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) socketpair(0x8, 0x2, 0x1ff, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b113e000000000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000fa00000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="fa82", 0x33fe0}], 0x1}, 0x20000000) 2.128506419s ago: executing program 6 (id=4468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x182, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000031c0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x4000000) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000001200)=""/180, 0xb4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xa, 0x2, 0x100}, 0x10}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'sit0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xb, [@union={0x3, 0x7, 0x0, 0x5, 0x0, 0x1ff, [{0x1, 0x5, 0x1}, {0x9, 0x4, 0x800}, {0xc, 0x3, 0x8}, {0x3, 0x1, 0x5}, {0xd, 0x3, 0x80}, {0xe, 0x3}, {0x0, 0x3, 0x3}]}, @typedef={0xf, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x30, 0x5f, 0x0, 0x0, 0x0, 0x2e, 0x5f, 0x61, 0x0]}}, &(0x7f0000000780)=""/139, 0x8f, 0x8b, 0x1, 0x7}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x7, 0x378, 0xd, 0x8180, 0x1, 0x8, '\x00', r7, r8, 0x1, 0x4, 0x4, 0xf}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff, 0xbba, '\x00', r7, r9, 0x1, 0x3}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) close(r0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) 2.127622799s ago: executing program 2 (id=4460): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000010000511d25a80648c63940d0324fc60040035400c00fa", 0x1b}], 0x1}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d18"], 0xfe33) 2.053488395s ago: executing program 4 (id=4461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4cfb}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) 2.007722279s ago: executing program 2 (id=4462): bpf$ENABLE_STATS(0x20, &(0x7f00000006c0), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207bc7adc082cc0e8644a100000000000007010000f8ffbfffb70200000800ed00b703000000000000850000007b0000009522a9ad721fe6fedce7b4839608eaa19fc797351d89074db0a9c015e6d277ef4d6ee093e822e07cd75cbb4fc82c4b7c402237722c9939c47301282c0200c73a3bb4e359bae01acddb548b7f5a3edb6cab0048bd859877fce0a1598f02ef8154792c0a3e6c1401c37f3cb1ae46495e40d49263b956c3d12ca6cce1edfa96889a88f34a3edb5716fc94cea11f73390bc2a2f089"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x22, 0x0, &(0x7f0000000880)="e02742e8680d01000010762f080070e9b38c62d9158e36e28b3605bc409d3a677210", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000700)='ext4_shutdown\x00', r0, 0x0, 0x8000000000000001}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x2b, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0]}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x19, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa9e4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000340)='syzkaller\x00', 0x9, 0x9b, &(0x7f0000000380)=""/155, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x6, 0x7, 0xfffffff6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000005c0)=[{0x3, 0x5, 0x7, 0x2}, {0x1, 0x4, 0x7, 0xb}], 0x10, 0x40}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x4000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0}, 0x3000, 0x4, 0x0, 0x8, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$cgroup_devices(r4, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000240)={'c', ' *:* ', 'wm\x00'}, 0x9) openat$cgroup_devices(r4, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r6 = openat$cgroup_devices(r4, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='a *N* rwm\x00'], 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.524297107s ago: executing program 4 (id=4463): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80010000}, 0x50) 1.292775826s ago: executing program 3 (id=4464): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) 3.9317ms ago: executing program 3 (id=4465): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x500, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000010000000000000000000000711215000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 0s ago: executing program 6 (id=4475): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) kernel console output (not intermixed with test programs): ength. [ 192.355182][ T7227] netlink: 132 bytes leftover after parsing attributes in process `syz.0.544'. [ 192.861897][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.549'. [ 192.891757][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'. [ 192.907606][ T7239] netlink: 2 bytes leftover after parsing attributes in process `syz.1.549'. [ 192.938457][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'. [ 194.598549][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.605077][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.659410][ T7289] netlink: 'syz.0.567': attribute type 39 has an invalid length. [ 195.393751][ T7317] netlink: 'syz.2.579': attribute type 39 has an invalid length. [ 198.183533][ T7342] netlink: 'syz.0.589': attribute type 39 has an invalid length. [ 199.018656][ T7367] netlink: 'syz.0.601': attribute type 39 has an invalid length. [ 199.910405][ T7393] netlink: 'syz.2.610': attribute type 39 has an invalid length. [ 200.759881][ T7417] netlink: 'syz.2.622': attribute type 39 has an invalid length. [ 201.615628][ T7442] netlink: 'syz.3.634': attribute type 39 has an invalid length. [ 202.126065][ T7464] netlink: 'syz.1.643': attribute type 39 has an invalid length. [ 203.254632][ T7494] netlink: 'syz.2.656': attribute type 39 has an invalid length. [ 204.060565][ T7520] netlink: 'syz.0.669': attribute type 39 has an invalid length. [ 205.279878][ T7553] __nla_validate_parse: 1 callbacks suppressed [ 205.279894][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'. [ 205.365396][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'. [ 205.413138][ T7553] netlink: 2 bytes leftover after parsing attributes in process `syz.1.682'. [ 205.449929][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'. [ 205.485884][ T7553] netlink: 2 bytes leftover after parsing attributes in process `syz.1.682'. [ 212.171801][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.720'. [ 212.190172][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'. [ 212.209878][ T7640] netlink: 2 bytes leftover after parsing attributes in process `syz.1.720'. [ 212.230747][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'. [ 212.273596][ T7640] netlink: 2 bytes leftover after parsing attributes in process `syz.1.720'. [ 216.682183][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 216.697867][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'. [ 216.710009][ T7675] netlink: 2 bytes leftover after parsing attributes in process `syz.1.734'. [ 216.720592][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'. [ 216.730030][ T7675] netlink: 2 bytes leftover after parsing attributes in process `syz.1.734'. [ 221.984783][ T7766] netlink: 60 bytes leftover after parsing attributes in process `syz.3.770'. [ 222.056530][ T7766] netlink: 60 bytes leftover after parsing attributes in process `syz.3.770'. [ 222.087738][ T7770] netlink: 60 bytes leftover after parsing attributes in process `syz.3.770'. [ 222.118118][ T7766] netlink: 60 bytes leftover after parsing attributes in process `syz.3.770'. [ 223.677577][ T7828] netlink: 60 bytes leftover after parsing attributes in process `syz.2.796'. [ 223.697362][ T7828] netlink: 60 bytes leftover after parsing attributes in process `syz.2.796'. [ 223.710291][ T7828] netlink: 60 bytes leftover after parsing attributes in process `syz.2.796'. [ 224.298263][ T7854] netlink: 60 bytes leftover after parsing attributes in process `syz.1.808'. [ 224.307694][ T7854] netlink: 60 bytes leftover after parsing attributes in process `syz.1.808'. [ 224.318726][ T7854] netlink: 60 bytes leftover after parsing attributes in process `syz.1.808'. [ 227.406998][ T7949] __nla_validate_parse: 4 callbacks suppressed [ 227.407015][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 227.428560][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.850'. [ 227.438863][ T7949] netlink: 2 bytes leftover after parsing attributes in process `syz.2.850'. [ 227.448874][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.850'. [ 227.458980][ T7949] netlink: 2 bytes leftover after parsing attributes in process `syz.2.850'. [ 228.258850][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'. [ 228.291273][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.863'. [ 228.320272][ T7981] netlink: 2 bytes leftover after parsing attributes in process `syz.2.863'. [ 228.336944][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.863'. [ 228.367130][ T7981] netlink: 2 bytes leftover after parsing attributes in process `syz.2.863'. [ 241.584279][ T8335] netlink: 'syz.2.1024': attribute type 12 has an invalid length. [ 241.604784][ T8335] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1024'. [ 244.375109][ T8398] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1049'. [ 244.389760][ T8398] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1049'. [ 244.400562][ T8397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1049'. [ 244.416533][ T8398] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1049'. [ 246.268615][ T8403] netlink: 'syz.3.1051': attribute type 39 has an invalid length. [ 246.633270][ T8416] netlink: 'syz.3.1057': attribute type 12 has an invalid length. [ 246.654691][ T8416] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1057'. [ 247.322212][ T8431] netlink: 'syz.1.1063': attribute type 39 has an invalid length. [ 250.309254][ T8451] netlink: 'syz.1.1070': attribute type 12 has an invalid length. [ 250.319255][ T8451] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1070'. [ 251.662972][ T8477] netlink: 'syz.0.1081': attribute type 12 has an invalid length. [ 251.706378][ T8477] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1081'. [ 252.029055][ T8491] syzkaller0: entered promiscuous mode [ 252.035076][ T8491] syzkaller0: entered allmulticast mode [ 255.696820][ T8515] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1096'. [ 255.712005][ T8515] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1096'. [ 255.729080][ T8510] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1096'. [ 255.742930][ T8510] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1096'. [ 255.766109][ T8516] netlink: 'syz.1.1099': attribute type 12 has an invalid length. [ 255.774786][ T8516] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1099'. [ 256.038883][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.046633][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.447565][ T8540] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1109'. [ 256.457189][ T8540] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1109'. [ 256.466965][ T8539] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1109'. [ 256.477624][ T8540] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1109'. [ 256.551583][ T8542] netlink: 'syz.3.1110': attribute type 12 has an invalid length. [ 257.414678][ T8571] __nla_validate_parse: 1 callbacks suppressed [ 257.414693][ T8571] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1121'. [ 257.431554][ T8571] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1121'. [ 257.442368][ T8568] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1121'. [ 257.454876][ T8571] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1121'. [ 257.501951][ T8573] netlink: 'syz.2.1123': attribute type 12 has an invalid length. [ 257.527041][ T8573] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1123'. [ 257.636962][ T8575] syzkaller0: entered promiscuous mode [ 257.642612][ T8575] syzkaller0: entered allmulticast mode [ 258.164716][ T8594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1132'. [ 258.201995][ T8595] netlink: 'syz.3.1133': attribute type 12 has an invalid length. [ 258.213819][ T8595] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1133'. [ 258.239068][ T8594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1132'. [ 258.256221][ T8592] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1132'. [ 258.274717][ T8596] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1132'. [ 259.028961][ T8624] netlink: 'syz.0.1145': attribute type 12 has an invalid length. [ 262.921300][ T8669] __nla_validate_parse: 9 callbacks suppressed [ 262.921315][ T8669] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1164'. [ 262.974358][ T8669] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1164'. [ 262.984025][ T8668] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1164'. [ 262.993957][ T8674] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1164'. [ 263.817171][ T8701] syzkaller0: entered promiscuous mode [ 263.837960][ T8701] syzkaller0: entered allmulticast mode [ 266.638951][ T8706] netlink: 'syz.2.1179': attribute type 10 has an invalid length. [ 266.673161][ T8706] bond0: (slave bond_slave_0): Releasing backup interface [ 267.704995][ T8734] syzkaller0: entered promiscuous mode [ 267.729375][ T8734] syzkaller0: entered allmulticast mode [ 272.382330][ T8788] syzkaller0: entered promiscuous mode [ 272.394513][ T8788] syzkaller0: entered allmulticast mode [ 273.303616][ T8814] syzkaller0: entered promiscuous mode [ 273.309601][ T8814] syzkaller0: entered allmulticast mode [ 274.169676][ T8842] syzkaller0: entered promiscuous mode [ 274.177700][ T8842] syzkaller0: entered allmulticast mode [ 274.286839][ T8846] netlink: 'syz.1.1238': attribute type 12 has an invalid length. [ 274.300556][ T8846] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1238'. [ 274.951915][ T8869] syzkaller0: entered promiscuous mode [ 274.957839][ T8869] syzkaller0: entered allmulticast mode [ 275.483026][ T8887] syzkaller0: entered promiscuous mode [ 275.493375][ T8887] syzkaller0: entered allmulticast mode [ 275.866147][ T8896] syzkaller0: entered promiscuous mode [ 275.876560][ T8896] syzkaller0: entered allmulticast mode [ 276.249606][ T8908] syzkaller0: entered promiscuous mode [ 276.271543][ T8908] syzkaller0: entered allmulticast mode [ 277.604000][ T8931] syzkaller0: entered promiscuous mode [ 277.619997][ T8931] syzkaller0: entered allmulticast mode [ 279.814898][ T8939] syzkaller0: entered promiscuous mode [ 279.824056][ T8939] syzkaller0: entered allmulticast mode [ 287.523968][ T9051] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1319'. [ 287.539230][ T9051] caif0: entered promiscuous mode [ 287.566282][ T9051] caif0: entered allmulticast mode [ 291.189825][ T9082] syzkaller0: entered promiscuous mode [ 291.196058][ T9082] syzkaller0: entered allmulticast mode [ 294.960215][ T9128] syzkaller0: entered promiscuous mode [ 294.972852][ T9128] syzkaller0: entered allmulticast mode [ 296.214685][ T9160] syzkaller0: entered promiscuous mode [ 296.224304][ T9160] syzkaller0: entered allmulticast mode [ 298.014682][ T9189] syzkaller0: entered promiscuous mode [ 298.023092][ T9189] syzkaller0: entered allmulticast mode [ 299.739725][ T9223] syzkaller0: entered promiscuous mode [ 299.745890][ T9223] syzkaller0: entered allmulticast mode [ 301.000053][ T9262] syzkaller0: entered promiscuous mode [ 301.015573][ T9262] syzkaller0: entered allmulticast mode [ 301.961927][ T9283] netlink: 'syz.3.1415': attribute type 12 has an invalid length. [ 301.985745][ T9283] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1415'. [ 302.083385][ T9282] syzkaller0: entered promiscuous mode [ 302.092628][ T9282] syzkaller0: entered allmulticast mode [ 305.182727][ T9311] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1426'. [ 305.235341][ T9316] syzkaller0: entered promiscuous mode [ 305.240941][ T9316] syzkaller0: entered allmulticast mode [ 305.334781][ T9320] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1431'. [ 305.369022][ T9320] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1431'. [ 305.389730][ T9320] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1431'. [ 305.565036][ T9324] netlink: 'syz.0.1433': attribute type 12 has an invalid length. [ 305.573071][ T9324] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1433'. [ 309.030483][ T9360] netlink: 'syz.0.1446': attribute type 12 has an invalid length. [ 309.039047][ T9360] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1446'. [ 309.306299][ T9374] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1454'. [ 309.522472][ T9383] netlink: 'syz.2.1458': attribute type 12 has an invalid length. [ 309.530920][ T9383] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1458'. [ 310.529138][ T9411] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1467'. [ 310.668950][ T9414] netlink: 'syz.1.1469': attribute type 12 has an invalid length. [ 310.686561][ T9414] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1469'. [ 310.710236][ T9416] syzkaller0: entered promiscuous mode [ 310.724773][ T9416] syzkaller0: entered allmulticast mode [ 311.203527][ T9434] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1479'. [ 311.425244][ T9442] netlink: 'syz.3.1481': attribute type 12 has an invalid length. [ 311.444907][ T9442] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1481'. [ 312.335417][ T9447] syzkaller0: entered promiscuous mode [ 312.347282][ T9447] syzkaller0: entered allmulticast mode [ 314.640961][ T9475] netlink: 'syz.1.1493': attribute type 12 has an invalid length. [ 314.684945][ T9475] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1493'. [ 314.745660][ T9477] syzkaller0: entered promiscuous mode [ 314.751230][ T9477] syzkaller0: entered allmulticast mode [ 317.479414][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.488798][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.494128][ T9679] netlink: 'syz.1.1571': attribute type 12 has an invalid length. [ 322.509002][ T9679] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1571'. [ 322.821049][ T9686] syzkaller0: entered promiscuous mode [ 322.829357][ T9686] syzkaller0: entered allmulticast mode [ 323.379213][ T9693] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1577'. [ 325.733870][ T9706] netlink: 'syz.0.1581': attribute type 12 has an invalid length. [ 325.743232][ T9706] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1581'. [ 326.240344][ T9726] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1597'. [ 326.261931][ T9726] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1597'. [ 326.282560][ T9726] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1597'. [ 326.293162][ T9726] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1597'. [ 326.340713][ T9730] netlink: 'syz.2.1592': attribute type 12 has an invalid length. [ 326.355703][ T9730] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1592'. [ 326.375064][ T9731] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1591'. [ 326.386837][ T9731] caif0: entered promiscuous mode [ 326.391966][ T9731] caif0: entered allmulticast mode [ 330.131735][ T9752] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1602'. [ 330.172290][ T9752] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1602'. [ 330.217023][ T9754] netlink: 'syz.2.1603': attribute type 12 has an invalid length. [ 330.241265][ T9754] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1603'. [ 330.291764][ T9752] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1602'. [ 330.318868][ T9755] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1602'. [ 331.342033][ T9775] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1612'. [ 331.795488][ T9775] caif0: entered promiscuous mode [ 331.801061][ T9775] caif0: entered allmulticast mode [ 331.824307][ T9780] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1614'. [ 331.833494][ T9780] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1614'. [ 331.863781][ T9780] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1614'. [ 331.883679][ T9780] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1614'. [ 332.152585][ T9783] netlink: 'syz.0.1615': attribute type 12 has an invalid length. [ 335.291688][ T9831] __nla_validate_parse: 5 callbacks suppressed [ 335.291701][ T9831] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1634'. [ 335.308033][ T9831] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1634'. [ 335.320054][ T9831] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1634'. [ 335.331684][ T9831] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1634'. [ 335.497187][ T9834] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1635'. [ 338.993896][ T9866] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1646'. [ 339.009236][ T9866] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1646'. [ 339.016488][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 339.020415][ T9866] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1646'. [ 339.063038][ T9866] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1646'. [ 339.356843][ T9878] netlink: 'syz.2.1654': attribute type 29 has an invalid length. [ 339.366901][ T9878] netlink: 'syz.2.1654': attribute type 29 has an invalid length. [ 339.380358][ T9878] netlink: 'syz.2.1654': attribute type 29 has an invalid length. [ 339.390934][ T9878] netlink: 'syz.2.1654': attribute type 29 has an invalid length. [ 339.401182][ T9878] netlink: 'syz.2.1654': attribute type 29 has an invalid length. [ 341.775046][ T9902] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1659'. [ 341.826966][ T9902] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1659'. [ 341.881760][ T9906] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1659'. [ 341.948893][ T9902] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1659'. [ 343.454472][ T9930] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1670'. [ 343.463582][ T9930] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1670'. [ 343.518743][ T9930] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1670'. [ 343.585130][ T9930] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1670'. [ 344.615125][ T9959] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1684'. [ 344.644431][ T9959] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1684'. [ 346.808442][T10038] __nla_validate_parse: 14 callbacks suppressed [ 346.808462][T10038] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1720'. [ 347.873340][T10059] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1731'. [ 347.935378][T10059] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1731'. [ 347.950566][T10061] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1731'. [ 347.962662][T10059] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1731'. [ 348.406127][T10074] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1736'. [ 348.505982][T10074] syz.3.1736 (10074) used greatest stack depth: 19560 bytes left [ 348.612167][T10084] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1742'. [ 348.625542][T10084] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1742'. [ 348.648537][T10084] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1742'. [ 348.671761][T10084] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1742'. [ 349.554718][T10123] caif0: entered promiscuous mode [ 349.559984][T10123] caif0: entered allmulticast mode [ 349.685057][T10128] netlink: 'syz.3.1764': attribute type 29 has an invalid length. [ 349.714574][T10128] netlink: 'syz.3.1764': attribute type 29 has an invalid length. [ 349.733832][T10128] netlink: 'syz.3.1764': attribute type 29 has an invalid length. [ 349.755822][T10128] netlink: 'syz.3.1764': attribute type 29 has an invalid length. [ 352.710461][T10210] __nla_validate_parse: 11 callbacks suppressed [ 352.710480][T10210] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1800'. [ 353.564248][T10238] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 353.620469][T10240] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1814'. [ 353.950008][T10250] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1827'. [ 353.959544][T10250] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1827'. [ 353.979823][T10250] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1827'. [ 353.993076][T10250] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1827'. [ 354.720604][T10272] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1826'. [ 354.902239][T10278] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1830'. [ 354.927486][T10278] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1830'. [ 354.955578][T10278] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1830'. [ 359.014903][T10318] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 359.861494][T10320] __nla_validate_parse: 9 callbacks suppressed [ 359.861510][T10320] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1847'. [ 359.886329][T10320] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1847'. [ 359.903104][T10320] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1847'. [ 359.915040][T10320] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1847'. [ 360.015701][T10322] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1848'. [ 360.267422][T10329] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1851'. [ 360.288337][T10329] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1851'. [ 360.319458][T10332] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1851'. [ 360.330369][T10329] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1851'. [ 360.745652][T10347] syz.1.1858: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 360.788447][T10347] CPU: 1 PID: 10347 Comm: syz.1.1858 Not tainted 6.6.101-syzkaller #0 [ 360.796792][T10347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.807010][T10347] Call Trace: [ 360.810427][T10347] [ 360.813490][T10347] dump_stack_lvl+0x16c/0x230 [ 360.818388][T10347] ? show_regs_print_info+0x20/0x20 [ 360.823722][T10347] ? load_image+0x3b0/0x3b0 [ 360.828489][T10347] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 360.835063][T10347] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 360.841747][T10347] warn_alloc+0x210/0x300 [ 360.846240][T10347] ? stack_trace_save+0x9c/0xe0 [ 360.851285][T10347] ? zone_watermark_ok_safe+0x230/0x230 [ 360.857100][T10347] ? kasan_set_track+0x5f/0x70 [ 360.862013][T10347] ? kasan_set_track+0x4e/0x70 [ 360.866920][T10347] ? __kasan_kmalloc+0x8f/0xa0 [ 360.871853][T10347] ? xsk_init_queue+0xb0/0x110 [ 360.877282][T10347] ? xsk_setsockopt+0x4db/0x6f0 [ 360.882305][T10347] ? do_sock_setsockopt+0x175/0x1a0 [ 360.887660][T10347] ? __x64_sys_setsockopt+0x184/0x200 [ 360.893199][T10347] __vmalloc_node_range+0x126/0x1320 [ 360.898938][T10347] ? free_vm_area+0x50/0x50 [ 360.903721][T10347] vmalloc_user+0x74/0x80 [ 360.908192][T10347] ? xskq_create+0xbf/0x170 [ 360.912840][T10347] xskq_create+0xbf/0x170 [ 360.917356][T10347] xsk_init_queue+0xb0/0x110 [ 360.922114][T10347] xsk_setsockopt+0x4db/0x6f0 [ 360.926976][T10347] ? xsk_poll+0x670/0x670 [ 360.931527][T10347] ? __fget_files+0x28/0x4d0 [ 360.936297][T10347] ? aa_sock_opt_perm+0x74/0x100 [ 360.941397][T10347] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 360.947112][T10347] ? security_socket_setsockopt+0x7e/0xa0 [ 360.952980][T10347] ? xsk_poll+0x670/0x670 [ 360.957515][T10347] do_sock_setsockopt+0x175/0x1a0 [ 360.962661][T10347] ? __fdget+0x180/0x210 [ 360.967092][T10347] __x64_sys_setsockopt+0x184/0x200 [ 360.972498][T10347] do_syscall_64+0x55/0xb0 [ 360.977063][T10347] ? clear_bhb_loop+0x40/0x90 [ 360.981967][T10347] ? clear_bhb_loop+0x40/0x90 [ 360.986817][T10347] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.992866][T10347] RIP: 0033:0x7efeaa38ebe9 [ 360.997487][T10347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.017254][T10347] RSP: 002b:00007efeab210038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 361.025846][T10347] RAX: ffffffffffffffda RBX: 00007efeaa5b5fa0 RCX: 00007efeaa38ebe9 [ 361.033961][T10347] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 361.042074][T10347] RBP: 00007efeaa411e19 R08: 0000000000000004 R09: 0000000000000000 [ 361.050161][T10347] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 361.058263][T10347] R13: 00007efeaa5b6038 R14: 00007efeaa5b5fa0 R15: 00007ffd635037a8 [ 361.066549][T10347] [ 361.093279][T10347] Mem-Info: [ 361.099564][T10347] active_anon:5047 inactive_anon:0 isolated_anon:0 [ 361.099564][T10347] active_file:16708 inactive_file:39924 isolated_file:0 [ 361.099564][T10347] unevictable:768 dirty:67 writeback:0 [ 361.099564][T10347] slab_reclaimable:10382 slab_unreclaimable:94088 [ 361.099564][T10347] mapped:23998 shmem:1376 pagetables:534 [ 361.099564][T10347] sec_pagetables:0 bounce:0 [ 361.099564][T10347] kernel_misc_reclaimable:0 [ 361.099564][T10347] free:1349353 free_pcp:5949 free_cma:0 [ 361.171338][T10347] Node 0 active_anon:20140kB inactive_anon:0kB active_file:66832kB inactive_file:159496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:95960kB dirty:284kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11100kB pagetables:2040kB sec_pagetables:0kB all_unreclaimable? no [ 361.232799][T10347] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 361.284833][T10347] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.343495][T10347] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 361.364689][T10347] Node 0 DMA32 free:1488324kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:20124kB inactive_anon:0kB active_file:66832kB inactive_file:158176kB unevictable:1536kB writepending:196kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:3784kB local_pcp:2520kB free_cma:0kB [ 361.406771][T10358] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1862'. [ 361.438207][T10347] lowmem_reserve[]: 0 0 1 1 1 [ 361.450834][T10347] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.525061][T10347] lowmem_reserve[]: 0 0 0 0 0 [ 361.539678][T10347] Node 1 Normal free:3893232kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20324kB local_pcp:11296kB free_cma:0kB [ 361.621056][T10347] lowmem_reserve[]: 0 0 0 0 0 [ 361.641338][T10347] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 361.680830][T10347] Node 0 DMA32: 1801*4kB (UME) 1606*8kB (UME) 1081*16kB (UME) 1159*32kB (UME) 468*64kB (UME) 154*128kB (UME) 97*256kB (UME) 38*512kB (UME) 13*1024kB (UM) 4*2048kB (ME) 317*4096kB (M) = 1488324kB [ 361.744351][T10347] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 361.779774][T10347] Node 1 Normal: 242*4kB (UM) 51*8kB (UME) 29*16kB (UME) 84*32kB (UME) 21*64kB (UE) 6*128kB (UME) 2*256kB (UE) 2*512kB (ME) 0*1024kB 1*2048kB (E) 948*4096kB (M) = 3893232kB [ 361.847049][T10347] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.876946][T10347] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 361.906625][T10347] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.932112][T10347] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 361.949488][T10347] 57993 total pagecache pages [ 361.956640][T10347] 0 pages in swap cache [ 361.961001][T10347] Free swap = 124996kB [ 361.969819][T10347] Total swap = 124996kB [ 361.975888][T10347] 2097051 pages RAM [ 361.980235][T10347] 0 pages HighMem/MovableOnly [ 361.990976][T10347] 416137 pages reserved [ 361.995738][T10347] 0 pages cma reserved [ 365.176154][T10401] __nla_validate_parse: 8 callbacks suppressed [ 365.176174][T10401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1880'. [ 365.194327][T10401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1880'. [ 365.210342][T10401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1880'. [ 365.220372][T10402] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1877'. [ 365.232682][T10401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1880'. [ 365.247785][T10402] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1877'. [ 365.259100][T10396] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1877'. [ 365.272997][T10402] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1877'. [ 365.284628][T10404] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1881'. [ 366.276067][T10429] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1892'. [ 368.232097][T10484] netlink: 'syz.0.1917': attribute type 39 has an invalid length. [ 368.367379][T10487] netlink: 'syz.2.1918': attribute type 10 has an invalid length. [ 368.447540][T10487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.460289][T10487] team0: Port device bond0 added [ 370.450233][T10536] __nla_validate_parse: 27 callbacks suppressed [ 370.450252][T10536] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1941'. [ 370.906628][T10546] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1945'. [ 370.968766][T10546] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1945'. [ 371.012075][T10547] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1945'. [ 371.038471][T10551] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1945'. [ 371.538818][T10570] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1954'. [ 371.836231][T10580] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1959'. [ 371.846802][T10580] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1959'. [ 371.857813][T10580] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1959'. [ 371.868723][T10580] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1959'. [ 376.811696][T10672] __nla_validate_parse: 15 callbacks suppressed [ 376.811714][T10672] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1998'. [ 376.828454][T10672] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1998'. [ 376.839281][T10672] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1998'. [ 376.849655][T10672] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1998'. [ 377.269400][T10687] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2003'. [ 378.920689][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.930209][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.289482][T10707] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2009'. [ 380.313348][T10707] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2009'. [ 380.365244][T10707] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2009'. [ 380.444808][T10708] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2009'. [ 380.509674][T10700] netlink: 'syz.3.2008': attribute type 10 has an invalid length. [ 380.710767][T10700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.961855][T10700] team0: Port device bond0 added [ 381.085100][T10700] syz.3.2008 (10700) used greatest stack depth: 19120 bytes left [ 381.278067][T10724] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2014'. [ 383.908223][T10736] netlink: 'syz.0.2019': attribute type 2 has an invalid length. [ 383.939130][T10736] __nla_validate_parse: 3 callbacks suppressed [ 383.939147][T10736] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2019'. [ 387.544642][T10784] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2038'. [ 388.135245][T10805] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 388.158896][T10805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.224931][T10849] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 392.249289][T10849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.512150][T10864] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2068'. [ 392.539996][T10864] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2068'. [ 392.551350][T10860] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2068'. [ 392.566799][T10864] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2068'. [ 393.652021][T10894] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2080'. [ 393.704364][T10894] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2080'. [ 393.723753][T10890] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2080'. [ 393.733232][T10898] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2080'. [ 394.711889][T10929] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2094'. [ 394.744737][T10929] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2094'. [ 397.543499][T10951] __nla_validate_parse: 2 callbacks suppressed [ 397.543517][T10951] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2106'. [ 397.561390][T10953] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2104'. [ 397.596899][T10953] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2104'. [ 397.615279][T10947] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2104'. [ 397.631475][T10953] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2104'. [ 398.450376][T10979] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2117'. [ 400.725281][T11037] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.2141'. [ 400.959593][T11044] netlink: 'syz.3.2144': attribute type 39 has an invalid length. [ 402.075606][T11065] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2151'. [ 402.114436][T11065] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2151'. [ 402.140689][T11064] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2151'. [ 402.592716][T11076] __nla_validate_parse: 1 callbacks suppressed [ 402.592734][T11076] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2155'. [ 404.538102][T11091] netlink: 'syz.1.2160': attribute type 10 has an invalid length. [ 404.583900][T11091] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 404.648336][T11097] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2161'. [ 404.666729][T11097] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2161'. [ 404.686948][T11092] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2161'. [ 404.699410][T11097] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2161'. [ 404.898778][T11106] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2165'. [ 405.094438][T11111] netlink: 'syz.2.2167': attribute type 3 has an invalid length. [ 405.116212][T11111] netlink: 'syz.2.2167': attribute type 4 has an invalid length. [ 405.134688][T11111] netlink: 'syz.2.2167': attribute type 7 has an invalid length. [ 405.155741][T11111] netlink: 'syz.2.2167': attribute type 8 has an invalid length. [ 405.163589][T11111] netlink: 'syz.2.2167': attribute type 7 has an invalid length. [ 405.190192][T11111] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.2167'. [ 406.020832][T11134] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2177'. [ 407.583434][T11169] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2189'. [ 408.163624][T11192] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2200'. [ 408.194726][ T2178] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 409.219244][T11217] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.2208'. [ 409.393598][T11226] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2214'. [ 409.970210][T11250] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2225'. [ 410.581295][T11273] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2236'. [ 411.196881][T11302] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2249'. [ 411.901433][T11324] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2258'. [ 412.169188][T11333] netlink: 'syz.2.2263': attribute type 10 has an invalid length. [ 412.190176][T11333] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2263'. [ 412.243295][T11333] team0: entered promiscuous mode [ 412.264632][T11333] team_slave_0: entered promiscuous mode [ 412.273283][T11333] team_slave_1: entered promiscuous mode [ 412.313436][T11333] bond0: entered promiscuous mode [ 412.320810][T11333] bond_slave_1: entered promiscuous mode [ 412.339183][T11333] team0: entered allmulticast mode [ 412.352064][T11333] team_slave_0: entered allmulticast mode [ 412.374494][T11333] team_slave_1: entered allmulticast mode [ 412.381229][T11333] bond0: entered allmulticast mode [ 412.391450][T11333] bond_slave_1: entered allmulticast mode [ 412.952683][T11333] bridge0: port 3(team0) entered blocking state [ 412.959538][T11333] bridge0: port 3(team0) entered disabled state [ 412.970554][T11333] bridge0: port 3(team0) entered blocking state [ 412.977302][T11333] bridge0: port 3(team0) entered forwarding state [ 413.518039][T11357] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2273'. [ 414.261075][T11367] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2279'. [ 416.746547][T11385] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2287'. [ 417.924387][T11393] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2291'. [ 418.821376][T11413] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2299'. [ 420.779484][T11445] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2310'. [ 424.811844][T11473] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2320'. [ 425.763044][T11506] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2331'. [ 426.023591][T11515] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2344'. [ 427.837715][T11539] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2347'. [ 428.365216][T11549] Driver unsupported XDP return value 0 on prog (id 1108) dev N/A, expect packet loss! [ 429.475415][T11572] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2360'. [ 430.619166][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 430.632018][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 430.650950][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 430.660062][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 430.668404][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 430.676268][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 430.948535][T11585] chnl_net:caif_netlink_parms(): no params data found [ 431.038533][T11585] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.051597][T11585] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.059432][T11585] bridge_slave_0: entered allmulticast mode [ 431.072996][T11585] bridge_slave_0: entered promiscuous mode [ 431.083728][T11585] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.097471][T11585] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.116918][T11585] bridge_slave_1: entered allmulticast mode [ 431.129735][T11585] bridge_slave_1: entered promiscuous mode [ 431.278189][T11585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.454755][ T1320] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.508179][T11585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.693326][ T1320] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.765951][T11604] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2370'. [ 431.806274][T11585] team0: Port device team_slave_0 added [ 431.878164][ T1320] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.976616][T11585] team0: Port device team_slave_1 added [ 432.096820][ T1320] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.203901][T11585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.262676][T11585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.382774][T11585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.412714][T11585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.429664][T11585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.478596][T11585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.805129][ T5799] Bluetooth: hci1: command tx timeout [ 432.926892][T11585] hsr_slave_0: entered promiscuous mode [ 433.036144][T11585] hsr_slave_1: entered promiscuous mode [ 433.150191][T11585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.195199][T11585] Cannot create hsr debugfs directory [ 434.076512][T11628] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2380'. [ 434.834550][ T5799] Bluetooth: hci1: command tx timeout [ 435.151400][T11649] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2389'. [ 435.995535][T11681] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2398'. [ 436.129320][T11585] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 436.150796][T11585] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 436.203049][T11585] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 436.226592][T11585] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 436.668338][ T1320] hsr_slave_0: left promiscuous mode [ 436.680142][ T1320] hsr_slave_1: left promiscuous mode [ 436.702541][ T1320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.717508][ T1320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.737085][ T1320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.753828][ T1320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.783199][ T1320] bridge_slave_1: left allmulticast mode [ 436.795936][ T1320] bridge_slave_1: left promiscuous mode [ 436.809892][ T1320] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.839148][ T1320] bridge_slave_0: left allmulticast mode [ 436.846294][ T1320] bridge_slave_0: left promiscuous mode [ 436.852990][ T1320] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.915493][ T5799] Bluetooth: hci1: command tx timeout [ 436.923404][ T1320] veth1_macvtap: left promiscuous mode [ 436.933137][ T1320] veth0_macvtap: left promiscuous mode [ 436.945128][ T1320] veth1_vlan: left promiscuous mode [ 436.956933][ T1320] veth0_vlan: left promiscuous mode [ 437.720778][ T1320] team0 (unregistering): Port device team_slave_1 removed [ 437.763205][ T1320] team0 (unregistering): Port device team_slave_0 removed [ 437.821963][ T1320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.868763][ T1320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.207443][ T1320] team0 (unregistering): Port device bond0 removed [ 438.339778][ T1320] bond0 (unregistering): Released all slaves [ 438.412997][T11717] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2408'. [ 438.484591][T11585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.558693][T11585] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.611967][T11605] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.619329][T11605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.703724][T11605] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.710968][T11605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.996960][ T5799] Bluetooth: hci1: command tx timeout [ 439.188392][T11749] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2419'. [ 439.418749][T11585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.495549][T11585] veth0_vlan: entered promiscuous mode [ 439.520280][T11585] veth1_vlan: entered promiscuous mode [ 439.578811][T11585] veth0_macvtap: entered promiscuous mode [ 439.616516][T11585] veth1_macvtap: entered promiscuous mode [ 439.639279][T11585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.650765][T11585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.663521][T11585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.696378][T11585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.713822][T11585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.735162][T11585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.750273][T11585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.760589][T11585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.771572][T11585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.792035][T11585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.812408][T11585] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.823799][T11585] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.835996][T11585] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.847244][T11585] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.930835][T11775] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2429'. [ 440.007434][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.047870][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.368527][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.384304][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.112250][T11797] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2438'. [ 442.133025][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.170387][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.168913][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 443.178471][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 443.187602][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 443.196273][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 443.204465][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 443.211892][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 443.410289][ T1320] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.238915][ T5799] Bluetooth: hci3: command tx timeout [ 445.418795][ T1320] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.577764][ T1320] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.717599][ T1320] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.931725][T11826] chnl_net:caif_netlink_parms(): no params data found [ 446.355605][T11878] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2469'. [ 446.392291][T11826] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.413487][T11826] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.424496][T11826] bridge_slave_0: entered allmulticast mode [ 446.432359][T11826] bridge_slave_0: entered promiscuous mode [ 446.451714][T11878] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2469'. [ 446.464970][T11880] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2470'. [ 446.601651][T11826] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.621228][T11826] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.636882][T11826] bridge_slave_1: entered allmulticast mode [ 446.654747][T11826] bridge_slave_1: entered promiscuous mode [ 446.666682][T11876] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2469'. [ 446.752290][T11881] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2469'. [ 446.975321][T11826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.177082][T11826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.315490][ T5799] Bluetooth: hci3: command tx timeout [ 447.411255][T11911] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2478'. [ 447.542036][T11826] team0: Port device team_slave_0 added [ 447.608506][T11826] team0: Port device team_slave_1 added [ 447.686029][T11923] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2481'. [ 447.729429][T11826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.736654][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.771058][T11826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.783144][T11923] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2481'. [ 447.826511][T11826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.833639][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.860456][T11826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.885288][T11922] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2481'. [ 447.912578][T11926] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2481'. [ 448.150471][T11826] hsr_slave_0: entered promiscuous mode [ 448.186010][T11826] hsr_slave_1: entered promiscuous mode [ 448.560006][ T1320] hsr_slave_0: left promiscuous mode [ 448.575071][ T1320] hsr_slave_1: left promiscuous mode [ 448.593327][ T1320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.602931][ T1320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.619790][ T1320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.630739][ T1320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.639759][ T1320] bridge_slave_1: left allmulticast mode [ 448.645993][ T1320] bridge_slave_1: left promiscuous mode [ 448.652754][ T1320] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.663330][ T1320] bridge_slave_0: left allmulticast mode [ 448.680407][ T1320] bridge_slave_0: left promiscuous mode [ 448.700943][ T1320] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.791887][ T1320] veth1_macvtap: left promiscuous mode [ 448.803612][ T1320] veth0_macvtap: left promiscuous mode [ 448.818121][ T1320] veth1_vlan: left promiscuous mode [ 448.830306][ T1320] veth0_vlan: left promiscuous mode [ 449.397124][ T5799] Bluetooth: hci3: command tx timeout [ 449.566701][ T1320] team0 (unregistering): Port device team_slave_1 removed [ 449.612172][ T1320] team0 (unregistering): Port device team_slave_0 removed [ 449.660515][ T1320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.708653][ T1320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.137562][ T1320] bond0 (unregistering): Released all slaves [ 451.474643][ T5799] Bluetooth: hci3: command tx timeout [ 451.504307][T11826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 451.566890][T11826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 451.616497][T11826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 451.657867][T11826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 451.694243][T12018] __nla_validate_parse: 8 callbacks suppressed [ 451.694260][T12018] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2510'. [ 452.005794][T11826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.078283][T11826] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.109872][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.117257][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.175947][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.183236][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.433273][T12051] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2521'. [ 452.901546][T11826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.032962][T11826] veth0_vlan: entered promiscuous mode [ 453.080596][T11826] veth1_vlan: entered promiscuous mode [ 453.238534][T11826] veth0_macvtap: entered promiscuous mode [ 453.277451][T11826] veth1_macvtap: entered promiscuous mode [ 453.332066][T12086] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2531'. [ 453.355220][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.395173][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.434274][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.464426][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.497258][T11826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.548934][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.574283][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.596286][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.630539][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.654285][T11826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.684179][T11826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.698088][T11826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.716375][T11826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.730913][T11826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.751671][T11826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.760815][T11826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.026697][ T3416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.064148][ T3416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.158515][ T3416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.195278][ T3416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.323020][T12111] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2540'. [ 455.927143][T12157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 455.936709][T12157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 455.955128][T12157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 455.964975][T12157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 455.994641][T12157] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 456.003196][T12157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 456.707835][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.007529][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.275140][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.597096][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.121991][T12157] Bluetooth: hci2: command tx timeout [ 458.334022][T12155] chnl_net:caif_netlink_parms(): no params data found [ 458.921588][T12155] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.939593][T12155] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.954382][T12155] bridge_slave_0: entered allmulticast mode [ 458.966581][T12155] bridge_slave_0: entered promiscuous mode [ 459.095093][T12155] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.112629][T12155] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.131495][T12155] bridge_slave_1: entered allmulticast mode [ 459.199043][T12155] bridge_slave_1: entered promiscuous mode [ 459.452007][T12155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.509359][T12155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.699334][T12155] team0: Port device team_slave_0 added [ 459.780994][T12155] team0: Port device team_slave_1 added [ 459.879396][T12155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.892320][T12155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.922473][T12155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.939147][T12155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.946346][T12155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.974760][T12155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.194508][T12157] Bluetooth: hci2: command tx timeout [ 460.231864][T12155] hsr_slave_0: entered promiscuous mode [ 460.244055][T12155] hsr_slave_1: entered promiscuous mode [ 460.259360][T12155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.274278][T12155] Cannot create hsr debugfs directory [ 460.949642][ T12] hsr_slave_0: left promiscuous mode [ 460.995690][ T12] hsr_slave_1: left promiscuous mode [ 461.033483][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.051620][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.073799][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.094226][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.125080][ T12] bridge0: port 3(team0) entered disabled state [ 461.151145][ T12] bridge_slave_1: left allmulticast mode [ 461.175254][ T12] bridge_slave_1: left promiscuous mode [ 461.181104][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.199480][ T12] bridge_slave_0: left promiscuous mode [ 461.230103][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.396397][ T12] veth1_macvtap: left promiscuous mode [ 461.404380][ T12] veth0_macvtap: left promiscuous mode [ 461.415706][ T12] veth1_vlan: left promiscuous mode [ 461.430136][ T12] veth0_vlan: left promiscuous mode [ 462.210622][ T12] team_slave_1 (unregistering): left promiscuous mode [ 462.220582][ T12] team_slave_1 (unregistering): left allmulticast mode [ 462.232130][ T12] team0 (unregistering): Port device team_slave_1 removed [ 462.277553][T12157] Bluetooth: hci2: command tx timeout [ 462.283958][ T12] team_slave_0 (unregistering): left promiscuous mode [ 462.291596][ T12] team_slave_0 (unregistering): left allmulticast mode [ 462.301856][ T12] team0 (unregistering): Port device team_slave_0 removed [ 462.348245][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.358185][ T12] bond_slave_1 (unregistering): left promiscuous mode [ 462.367368][ T12] bond_slave_1 (unregistering): left allmulticast mode [ 462.730218][ T12] bond0 (unregistering): left promiscuous mode [ 462.736756][ T12] bond0 (unregistering): left allmulticast mode [ 462.745473][ T12] team0 (unregistering): Port device bond0 removed [ 462.878447][ T12] bond0 (unregistering): Released all slaves [ 464.357446][T12157] Bluetooth: hci2: command tx timeout [ 466.718530][T12155] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 466.794822][T12155] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 466.818460][T12155] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 466.851213][T12155] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 467.162425][T12155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.228866][T12155] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.277406][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.284755][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.334772][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.342004][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.110203][T12155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.262353][T12155] veth0_vlan: entered promiscuous mode [ 468.311989][T12155] veth1_vlan: entered promiscuous mode [ 468.418255][T12155] veth0_macvtap: entered promiscuous mode [ 468.462113][T12155] veth1_macvtap: entered promiscuous mode [ 468.500792][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.511413][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.544247][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.581682][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.604176][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.630886][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.660001][T12155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.708660][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.745122][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.778548][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.801793][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.812112][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.825047][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.871829][T12155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.926896][T12155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.963136][T12155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.985487][T12155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.004379][T12155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.408135][ T3416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.445517][ T3416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.887475][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.931351][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.943222][T12543] pimreg: tun_chr_ioctl cmd 1074025672 [ 469.959011][T12543] pimreg: ignored: set checksum enabled [ 469.984537][T12549] pimreg: tun_chr_ioctl cmd 2147767520 [ 473.246746][T12586] veth0_vlan: entered allmulticast mode [ 473.366301][T12590] sit0: entered allmulticast mode [ 473.391124][T12592] ªªªªª»: renamed from team_slave_0 (while UP) [ 473.426599][T12593] sit0: entered promiscuous mode [ 474.070545][T12611] pimreg: tun_chr_ioctl cmd 1074025672 [ 474.089617][T12611] pimreg: ignored: set checksum enabled [ 474.107764][T12611] pimreg: tun_chr_ioctl cmd 2147767520 [ 474.282568][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 474.305929][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 474.324598][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 474.349373][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 474.358431][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 474.366335][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 474.654450][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.797161][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.023901][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.256668][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.297383][T12650] pimreg: tun_chr_ioctl cmd 1074025672 [ 475.302927][T12650] pimreg: ignored: set checksum enabled [ 475.313541][T12652] pimreg: tun_chr_ioctl cmd 2147767520 [ 475.434488][T12617] chnl_net:caif_netlink_parms(): no params data found [ 475.881256][T12617] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.898609][T12617] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.916918][T12617] bridge_slave_0: entered allmulticast mode [ 475.936088][T12617] bridge_slave_0: entered promiscuous mode [ 476.050948][T12617] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.077773][T12617] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.092819][T12617] bridge_slave_1: entered allmulticast mode [ 476.113324][T12617] bridge_slave_1: entered promiscuous mode [ 476.434333][ T5799] Bluetooth: hci0: command tx timeout [ 476.450334][T12617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.482590][T12617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.688711][T12617] team0: Port device team_slave_0 added [ 476.701108][T12617] team0: Port device team_slave_1 added [ 476.936278][T12617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.943632][T12617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.979143][T12617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.992735][T12617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.001687][T12617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.028917][T12617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.337993][T12617] hsr_slave_0: entered promiscuous mode [ 477.347091][T12617] hsr_slave_1: entered promiscuous mode [ 477.369831][T12617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.384219][T12617] Cannot create hsr debugfs directory [ 477.956693][T12717] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2720'. [ 478.076666][ T58] hsr_slave_0: left promiscuous mode [ 478.147503][ T58] hsr_slave_1: left promiscuous mode [ 478.192025][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.227203][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.279550][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.294422][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.329863][ T58] bridge_slave_1: left allmulticast mode [ 478.340520][ T58] bridge_slave_1: left promiscuous mode [ 478.349075][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.379624][ T58] bridge_slave_0: left promiscuous mode [ 478.397928][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.480576][ T58] veth1_macvtap: left promiscuous mode [ 478.493781][ T58] veth0_macvtap: left promiscuous mode [ 478.504127][ T58] veth1_vlan: left promiscuous mode [ 478.514596][ T5799] Bluetooth: hci0: command tx timeout [ 478.520788][ T58] veth0_vlan: left promiscuous mode [ 479.390870][ T58] team0 (unregistering): Port device team_slave_1 removed [ 479.437846][ T58] team0 (unregistering): Port device team_slave_0 removed [ 479.483708][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.536409][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.761105][ T58] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 480.001636][ T58] bond0 (unregistering): Released all slaves [ 480.109956][T12753] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2731'. [ 480.594281][ T5799] Bluetooth: hci0: command tx timeout [ 480.991622][T12617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 481.028913][T12617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 481.043647][T12617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 481.060925][T12617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 481.213535][T12617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.248488][T12617] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.262336][ T1065] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.270200][ T1065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.305369][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.312546][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.680419][T12617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.767553][T12617] veth0_vlan: entered promiscuous mode [ 481.792716][T12617] veth1_vlan: entered promiscuous mode [ 481.861903][T12617] veth0_macvtap: entered promiscuous mode [ 481.879514][T12617] veth1_macvtap: entered promiscuous mode [ 481.921348][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.937460][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.949096][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.970979][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.982299][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.994402][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.006705][T12617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.033072][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.050123][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.063107][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.073857][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.083776][T12617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.094812][T12617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.107495][T12617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.127207][T12617] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.136444][T12617] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.147732][T12617] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.159401][T12617] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.285503][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.293399][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.346696][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.362878][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.675403][ T5799] Bluetooth: hci0: command tx timeout [ 486.023890][T12855] cgroup: fork rejected by pids controller in /syz1 [ 486.482989][T12852] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2739'. [ 491.445852][T12157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 491.494768][T12157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 491.503649][T12157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 491.548451][T12157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 491.559232][T12157] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 491.568496][T12157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 491.986050][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.007590][T12889] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2757'. [ 492.165400][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.289060][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.391724][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.964654][ T5799] Bluetooth: hci0: command tx timeout [ 496.038234][ T5799] Bluetooth: hci0: command tx timeout [ 498.114266][T12157] Bluetooth: hci0: command tx timeout [ 498.129044][T12923] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2768'. [ 498.151313][T12891] chnl_net:caif_netlink_parms(): no params data found [ 498.651049][T12891] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.690348][T12891] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.750731][T12891] bridge_slave_0: entered allmulticast mode [ 498.765698][T12891] bridge_slave_0: entered promiscuous mode [ 498.851996][T12891] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.874301][T12891] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.931051][T12891] bridge_slave_1: entered allmulticast mode [ 498.951762][T12891] bridge_slave_1: entered promiscuous mode [ 499.738360][T12891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.840883][T12961] syz.3.2777[12961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 499.841034][T12961] syz.3.2777[12961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 499.890806][T12891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.977228][T12964] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2779'. [ 500.180780][T12891] team0: Port device team_slave_0 added [ 500.200313][T12157] Bluetooth: hci0: command tx timeout [ 500.313802][T12891] team0: Port device team_slave_1 added [ 500.505261][T12891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.528208][T12891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.594277][T12891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.631732][T12891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.649527][T12891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.712512][T12891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.804529][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.810965][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.566274][T12891] hsr_slave_0: entered promiscuous mode [ 503.614579][T12891] hsr_slave_1: entered promiscuous mode [ 503.639801][T12891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 503.660266][T12891] Cannot create hsr debugfs directory [ 504.025494][ T12] hsr_slave_0: left promiscuous mode [ 504.040017][ T12] hsr_slave_1: left promiscuous mode [ 504.051178][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.061658][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.076467][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.088516][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.099830][ T12] bridge_slave_1: left allmulticast mode [ 504.111373][ T12] bridge_slave_1: left promiscuous mode [ 504.120898][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.147794][ T12] bridge_slave_0: left allmulticast mode [ 504.153731][ T12] bridge_slave_0: left promiscuous mode [ 504.165523][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.239326][ T12] veth1_macvtap: left promiscuous mode [ 504.257751][ T12] veth0_macvtap: left promiscuous mode [ 504.274470][ T12] veth1_vlan: left promiscuous mode [ 504.290697][ T12] veth0_vlan: left promiscuous mode [ 504.920761][ T12] team0 (unregistering): Port device team_slave_1 removed [ 504.971115][ T12] team0 (unregistering): Port device team_slave_0 removed [ 505.020565][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.071894][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.548597][ T12] bond0 (unregistering): Released all slaves [ 505.646010][T13024] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2788'. [ 506.301025][T13041] syz.0.2793[13041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.301170][T13041] syz.0.2793[13041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 507.506649][T12891] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 507.665683][T12891] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 507.756919][T12891] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 507.810481][T12891] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 507.889750][T13058] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2799'. [ 508.258565][T12891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.410623][T12891] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.470379][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.477641][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.896740][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.903982][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.790572][T13094] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2809'. [ 512.286044][T12891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.535077][T12891] veth0_vlan: entered promiscuous mode [ 512.622624][T12891] veth1_vlan: entered promiscuous mode [ 512.893433][T12891] veth0_macvtap: entered promiscuous mode [ 512.956937][T12891] veth1_macvtap: entered promiscuous mode [ 513.093045][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.115101][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.126111][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.143712][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.174180][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.194225][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.216047][T12891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.238014][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.253417][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.268151][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.299022][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.324684][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.354140][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.400269][T12891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.478792][T12891] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.488807][T12891] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.507799][T12891] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.519361][T12891] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.063613][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.123177][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.216624][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.250950][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.572086][T13135] bridge0: port 3(bond0) entered blocking state [ 514.635616][T13135] bridge0: port 3(bond0) entered disabled state [ 514.727680][T13135] bond0: entered allmulticast mode [ 514.749064][T13135] bond_slave_0: entered allmulticast mode [ 514.825258][T13135] bond_slave_1: entered allmulticast mode [ 514.979463][T13135] bond0: entered promiscuous mode [ 514.987148][T13135] bond_slave_0: entered promiscuous mode [ 515.011748][T13135] bond_slave_1: entered promiscuous mode [ 515.023267][T13135] bridge0: port 3(bond0) entered blocking state [ 515.030123][T13135] bridge0: port 3(bond0) entered forwarding state [ 515.333811][T13157] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2820'. [ 515.479090][T13153] syzkaller0: entered promiscuous mode [ 515.494311][T13153] syzkaller0: entered allmulticast mode [ 515.508193][T13157] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2820'. [ 515.525737][T13155] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2820'. [ 515.552180][T13161] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2820'. [ 517.046698][T13199] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2831'. [ 518.991052][T13199] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2831'. [ 521.843491][T13257] !€ÿ: renamed from bond_slave_0 (while UP) [ 522.061437][T13251] bridge0: port 3(bond0) entered blocking state [ 522.071145][T13251] bridge0: port 3(bond0) entered disabled state [ 522.101321][T13251] bond0: entered allmulticast mode [ 522.209221][T13251] bond_slave_0: entered allmulticast mode [ 522.294303][T13251] bond_slave_1: entered allmulticast mode [ 522.302219][T13251] bond0: entered promiscuous mode [ 522.308178][T13251] bond_slave_0: entered promiscuous mode [ 522.314200][T13251] bond_slave_1: entered promiscuous mode [ 522.320920][T13251] bridge0: port 3(bond0) entered blocking state [ 522.327388][T13251] bridge0: port 3(bond0) entered forwarding state [ 523.920156][T13290] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2856'. [ 524.024953][T13290] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2856'. [ 524.141283][T13289] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2856'. [ 524.150820][T13291] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2856'. [ 527.737667][T13304] bridge0: port 3(bond0) entered blocking state [ 527.745990][T13304] bridge0: port 3(bond0) entered disabled state [ 527.752500][T13304] bond0: entered allmulticast mode [ 527.757845][T13304] bond_slave_0: entered allmulticast mode [ 527.767423][T13304] bond_slave_1: entered allmulticast mode [ 527.777498][T13304] bond0: entered promiscuous mode [ 527.782608][T13304] bond_slave_0: entered promiscuous mode [ 527.791558][T13304] bond_slave_1: entered promiscuous mode [ 527.798038][T13304] bridge0: port 3(bond0) entered blocking state [ 527.805262][T13304] bridge0: port 3(bond0) entered forwarding state [ 528.235903][T13316] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2865'. [ 528.313406][T13316] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2865'. [ 528.323599][T13315] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2865'. [ 528.332951][T13317] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2865'. [ 536.120795][T13392] veth1_macvtap: left promiscuous mode [ 536.155939][T13392] macsec0: entered promiscuous mode [ 543.938673][T13500] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2936'. [ 545.315391][T13512] veth0_vlan: entered allmulticast mode [ 545.409095][T13513] veth0_vlan: left promiscuous mode [ 545.436907][T13513] veth0_vlan: entered promiscuous mode [ 545.700298][T13525] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2946'. [ 549.868115][T13561] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2959'. [ 551.729241][T13590] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2970'. [ 551.938978][T13592] wg2: entered promiscuous mode [ 552.002091][T13592] wg2: entered allmulticast mode [ 552.100783][T13598] veth0_vlan: entered allmulticast mode [ 553.103343][T13602] veth0_vlan: left promiscuous mode [ 553.145475][T13602] veth0_vlan: entered promiscuous mode [ 553.989228][T13617] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2980'. [ 554.349886][T13628] wg2: entered promiscuous mode [ 554.360289][T13628] wg2: entered allmulticast mode [ 555.085900][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 557.110539][T13655] pim6reg1: entered promiscuous mode [ 557.129793][T13655] pim6reg1: entered allmulticast mode [ 557.523490][T13666] wg2: entered promiscuous mode [ 557.529183][T13666] wg2: entered allmulticast mode [ 563.477709][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.490125][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.833906][T13788] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.3043'. [ 565.559255][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 571.722669][T13918] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3096'. [ 571.773787][T13919] veth0_vlan: left promiscuous mode [ 571.779992][T13919] veth0_vlan: entered promiscuous mode [ 571.996755][T13921] syzkaller0: entered promiscuous mode [ 572.014493][T13921] syzkaller0: entered allmulticast mode [ 574.657054][T13942] sit0: left promiscuous mode [ 574.787809][T13943] sit0: entered promiscuous mode [ 574.851974][T13951] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3107'. [ 574.974796][T13955] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.3117'. [ 577.886523][T14002] macsec0: left promiscuous mode [ 580.674819][ T5799] Bluetooth: hci2: command 0x0406 tx timeout [ 587.444632][T14058] pim6reg1: entered promiscuous mode [ 587.450110][T14058] pim6reg1: entered allmulticast mode [ 591.788345][T14088] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.3158'. [ 593.088897][T14101] syz.3.3162[14101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 593.089149][T14101] syz.3.3162[14101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 593.272086][T14103] syz.0.3161[14103] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 593.314672][T14103] syz.0.3161[14103] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 593.414741][T14103] syz.0.3161[14103] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 593.475970][T14104] pim6reg1: entered promiscuous mode [ 593.541049][T14103] syz.0.3161[14103] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 593.541486][T14104] pim6reg1: entered allmulticast mode [ 595.808601][T14121] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3168'. [ 596.572017][T14122] syzkaller0: entered promiscuous mode [ 596.578994][T14122] syzkaller0: entered allmulticast mode [ 599.823343][T14146] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.3177'. [ 601.566126][T14174] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.3187'. [ 607.884347][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 607.904537][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 607.913221][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 607.922609][ T5799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 607.930815][ T5799] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 607.938683][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 609.955271][ T5799] Bluetooth: hci4: command tx timeout [ 610.245723][T14210] veth0_vlan: entered allmulticast mode [ 612.036882][ T5799] Bluetooth: hci4: command tx timeout [ 614.114320][ T5799] Bluetooth: hci4: command tx timeout [ 614.847430][T12996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.738156][T12996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.848559][T14207] chnl_net:caif_netlink_parms(): no params data found [ 615.989024][T12996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.202782][ T5799] Bluetooth: hci4: command tx timeout [ 616.502441][T12996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.641298][T14207] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.648906][T14207] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.656430][T14207] bridge_slave_0: entered allmulticast mode [ 617.663883][T14207] bridge_slave_0: entered promiscuous mode [ 617.673692][T14207] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.681010][T14207] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.689178][T14207] bridge_slave_1: entered allmulticast mode [ 617.697306][T14207] bridge_slave_1: entered promiscuous mode [ 617.939830][T14207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.214712][T12157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 618.228847][T14207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.239676][T12157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 618.287565][T12157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 618.309809][T12157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 618.319068][T12157] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 618.331265][T12157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 618.948311][T14207] team0: Port device team_slave_0 added [ 618.967836][T14207] team0: Port device team_slave_1 added [ 620.180669][T14207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.195270][T14207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.241883][T14207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.265741][T14207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.273446][T14207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.310721][T14207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.362912][T12157] Bluetooth: hci0: command tx timeout [ 621.295415][T14257] pim6reg1: entered promiscuous mode [ 621.301365][T14257] pim6reg1: entered allmulticast mode [ 621.369222][T14207] hsr_slave_0: entered promiscuous mode [ 621.412401][T14207] hsr_slave_1: entered promiscuous mode [ 621.419412][T14207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 621.427751][T14207] Cannot create hsr debugfs directory [ 622.434382][T12157] Bluetooth: hci0: command tx timeout [ 622.538799][T14249] chnl_net:caif_netlink_parms(): no params data found [ 622.695134][T14272] bridge0: port 3(bond0) entered disabled state [ 622.702451][T14272] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.712491][T14272] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.723961][T14272] bridge0: entered allmulticast mode [ 623.013447][T12996] hsr_slave_0: left promiscuous mode [ 623.021394][T12996] hsr_slave_1: left promiscuous mode [ 623.036442][T12996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.044282][T12996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.104964][T12996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.112455][T12996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.152237][T12996] bridge_slave_1: left allmulticast mode [ 623.167116][T12996] bridge_slave_1: left promiscuous mode [ 623.172980][T12996] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.223995][T12996] bridge_slave_0: left allmulticast mode [ 623.229999][T12996] bridge_slave_0: left promiscuous mode [ 623.320375][T12996] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.790113][T12996] veth0_macvtap: left promiscuous mode [ 623.844685][T12996] veth1_vlan: left promiscuous mode [ 624.516916][T12157] Bluetooth: hci0: command tx timeout [ 624.691335][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.697793][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.461906][T12996] team0 (unregistering): Port device team_slave_1 removed [ 625.513751][T12996] team0 (unregistering): Port device team_slave_0 removed [ 625.572408][T12996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.622981][T12996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.178363][T12996] bond0 (unregistering): Released all slaves [ 626.260583][T14249] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.268396][T14249] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.277147][T14249] bridge_slave_0: entered allmulticast mode [ 626.286130][T14249] bridge_slave_0: entered promiscuous mode [ 626.306819][T14249] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.322808][T14249] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.330765][T14249] bridge_slave_1: entered allmulticast mode [ 626.340031][T14249] bridge_slave_1: entered promiscuous mode [ 626.460323][T14249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.491602][T14249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.533115][T14207] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 626.546883][T14207] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 626.604561][T12157] Bluetooth: hci0: command tx timeout [ 626.616365][T14207] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 626.638201][T14207] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 626.702930][T14249] team0: Port device team_slave_0 added [ 626.730457][T14249] team0: Port device team_slave_1 added [ 626.783884][T14249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.794885][T14249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.826324][T14249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.842022][T14249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.856324][T14249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.890104][T14249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.983229][T14249] hsr_slave_0: entered promiscuous mode [ 626.991799][T14249] hsr_slave_1: entered promiscuous mode [ 627.000889][T14249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 627.009659][T14249] Cannot create hsr debugfs directory [ 627.131501][T12996] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.243972][T12996] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.330312][T12996] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.395871][T14207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.425491][T12996] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.443689][T14249] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 627.467853][T14249] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 627.490458][T14249] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 627.511929][T14249] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 627.577137][T14207] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.622035][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.629805][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.701939][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.709821][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.933539][T14207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 627.971535][T14249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.069418][T14249] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.169122][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.176463][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.201821][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.209381][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.393793][T14207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.691998][T14249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.998580][T14207] veth0_vlan: entered promiscuous mode [ 629.022110][T12996] hsr_slave_0: left promiscuous mode [ 629.030006][T12996] hsr_slave_1: left promiscuous mode [ 629.037277][T12996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.045730][T12996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.056614][T12996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.065010][T12996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.075939][T12996] bond0: left allmulticast mode [ 629.081168][T12996] bond_slave_0: left allmulticast mode [ 629.087640][T12996] bond_slave_1: left allmulticast mode [ 629.094678][T12996] bond0: left promiscuous mode [ 629.100068][T12996] bond_slave_0: left promiscuous mode [ 629.107157][T12996] bond_slave_1: left promiscuous mode [ 629.113308][T12996] bridge0: port 3(bond0) entered disabled state [ 629.123561][T12996] bridge_slave_1: left allmulticast mode [ 629.131867][T12996] bridge_slave_1: left promiscuous mode [ 629.153493][T12996] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.163973][T12996] bridge_slave_0: left allmulticast mode [ 629.172031][T12996] bridge_slave_0: left promiscuous mode [ 629.179117][T12996] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.207501][T12996] veth1_macvtap: left promiscuous mode [ 629.214614][T12996] veth0_macvtap: left promiscuous mode [ 629.221257][T12996] veth1_vlan: left promiscuous mode [ 629.228208][T12996] veth0_vlan: left promiscuous mode [ 629.908349][T12996] team0 (unregistering): Port device team_slave_1 removed [ 629.971571][T12996] team0 (unregistering): Port device team_slave_0 removed [ 630.029643][T12996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.082102][T12996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.703275][T12996] bond0 (unregistering): Released all slaves [ 630.803117][T14207] veth1_vlan: entered promiscuous mode [ 630.915528][T14207] veth0_macvtap: entered promiscuous mode [ 630.948504][T14207] veth1_macvtap: entered promiscuous mode [ 631.023702][T14207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.035738][T14207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.046614][T14207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.057742][T14207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.078106][T14207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.103399][T14207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.115006][T14207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.127101][T14207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.138074][T14207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.160783][T14207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.192921][T14207] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.205791][T14207] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.216206][T14207] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.225230][T14207] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.307880][T14249] veth0_vlan: entered promiscuous mode [ 631.367122][T14249] veth1_vlan: entered promiscuous mode [ 631.412102][T14249] veth0_macvtap: entered promiscuous mode [ 631.420576][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.438849][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.471876][T14249] veth1_macvtap: entered promiscuous mode [ 631.495501][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.503582][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.518713][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.530826][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.544349][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.556327][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.571027][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.587240][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.601867][T14249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.621855][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.633239][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.648646][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.661211][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.676880][T14249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.689821][T14249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.702553][T14249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.716692][T14249] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.726387][T14249] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.735296][T14249] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.744970][T14249] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.935662][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.943842][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.070683][T12996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.090606][T12996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.662618][T14342] syzkaller0: entered promiscuous mode [ 633.695497][T14342] syzkaller0: entered allmulticast mode [ 663.351458][T14442] veth0_vlan: entered allmulticast mode [ 668.989176][T14497] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.3282'. [ 671.148338][T14521] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.3292'. [ 673.755898][T14555] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.3303'. [ 676.729440][T14576] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.3313'. [ 678.394547][T14610] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.3324'. [ 681.481665][T14643] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.3336'. [ 685.713411][T14677] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.3348'. [ 686.134670][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.142978][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.460641][T14707] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.3360'. [ 691.921906][T14744] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.3375'. [ 694.447129][T14774] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.3385'. [ 698.269158][T14797] veth0_vlan: left promiscuous mode [ 698.354102][T14797] veth0_vlan: entered promiscuous mode [ 698.663670][T14809] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.3396'. [ 701.058278][T14829] syzkaller0: entered promiscuous mode [ 701.068511][T14829] syzkaller0: entered allmulticast mode [ 704.860520][T14836] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.3408'. [ 704.870545][T14850] macsec0: entered promiscuous mode [ 704.880474][T14850] macsec0: entered allmulticast mode [ 704.887858][T14850] veth1_macvtap: entered allmulticast mode [ 706.479334][T14879] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.3422'. [ 708.526399][T14910] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.3434'. [ 709.613392][T14912] syzkaller0: entered promiscuous mode [ 709.642127][T14912] syzkaller0: entered allmulticast mode [ 712.851054][T14943] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.3447'. [ 713.865360][T14968] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.3457'. [ 715.651199][T14997] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.3468'. [ 716.712780][T15020] netlink: 64535 bytes leftover after parsing attributes in process `syz.5.3479'. [ 717.272805][T15022] veth0_vlan: entered allmulticast mode [ 718.002857][T15040] syzkaller0: entered promiscuous mode [ 718.009932][T15040] syzkaller0: entered allmulticast mode [ 723.908392][T15053] wg2: entered promiscuous mode [ 723.914917][T15053] wg2: entered allmulticast mode [ 723.922111][T15059] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.3493'. [ 726.378454][T15090] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.3505'. [ 728.023017][T15116] netlink: 64535 bytes leftover after parsing attributes in process `syz.5.3516'. [ 728.638154][T15120] syzkaller0: entered promiscuous mode [ 728.684446][T15120] syzkaller0: entered allmulticast mode [ 733.952141][T15143] veth0_vlan: left promiscuous mode [ 733.966153][T15143] veth0_vlan: entered promiscuous mode [ 734.016768][T15146] sit0: entered allmulticast mode [ 734.039542][T15147] sit0: entered promiscuous mode [ 734.297348][T12157] Bluetooth: hci4: command 0x0406 tx timeout [ 735.104719][T15171] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3535'. [ 738.128531][T15177] syzkaller0: entered promiscuous mode [ 738.761879][T15180] syzkaller0: entered promiscuous mode [ 738.767759][T15180] syzkaller0: entered allmulticast mode [ 741.680770][T15186] pim6reg1: entered promiscuous mode [ 741.688630][T15186] pim6reg1: entered allmulticast mode [ 744.524043][T12157] Bluetooth: hci0: command 0x0406 tx timeout [ 747.581338][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.589010][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.630612][T15220] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3551'. [ 749.082190][T15244] veth1_macvtap: left promiscuous mode [ 749.964130][T15249] veth1_macvtap: entered promiscuous mode [ 750.001084][T15249] macsec0: entered promiscuous mode [ 750.042908][T15249] macsec0: entered allmulticast mode [ 750.069018][T15249] veth1_macvtap: entered allmulticast mode [ 753.467253][T15283] veth1_macvtap: left allmulticast mode [ 753.519761][T15283] veth1_macvtap: left promiscuous mode [ 753.559713][T15283] macsec0: left promiscuous mode [ 753.586822][T15283] macsec0: left allmulticast mode [ 754.083507][T15285] veth1_macvtap: entered promiscuous mode [ 754.091134][T15285] macsec0: entered promiscuous mode [ 754.097797][T15285] macsec0: entered allmulticast mode [ 754.105105][T15285] veth1_macvtap: entered allmulticast mode [ 754.254569][T15292] netlink: 61967 bytes leftover after parsing attributes in process `syz.5.3573'. [ 754.439402][T15297] netlink: 61967 bytes leftover after parsing attributes in process `syz.5.3583'. [ 756.569718][T15326] veth1_macvtap: left promiscuous mode [ 756.767189][T15328] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.3586'. [ 756.798478][T15331] veth1_macvtap: entered promiscuous mode [ 756.817369][T15331] macsec0: entered promiscuous mode [ 756.833272][T15331] macsec0: entered allmulticast mode [ 756.843337][T15331] veth1_macvtap: entered allmulticast mode [ 758.864823][T15362] veth1_macvtap: left promiscuous mode [ 759.353200][T15370] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.3597'. [ 761.157681][T15395] veth0_vlan: left promiscuous mode [ 761.206656][T15395] veth0_vlan: entered promiscuous mode [ 761.622746][T15406] sit0: left promiscuous mode [ 773.088271][T15507] veth0_vlan: left promiscuous mode [ 773.210318][T15507] veth0_vlan: entered promiscuous mode [ 775.389606][T15544] sit0: entered allmulticast mode [ 778.924646][T15643] sit0: entered allmulticast mode [ 789.446259][T15795] sit0: entered promiscuous mode [ 792.651880][T15827] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.3782'. [ 796.418995][T15850] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.3791'. [ 799.130898][T15871] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.3800'. [ 800.887649][T15895] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.3809'. [ 802.294525][T15919] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.3819'. [ 802.481251][T15926] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 802.500632][T15926] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 802.520061][T15926] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 802.530553][T15926] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 802.540243][T15926] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 802.549356][T15926] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 803.233914][T15925] chnl_net:caif_netlink_parms(): no params data found [ 803.619335][T15925] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.632867][T15925] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.664945][T15925] bridge_slave_0: entered allmulticast mode [ 803.704743][T15925] bridge_slave_0: entered promiscuous mode [ 803.731467][T15925] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.755373][T15925] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.774946][T15925] bridge_slave_1: entered allmulticast mode [ 803.789699][T15925] bridge_slave_1: entered promiscuous mode [ 803.807237][T15955] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.3829'. [ 803.912341][T15925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.957799][T15925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.197395][T15925] team0: Port device team_slave_0 added [ 804.237295][T15925] team0: Port device team_slave_1 added [ 804.311231][T15925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.319188][T15925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.375601][T15925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.413827][T15925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.423050][T15925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.453372][T15925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.541384][T15925] hsr_slave_0: entered promiscuous mode [ 804.551213][T15925] hsr_slave_1: entered promiscuous mode [ 804.603485][ T5799] Bluetooth: hci3: command tx timeout [ 804.731738][T15925] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 804.743732][T15925] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 804.756636][T15925] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 804.768385][T15925] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 804.898199][T15925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.939053][T15925] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.960099][ T3416] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.967583][ T3416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.988608][ T3416] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.995992][ T3416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.242701][T15925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.503160][T15925] veth0_vlan: entered promiscuous mode [ 805.517341][T15925] veth1_vlan: entered promiscuous mode [ 805.556192][T15925] veth0_macvtap: entered promiscuous mode [ 805.569401][T15925] veth1_macvtap: entered promiscuous mode [ 805.595185][T15925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.607689][T15925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.618834][T15925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.630109][T15925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.641682][T15925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.654031][T15925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.668670][T15925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.681977][T15925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.695616][T15925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.707982][T15925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.724031][T15925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.735784][T15925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.747083][T15925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.757085][T15925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.767703][T15925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.780698][T15925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.791917][T15925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.804971][T15925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.822954][T15925] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.832671][T15925] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.842259][T15925] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.851583][T15925] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.939082][ T3416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.953177][ T3416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.982342][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.991436][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.591076][T16006] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.3843'. [ 806.682599][ T5799] Bluetooth: hci3: command tx timeout [ 808.378575][T16033] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.3856'. [ 808.774066][ T5799] Bluetooth: hci3: command tx timeout [ 809.215971][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.222809][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.052913][T16065] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.3869'. [ 810.851087][ T5799] Bluetooth: hci3: command tx timeout [ 811.613407][T16097] netlink: 61967 bytes leftover after parsing attributes in process `syz.6.3882'. [ 812.739485][T16127] netlink: 61975 bytes leftover after parsing attributes in process `syz.3.3892'. [ 817.132909][T16165] netlink: 61975 bytes leftover after parsing attributes in process `syz.3.3904'. [ 823.773735][T16197] netlink: 61975 bytes leftover after parsing attributes in process `syz.4.3916'. [ 832.742431][T16323] macsec0: entered promiscuous mode [ 832.784831][T16323] macsec0: entered allmulticast mode [ 832.861680][T16323] veth1_macvtap: entered allmulticast mode [ 841.275443][T16425] sit0: entered promiscuous mode [ 844.559650][T16448] syzkaller0: entered promiscuous mode [ 850.761685][T16488] veth0_vlan: left promiscuous mode [ 850.775405][T16488] veth0_vlan: entered promiscuous mode [ 859.242448][T16602] veth0_vlan: entered allmulticast mode [ 859.635171][T16608] veth0_vlan: left promiscuous mode [ 859.836371][T16608] veth0_vlan: entered promiscuous mode [ 864.004482][T16657] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.012399][T16657] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.076811][T16657] bridge_slave_1: left allmulticast mode [ 864.098884][T16657] bridge_slave_1: left promiscuous mode [ 864.114243][T16657] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.166877][T16657] bridge_slave_0: left allmulticast mode [ 864.197219][T16657] bridge_slave_0: left promiscuous mode [ 864.204322][T16657] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.520391][T16697] bond_slave_1: mtu less than device minimum [ 869.241245][T16738] bond_slave_1: mtu less than device minimum [ 870.492423][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.500202][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.930260][T16792] bond_slave_1: mtu less than device minimum [ 873.805475][T16793] sit0: left promiscuous mode [ 893.902837][T17022] sit0: entered promiscuous mode [ 898.929996][T17078] sit0: entered allmulticast mode [ 899.011096][T17078] sit0: entered promiscuous mode [ 904.713916][T17148] sit0: entered promiscuous mode [ 924.335721][T17372] sit0: left promiscuous mode [ 926.802326][T17415] veth0_vlan: left promiscuous mode [ 926.810410][T17415] veth0_vlan: entered promiscuous mode [ 928.611397][T17445] syzkaller0: entered promiscuous mode [ 928.750751][T17445] syzkaller0: entered allmulticast mode [ 928.834190][T15926] Bluetooth: hci3: command 0x0406 tx timeout [ 932.094867][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.101643][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.936472][T17543] bridge0: left allmulticast mode [ 941.946152][T17546] bond0: left allmulticast mode [ 941.951490][T17546] !€ÿ: left allmulticast mode [ 942.053216][T17546] bond_slave_1: left allmulticast mode [ 942.068093][T17546] bond0: left promiscuous mode [ 942.079541][T17546] !€ÿ: left promiscuous mode [ 942.105908][T17546] bond_slave_1: left promiscuous mode [ 942.112620][T17546] bridge0: port 3(bond0) entered disabled state [ 942.157049][T17546] bridge_slave_1: left allmulticast mode [ 942.163342][T17546] bridge_slave_1: left promiscuous mode [ 942.170681][T17546] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.241181][T17546] bridge_slave_0: left allmulticast mode [ 942.249368][T17546] bridge_slave_0: left promiscuous mode [ 942.262656][T17546] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.538633][T17579] syzkaller0: entered promiscuous mode [ 948.574043][T17591] sit0: left promiscuous mode [ 948.677564][T17595] sit0: entered promiscuous mode [ 951.074562][ T29] INFO: task syz.5.3756:15755 blocked for more than 143 seconds. [ 951.082523][ T29] Not tainted 6.6.101-syzkaller #0 [ 951.140317][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 951.212916][ T29] task:syz.5.3756 state:D stack:22408 pid:15755 ppid:14249 flags:0x00004006 [ 951.279973][ T29] Call Trace: [ 951.320831][ T29] [ 951.344828][ T29] __schedule+0x14d2/0x44d0 [ 951.368410][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 951.423928][ T29] ? lock_chain_count+0x20/0x20 [ 951.457774][ T29] ? asan.module_dtor+0x20/0x20 [ 951.547074][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 951.624222][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 951.757179][ T29] ? _free_event+0xfe/0xf30 [ 951.797123][ T29] ? _free_event+0x168/0xf30 [ 951.802872][ T29] schedule+0xbd/0x170 [ 951.814387][ T29] ? _free_event+0xfe/0xf30 [ 951.820352][ T29] _free_event+0x174/0xf30 [ 951.830161][ T29] perf_event_release_kernel+0x836/0x8c0 [ 951.837766][ T29] ? __might_sleep+0xe0/0xe0 [ 951.842712][ T29] ? calc_timer_values+0x400/0x400 [ 951.852752][ T29] ? perf_mmap+0x1510/0x1510 [ 951.874553][ T29] perf_release+0x3b/0x40 [ 951.890925][ T29] __fput+0x234/0x970 [ 951.904572][ T29] task_work_run+0x1ce/0x250 [ 951.923514][ T29] ? task_work_cancel+0x240/0x240 [ 951.946468][ T29] ? kernel_clone+0x235/0x840 [ 951.966387][ T29] get_signal+0x1235/0x1400 [ 951.981247][ T29] ? create_io_thread+0x140/0x140 [ 951.991030][ T29] ? __might_sleep+0xe0/0xe0 [ 952.000971][ T29] arch_do_signal_or_restart+0x96/0x780 [ 952.014084][ T29] ? get_sigframe_size+0x20/0x20 [ 952.021475][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 952.033211][ T29] exit_to_user_mode_loop+0x70/0x110 [ 952.042404][ T29] exit_to_user_mode_prepare+0xb1/0x140 [ 952.053053][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 952.061467][ T29] do_syscall_64+0x61/0xb0 [ 952.070509][ T29] ? clear_bhb_loop+0x40/0x90 [ 952.078302][ T29] ? clear_bhb_loop+0x40/0x90 [ 952.083255][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 952.090366][ T29] RIP: 0033:0x7f3a73f8ebe9 [ 952.106410][ T29] RSP: 002b:00007f3a73dfefe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 952.134283][ T29] RAX: fffffffffffffffc RBX: 00007f3a741b5fa0 RCX: 00007f3a73f8ebe9 [ 952.149797][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 952.168539][ T29] RBP: 00007f3a74011e19 R08: 0000000000000000 R09: 0000000000000000 [ 952.183118][ T29] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 952.202389][ T29] R13: 00007f3a741b6038 R14: 00007f3a741b5fa0 R15: 00007ffc12c26248 [ 952.218059][ T29] [ 952.221371][ T29] [ 952.221371][ T29] Showing all locks held in the system: [ 952.240651][ T29] 1 lock held by khungtaskd/29: [ 952.246376][ T29] #0: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 952.256564][ T29] 2 locks held by kworker/u4:7/1320: [ 952.261918][ T29] 3 locks held by kworker/u4:10/3490: [ 952.267662][ T29] 2 locks held by getty/5551: [ 952.272380][ T29] #0: ffff888031a420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 952.282273][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 952.292823][ T29] 4 locks held by kworker/1:2/11776: [ 952.298239][ T29] 2 locks held by syz.2.4462/17598: [ 952.303967][ T29] 3 locks held by syz.3.4465/17611: [ 952.309503][ T29] [ 952.311869][ T29] ============================================= [ 952.311869][ T29] [ 952.334152][ T29] NMI backtrace for cpu 0 [ 952.338589][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.101-syzkaller #0 [ 952.346739][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 952.357280][ T29] Call Trace: [ 952.361318][ T29] [ 952.364292][ T29] dump_stack_lvl+0x16c/0x230 [ 952.369201][ T29] ? show_regs_print_info+0x20/0x20 [ 952.374603][ T29] ? load_image+0x3b0/0x3b0 [ 952.379189][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 952.384179][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 952.390471][ T29] ? _printk+0xd0/0x110 [ 952.394692][ T29] ? load_image+0x3b0/0x3b0 [ 952.399446][ T29] ? load_image+0x3b0/0x3b0 [ 952.404005][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 952.410123][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 952.416250][ T29] watchdog+0xf41/0xf80 [ 952.420468][ T29] ? watchdog+0x1e1/0xf80 [ 952.424854][ T29] kthread+0x2fa/0x390 [ 952.428979][ T29] ? hungtask_pm_notify+0x90/0x90 [ 952.434052][ T29] ? kthread_blkcg+0xd0/0xd0 [ 952.438694][ T29] ret_from_fork+0x48/0x80 [ 952.443511][ T29] ? kthread_blkcg+0xd0/0xd0 [ 952.448172][ T29] ret_from_fork_asm+0x11/0x20 [ 952.453706][ T29] [ 952.458244][ T29] Sending NMI from CPU 0 to CPUs 1: [ 952.463531][ C1] NMI backtrace for cpu 1 [ 952.463547][ C1] CPU: 1 PID: 17598 Comm: syz.2.4462 Not tainted 6.6.101-syzkaller #0 [ 952.463564][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 952.463574][ C1] RIP: 0010:rcu_is_watching+0x17/0xb0 [ 952.463603][ C1] Code: e8 5e 75 e1 02 e9 53 ff ff ff 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 57 41 56 53 65 ff 05 28 1a 94 7e e8 bb 8d fd 08 89 c3 <83> f8 08 73 60 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 30 0a 7d [ 952.463621][ C1] RSP: 0018:ffffc9000cd0f540 EFLAGS: 00000086 [ 952.463635][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 17fa33c11cdeee00 [ 952.463646][ C1] RDX: 0000000000000000 RSI: ffffffff8afc6760 RDI: ffffffff8afc6720 [ 952.463658][ C1] RBP: ffffc9000cd0f668 R08: ffffffff8e4a84ef R09: 1ffffffff1c9509d [ 952.463670][ C1] R10: dffffc0000000000 R11: fffffbfff1c9509e R12: 1ffff920019a1eb8 [ 952.463682][ C1] R13: ffff8880b8f37f70 R14: 0000000000000001 R15: dffffc0000000000 [ 952.463693][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 952.463707][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 952.463717][ C1] CR2: 0000001b2fb08ff8 CR3: 00000000258c3000 CR4: 00000000003506e0 [ 952.463732][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 952.463742][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 952.463752][ C1] Call Trace: [ 952.463757][ C1] [ 952.463764][ C1] lock_acquire+0xcb/0x410 [ 952.463783][ C1] ? arch_do_signal_or_restart+0x96/0x780 [ 952.463808][ C1] ? exit_to_user_mode_loop+0x70/0x110 [ 952.463830][ C1] ? exit_to_user_mode_prepare+0xb1/0x140 [ 952.463856][ C1] ? read_lock_is_recursive+0x20/0x20 [ 952.463882][ C1] refill_obj_stock+0x109/0x680 [ 952.463900][ C1] ? refill_obj_stock+0xec/0x680 [ 952.463927][ C1] ? refill_obj_stock+0xec/0x680 [ 952.463946][ C1] ? obj_cgroup_charge+0x620/0x620 [ 952.463965][ C1] ? kasan_quarantine_put+0xd8/0x220 [ 952.463988][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 952.464018][ C1] memcg_slab_free_hook+0x125/0x1f0 [ 952.464037][ C1] ? exit_mmap+0x5e5/0xb50 [ 952.464059][ C1] kmem_cache_free+0xe1/0x280 [ 952.464089][ C1] exit_mmap+0x5e5/0xb50 [ 952.464111][ C1] ? exit_mm_release+0x1a/0x30 [ 952.464129][ C1] ? vm_brk+0x30/0x30 [ 952.464149][ C1] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 952.464189][ C1] ? uprobe_clear_state+0x278/0x290 [ 952.464209][ C1] ? mm_update_next_owner+0x562/0x6c0 [ 952.464240][ C1] __mmput+0x118/0x3c0 [ 952.464258][ C1] exit_mm+0x1da/0x2c0 [ 952.464286][ C1] ? do_exit+0x23c0/0x23c0 [ 952.464309][ C1] ? taskstats_exit+0x35e/0x9e0 [ 952.464338][ C1] do_exit+0x88e/0x23c0 [ 952.464366][ C1] ? put_task_struct+0xc0/0xc0 [ 952.464392][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 952.464410][ C1] ? get_signal+0x1068/0x1400 [ 952.464436][ C1] ? lock_chain_count+0x20/0x20 [ 952.464453][ C1] ? _raw_spin_lock_irq+0xaf/0xe0 [ 952.464480][ C1] do_group_exit+0x21b/0x2d0 [ 952.464504][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 952.464529][ C1] get_signal+0x12fc/0x1400 [ 952.464566][ C1] arch_do_signal_or_restart+0x96/0x780 [ 952.464591][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 952.464617][ C1] ? get_sigframe_size+0x20/0x20 [ 952.464649][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 952.464675][ C1] exit_to_user_mode_loop+0x70/0x110 [ 952.464699][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 952.464722][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 952.464746][ C1] do_syscall_64+0x61/0xb0 [ 952.464764][ C1] ? clear_bhb_loop+0x40/0x90 [ 952.464778][ C1] ? clear_bhb_loop+0x40/0x90 [ 952.464793][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 952.464819][ C1] RIP: 0033:0x7f9a3658ebe9 [ 952.464839][ C1] Code: Unable to access opcode bytes at 0x7f9a3658ebbf. [ 952.464847][ C1] RSP: 002b:00007ffed4384e38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 952.464863][ C1] RAX: 0000000000000000 RBX: 00007f9a367b7da0 RCX: 00007f9a3658ebe9 [ 952.464874][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 952.464883][ C1] RBP: 00007f9a367b7da0 R08: 0000000000000244 R09: 0000001bd438512f [ 952.464894][ C1] R10: 00007f9a367b7cb0 R11: 0000000000000246 R12: 00000000000e7deb [ 952.464911][ C1] R13: 00007ffed4384f30 R14: ffffffffffffffff R15: 00007ffed4384f50 [ 952.464932][ C1] [ 952.931854][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 952.938877][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.101-syzkaller #0 [ 952.946807][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 952.956931][ T29] Call Trace: [ 952.960977][ T29] [ 952.963939][ T29] dump_stack_lvl+0x16c/0x230 [ 952.968762][ T29] ? show_regs_print_info+0x20/0x20 [ 952.974107][ T29] ? load_image+0x3b0/0x3b0 [ 952.978680][ T29] panic+0x2c0/0x710 [ 952.982709][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 952.988388][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 952.992946][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 952.998537][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 953.005266][ T29] watchdog+0xf80/0xf80 [ 953.009467][ T29] ? watchdog+0x1e1/0xf80 [ 953.013846][ T29] kthread+0x2fa/0x390 [ 953.018035][ T29] ? hungtask_pm_notify+0x90/0x90 [ 953.023113][ T29] ? kthread_blkcg+0xd0/0xd0 [ 953.028190][ T29] ret_from_fork+0x48/0x80 [ 953.033955][ T29] ? kthread_blkcg+0xd0/0xd0 [ 953.038770][ T29] ret_from_fork_asm+0x11/0x20 [ 953.044284][ T29] [ 953.047660][ T29] Kernel Offset: disabled [ 953.052027][ T29] Rebooting in 86400 seconds..