last executing test programs: 5.939890654s ago: executing program 2 (id=383): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000004000000bb7f1ad04d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd02}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) mkdir(&(0x7f0000000000)='./file0\x00', 0x180) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000400)='./file0\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.668484349s ago: executing program 2 (id=390): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 4.585439738s ago: executing program 0 (id=391): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) 4.55856458s ago: executing program 1 (id=392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) close(r0) 4.479940098s ago: executing program 3 (id=393): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x5, 0x400, 0xb, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 4.424893314s ago: executing program 2 (id=394): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839", 0x5}], 0x1, 0x0, 0x0, 0x4000840}, 0x4010) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e0308004d8c71ef2885634a8270e7120000000000000000000000000000ac1414cf14"], 0xffdd) 2.895141385s ago: executing program 2 (id=395): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x804) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 2.894667645s ago: executing program 3 (id=396): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) 2.889645395s ago: executing program 0 (id=403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000200000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) 2.889272355s ago: executing program 1 (id=397): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000008f37ea00000000800002005c02327ca46addc3f38530395f6409713691b34b574b9559415cf7b5f625c1e75cac4afa65ec61353f46c6476dc6642f0abd49ee218f2066ed0ff0308a4fba53078d2ed6897e126ef6b756ce631816e047b0927ccd8206c02a9ea9e11d9532607e9fa745b89c7732855484f61eadc8a6c4b2d85a965c17f84794fadf7a8ab030dbbd0319eaee85533de7bee6e2bccbec7b638b57775aeee962386b868061c6be0e3d", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000600)='kfree\x00'}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 2.003132642s ago: executing program 0 (id=398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) 1.973899475s ago: executing program 1 (id=399): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000004000000bb7f1ad04d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd02}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) mkdir(&(0x7f0000000000)='./file0\x00', 0x180) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000400)='./file0\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.861467556s ago: executing program 3 (id=400): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x17, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='timer_start\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) 1.52557632s ago: executing program 0 (id=401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a500000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, 0x0, 0x1f00) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r4, 0x0, 0x0) 1.350618957s ago: executing program 3 (id=402): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000006000000000000000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r3}, 0x20) 1.264174445s ago: executing program 2 (id=404): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.076951924s ago: executing program 0 (id=405): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 981.456973ms ago: executing program 2 (id=406): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000004ab80000000000000018000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x766073b3f9440989, 0x30000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x640c703f, 0x0, 0x3e, 0x0, 0x0, 0x0) close(r2) 788.383902ms ago: executing program 0 (id=407): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x100a2) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x58, 0x5}, 0x0, 0x0, 0x0, 0xa, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x80) 787.773412ms ago: executing program 3 (id=408): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000008f37ea00000000800002005c02327ca46addc3f38530395f6409713691b34b574b9559415cf7b5f625c1e75cac4afa65ec61353f46c6476dc6642f0abd49ee218f2066ed0ff0308a4fba53078d2ed6897e126ef6b756ce631816e047b0927ccd8206c02a9ea9e11d9532607e9fa745b89c7732855484f61eadc8a6c4b2d85a965c17f84794fadf7a8ab030dbbd0319eaee85533de7bee6e2bccbec7b638b57775aeee962386b868061c6be0e3d", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000600)='kfree\x00'}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 762.891315ms ago: executing program 1 (id=409): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 559.428705ms ago: executing program 3 (id=410): r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x7ff}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 337.177837ms ago: executing program 1 (id=411): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=412): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000003c0), &(0x7f0000000500)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000300)='@\'{-!:&.^\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff92, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002075"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r4}, 0x10) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r5, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x3) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x5) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r7}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. [ 73.916692][ T5775] cgroup: Unknown subsys name 'net' [ 74.049342][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.743609][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.650986][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.660301][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.668312][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.676990][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.684541][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.692321][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.699611][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.708060][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.711902][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.715866][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.729882][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.735966][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.737408][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.745506][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.751848][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.758888][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.766332][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.782357][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.782926][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.797518][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.806466][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.806697][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.822045][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.829479][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.304075][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 78.370035][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 78.432977][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 78.538419][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 78.560080][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.567386][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.575446][ T5786] bridge_slave_0: entered allmulticast mode [ 78.583711][ T5786] bridge_slave_0: entered promiscuous mode [ 78.592517][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.599665][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.606855][ T5786] bridge_slave_1: entered allmulticast mode [ 78.613985][ T5786] bridge_slave_1: entered promiscuous mode [ 78.649859][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.657216][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.664975][ T5785] bridge_slave_0: entered allmulticast mode [ 78.672367][ T5785] bridge_slave_0: entered promiscuous mode [ 78.708111][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.715412][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.722784][ T5785] bridge_slave_1: entered allmulticast mode [ 78.729634][ T5785] bridge_slave_1: entered promiscuous mode [ 78.784914][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.813450][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.829141][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.853246][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.898918][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.906347][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.914395][ T5787] bridge_slave_0: entered allmulticast mode [ 78.921389][ T5787] bridge_slave_0: entered promiscuous mode [ 78.963713][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.970877][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.978539][ T5787] bridge_slave_1: entered allmulticast mode [ 78.985464][ T5787] bridge_slave_1: entered promiscuous mode [ 79.009010][ T5785] team0: Port device team_slave_0 added [ 79.015951][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.023483][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.030660][ T5788] bridge_slave_0: entered allmulticast mode [ 79.037769][ T5788] bridge_slave_0: entered promiscuous mode [ 79.047716][ T5786] team0: Port device team_slave_0 added [ 79.068055][ T5785] team0: Port device team_slave_1 added [ 79.086793][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.094035][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.101538][ T5788] bridge_slave_1: entered allmulticast mode [ 79.108450][ T5788] bridge_slave_1: entered promiscuous mode [ 79.116597][ T5786] team0: Port device team_slave_1 added [ 79.138165][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.199039][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.209012][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.216428][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.243737][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.265216][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.275056][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.282355][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.308417][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.329124][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.336425][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.362577][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.376624][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.386487][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.394324][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.420371][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.457572][ T5787] team0: Port device team_slave_0 added [ 79.470290][ T5787] team0: Port device team_slave_1 added [ 79.504134][ T5788] team0: Port device team_slave_0 added [ 79.548256][ T5788] team0: Port device team_slave_1 added [ 79.589759][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.596847][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.623664][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.636490][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.643498][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.669424][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.691733][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.698809][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.724871][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.740569][ T5786] hsr_slave_0: entered promiscuous mode [ 79.747608][ T5786] hsr_slave_1: entered promiscuous mode [ 79.787059][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.794394][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.820956][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.833060][ T5795] Bluetooth: hci0: command tx timeout [ 79.872368][ T5785] hsr_slave_0: entered promiscuous mode [ 79.879510][ T5785] hsr_slave_1: entered promiscuous mode [ 79.885966][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.893951][ T5785] Cannot create hsr debugfs directory [ 79.910798][ T5795] Bluetooth: hci2: command tx timeout [ 79.910828][ T5797] Bluetooth: hci3: command tx timeout [ 79.915993][ T5802] Bluetooth: hci1: command tx timeout [ 79.952024][ T5787] hsr_slave_0: entered promiscuous mode [ 79.958545][ T5787] hsr_slave_1: entered promiscuous mode [ 79.965206][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.972830][ T5787] Cannot create hsr debugfs directory [ 80.000984][ T5788] hsr_slave_0: entered promiscuous mode [ 80.007541][ T5788] hsr_slave_1: entered promiscuous mode [ 80.013954][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.021888][ T5788] Cannot create hsr debugfs directory [ 80.410880][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.422436][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.434630][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.448750][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.518633][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.533463][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.544662][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.556365][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.667935][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.678783][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.688846][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.707928][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.739545][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.817063][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.831288][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.839016][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.877648][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.884863][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.904047][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.915527][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.925739][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.936987][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.982578][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.048008][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.081823][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.088980][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.162047][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.169240][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.200180][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.274383][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.289403][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.313766][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.335814][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.343050][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.354701][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.361915][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.437222][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.486306][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.493560][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.546396][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.553625][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.598051][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.785611][ T5786] veth0_vlan: entered promiscuous mode [ 81.836877][ T5786] veth1_vlan: entered promiscuous mode [ 81.905211][ T5802] Bluetooth: hci0: command tx timeout [ 81.982503][ T5802] Bluetooth: hci1: command tx timeout [ 81.987968][ T5802] Bluetooth: hci3: command tx timeout [ 81.991115][ T5795] Bluetooth: hci2: command tx timeout [ 82.007024][ T5786] veth0_macvtap: entered promiscuous mode [ 82.024506][ T5786] veth1_macvtap: entered promiscuous mode [ 82.050551][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.070347][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.108810][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.147214][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.160702][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.169782][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.178731][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.187815][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.341764][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.380059][ T5785] veth0_vlan: entered promiscuous mode [ 82.487751][ T5785] veth1_vlan: entered promiscuous mode [ 82.510695][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.524503][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.605394][ T5788] veth0_vlan: entered promiscuous mode [ 82.631564][ T5787] veth0_vlan: entered promiscuous mode [ 82.650679][ T5788] veth1_vlan: entered promiscuous mode [ 82.659359][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.672900][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.684184][ T5787] veth1_vlan: entered promiscuous mode [ 82.694724][ T5785] veth0_macvtap: entered promiscuous mode [ 82.740439][ T5785] veth1_macvtap: entered promiscuous mode [ 82.756261][ T5788] veth0_macvtap: entered promiscuous mode [ 82.809927][ T5788] veth1_macvtap: entered promiscuous mode [ 82.847186][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.885629][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.901338][ C0] hrtimer: interrupt took 58741 ns [ 82.916443][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.934142][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.953980][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.969142][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.985161][ T5787] veth0_macvtap: entered promiscuous mode [ 83.008712][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.019446][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.033547][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.048167][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.070284][ T5787] veth1_macvtap: entered promiscuous mode [ 83.096549][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.116594][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.129904][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.155133][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.170082][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.224384][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.236496][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.247254][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.257839][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.271587][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.297916][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.307109][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.317730][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.326688][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.348280][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.358962][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.369651][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.380455][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.390493][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.401941][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.414054][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.483463][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.512091][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.526346][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.551984][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.562870][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.574794][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.587226][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.599070][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.608164][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.619388][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.629270][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.775950][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.801829][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.864155][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.873263][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.939247][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.956092][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.982058][ T5795] Bluetooth: hci0: command tx timeout [ 84.004662][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.020167][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.062101][ T5795] Bluetooth: hci2: command tx timeout [ 84.067566][ T5795] Bluetooth: hci3: command tx timeout [ 84.073618][ T5802] Bluetooth: hci1: command tx timeout [ 84.100334][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.109676][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.183541][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.192980][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.776562][ T5914] veth0_vlan: entered allmulticast mode [ 86.064124][ T5795] Bluetooth: hci0: command tx timeout [ 86.143340][ T5802] Bluetooth: hci1: command tx timeout [ 86.149198][ T5797] Bluetooth: hci2: command tx timeout [ 86.155100][ T5795] Bluetooth: hci3: command tx timeout [ 86.796027][ T787] cfg80211: failed to load regulatory.db [ 88.359289][ T5958] syz.3.28[5958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.359418][ T5958] syz.3.28[5958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.333117][ T6016] pim6reg1: entered promiscuous mode [ 92.371198][ T6016] pim6reg1: entered allmulticast mode [ 94.167958][ T6059] wg2: entered promiscuous mode [ 94.183371][ T6059] wg2: entered allmulticast mode [ 97.836682][ T6121] veth0_vlan: entered allmulticast mode [ 98.029955][ T6121] ªªªªªª: renamed from vlan0 [ 98.483343][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.492035][ T6137] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.575728][ T6137] bridge0: entered allmulticast mode [ 98.760994][ T6139] bridge_slave_1: left allmulticast mode [ 98.780155][ T6139] bridge_slave_1: left promiscuous mode [ 98.803975][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.819488][ T6139] bridge_slave_0: left allmulticast mode [ 98.843748][ T6139] bridge_slave_0: left promiscuous mode [ 98.875126][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.141313][ T6202] veth0_vlan: entered allmulticast mode [ 103.079063][ T6204] veth0_vlan: left promiscuous mode [ 103.103027][ T6204] veth0_vlan: entered promiscuous mode [ 103.625322][ T6216] syz.2.120 uses obsolete (PF_INET,SOCK_PACKET) [ 104.452409][ T6221] veth0_vlan: left promiscuous mode [ 104.516647][ T6221] veth0_vlan: entered promiscuous mode [ 105.579796][ T6235] cgroup: fork rejected by pids controller in /syz2 [ 105.941070][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.949432][ T6240] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.966893][ T6240] bridge0: entered allmulticast mode [ 106.015970][ T6242] bridge_slave_1: left allmulticast mode [ 106.026462][ T6242] bridge_slave_1: left promiscuous mode [ 106.041680][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.063487][ T6242] bridge_slave_0: left allmulticast mode [ 106.071581][ T6242] bridge_slave_0: left promiscuous mode [ 106.080468][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.877742][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.886509][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.894717][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.910992][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.977228][ T5802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 108.991590][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.141290][ T6270] wg2: entered promiscuous mode [ 109.156154][ T6270] wg2: entered allmulticast mode [ 110.383199][ T3465] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.617804][ T3465] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.642394][ T6266] chnl_net:caif_netlink_parms(): no params data found [ 110.928716][ T3465] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.021546][ T5802] Bluetooth: hci2: command tx timeout [ 111.242928][ T3465] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.968019][ T6266] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.984723][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.001447][ T6266] bridge_slave_0: entered allmulticast mode [ 112.008728][ T6266] bridge_slave_0: entered promiscuous mode [ 112.017549][ T6314] wg2: entered promiscuous mode [ 112.026414][ T6314] wg2: entered allmulticast mode [ 112.059468][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.069841][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.077584][ T6266] bridge_slave_1: entered allmulticast mode [ 112.086576][ T6266] bridge_slave_1: entered promiscuous mode [ 112.195683][ T6266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.245137][ T6266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.469122][ T6266] team0: Port device team_slave_0 added [ 112.657638][ T6266] team0: Port device team_slave_1 added [ 113.101214][ T5802] Bluetooth: hci2: command tx timeout [ 114.565689][ T6266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.572911][ T6266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.600121][ T6266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.704820][ T6266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.732792][ T6266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.805775][ T6266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.201096][ T5802] Bluetooth: hci2: command tx timeout [ 115.228081][ T6266] hsr_slave_0: entered promiscuous mode [ 115.279271][ T6266] hsr_slave_1: entered promiscuous mode [ 115.324933][ T6266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.377977][ T6266] Cannot create hsr debugfs directory [ 117.261302][ T5802] Bluetooth: hci2: command tx timeout [ 117.541117][ T3465] hsr_slave_0: left promiscuous mode [ 117.559368][ T3465] hsr_slave_1: left promiscuous mode [ 117.581965][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.589463][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.614325][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.636985][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.652169][ T3465] bridge_slave_1: left allmulticast mode [ 117.657862][ T3465] bridge_slave_1: left promiscuous mode [ 117.668674][ T3465] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.682935][ T3465] bridge_slave_0: left allmulticast mode [ 117.688635][ T3465] bridge_slave_0: left promiscuous mode [ 117.712115][ T3465] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.763534][ T3465] veth1_macvtap: left promiscuous mode [ 117.769645][ T3465] veth0_macvtap: left promiscuous mode [ 117.777920][ T3465] veth1_vlan: left promiscuous mode [ 117.789408][ T3465] veth0_vlan: left promiscuous mode [ 118.551430][ T3465] team0 (unregistering): Port device team_slave_1 removed [ 118.589749][ T3465] team0 (unregistering): Port device team_slave_0 removed [ 118.625009][ T3465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.665043][ T3465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.046265][ T3465] bond0 (unregistering): Released all slaves [ 119.629335][ T6438] veth0_vlan: entered allmulticast mode [ 120.431626][ T6266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 120.446666][ T6266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 120.508995][ T6266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 120.541774][ T6455] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.549482][ T6455] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.558689][ T6455] bridge0: entered allmulticast mode [ 120.621759][ T6266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 120.935046][ T6266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.097207][ T6266] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.206171][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.213457][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.277015][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.284256][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.577797][ T6539] wg2: entered promiscuous mode [ 124.583000][ T6539] wg2: entered allmulticast mode [ 124.682685][ T6529] syzkaller0: entered promiscuous mode [ 124.688220][ T6529] syzkaller0: entered allmulticast mode [ 126.128706][ T6266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.290882][ T6266] veth0_vlan: entered promiscuous mode [ 126.324056][ T6266] veth1_vlan: entered promiscuous mode [ 126.399962][ T6266] veth0_macvtap: entered promiscuous mode [ 126.427602][ T6266] veth1_macvtap: entered promiscuous mode [ 126.483362][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.507293][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.646190][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.657245][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.667623][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.678546][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.692218][ T6266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.805028][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.969438][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.989386][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.097649][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.181176][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.252816][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.376324][ T6266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.575029][ T6266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.588094][ T6266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.602633][ T6266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.617959][ T6266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.808094][ T6583] pim6reg1: entered promiscuous mode [ 127.817270][ T6583] pim6reg1: entered allmulticast mode [ 128.300784][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.319575][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.366052][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.389370][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.038516][ T6603] veth0_vlan: entered allmulticast mode [ 129.927425][ T6614] ÿÿÿÿÿÿ: renamed from vlan1 [ 130.373143][ T6631] pim6reg1: entered promiscuous mode [ 130.378581][ T6631] pim6reg1: entered allmulticast mode [ 131.449286][ T6640] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 132.867058][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.878707][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.239433][ T6673] sit0: entered allmulticast mode [ 134.487009][ T6675] sit0: entered promiscuous mode [ 135.538801][ T6695] sit0: entered allmulticast mode [ 135.764869][ T6695] sit0: entered promiscuous mode [ 136.373948][ T6705] sit0: entered allmulticast mode [ 136.646802][ T6709] sit0: entered promiscuous mode [ 139.090355][ T6719] veth0_vlan: left promiscuous mode [ 139.162464][ T6719] veth0_vlan: entered promiscuous mode [ 140.953028][ T6746] sit0: left promiscuous mode [ 141.805193][ T6750] syzkaller0: entered promiscuous mode [ 141.810913][ T6750] syzkaller0: entered allmulticast mode [ 144.172185][ T6773] bridge_slave_1: left allmulticast mode [ 144.180894][ T6773] bridge_slave_1: left promiscuous mode [ 144.188209][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.207927][ T6773] bridge_slave_0: left allmulticast mode [ 144.213971][ T6773] bridge_slave_0: left promiscuous mode [ 144.219923][ T6773] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.773863][ T6796] syzkaller0: entered promiscuous mode [ 148.779409][ T6796] syzkaller0: entered allmulticast mode [ 150.423921][ T6811] sit0: left promiscuous mode [ 150.883684][ T6811] sit0: entered promiscuous mode [ 155.602911][ T6885] syzkaller0: entered promiscuous mode [ 155.628134][ T6885] syzkaller0: entered allmulticast mode [ 158.215413][ T6896] bridge_slave_0: entered allmulticast mode [ 158.331443][ T6905] veth0_vlan: left promiscuous mode [ 158.347734][ T6905] veth0_vlan: entered promiscuous mode [ 159.091275][ T6920] macsec0: entered promiscuous mode [ 159.110804][ T6920] macsec0: entered allmulticast mode [ 159.129812][ T6920] veth1_macvtap: entered allmulticast mode [ 162.337142][ T6967] bridge_slave_0: entered allmulticast mode [ 163.371521][ T6984] pim6reg1: entered promiscuous mode [ 163.376973][ T6984] pim6reg1: entered allmulticast mode [ 164.144779][ T6998] bridge_slave_0: entered allmulticast mode [ 168.779257][ T7080] vlan0: entered allmulticast mode [ 169.009852][ T7090] syzkaller0: entered promiscuous mode [ 169.017914][ T7090] syzkaller0: entered allmulticast mode [ 173.366823][ T7140] [ 173.369219][ T7140] ============================================ [ 173.375398][ T7140] WARNING: possible recursive locking detected [ 173.381591][ T7140] syzkaller #0 Not tainted [ 173.386046][ T7140] -------------------------------------------- [ 173.392234][ T7140] syz.1.412/7140 is trying to acquire lock: [ 173.398140][ T7140] ffff888059a90a38 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x96/0x6a0 [ 173.407061][ T7140] [ 173.407061][ T7140] but task is already holding lock: [ 173.414453][ T7140] ffff88807d6f0a38 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xca/0xea0 [ 173.423347][ T7140] [ 173.423347][ T7140] other info that might help us debug this: [ 173.431407][ T7140] Possible unsafe locking scenario: [ 173.431407][ T7140] [ 173.438858][ T7140] CPU0 [ 173.442145][ T7140] ---- [ 173.445430][ T7140] lock(&trie->lock); [ 173.449514][ T7140] lock(&trie->lock); [ 173.453594][ T7140] [ 173.453594][ T7140] *** DEADLOCK *** [ 173.453594][ T7140] [ 173.461739][ T7140] May be due to missing lock nesting notation [ 173.461739][ T7140] [ 173.470063][ T7140] 3 locks held by syz.1.412/7140: [ 173.475088][ T7140] #0: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x41d/0x720 [ 173.485035][ T7140] #1: ffff88807d6f0a38 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xca/0xea0 [ 173.494351][ T7140] #2: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0xfd/0x420 [ 173.503849][ T7140] [ 173.503849][ T7140] stack backtrace: [ 173.509747][ T7140] CPU: 1 PID: 7140 Comm: syz.1.412 Not tainted syzkaller #0 [ 173.517036][ T7140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 173.527099][ T7140] Call Trace: [ 173.530389][ T7140] [ 173.533335][ T7140] dump_stack_lvl+0x16c/0x230 [ 173.538030][ T7140] ? show_regs_print_info+0x20/0x20 [ 173.543267][ T7140] ? print_deadlock_bug+0x435/0x5d0 [ 173.548482][ T7140] __lock_acquire+0x5d40/0x7c80 [ 173.553375][ T7140] ? mark_lock+0x94/0x320 [ 173.557737][ T7140] ? verify_lock_unused+0x140/0x140 [ 173.562954][ T7140] ? __lock_acquire+0x1260/0x7c80 [ 173.568036][ T7140] lock_acquire+0x197/0x410 [ 173.572593][ T7140] ? trie_delete_elem+0x96/0x6a0 [ 173.577551][ T7140] ? verify_lock_unused+0x140/0x140 [ 173.582754][ T7140] ? page_counter_try_charge+0x293/0x2c0 [ 173.588404][ T7140] ? read_lock_is_recursive+0x20/0x20 [ 173.593789][ T7140] ? try_charge_memcg+0x1342/0x1810 [ 173.599050][ T7140] _raw_spin_lock_irqsave+0xa8/0xf0 [ 173.604256][ T7140] ? trie_delete_elem+0x96/0x6a0 [ 173.609204][ T7140] ? _raw_spin_lock+0x40/0x40 [ 173.613890][ T7140] trie_delete_elem+0x96/0x6a0 [ 173.618659][ T7140] ? __cant_sleep+0x210/0x210 [ 173.623387][ T7140] bpf_prog_e3d85a4b6a7d3e61+0x48/0x4c [ 173.628883][ T7140] bpf_trace_run4+0x1f9/0x420 [ 173.633587][ T7140] ? bpf_trace_run4+0xfd/0x420 [ 173.638354][ T7140] ? bpf_trace_run3+0x400/0x400 [ 173.643217][ T7140] ? percpu_ref_put+0xef/0x180 [ 173.648036][ T7140] ? __memcg_kmem_charge_page+0x264/0x380 [ 173.653768][ T7140] __alloc_pages+0x429/0x460 [ 173.658381][ T7140] ? zone_statistics+0x170/0x170 [ 173.663336][ T7140] ? bpf_map_get_memcg+0x4e/0x4e0 [ 173.668386][ T7140] ? __lock_acquire+0x7c80/0x7c80 [ 173.673422][ T7140] ? __rwlock_init+0x150/0x150 [ 173.678199][ T7140] __kmalloc_large_node+0x8c/0x1e0 [ 173.683413][ T7140] ? bpf_map_kmalloc_node+0xbc/0x1b0 [ 173.688715][ T7140] __kmalloc_node+0x10f/0x230 [ 173.693428][ T7140] ? _raw_spin_lock+0x40/0x40 [ 173.698122][ T7140] bpf_map_kmalloc_node+0xbc/0x1b0 [ 173.703260][ T7140] trie_update_elem+0x166/0xea0 [ 173.708137][ T7140] ? asm_exc_page_fault+0x26/0x30 [ 173.713185][ T7140] bpf_map_update_value+0x660/0x720 [ 173.718509][ T7140] map_update_elem+0x57b/0x700 [ 173.723285][ T7140] __sys_bpf+0x652/0x800 [ 173.727539][ T7140] ? bpf_link_show_fdinfo+0x350/0x350 [ 173.732960][ T7140] ? lock_chain_count+0x20/0x20 [ 173.737883][ T7140] __x64_sys_bpf+0x7c/0x90 [ 173.742316][ T7140] do_syscall_64+0x55/0xb0 [ 173.746750][ T7140] ? clear_bhb_loop+0x40/0x90 [ 173.751436][ T7140] ? clear_bhb_loop+0x40/0x90 [ 173.756124][ T7140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.762030][ T7140] RIP: 0033:0x7f55fef8eec9 [ 173.766452][ T7140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.786175][ T7140] RSP: 002b:00007f55ffdbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.794602][ T7140] RAX: ffffffffffffffda RBX: 00007f55ff1e5fa0 RCX: 00007f55fef8eec9 [ 173.802667][ T7140] RDX: 0000000000000020 RSI: 0000200000000540 RDI: 0000000000000002 [ 173.810646][ T7140] RBP: 00007f55ff011f91 R08: 0000000000000000 R09: 0000000000000000 [ 173.818621][ T7140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.826597][ T7140] R13: 00007f55ff1e6038 R14: 00007f55ff1e5fa0 R15: 00007ffe6da858f8 [ 173.834596][ T7140]