last executing test programs: 2.211844933s ago: executing program 0 (id=1): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1da}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, 0x0, 0x11) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) socket$kcm(0x29, 0x7, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300"], 0xfe33) r2 = socket$nl_crypto(0x10, 0x3, 0x15) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={&(0x7f0000000340)="e6d1a9ecb610240ab9d11cf107ed200818665b85c964c26aa75974e2495e293dcdb53ad80dfb7ce2bdf77d048da2d467bb019bc6312d8585da1ac062b0bbd2f5312eae9cd2b5b8e6e28b4c383a1d8d57ca3dc057", &(0x7f0000000440)=""/235, &(0x7f0000000540), 0x0, 0xfffffffe}, 0x38) sendmsg$nl_crypto(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@delrng={0x10, 0x14, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4001885}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x8902, &(0x7f00000002c0)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x8903, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30001300000500040000000000050005000a00000014000780050015000200000008001240", @ANYRESOCT], 0x64}}, 0x0) 2.023708078s ago: executing program 0 (id=6): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x60, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) (fail_nth: 3) 1.939357023s ago: executing program 0 (id=7): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40020000) (async) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x40) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0xc0045878, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d34, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8000000, 0xa9, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x400, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r2}) r4 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x45, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x4, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, r4, 0x0) (async) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x9) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000680)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.66691889s ago: executing program 0 (id=8): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b8010000180090001006c617374"], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYRES64=r0], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) recvmsg$unix(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYRES8=r6, @ANYBLOB="3eca", @ANYRES8=r7], 0x9a) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10) close(r4) r12 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r15, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x8040) ioctl$SIOCSIFHWADDR(r14, 0x541b, &(0x7f0000000340)={'veth0_virt_wifi\x00', @remote}) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.521310297s ago: executing program 4 (id=5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r3, 0x3, 0x0, 0x1}, 0x50) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x60, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x24a}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb7a}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) 1.197845168s ago: executing program 1 (id=2): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fc, 0x7fffffff, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1943}, 0x101020, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x43, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2, 0x5, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r3, 0x58, &(0x7f0000000280)}, 0x10) socket$kcm(0x23, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r4], 0xc4}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r1}) 1.078360665s ago: executing program 0 (id=9): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x2, 0x3, 0x1, 0x0, 0x7, 0x8200, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_bp, 0x110002, 0x3, 0x80000001, 0x7, 0x1ff, 0x1, 0x3, 0x0, 0x75d0, 0x0, 0x81}, r1, 0x9, 0xffffffffffffffff, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x60, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 951.666037ms ago: executing program 4 (id=10): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x10000, &(0x7f0000000040)="e0e6", 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100a, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x1a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000080)=0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) close(0x3) 888.998593ms ago: executing program 1 (id=11): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x20000000, &(0x7f0000000000)="8fe1f19bb2072241c7f9f9febb586f9992bef1cc281dc0c9d39741f7a58058f121cbeb6cfbd261b85510", 0x2a, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000003c0)="504a5dbe9c9071f796e990d857908ffac1705301b3a0dcdd70ec516ab4f86fee9073626694f69999cb619b874190a3710cf2d7deb57c5ae59e91f6cd3aeb5913bcc7c34db3e1eca24670cf49fc720137c2cf06e90351df66c94a27a19afa1e43afbfa4bc396ad8f3572d3ce8345c9bcbd8a640b327410835dcc7412f824e8037d0d6410d25d75dc0e37b0a2692a301f0cf57ecae9279a9552b3e67e5825ee3a11459d2de2c08d5c816e6b5b064f90340cb645a016be027c3446bd21b2a7078a97b661235e36d1ae8") ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {0x0, 0x40, 0x0, 0x0, 0x4000}, {0x0, 0x0, 0x0, 0x400000000}, {}, 0x0, 0x3506, 0xa, 0x0, 0x0, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f00000007c0)}, 0x20) 674.45135ms ago: executing program 0 (id=12): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffd9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000180)=@nl=@unspec, 0x80, 0x0}, 0x20000001) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000100000001000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001080)={0x0, 0x60, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500010006"], 0x6c}}, 0x40000) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) close(r7) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r3) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x40089000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000180)=r11, 0x4) 0s ago: executing program 1 (id=13): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4084) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4004004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x7, 0x0}, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r0, r1, 0x14, 0x0, @val=@tracing={r2, 0x3}}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. [ 72.564458][ T5850] cgroup: Unknown subsys name 'net' [ 72.693429][ T5850] cgroup: Unknown subsys name 'cpuset' [ 72.702312][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.065213][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.067714][ T5874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.075837][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.084406][ T5874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.092247][ T5874] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.099857][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.106476][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.115391][ T5874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.115929][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.131376][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.139388][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.139447][ T5874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.147632][ T5872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.154430][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.162150][ T5872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.168691][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.176217][ T5872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.182991][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.190514][ T5872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.196010][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.204628][ T5872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.212622][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.228395][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.238465][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.249743][ T5184] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.263895][ T5184] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.912738][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 79.054423][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 79.075711][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 79.087763][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 79.209375][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.217102][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.224859][ T5863] bridge_slave_0: entered allmulticast mode [ 79.232984][ T5863] bridge_slave_0: entered promiscuous mode [ 79.241925][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 79.279492][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.286770][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.295733][ T5863] bridge_slave_1: entered allmulticast mode [ 79.302915][ T5863] bridge_slave_1: entered promiscuous mode [ 79.461185][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.474815][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.489636][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.496906][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.504679][ T5862] bridge_slave_0: entered allmulticast mode [ 79.513405][ T5862] bridge_slave_0: entered promiscuous mode [ 79.521130][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.528345][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.535735][ T5861] bridge_slave_0: entered allmulticast mode [ 79.543140][ T5861] bridge_slave_0: entered promiscuous mode [ 79.550822][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.557941][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.565627][ T5877] bridge_slave_0: entered allmulticast mode [ 79.573045][ T5877] bridge_slave_0: entered promiscuous mode [ 79.607741][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.615138][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.622476][ T5862] bridge_slave_1: entered allmulticast mode [ 79.629559][ T5862] bridge_slave_1: entered promiscuous mode [ 79.652172][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.659276][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.666793][ T5861] bridge_slave_1: entered allmulticast mode [ 79.674181][ T5861] bridge_slave_1: entered promiscuous mode [ 79.681470][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.688583][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.695897][ T5877] bridge_slave_1: entered allmulticast mode [ 79.702871][ T5877] bridge_slave_1: entered promiscuous mode [ 79.712314][ T5863] team0: Port device team_slave_0 added [ 79.759773][ T5863] team0: Port device team_slave_1 added [ 79.796158][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.847966][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.855330][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.862575][ T5864] bridge_slave_0: entered allmulticast mode [ 79.869607][ T5864] bridge_slave_0: entered promiscuous mode [ 79.879234][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.893609][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.906113][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.919251][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.945872][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.953158][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.961123][ T5864] bridge_slave_1: entered allmulticast mode [ 79.972235][ T5864] bridge_slave_1: entered promiscuous mode [ 80.016601][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.056615][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.063976][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.089967][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.155527][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.162601][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.188685][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.210922][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.223166][ T5862] team0: Port device team_slave_0 added [ 80.231037][ T5861] team0: Port device team_slave_0 added [ 80.238800][ T5877] team0: Port device team_slave_0 added [ 80.248341][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.259617][ T5862] team0: Port device team_slave_1 added [ 80.267376][ T5861] team0: Port device team_slave_1 added [ 80.271032][ T5184] Bluetooth: hci1: command tx timeout [ 80.273350][ T5866] Bluetooth: hci2: command tx timeout [ 80.278610][ T5184] Bluetooth: hci4: command tx timeout [ 80.284485][ T5874] Bluetooth: hci0: command tx timeout [ 80.306287][ T5877] team0: Port device team_slave_1 added [ 80.360341][ T5866] Bluetooth: hci3: command tx timeout [ 80.409839][ T5863] hsr_slave_0: entered promiscuous mode [ 80.417919][ T5863] hsr_slave_1: entered promiscuous mode [ 80.435604][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.443084][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.469522][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.482175][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.489127][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.515136][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.527349][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.534530][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.560490][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.573171][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.580260][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.606523][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.631224][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.638188][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.664845][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.678119][ T5864] team0: Port device team_slave_0 added [ 80.686844][ T5864] team0: Port device team_slave_1 added [ 80.721534][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.728528][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.754541][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.829119][ T5862] hsr_slave_0: entered promiscuous mode [ 80.835568][ T5862] hsr_slave_1: entered promiscuous mode [ 80.842366][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 80.848186][ T5862] Cannot create hsr debugfs directory [ 80.928965][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.936340][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.962568][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.005469][ T5877] hsr_slave_0: entered promiscuous mode [ 81.012591][ T5877] hsr_slave_1: entered promiscuous mode [ 81.018615][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 81.025025][ T5877] Cannot create hsr debugfs directory [ 81.031461][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.038396][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.066553][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.084064][ T5861] hsr_slave_0: entered promiscuous mode [ 81.090559][ T5861] hsr_slave_1: entered promiscuous mode [ 81.096551][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 81.103038][ T5861] Cannot create hsr debugfs directory [ 81.319753][ T5864] hsr_slave_0: entered promiscuous mode [ 81.326166][ T5864] hsr_slave_1: entered promiscuous mode [ 81.332846][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 81.338584][ T5864] Cannot create hsr debugfs directory [ 81.779576][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.819372][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.839824][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.875370][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.929561][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.942463][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.975917][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.994051][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.084143][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.112713][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.127546][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.171086][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.245645][ T5877] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.285519][ T5877] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.296718][ T5877] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.308154][ T5877] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.349717][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.357509][ T5866] Bluetooth: hci2: command tx timeout [ 82.363477][ T5866] Bluetooth: hci0: command tx timeout [ 82.368895][ T5866] Bluetooth: hci4: command tx timeout [ 82.370871][ T5874] Bluetooth: hci1: command tx timeout [ 82.407616][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.440246][ T5874] Bluetooth: hci3: command tx timeout [ 82.465503][ T5864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.481875][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.489242][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.502899][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.515759][ T5864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.526441][ T5864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.538704][ T5864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.585487][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.592663][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.635499][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.682098][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.697481][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.704676][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.721060][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.728287][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.912472][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.954442][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.015192][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.026916][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.053446][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.060631][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.081805][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.089469][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.135043][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.142247][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.188008][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.195311][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.239009][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.284963][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.296779][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.336697][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.392611][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.399781][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.446362][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.453558][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.584860][ T5863] veth0_vlan: entered promiscuous mode [ 83.624268][ T5863] veth1_vlan: entered promiscuous mode [ 83.732532][ T5863] veth0_macvtap: entered promiscuous mode [ 83.778774][ T5863] veth1_macvtap: entered promiscuous mode [ 83.888131][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.944467][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.978120][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.007779][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.046102][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.061723][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.105965][ T5862] veth0_vlan: entered promiscuous mode [ 84.138954][ T5862] veth1_vlan: entered promiscuous mode [ 84.172767][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.219514][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.228532][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.243690][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.257909][ T5862] veth0_macvtap: entered promiscuous mode [ 84.282525][ T5862] veth1_macvtap: entered promiscuous mode [ 84.303758][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.370522][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.378224][ T5877] veth0_vlan: entered promiscuous mode [ 84.378450][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.402939][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.432664][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.441215][ T5874] Bluetooth: hci4: command tx timeout [ 84.441602][ T5866] Bluetooth: hci1: command tx timeout [ 84.446677][ T5874] Bluetooth: hci0: command tx timeout [ 84.452709][ T5866] Bluetooth: hci2: command tx timeout [ 84.498259][ T5877] veth1_vlan: entered promiscuous mode [ 84.510751][ T5866] Bluetooth: hci3: command tx timeout [ 84.534983][ T5877] veth0_macvtap: entered promiscuous mode [ 84.542587][ T1153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.553401][ T1153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.555572][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.593579][ T1153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.605101][ T1153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.627967][ T5877] veth1_macvtap: entered promiscuous mode [ 84.661408][ T5864] veth0_vlan: entered promiscuous mode [ 84.753373][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.774115][ T5864] veth1_vlan: entered promiscuous mode [ 84.812870][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.843380][ T5861] veth0_vlan: entered promiscuous mode [ 84.921635][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.929483][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.951478][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.968769][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.987456][ T5861] veth1_vlan: entered promiscuous mode [ 85.007183][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.017658][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.082898][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.092996][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.115631][ T5864] veth0_macvtap: entered promiscuous mode [ 85.129854][ T5864] veth1_macvtap: entered promiscuous mode [ 85.203471][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.218594][ T5861] veth0_macvtap: entered promiscuous mode [ 85.265371][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.285421][ T5861] veth1_macvtap: entered promiscuous mode [ 85.303227][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.344958][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.455549][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.513318][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.523714][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.540137][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.548366][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.552927][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.576814][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.596984][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.661596][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.679293][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.727913][ T3474] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.753772][ T3474] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.817178][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 85.833392][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 86.112599][ C1] hrtimer: interrupt took 119799 ns [ 86.515204][ T5866] Bluetooth: hci2: command tx timeout [ 86.592510][ T5866] Bluetooth: hci3: command tx timeout [ 86.744426][ T5866] Bluetooth: hci0: command tx timeout [ 86.755287][ T5866] Bluetooth: hci1: command tx timeout [ 86.763124][ T5866] Bluetooth: hci4: command tx timeout [ 86.908443][ T6009] Zero length message leads to an empty skb [ 86.961962][ T43] cfg80211: failed to load regulatory.db [ 94.137692][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.214283][ T1329] sched: DL replenish lagged too much [ 94.263628][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.498467][ T29] rcu_tasks_wait_gp: rcu_tasks_trace grace period number 61 (since boot) is 2160 jiffies old. [ 150.116870][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.231412][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 166.360964][ T997] ------------[ cut here ]------------ [ 166.366639][ T997] WARNING: CPU: 0 PID: 997 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3ca/0x440 [ 166.376654][ T997] Modules linked in: [ 166.380818][ T997] CPU: 0 UID: 0 PID: 997 Comm: kworker/u8:5 Not tainted 6.17.0-rc1-syzkaller-gbf0c2a84df9f #0 PREEMPT(full) [ 166.392549][ T997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.402974][ T997] Workqueue: cfg80211 cfg80211_event_work [ 166.408767][ T997] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 166.417094][ T997] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 ee a3 00 cc e8 a2 7e e7 f6 90 0f 0b 90 eb bd e8 97 7e e7 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 87 7e e7 f6 90 0f 0b 90 e9 de fd [ 166.439219][ T997] RSP: 0018:ffffc90003d8f8e0 EFLAGS: 00010293 [ 166.445422][ T997] RAX: ffffffff8ad82d19 RBX: dffffc0000000000 RCX: ffff888025d4da00 [ 166.453537][ T997] RDX: 0000000000000000 RSI: ffffffff8d9b6dbb RDI: ffffffff8be33300 [ 166.461690][ T997] RBP: ffffc90003d8f9b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 166.469694][ T997] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff888056928d90 [ 166.477995][ T997] R13: 1ffff920007b1f24 R14: ffff8880573c3338 R15: 0000000000000006 [ 166.487154][ T997] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 166.496525][ T997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.503199][ T997] CR2: 0000563fc5116878 CR3: 0000000079280000 CR4: 00000000003526f0 [ 166.511303][ T997] Call Trace: [ 166.514610][ T997] [ 166.519374][ T997] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.526136][ T997] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 166.532254][ T997] ? __pfx___mutex_lock+0x10/0x10 [ 166.537392][ T997] cfg80211_process_wdev_events+0x38a/0x4f0 [ 166.543431][ T997] cfg80211_process_rdev_events+0xa1/0x110 [ 166.549295][ T997] cfg80211_event_work+0x31/0x70 [ 166.554428][ T997] ? process_scheduled_works+0x9ef/0x17b0 [ 166.560409][ T997] process_scheduled_works+0xade/0x17b0 [ 166.566139][ T997] ? __pfx_process_scheduled_works+0x10/0x10 [ 166.572361][ T997] worker_thread+0x8a0/0xda0 [ 166.577070][ T997] ? __kthread_parkme+0x7b/0x200 [ 166.582267][ T997] kthread+0x70e/0x8a0 [ 166.586425][ T997] ? __pfx_worker_thread+0x10/0x10 [ 166.591728][ T997] ? __pfx_kthread+0x10/0x10 [ 166.596394][ T997] ? _raw_spin_unlock_irq+0x23/0x50 [ 166.601791][ T997] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.607027][ T997] ? __pfx_kthread+0x10/0x10 [ 166.611827][ T997] ret_from_fork+0x3f9/0x770 [ 166.616480][ T997] ? __pfx_ret_from_fork+0x10/0x10 [ 166.623660][ T997] ? __switch_to_asm+0x39/0x70 [ 166.628503][ T997] ? __switch_to_asm+0x33/0x70 [ 166.634815][ T997] ? __pfx_kthread+0x10/0x10 [ 166.639558][ T997] ret_from_fork_asm+0x1a/0x30 [ 166.644528][ T997] [ 166.647599][ T997] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 166.654911][ T997] CPU: 0 UID: 0 PID: 997 Comm: kworker/u8:5 Not tainted 6.17.0-rc1-syzkaller-gbf0c2a84df9f #0 PREEMPT(full) [ 166.666554][ T997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.676656][ T997] Workqueue: cfg80211 cfg80211_event_work [ 166.682415][ T997] Call Trace: [ 166.685716][ T997] [ 166.688751][ T997] dump_stack_lvl+0x99/0x250 [ 166.693380][ T997] ? __asan_memcpy+0x40/0x70 [ 166.698065][ T997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.703299][ T997] ? __pfx__printk+0x10/0x10 [ 166.708072][ T997] vpanic+0x281/0x750 [ 166.712124][ T997] ? __pfx__printk+0x10/0x10 [ 166.716831][ T997] ? __pfx_vpanic+0x10/0x10 [ 166.721379][ T997] ? is_bpf_text_address+0x26/0x2b0 [ 166.726659][ T997] panic+0xb9/0xc0 [ 166.730419][ T997] ? __pfx_panic+0x10/0x10 [ 166.734939][ T997] __warn+0x31b/0x4b0 [ 166.738940][ T997] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 166.744523][ T997] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 166.750104][ T997] report_bug+0x2be/0x4f0 [ 166.754465][ T997] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 166.760040][ T997] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 166.765609][ T997] ? __cfg80211_ibss_joined+0x3cc/0x440 [ 166.771183][ T997] handle_bug+0x84/0x160 [ 166.775459][ T997] exc_invalid_op+0x1a/0x50 [ 166.779987][ T997] asm_exc_invalid_op+0x1a/0x20 [ 166.784874][ T997] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 166.791046][ T997] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 ee a3 00 cc e8 a2 7e e7 f6 90 0f 0b 90 eb bd e8 97 7e e7 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 87 7e e7 f6 90 0f 0b 90 e9 de fd [ 166.810841][ T997] RSP: 0018:ffffc90003d8f8e0 EFLAGS: 00010293 [ 166.816945][ T997] RAX: ffffffff8ad82d19 RBX: dffffc0000000000 RCX: ffff888025d4da00 [ 166.824934][ T997] RDX: 0000000000000000 RSI: ffffffff8d9b6dbb RDI: ffffffff8be33300 [ 166.832922][ T997] RBP: ffffc90003d8f9b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 166.840909][ T997] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff888056928d90 [ 166.848898][ T997] R13: 1ffff920007b1f24 R14: ffff8880573c3338 R15: 0000000000000006 [ 166.856924][ T997] ? __cfg80211_ibss_joined+0x3c9/0x440 [ 166.862537][ T997] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.867782][ T997] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 166.873727][ T997] ? __pfx___mutex_lock+0x10/0x10 [ 166.878801][ T997] cfg80211_process_wdev_events+0x38a/0x4f0 [ 166.884773][ T997] cfg80211_process_rdev_events+0xa1/0x110 [ 166.890612][ T997] cfg80211_event_work+0x31/0x70 [ 166.895570][ T997] ? process_scheduled_works+0x9ef/0x17b0 [ 166.901308][ T997] process_scheduled_works+0xade/0x17b0 [ 166.907020][ T997] ? __pfx_process_scheduled_works+0x10/0x10 [ 166.913191][ T997] worker_thread+0x8a0/0xda0 [ 166.917876][ T997] ? __kthread_parkme+0x7b/0x200 [ 166.922892][ T997] kthread+0x70e/0x8a0 [ 166.927004][ T997] ? __pfx_worker_thread+0x10/0x10 [ 166.932134][ T997] ? __pfx_kthread+0x10/0x10 [ 166.936762][ T997] ? _raw_spin_unlock_irq+0x23/0x50 [ 166.941984][ T997] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.947205][ T997] ? __pfx_kthread+0x10/0x10 [ 166.951830][ T997] ret_from_fork+0x3f9/0x770 [ 166.956467][ T997] ? __pfx_ret_from_fork+0x10/0x10 [ 166.961641][ T997] ? __switch_to_asm+0x39/0x70 [ 166.966418][ T997] ? __switch_to_asm+0x33/0x70 [ 166.971212][ T997] ? __pfx_kthread+0x10/0x10 [ 166.975838][ T997] ret_from_fork_asm+0x1a/0x30 [ 166.980710][ T997] [ 166.984043][ T997] Kernel Offset: disabled [ 166.988372][ T997] Rebooting in 86400 seconds..