last executing test programs: 9m8.633403982s ago: executing program 0 (id=1035): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 9m8.453215425s ago: executing program 0 (id=1040): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000060000000000000000000000850000009e00000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000c2e54c83afa15a3900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) 9m7.348181446s ago: executing program 0 (id=1051): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x12) 9m7.019537622s ago: executing program 0 (id=1055): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d05000003"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$unix(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r8], 0x12) 9m6.865913815s ago: executing program 0 (id=1056): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r2, 0x2000002, 0xe, 0xfd47, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m6.664485929s ago: executing program 0 (id=1059): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc0100001000000018000000000000000000000000000000950000000000000038720a"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008140)={&(0x7f0000008000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @union]}, {0x0, [0x71]}}, 0x0, 0x37}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 8m50.655266232s ago: executing program 32 (id=1059): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc0100001000000018000000000000000000000000000000950000000000000038720a"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008140)={&(0x7f0000008000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @union]}, {0x0, [0x71]}}, 0x0, 0x37}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 6m58.136389025s ago: executing program 3 (id=1568): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe90}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_subtree(r2, 0x0, 0x12) 6m57.749016092s ago: executing program 3 (id=1572): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x74}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0xfffffdef) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r3, &(0x7f0000000980), 0x20000992) 6m56.383473648s ago: executing program 3 (id=1575): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2b, 0x1, 0x0) close(r1) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000008095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000200000000001200000085000000230000003f0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8e02c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0x4000000000000ca, 0x0, 0x0, 0x0, 0xe9b0, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r3], 0x9a) 6m56.006908095s ago: executing program 3 (id=1577): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 6m55.510983004s ago: executing program 3 (id=1582): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa8}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x6, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r3}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000000000cdbbda838c05db3aef6059b560ffffffb7eb000008800000b7040000209c0000dae78985cab0f6aa95dd860000000000000000b09200000000000019000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x4, 0x2}, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000500), 0x5fc, r5}, 0x38) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x828, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) 6m50.297298013s ago: executing program 3 (id=1595): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc0100001000000018000000000000000000000000000000950000000000000038720a013653e84c584fdd38a199f6b2df9e19f1574da4512902e83640d72226cbc0c89b926a"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xdd, &(0x7f0000000000)=""/156}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008140)={&(0x7f0000008000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @union]}, {0x0, [0x71]}}, 0x0, 0x37}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 6m34.66847542s ago: executing program 33 (id=1595): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc0100001000000018000000000000000000000000000000950000000000000038720a013653e84c584fdd38a199f6b2df9e19f1574da4512902e83640d72226cbc0c89b926a"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xdd, &(0x7f0000000000)=""/156}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008140)={&(0x7f0000008000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @union]}, {0x0, [0x71]}}, 0x0, 0x37}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 6m24.428091924s ago: executing program 2 (id=1647): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) 6m24.258310777s ago: executing program 2 (id=1649): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000694799ba100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0xb, 0xa, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6m23.916180693s ago: executing program 2 (id=1650): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) 6m23.770819696s ago: executing program 2 (id=1652): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x862a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x144a8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r0, &(0x7f0000000980), 0x20000992) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) 6m22.602848718s ago: executing program 2 (id=1658): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000060000000006"], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r2, 0x0, 0x80000fffe}, 0x38) 6m21.560552938s ago: executing program 2 (id=1663): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000001080)={0x0, 0x80, 0xf6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffff00, 0x2}, 0x1882a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socketpair(0x10, 0x0, 0x14, &(0x7f0000000400)) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305829, &(0x7f0000000040)) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10004, 0x34114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xb7, 0x4}, 0x0, 0xc8, 0xfffffffd, 0x1, 0x9, 0xfffffffa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 6m5.948419244s ago: executing program 34 (id=1663): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000001080)={0x0, 0x80, 0xf6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffff00, 0x2}, 0x1882a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socketpair(0x10, 0x0, 0x14, &(0x7f0000000400)) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305829, &(0x7f0000000040)) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10004, 0x34114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xb7, 0x4}, 0x0, 0xc8, 0xfffffffd, 0x1, 0x9, 0xfffffffa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 6m5.417039804s ago: executing program 5 (id=1694): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00c014}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, 0x0, &(0x7f0000000380)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, &(0x7f00000032c0)=""/4096, 0x1000}, 0x0) sendmsg$tipc(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) 6m4.316363265s ago: executing program 5 (id=1695): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="06000000040000000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f00000008c0)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m2.421400821s ago: executing program 5 (id=1698): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYRES8=r2, @ANYRESOCT, @ANYRESOCT, @ANYRESHEX, @ANYRES8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x10, 0x3, 0x6, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x0, 0x8, 0x9b, 0x0, 0x0, 0x8, 0x4}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 6m1.307546602s ago: executing program 5 (id=1701): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) close(r1) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 5m57.126575081s ago: executing program 5 (id=1706): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000010001ec0800000001000000785360db89602106d1ef7a981278146ac15e79e20b8965a974a9598790edbba4570a12002e2c8c29b1854b335ed63c00000000000000029680ee89bf46683e5f4665757f071abef3e28358e8013d35be8ef1d014bb75e86d874e733267ab1fdfd388fb9eeb514527ca313f3aca9c6607f0d36c1d859bc62ee98a53d4da2283e7bd140ab7f174578525440f046b1e8ac0fd91602751de43e30bf0fbcce7774e53cf41802918668477ef5f60c07e305be793", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 5m55.352503205s ago: executing program 5 (id=1712): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="37c4128a9c98510600000004000000080000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2004}, 0x80) r4 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='c(u&\'\'\t|\t') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000d2000c00000000000000bf91000000000000b7020000000000008500000095000000b700000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x100) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000010018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000c8, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x40, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000740)}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r11}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m40.004814555s ago: executing program 35 (id=1712): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="37c4128a9c98510600000004000000080000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2004}, 0x80) r4 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='c(u&\'\'\t|\t') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000d2000c00000000000000bf91000000000000b7020000000000008500000095000000b700000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x100) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000010018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000c8, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x40, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000740)}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r11}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m4.510106058s ago: executing program 6 (id=1812): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x6, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x30) 5m2.663696553s ago: executing program 6 (id=1816): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000300)='fib6_table_lookup\x00', r2}, 0x18) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xe232}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd63"], 0xfdef) 5m2.183884172s ago: executing program 6 (id=1817): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0xaf, 0x5, 0x3}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 4m59.811570767s ago: executing program 6 (id=1822): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) 4m59.711512119s ago: executing program 6 (id=1823): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001000)={r1, 0x1d, &(0x7f0000000bc0)}, 0x9) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7030000000000008500000087000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000007c0)="c1dfb080cd21d308098ee688b5c6", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x84, 0x5, 0x0, 0x0, 0x0, 0x0, 0x322c6, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x145, 0x0, 0x100, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000080000000018190000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x80) write$cgroup_int(r5, &(0x7f0000000240)=0x2, 0x12) close(r5) sendmsg$tipc(r4, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb91c7f290a1f62fa}, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000040000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xc, 0x22, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ff0f000000000000ff010000b7080000000000007b8af8ff00000000b7080000000800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a5000000852000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000003850000002d000000afd5c0040900000085000000af0000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0xfffffff8, 0xee, &(0x7f0000000500)=""/238, 0x82000, 0x33, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x2, 0x6, 0x3}, 0x10, 0x0, r8, 0x3, &(0x7f00000009c0)=[r2, r0, r0, r0, r2, r2, r0, r2, 0xffffffffffffffff, 0x1], &(0x7f0000000a00)=[{0x4, 0x5, 0x3, 0x4}, {0x3, 0x4, 0x2, 0x2}, {0x4, 0x5, 0x6, 0x1}], 0x10, 0xfffffffd}, 0x94) 4m56.321315163s ago: executing program 6 (id=1831): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000e2", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001dc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x2f, 0x3, 0x9, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xfffffffffffffe1e, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x90) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) 4m41.150684271s ago: executing program 36 (id=1831): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000e2", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001dc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x2f, 0x3, 0x9, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xfffffffffffffe1e, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x90) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) 45.3497208s ago: executing program 7 (id=3628): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8c42, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xf}, 0x1000, 0x2, 0xa9eb, 0x8, 0x0, 0x0, 0x806}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 45.180297183s ago: executing program 7 (id=3629): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x12, 0x0, 0x0, 0x651, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x40000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYBLOB='>]\"'], 0x9a) 45.072023675s ago: executing program 7 (id=3630): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 44.903880749s ago: executing program 7 (id=3631): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="78cabf2dfb73fc", 0x7}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000080)="1c0000006d0081044e81f782db1f4cb9041c1d08", 0x14}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, 0x0}, 0x0) 44.82388843s ago: executing program 7 (id=3632): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 44.710700262s ago: executing program 7 (id=3633): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500000000000000000000001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1042d, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/ipc\x00') openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x403ac400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0xfffffca4, 0x0, 0x41100, 0x21}, 0x86) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2, 0x0, 0x8000000000000000}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYRES8=r1, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r5 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa, 0x222a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x801, 0x0, 0x0, 0x8, 0xd, 0x9, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r5, 0x0) syz_clone(0x43ac3100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) 29.643164388s ago: executing program 37 (id=3633): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500000000000000000000001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1042d, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/ipc\x00') openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x403ac400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0xfffffca4, 0x0, 0x41100, 0x21}, 0x86) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2, 0x0, 0x8000000000000000}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYRES8=r1, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r5 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa, 0x222a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x801, 0x0, 0x0, 0x8, 0xd, 0x9, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r5, 0x0) syz_clone(0x43ac3100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) 13.15734578s ago: executing program 1 (id=3786): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000001000000e27f00000100000012"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 12.867603296s ago: executing program 1 (id=3789): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) r7 = getpid() write$cgroup_pid(r6, &(0x7f0000000480)=r7, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.856797314s ago: executing program 1 (id=3833): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2000000}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.632261959s ago: executing program 9 (id=3837): socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000fcffffff000000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000700008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e2, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x80047441, 0xf0ff1f00000000) 1.192317627s ago: executing program 8 (id=3839): perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) 1.145640458s ago: executing program 4 (id=3840): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8c42, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xf}, 0x1000, 0x2, 0xa9eb, 0x8, 0x0, 0x0, 0x806}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1.063307209s ago: executing program 9 (id=3841): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 872.715843ms ago: executing program 4 (id=3842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r0}, &(0x7f0000000940), &(0x7f0000000980)='%pK \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) 845.625314ms ago: executing program 8 (id=3843): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002b40)="da", 0x1}], 0x1}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x22) recvmsg(r0, 0x0, 0x40010040) 845.368073ms ago: executing program 9 (id=3844): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x12, 0x0, 0x0, 0x651, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x40000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='>]\"'], 0x9a) 708.250576ms ago: executing program 8 (id=3845): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 708.030166ms ago: executing program 4 (id=3846): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012100) 634.088497ms ago: executing program 9 (id=3847): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000002300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 553.565539ms ago: executing program 8 (id=3848): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 500.66943ms ago: executing program 4 (id=3849): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/212, 0xd4}, {0x0}, {&(0x7f0000002940)=""/4112, 0x1010}, {&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000940)=""/199, 0xc7}], 0x7}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 489.995ms ago: executing program 1 (id=3850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8c42, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xf}, 0x1000, 0x2, 0xa9eb, 0x8, 0x0, 0x0, 0x806}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 389.003612ms ago: executing program 8 (id=3851): perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 291.182124ms ago: executing program 9 (id=3852): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000300, 0x0, 0x0, 0x0, 0x0}, 0x50) 276.437784ms ago: executing program 4 (id=3853): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002b40)="da", 0x1}], 0x1}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x22) recvmsg(r0, 0x0, 0x40010040) 208.343656ms ago: executing program 1 (id=3854): perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x1d, &(0x7f0000000200), 0x4) 133.822577ms ago: executing program 8 (id=3855): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x12, 0x0, 0x0, 0x651, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x40000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='>]\"'], 0x9a) 124.030187ms ago: executing program 4 (id=3856): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 249.09µs ago: executing program 1 (id=3857): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 0s ago: executing program 9 (id=3858): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}], 0x1}, 0x40012100) kernel console output (not intermixed with test programs): de [ 147.270276][ T7117] syzkaller0: entered allmulticast mode [ 148.990481][ T7131] syz.1.473[7131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.387791][ T7142] syzkaller0: entered promiscuous mode [ 149.407653][ T7142] syzkaller0: entered allmulticast mode [ 150.228887][ T7163] syz.2.486[7163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.669515][ T7192] syz.1.497[7192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.073812][ T7218] syzkaller0: entered promiscuous mode [ 154.106552][ T7218] syzkaller0: entered allmulticast mode [ 154.119103][ T7223] syz.2.509[7223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.593315][ T7258] netlink: 44 bytes leftover after parsing attributes in process `syz.2.519'. [ 156.645922][ T7258] netlink: 44 bytes leftover after parsing attributes in process `syz.2.519'. [ 156.662629][ T7253] netlink: 44 bytes leftover after parsing attributes in process `syz.2.519'. [ 156.718791][ T7260] netlink: 44 bytes leftover after parsing attributes in process `syz.2.519'. [ 157.205192][ T7277] syzkaller0: entered promiscuous mode [ 157.210766][ T7277] syzkaller0: entered allmulticast mode [ 158.039379][ T7300] netlink: 44 bytes leftover after parsing attributes in process `syz.0.538'. [ 159.161064][ T7300] netlink: 44 bytes leftover after parsing attributes in process `syz.0.538'. [ 159.531225][ T7315] Zero length message leads to an empty skb [ 159.911753][ T7329] syzkaller0: entered promiscuous mode [ 159.917435][ T7329] syzkaller0: entered allmulticast mode [ 163.074767][ T7388] syzkaller0: entered promiscuous mode [ 163.080333][ T7388] syzkaller0: entered allmulticast mode [ 166.418582][ T7445] syzkaller0: entered promiscuous mode [ 166.464951][ T7445] syzkaller0: entered allmulticast mode [ 168.600769][ T5796] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 169.430438][ T7487] netlink: 44 bytes leftover after parsing attributes in process `syz.3.614'. [ 169.450756][ T7487] netlink: 44 bytes leftover after parsing attributes in process `syz.3.614'. [ 169.469602][ T7487] netlink: 44 bytes leftover after parsing attributes in process `syz.3.614'. [ 169.767888][ T5161] udevd[5161]: worker [6075] terminated by signal 33 (Unknown signal 33) [ 169.783013][ T5161] udevd[5161]: worker [6075] failed while handling '/devices/virtual/block/loop1' [ 169.879459][ T7500] syzkaller0: entered promiscuous mode [ 169.910906][ T7500] syzkaller0: entered allmulticast mode [ 170.209192][ T7512] netlink: 44 bytes leftover after parsing attributes in process `syz.3.623'. [ 171.705386][ T7512] netlink: 44 bytes leftover after parsing attributes in process `syz.3.623'. [ 173.138685][ T7548] syzkaller0: entered promiscuous mode [ 173.153717][ T7548] syzkaller0: entered allmulticast mode [ 177.696436][ T5796] Bluetooth: hci1: unexpected subevent 0x05 length: 150 > 12 [ 177.829677][ T7625] syzkaller0: entered promiscuous mode [ 177.835307][ T7625] syzkaller0: entered allmulticast mode [ 178.183901][ T5796] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 178.357050][ T7640] netlink: 44 bytes leftover after parsing attributes in process `syz.3.674'. [ 179.135427][ T5796] Bluetooth: hci3: unexpected subevent 0x05 length: 150 > 12 [ 179.727537][ T5796] Bluetooth: hci1: command tx timeout [ 180.211102][ T7640] netlink: 44 bytes leftover after parsing attributes in process `syz.3.674'. [ 181.152290][ T5106] Bluetooth: hci3: command tx timeout [ 181.475206][ T5796] Bluetooth: hci2: unexpected subevent 0x05 length: 150 > 12 [ 182.012715][ T7700] syzkaller0: entered promiscuous mode [ 182.031093][ T7700] syzkaller0: entered allmulticast mode [ 183.419297][ T7730] netlink: 'syz.0.708': attribute type 3 has an invalid length. [ 183.562496][ T5796] Bluetooth: hci2: command tx timeout [ 185.916339][ T7768] netlink: 44 bytes leftover after parsing attributes in process `syz.2.725'. [ 187.406198][ T7768] netlink: 44 bytes leftover after parsing attributes in process `syz.2.725'. [ 187.547901][ T7794] netlink: 'syz.2.736': attribute type 3 has an invalid length. [ 188.026950][ T7815] netlink: 44 bytes leftover after parsing attributes in process `syz.0.745'. [ 188.040320][ T7815] netlink: 44 bytes leftover after parsing attributes in process `syz.0.745'. [ 188.056879][ T7811] netlink: 44 bytes leftover after parsing attributes in process `syz.0.745'. [ 188.075582][ T7811] netlink: 44 bytes leftover after parsing attributes in process `syz.0.745'. [ 188.280706][ T7818] syzkaller0: entered promiscuous mode [ 188.298945][ T7818] syzkaller0: entered allmulticast mode [ 189.504825][ T7847] netlink: 44 bytes leftover after parsing attributes in process `syz.1.758'. [ 190.907292][ T7847] netlink: 44 bytes leftover after parsing attributes in process `syz.1.758'. [ 191.219519][ T7859] netlink: 'syz.2.763': attribute type 13 has an invalid length. [ 191.984828][ T7873] netlink: 44 bytes leftover after parsing attributes in process `syz.1.770'. [ 192.004501][ T7873] netlink: 44 bytes leftover after parsing attributes in process `syz.1.770'. [ 192.029152][ T7872] netlink: 44 bytes leftover after parsing attributes in process `syz.1.770'. [ 192.053433][ T7873] netlink: 44 bytes leftover after parsing attributes in process `syz.1.770'. [ 192.336958][ T7877] syzkaller0: entered promiscuous mode [ 192.345815][ T7877] syzkaller0: entered allmulticast mode [ 192.644644][ T5796] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 192.652611][ T5796] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 193.163653][ T7899] netlink: 44 bytes leftover after parsing attributes in process `syz.0.781'. [ 194.173117][ T7880] netlink: 750 bytes leftover after parsing attributes in process `syz.3.774'. [ 194.202211][ T7899] netlink: 44 bytes leftover after parsing attributes in process `syz.0.781'. [ 194.494516][ T7909] netlink: 'syz.3.782': attribute type 13 has an invalid length. [ 194.589505][ T5796] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 194.601814][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.608384][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.615756][ T5796] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 195.026523][ T7926] syzkaller0: entered promiscuous mode [ 195.032359][ T7926] syzkaller0: entered allmulticast mode [ 195.306741][ T7933] netlink: 44 bytes leftover after parsing attributes in process `syz.0.795'. [ 195.653394][ T5796] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 195.662139][ T5796] Bluetooth: hci2: Unable to find connection with handle 0x0020 [ 196.718464][ T5796] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 196.726213][ T5796] Bluetooth: hci2: Unable to find connection with handle 0x0020 [ 197.398119][ T7933] netlink: 44 bytes leftover after parsing attributes in process `syz.0.795'. [ 197.918768][ T7981] netlink: 44 bytes leftover after parsing attributes in process `syz.0.817'. [ 197.935578][ T7981] netlink: 44 bytes leftover after parsing attributes in process `syz.0.817'. [ 197.965907][ T7980] netlink: 44 bytes leftover after parsing attributes in process `syz.0.817'. [ 197.992755][ T7981] netlink: 44 bytes leftover after parsing attributes in process `syz.0.817'. [ 198.295731][ T7988] syzkaller0: entered promiscuous mode [ 198.318863][ T7988] syzkaller0: entered allmulticast mode [ 198.704628][ T8014] netlink: 44 bytes leftover after parsing attributes in process `syz.0.830'. [ 200.280442][ T8014] netlink: 44 bytes leftover after parsing attributes in process `syz.0.830'. [ 200.693765][ T8026] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 200.701260][ T8026] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 200.952202][ T8051] netlink: 44 bytes leftover after parsing attributes in process `syz.3.846'. [ 200.973469][ T8051] netlink: 44 bytes leftover after parsing attributes in process `syz.3.846'. [ 201.001317][ T8056] netlink: 44 bytes leftover after parsing attributes in process `syz.3.846'. [ 201.068948][ T8055] syzkaller0: entered promiscuous mode [ 201.074672][ T8055] syzkaller0: entered allmulticast mode [ 201.644839][ T8026] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 201.652499][ T8026] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 201.796076][ T8026] Bluetooth: hci1: command 0x0406 tx timeout [ 201.802657][ T8026] Bluetooth: hci0: command 0x0406 tx timeout [ 201.809497][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 201.811086][ T8026] Bluetooth: hci2: command 0x0406 tx timeout [ 203.204619][ T8075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.213432][ T8075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.221434][ T8075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.229152][ T8075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.310163][ T8088] __nla_validate_parse: 2 callbacks suppressed [ 203.310182][ T8088] netlink: 44 bytes leftover after parsing attributes in process `syz.2.859'. [ 203.677651][ T5790] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 203.685979][ T5790] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 203.955344][ T8112] syzkaller0: entered promiscuous mode [ 203.970154][ T8112] syzkaller0: entered allmulticast mode [ 203.980145][ T8117] netlink: 44 bytes leftover after parsing attributes in process `syz.3.872'. [ 205.594351][ T5790] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 205.602392][ T5790] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 207.070566][ T8117] netlink: 44 bytes leftover after parsing attributes in process `syz.3.872'. [ 207.081116][ T8137] netlink: 830 bytes leftover after parsing attributes in process `syz.2.881'. [ 207.716357][ T8200] netlink: 830 bytes leftover after parsing attributes in process `syz.3.909'. [ 207.804121][ T8206] netlink: 44 bytes leftover after parsing attributes in process `syz.0.908'. [ 207.848188][ T8202] syzkaller0: entered promiscuous mode [ 207.862871][ T8202] syzkaller0: entered allmulticast mode [ 207.884302][ T8206] netlink: 44 bytes leftover after parsing attributes in process `syz.0.908'. [ 210.262898][ T8203] netlink: 44 bytes leftover after parsing attributes in process `syz.0.908'. [ 210.311975][ T8253] netlink: 830 bytes leftover after parsing attributes in process `syz.3.929'. [ 210.842305][ T5790] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 211.017500][ T8274] netlink: 44 bytes leftover after parsing attributes in process `syz.0.938'. [ 211.059761][ T8274] netlink: 44 bytes leftover after parsing attributes in process `syz.0.938'. [ 211.074223][ T8273] netlink: 44 bytes leftover after parsing attributes in process `syz.0.938'. [ 211.138156][ T8278] syzkaller0: entered promiscuous mode [ 211.146470][ T8278] syzkaller0: entered allmulticast mode [ 213.087219][ T8274] netlink: 44 bytes leftover after parsing attributes in process `syz.0.938'. [ 213.097034][ T8281] netlink: 830 bytes leftover after parsing attributes in process `syz.3.940'. [ 213.623674][ T5790] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 214.034699][ T8316] netlink: 830 bytes leftover after parsing attributes in process `syz.0.952'. [ 214.238718][ T8319] syzkaller0: entered promiscuous mode [ 214.246268][ T8319] syzkaller0: entered allmulticast mode [ 215.117125][ T5790] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 216.785380][ T5790] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6 [ 218.252251][ T8350] netlink: 830 bytes leftover after parsing attributes in process `syz.3.967'. [ 218.495953][ T8379] syzkaller0: entered promiscuous mode [ 218.527213][ T8379] syzkaller0: entered allmulticast mode [ 218.691332][ T5790] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6 [ 221.227371][ T8401] veth1_macvtap: left promiscuous mode [ 221.242399][ T8410] netlink: 830 bytes leftover after parsing attributes in process `syz.3.988'. [ 223.106917][ T8436] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1001'. [ 223.336035][ T8438] syzkaller0: entered promiscuous mode [ 223.342161][ T8438] syzkaller0: entered allmulticast mode [ 223.348901][ T8444] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1011'. [ 224.151402][ T5790] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 226.768880][ T8446] veth1_macvtap: left promiscuous mode [ 226.786218][ T8468] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1014'. [ 227.064990][ T5790] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 227.679470][ T8488] veth1_macvtap: left promiscuous mode [ 227.691142][ T8488] macsec0: entered promiscuous mode [ 228.046752][ T8494] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1025'. [ 228.362566][ T8502] veth1_macvtap: left promiscuous mode [ 228.971901][ T5790] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 229.396648][ T8520] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1035'. [ 230.009559][ T5790] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6 [ 230.411311][ T8544] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1048'. [ 230.682591][ T5790] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 231.184962][ T8560] syzkaller0: entered promiscuous mode [ 231.218296][ T8560] syzkaller0: entered allmulticast mode [ 231.274627][ T8568] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1058'. [ 235.799378][ T5790] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 237.803299][ T8601] syzkaller0: entered promiscuous mode [ 237.816670][ T8601] syzkaller0: entered allmulticast mode [ 237.824168][ T8612] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1075'. [ 239.682187][ T8634] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1083'. [ 239.722786][ T8634] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1083'. [ 240.289122][ T8633] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1083'. [ 240.308676][ T8649] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1088'. [ 240.417346][ T8645] syzkaller0: entered promiscuous mode [ 240.424321][ T8645] syzkaller0: entered allmulticast mode [ 240.432544][ T8637] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1083'. [ 244.458206][ T8661] sit0: entered allmulticast mode [ 244.522210][ T8664] sit0: entered promiscuous mode [ 244.939916][ T8666] syzkaller0: entered promiscuous mode [ 244.947459][ T5790] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 244.954027][ T8666] syzkaller0: entered allmulticast mode [ 246.296329][ T8686] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1099'. [ 247.641172][ T5795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 247.664310][ T5795] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 247.681411][ T5795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 247.691733][ T5795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 247.699657][ T5795] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 247.709178][ T5795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.242968][ T8686] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1099'. [ 249.301695][ T5790] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 249.693531][ T8705] veth0_vlan: entered allmulticast mode [ 249.890059][ T5790] Bluetooth: hci4: command tx timeout [ 250.093396][ T8712] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1108'. [ 250.688505][ T8712] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1108'. [ 250.699193][ T8715] sit0: entered allmulticast mode [ 250.721443][ T8716] sit0: entered promiscuous mode [ 251.435172][ T8711] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1108'. [ 251.853081][ T5790] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 251.959577][ T5790] Bluetooth: hci4: command tx timeout [ 252.347684][ T8736] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1116'. [ 252.534696][ T8690] chnl_net:caif_netlink_parms(): no params data found [ 252.983570][ T8690] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.991024][ T8690] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.999333][ T8690] bridge_slave_0: entered allmulticast mode [ 253.007684][ T8690] bridge_slave_0: entered promiscuous mode [ 253.088419][ T8690] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.105684][ T8690] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.115856][ T8690] bridge_slave_1: entered allmulticast mode [ 253.123757][ T8690] bridge_slave_1: entered promiscuous mode [ 253.454856][ T8690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.504722][ T8690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.895131][ T8690] team0: Port device team_slave_0 added [ 253.946629][ T8690] team0: Port device team_slave_1 added [ 254.043114][ T5790] Bluetooth: hci4: command tx timeout [ 254.255710][ T8690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.302820][ T8690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.332236][ T8690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.345718][ T8690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.353370][ T8690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.381159][ T8690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.675125][ T8764] sit0: entered allmulticast mode [ 255.061833][ T8766] sit0: entered promiscuous mode [ 255.512323][ T8772] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1127'. [ 255.950799][ T8690] hsr_slave_0: entered promiscuous mode [ 255.966100][ T8690] hsr_slave_1: entered promiscuous mode [ 256.009529][ T8690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.021646][ T8690] Cannot create hsr debugfs directory [ 256.036950][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.051996][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.111897][ T5790] Bluetooth: hci4: command tx timeout [ 256.954902][ T8802] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1137'. [ 257.295435][ T8690] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.306786][ T8690] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.318269][ T8690] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.330267][ T8690] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.422818][ T1128] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.472652][ T8690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.501079][ T1128] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.528307][ T8690] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.543708][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.551050][ T1080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.585461][ T1128] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.605003][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.612281][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.669851][ T1128] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.055878][ T8690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.570636][ T8690] veth0_vlan: entered promiscuous mode [ 258.625856][ T8690] veth1_vlan: entered promiscuous mode [ 258.685473][ T8690] veth0_macvtap: entered promiscuous mode [ 258.720590][ T8690] veth1_macvtap: entered promiscuous mode [ 258.743748][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.757559][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.768179][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.779178][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.790878][ T8690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.848812][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.859575][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.872330][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.883492][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.895903][ T8690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.911011][ T8690] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.920593][ T8690] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.936925][ T8690] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.946142][ T8690] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.121515][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.151218][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.241272][ T1128] hsr_slave_0: left promiscuous mode [ 259.250730][ T1128] hsr_slave_1: left promiscuous mode [ 259.265877][ T1128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.275751][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.285650][ T1128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.295650][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.304633][ T1128] bridge_slave_1: left allmulticast mode [ 259.310340][ T1128] bridge_slave_1: left promiscuous mode [ 259.321644][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.337949][ T1128] bridge_slave_0: left allmulticast mode [ 259.345710][ T1128] bridge_slave_0: left promiscuous mode [ 259.351628][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.401087][ T1128] veth0_macvtap: left promiscuous mode [ 259.411158][ T1128] veth1_vlan: left promiscuous mode [ 259.418624][ T1128] veth0_vlan: left promiscuous mode [ 260.026784][ T1128] team0 (unregistering): Port device team_slave_1 removed [ 260.072108][ T1128] team0 (unregistering): Port device team_slave_0 removed [ 260.118165][ T1128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.164141][ T1128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.617057][ T1128] bond0 (unregistering): Released all slaves [ 260.736330][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.744972][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.004073][ T8858] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1149'. [ 261.194502][ T8853] veth0_vlan: entered allmulticast mode [ 262.072501][ T8859] veth0_vlan: left promiscuous mode [ 262.078852][ T8859] veth0_vlan: entered promiscuous mode [ 262.100765][ T8866] sit0: entered allmulticast mode [ 262.161682][ T8870] sit0: entered promiscuous mode [ 263.275377][ T8906] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.285261][ T8906] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.360359][ T8906] bridge0: entered allmulticast mode [ 263.403418][ T8909] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1154'. [ 263.553054][ T8912] bridge_slave_1: left allmulticast mode [ 263.624467][ T8912] bridge_slave_1: left promiscuous mode [ 263.651734][ T8912] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.072246][ T8912] bridge_slave_0: left allmulticast mode [ 264.077992][ T8912] bridge_slave_0: left promiscuous mode [ 264.121013][ T8912] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.731210][ T8932] syzkaller0: entered promiscuous mode [ 264.748156][ T8932] syzkaller0: entered allmulticast mode [ 267.320542][ T8953] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1166'. [ 267.658490][ T8961] pim6reg1: entered promiscuous mode [ 267.664155][ T8961] pim6reg1: entered allmulticast mode [ 268.210774][ T8971] pim6reg1: entered promiscuous mode [ 268.217755][ T8971] pim6reg1: entered allmulticast mode [ 268.415735][ T8981] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1175'. [ 270.185455][ T9029] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1189'. [ 271.900667][ T9066] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1200'. [ 272.151358][ T9072] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.159197][ T9072] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.173668][ T9072] bridge0: entered allmulticast mode [ 272.366549][ T9076] syzkaller0: entered promiscuous mode [ 272.373304][ T9076] syzkaller0: entered allmulticast mode [ 272.393198][ T9072] bridge_slave_1: left allmulticast mode [ 272.408559][ T9072] bridge_slave_1: left promiscuous mode [ 272.426927][ T9072] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.546670][ T9072] bridge_slave_0: left allmulticast mode [ 272.554730][ T9072] bridge_slave_0: left promiscuous mode [ 272.572055][ T9072] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.157531][ T9100] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1211'. [ 275.274065][ T5790] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6 [ 275.829155][ T9119] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.836949][ T9119] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.910174][ T9119] bridge0: entered allmulticast mode [ 276.151587][ T9122] bridge_slave_1: left allmulticast mode [ 276.241552][ T9122] bridge_slave_1: left promiscuous mode [ 276.330623][ T9122] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.651400][ T9122] bridge_slave_0: left allmulticast mode [ 276.657195][ T9122] bridge_slave_0: left promiscuous mode [ 276.663789][ T9122] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.934943][ T9139] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1222'. [ 277.142806][ T5790] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 279.242883][ T9181] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.257674][ T9181] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.277539][ T9181] bridge0: entered allmulticast mode [ 279.298348][ T9186] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1234'. [ 279.458471][ T9181] bridge_slave_1: left allmulticast mode [ 279.482674][ T9181] bridge_slave_1: left promiscuous mode [ 279.509048][ T9181] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.643672][ T5790] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 279.812098][ T9181] bridge_slave_0: left allmulticast mode [ 279.834094][ T9181] bridge_slave_0: left promiscuous mode [ 279.893787][ T9181] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.945346][ T5790] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 281.651862][ T9219] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1244'. [ 281.886254][ T9236] syz.4.1250[9236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.886404][ T9236] syz.4.1250[9236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.223605][ T5790] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 284.103603][ T9277] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1259'. [ 285.317375][ T9301] syzkaller0: entered promiscuous mode [ 285.361685][ T9301] syzkaller0: entered allmulticast mode [ 289.619944][ T9318] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1272'. [ 289.783141][ T9325] wg2: entered promiscuous mode [ 289.805992][ T9325] wg2: entered allmulticast mode [ 290.143602][ T5790] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 290.740924][ T5790] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 291.520052][ T9373] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1285'. [ 291.827248][ T5790] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 292.154091][ T5790] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 292.330842][ T9400] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1297'. [ 292.687204][ T5790] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 292.775145][ T9407] syzkaller0: entered promiscuous mode [ 292.780858][ T9407] syzkaller0: entered allmulticast mode [ 292.837090][ T5790] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 293.857626][ T5790] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 295.237730][ T9428] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1307'. [ 296.078343][ T9483] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1328'. [ 296.761024][ T9510] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1339'. [ 297.914078][ T9544] sit0: left promiscuous mode [ 298.842406][ T9553] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1351'. [ 299.631344][ T9583] syzkaller0: entered promiscuous mode [ 299.636993][ T9583] syzkaller0: entered allmulticast mode [ 301.515457][ T9589] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1363'. [ 303.436405][ T9625] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1377'. [ 303.669262][ T9631] syzkaller0: entered promiscuous mode [ 303.681263][ T9631] syzkaller0: entered allmulticast mode [ 305.678983][ T9636] sit0: entered promiscuous mode [ 305.714650][ T9649] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1386'. [ 306.046170][ T9656] syzkaller0: entered promiscuous mode [ 306.071662][ T9656] syzkaller0: entered allmulticast mode [ 308.675592][ T9686] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1401'. [ 309.809313][ T9713] syzkaller0: entered promiscuous mode [ 309.815044][ T9713] syzkaller0: entered allmulticast mode [ 310.434866][ T5790] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 312.196169][ T9745] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1425'. [ 312.534410][ T5790] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 313.003586][ T9770] syzkaller0: entered promiscuous mode [ 313.016444][ T9770] syzkaller0: entered allmulticast mode [ 313.694197][ T5790] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 315.074028][ T9772] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1435'. [ 316.570046][ T5790] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 316.970998][ T9815] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1451'. [ 317.051349][ T9816] syzkaller0: entered promiscuous mode [ 317.064173][ T9816] syzkaller0: entered allmulticast mode [ 317.481739][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.488218][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.223671][ T9820] veth0_vlan: entered allmulticast mode [ 319.502072][ T5790] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 319.963392][ T9839] pim6reg1: entered promiscuous mode [ 319.976547][ T9839] pim6reg1: entered allmulticast mode [ 320.049994][ T9841] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1461'. [ 320.419322][ T9851] veth0_vlan: left promiscuous mode [ 320.489761][ T9851] veth0_vlan: entered promiscuous mode [ 320.915099][ T9862] syzkaller0: entered promiscuous mode [ 320.940815][ T9862] syzkaller0: entered allmulticast mode [ 320.976167][ T5790] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 323.714778][ T9880] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1473'. [ 324.472600][ T9878] syzkaller0: entered promiscuous mode [ 324.478179][ T9878] syzkaller0: entered allmulticast mode [ 327.525732][ T9919] sit0: left promiscuous mode [ 327.965425][ T9922] sit0: entered promiscuous mode [ 329.734070][ T9946] syzkaller0: entered promiscuous mode [ 329.746175][ T9946] syzkaller0: entered allmulticast mode [ 332.987499][ T5790] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 332.995237][ T5790] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 333.254561][ T5790] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 333.475927][ T9996] syzkaller0: entered promiscuous mode [ 333.488568][ T9996] syzkaller0: entered allmulticast mode [ 333.533561][ T9998] syzkaller0: entered promiscuous mode [ 333.539129][ T9998] syzkaller0: entered allmulticast mode [ 337.340609][T10014] sit0: left promiscuous mode [ 337.457835][ T5790] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 337.480729][T10017] sit0: entered promiscuous mode [ 340.560832][T10040] syzkaller0: entered promiscuous mode [ 340.585451][T10040] syzkaller0: entered allmulticast mode [ 343.680738][T10048] syzkaller0: entered promiscuous mode [ 343.686626][T10048] syzkaller0: entered allmulticast mode [ 345.807735][ T5790] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 346.389097][ T5790] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 346.404535][ T5790] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 349.760435][ T5790] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 350.436319][ T5790] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 350.451018][ T5790] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 350.460624][T10088] veth0_vlan: entered allmulticast mode [ 350.639765][T10093] sit0: left promiscuous mode [ 350.727359][ T5790] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 350.735197][ T5790] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 350.827893][T10097] sit0: entered promiscuous mode [ 351.007451][ T5790] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 354.395202][T10121] veth0_vlan: left promiscuous mode [ 354.490857][T10121] veth0_vlan: entered promiscuous mode [ 356.063935][ T5790] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 356.071430][ T5790] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 356.243027][ T5790] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 356.537827][T10138] pim6reg1: entered promiscuous mode [ 356.551655][T10138] pim6reg1: entered allmulticast mode [ 358.921851][ T5790] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 358.929388][ T5790] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 360.238701][T10177] bond_slave_1: mtu less than device minimum [ 361.783855][ T5790] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 362.187152][T10201] ªªªªªª: renamed from vlan0 [ 363.286720][T10215] pim6reg1: entered promiscuous mode [ 363.331760][T10215] pim6reg1: entered allmulticast mode [ 363.710337][T10219] pim6reg1: entered promiscuous mode [ 363.716042][T10219] pim6reg1: entered allmulticast mode [ 364.030536][ T5790] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6 [ 364.311351][T10223] syzkaller0: entered promiscuous mode [ 364.319112][T10223] syzkaller0: entered allmulticast mode [ 366.433281][T10239] syz.2.1591[10239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.433561][T10239] syz.2.1591[10239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.116822][ T5790] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 368.166050][T10250] pim6reg1: entered promiscuous mode [ 368.172050][T10250] pim6reg1: entered allmulticast mode [ 370.756166][ T5795] Bluetooth: hci4: command 0x0406 tx timeout [ 372.505778][ T5790] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 379.342305][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.348709][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.049150][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 384.060891][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 384.069655][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 384.082523][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 384.090445][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 384.100864][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 384.216471][ T1128] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.364003][ T1128] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.385619][ T5795] Bluetooth: hci4: ISO packet for unknown connection handle 4094 [ 384.492559][ T1128] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.580632][ T1128] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.810271][T10291] chnl_net:caif_netlink_parms(): no params data found [ 384.981919][T10291] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.989203][T10291] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.998299][T10291] bridge_slave_0: entered allmulticast mode [ 385.006940][T10291] bridge_slave_0: entered promiscuous mode [ 385.056794][T10291] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.064584][T10291] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.072174][T10291] bridge_slave_1: entered allmulticast mode [ 385.079345][T10291] bridge_slave_1: entered promiscuous mode [ 385.137109][T10291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.150603][T10291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.309304][T10291] team0: Port device team_slave_0 added [ 385.355909][T10291] team0: Port device team_slave_1 added [ 385.459426][T10291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.469103][T10291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.499153][T10291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.560386][T10291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.570418][T10291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.601442][T10291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.802846][T10291] hsr_slave_0: entered promiscuous mode [ 385.810198][T10291] hsr_slave_1: entered promiscuous mode [ 385.821183][T10291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.834248][T10291] Cannot create hsr debugfs directory [ 386.201919][ T5795] Bluetooth: hci0: command tx timeout [ 386.418460][ T5795] Bluetooth: hci4: ISO packet for unknown connection handle 4094 [ 386.563501][ T1128] hsr_slave_0: left promiscuous mode [ 386.583423][ T1128] hsr_slave_1: left promiscuous mode [ 386.615576][ T1128] veth0_macvtap: left promiscuous mode [ 386.624098][ T1128] veth1_vlan: left promiscuous mode [ 387.650297][ T1128] team0 (unregistering): Port device team_slave_1 removed [ 387.721385][ T1128] team0 (unregistering): Port device team_slave_0 removed [ 387.798335][ T1128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.873338][ T1128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.272589][ T5795] Bluetooth: hci0: command tx timeout [ 388.323314][ T1128] bond0 (unregistering): Released all slaves [ 388.700835][T10291] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 390.356104][ T5795] Bluetooth: hci0: command tx timeout [ 391.166320][ T5795] Bluetooth: hci1: ISO packet for unknown connection handle 4094 [ 391.514386][T10291] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 391.528536][T10291] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 391.575343][T10291] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 391.878938][T10291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.927137][T10291] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.966298][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.973539][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.119452][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.126718][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.433661][ T5795] Bluetooth: hci0: command tx timeout [ 392.713875][T10291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.457854][T10291] veth0_vlan: entered promiscuous mode [ 393.505274][T10291] veth1_vlan: entered promiscuous mode [ 393.569327][T10291] veth0_macvtap: entered promiscuous mode [ 393.607977][T10291] veth1_macvtap: entered promiscuous mode [ 393.676475][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.698066][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.719264][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.739714][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.754558][T10291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.780398][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.795005][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.806350][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.820543][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.833761][T10291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.885923][T10291] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.900748][T10291] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.909766][T10291] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.922215][T10291] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.074365][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.094334][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.171643][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.188610][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.359459][T10456] syzkaller0: entered promiscuous mode [ 396.366638][T10460] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1662'. [ 396.367979][T10456] syzkaller0: entered allmulticast mode [ 400.219613][T10460] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1662'. [ 400.417978][ T5795] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 400.425664][ T5795] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 402.993606][T10482] macsec0: entered allmulticast mode [ 404.119945][ T5795] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 404.131867][ T5795] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 408.792882][ T5795] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 408.800461][ T5795] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 412.901415][T10547] syzkaller0: entered promiscuous mode [ 412.930813][T10547] syzkaller0: entered allmulticast mode [ 413.276257][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 413.315793][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 413.345235][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 413.365590][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 413.373696][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 413.381392][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 415.471703][ T5795] Bluetooth: hci2: command tx timeout [ 415.692852][ T1093] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.314532][ T1093] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.564156][T10554] chnl_net:caif_netlink_parms(): no params data found [ 416.658103][ T1093] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.790994][T10573] syzkaller0: entered promiscuous mode [ 416.797205][T10573] syzkaller0: entered allmulticast mode [ 416.826487][ T1093] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.561681][ T5795] Bluetooth: hci2: command tx timeout [ 418.698741][T10554] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.706226][T10554] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.715514][T10554] bridge_slave_0: entered allmulticast mode [ 418.723872][T10554] bridge_slave_0: entered promiscuous mode [ 418.767335][T10554] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.775358][T10554] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.783748][T10554] bridge_slave_1: entered allmulticast mode [ 418.791652][T10554] bridge_slave_1: entered promiscuous mode [ 418.904864][T10554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.920567][T10554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.316942][T10554] team0: Port device team_slave_0 added [ 419.339791][T10554] team0: Port device team_slave_1 added [ 419.642483][ T5795] Bluetooth: hci2: command tx timeout [ 420.204096][T10554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.211123][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.244006][T10554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.267350][T10554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.280359][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.314182][T10554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.424598][T10554] hsr_slave_0: entered promiscuous mode [ 420.444327][T10554] hsr_slave_1: entered promiscuous mode [ 420.899068][T10554] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 421.007591][T10554] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 421.066942][T10554] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 421.109840][T10554] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 421.721868][ T5795] Bluetooth: hci2: command tx timeout [ 422.525296][T10618] syzkaller0: entered promiscuous mode [ 422.530868][T10618] syzkaller0: entered allmulticast mode [ 428.137612][ T1093] hsr_slave_0: left promiscuous mode [ 428.144994][ T1093] hsr_slave_1: left promiscuous mode [ 428.151018][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.158810][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.167140][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.174819][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.199571][ T1093] veth0_macvtap: left promiscuous mode [ 428.205868][ T1093] veth1_vlan: left promiscuous mode [ 428.743038][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 428.793485][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 428.840649][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.889314][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.379470][ T1093] bond0 (unregistering): Released all slaves [ 429.439802][T10554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.996762][T10554] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.024780][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.032054][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.489287][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.496547][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.588792][T10554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 431.470966][T10554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.856865][T10554] veth0_vlan: entered promiscuous mode [ 433.218450][T10554] veth1_vlan: entered promiscuous mode [ 433.266475][T10554] veth0_macvtap: entered promiscuous mode [ 433.278907][T10554] veth1_macvtap: entered promiscuous mode [ 433.347497][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.364627][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.376450][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.388593][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.409282][T10554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.433682][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.447706][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.460954][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.475740][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.487874][T10554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.521160][T10554] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.530144][T10554] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.539681][T10554] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.548587][T10554] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.744967][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.771538][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.785879][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.804221][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.050273][T10645] wg2: entered promiscuous mode [ 437.093304][T10645] wg2: entered allmulticast mode [ 439.208578][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 439.218853][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 439.234246][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 439.253860][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 439.262637][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 439.270112][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 440.357225][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.363913][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.569791][T10667] chnl_net:caif_netlink_parms(): no params data found [ 440.787124][T10695] syz.1.1728[10695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 440.787380][T10695] syz.1.1728[10695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 440.881248][T10667] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.901247][T10667] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.908992][T10667] bridge_slave_0: entered allmulticast mode [ 440.917025][T10667] bridge_slave_0: entered promiscuous mode [ 440.931287][T10667] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.939450][T10667] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.946948][T10667] bridge_slave_1: entered allmulticast mode [ 440.954998][T10667] bridge_slave_1: entered promiscuous mode [ 441.006073][T10667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.029139][T10667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.093021][T10667] team0: Port device team_slave_0 added [ 441.109225][T10667] team0: Port device team_slave_1 added [ 441.171730][T10667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.178776][T10667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.204996][T10667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.238694][ T1093] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.258209][T10667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.266909][T10667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.293624][T10667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.312667][ T5795] Bluetooth: hci3: command tx timeout [ 441.350219][T10667] hsr_slave_0: entered promiscuous mode [ 441.357220][T10667] hsr_slave_1: entered promiscuous mode [ 441.364344][T10667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.372920][T10667] Cannot create hsr debugfs directory [ 441.396026][ T1093] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.474931][ T1093] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.541576][ T1093] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.645330][T10667] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 441.659627][T10667] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 441.670183][T10667] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 441.685358][T10667] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 441.911120][T10667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.980046][T10667] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.998409][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.005618][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.050173][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.057420][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.138034][T10667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 442.373216][T10667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.740549][T10667] veth0_vlan: entered promiscuous mode [ 442.756767][T10667] veth1_vlan: entered promiscuous mode [ 442.829774][T10667] veth0_macvtap: entered promiscuous mode [ 442.841420][T10667] veth1_macvtap: entered promiscuous mode [ 442.875068][ T1093] hsr_slave_0: left promiscuous mode [ 442.883354][ T1093] hsr_slave_1: left promiscuous mode [ 442.890033][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.898649][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.907958][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.916086][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.924327][ T1093] bridge_slave_1: left allmulticast mode [ 442.930097][ T1093] bridge_slave_1: left promiscuous mode [ 442.936023][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.946830][ T1093] bridge_slave_0: left allmulticast mode [ 442.953864][ T1093] bridge_slave_0: left promiscuous mode [ 442.959611][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.989101][ T1093] veth1_macvtap: left promiscuous mode [ 442.995221][ T1093] veth0_macvtap: left promiscuous mode [ 443.000892][ T1093] veth1_vlan: left promiscuous mode [ 443.007167][ T1093] veth0_vlan: left promiscuous mode [ 443.397091][ T5795] Bluetooth: hci3: command tx timeout [ 443.602839][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 443.658251][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 443.705130][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.758591][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.275508][ T1093] bond0 (unregistering): Released all slaves [ 444.367215][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.377858][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.390021][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.401168][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.413542][T10667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.427325][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.439232][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.449536][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.460446][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.472950][T10667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.490878][T10667] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.499976][T10667] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.508996][T10667] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.517902][T10667] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.691375][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.712130][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.754437][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.762813][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.495200][ T5795] Bluetooth: hci3: command tx timeout [ 447.551598][ T5795] Bluetooth: hci3: command tx timeout [ 449.039158][T10771] pim6reg1: entered promiscuous mode [ 449.061751][T10771] pim6reg1: entered allmulticast mode [ 451.625917][T10800] syz.1.1751[10800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 451.626200][T10800] syz.1.1751[10800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.720113][T10798] wg2: entered promiscuous mode [ 454.738162][T10798] wg2: entered allmulticast mode [ 458.756140][T10838] wg2: entered promiscuous mode [ 458.768616][T10838] wg2: entered allmulticast mode [ 459.192541][T10857] syzkaller0: entered promiscuous mode [ 459.211578][T10857] syzkaller0: entered allmulticast mode [ 472.223149][T10960] pim6reg1: entered promiscuous mode [ 472.228530][T10960] pim6reg1: entered allmulticast mode [ 472.790812][T10966] syzkaller0: entered promiscuous mode [ 472.800591][T10966] syzkaller0: entered allmulticast mode [ 479.289301][T11019] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 479.308946][T11019] syzkaller0: entered promiscuous mode [ 479.314648][T11019] syzkaller0: entered allmulticast mode [ 481.396016][T11030] bridge0: port 3(gretap0) entered blocking state [ 481.402977][T11030] bridge0: port 3(gretap0) entered disabled state [ 481.409616][T11030] gretap0: entered allmulticast mode [ 481.416461][T11030] gretap0: entered promiscuous mode [ 481.426047][T11030] bridge0: port 3(gretap0) entered blocking state [ 481.432740][T11030] bridge0: port 3(gretap0) entered forwarding state [ 484.518299][T11079] syz.1.1845[11079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.518457][T11079] syz.1.1845[11079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 485.011775][T11080] sit0: left promiscuous mode [ 485.886309][T11087] pim6reg1: entered promiscuous mode [ 485.912479][T11087] pim6reg1: entered allmulticast mode [ 490.348701][T11115] sit0: left promiscuous mode [ 490.421628][T11125] pim6reg1: entered promiscuous mode [ 490.451576][T11125] pim6reg1: entered allmulticast mode [ 492.822869][T11157] sit0: entered allmulticast mode [ 496.158045][T11186] syzkaller0: entered promiscuous mode [ 496.177893][T11186] syzkaller0: entered allmulticast mode [ 497.804421][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 497.815089][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 497.823733][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 497.838049][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 497.859647][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 497.867482][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 499.952516][ T5795] Bluetooth: hci0: command tx timeout [ 500.498271][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.308808][T11209] syzkaller0: entered promiscuous mode [ 501.332461][T11209] syzkaller0: entered allmulticast mode [ 501.474693][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.807732][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.814375][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.041844][ T5795] Bluetooth: hci0: command tx timeout [ 503.459476][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.563356][T11198] chnl_net:caif_netlink_parms(): no params data found [ 503.680344][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.827562][T11236] syzkaller0: entered promiscuous mode [ 503.833755][T11236] syzkaller0: entered allmulticast mode [ 504.121851][ T5795] Bluetooth: hci0: command tx timeout [ 506.211674][ T5795] Bluetooth: hci0: command tx timeout [ 508.882592][T11198] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.889868][T11198] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.897626][T11198] bridge_slave_0: entered allmulticast mode [ 508.910529][T11198] bridge_slave_0: entered promiscuous mode [ 508.941858][T11198] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.949167][T11198] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.976106][T11198] bridge_slave_1: entered allmulticast mode [ 508.999090][T11198] bridge_slave_1: entered promiscuous mode [ 509.190585][T11198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.272979][T11198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.640880][T11198] team0: Port device team_slave_0 added [ 509.787109][T11198] team0: Port device team_slave_1 added [ 510.204106][T11198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.211131][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.242670][T11198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.337921][T11198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.345178][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.376479][T11198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.843436][T11198] hsr_slave_0: entered promiscuous mode [ 510.884425][T11198] hsr_slave_1: entered promiscuous mode [ 510.901923][T11198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.909561][T11198] Cannot create hsr debugfs directory [ 512.198316][ T11] hsr_slave_0: left promiscuous mode [ 512.256002][ T11] hsr_slave_1: left promiscuous mode [ 512.302773][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.327577][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.387428][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.430939][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.477610][ T11] bridge_slave_1: left allmulticast mode [ 512.495465][ T11] bridge_slave_1: left promiscuous mode [ 512.501340][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.529927][ T11] bridge_slave_0: left allmulticast mode [ 512.551646][ T11] bridge_slave_0: left promiscuous mode [ 512.564901][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.742514][ T11] veth1_macvtap: left promiscuous mode [ 512.748197][ T11] veth0_macvtap: left promiscuous mode [ 512.768530][ T11] veth1_vlan: left promiscuous mode [ 512.778608][ T11] veth0_vlan: left promiscuous mode [ 513.901957][ T11] team0 (unregistering): Port device team_slave_1 removed [ 513.956159][ T11] team0 (unregistering): Port device team_slave_0 removed [ 514.010756][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.068957][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.709403][ T11] bond0 (unregistering): Released all slaves [ 514.897174][T11198] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 514.922968][T11198] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 514.952246][T11198] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 514.982626][T11198] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 515.588090][T11198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.665554][T11198] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.739309][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.746554][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.894629][T11375] syzkaller0: entered promiscuous mode [ 515.900844][T11375] syzkaller0: entered allmulticast mode [ 518.021913][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.029167][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.221369][T11198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 518.236396][T11198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 518.894748][T11198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.351732][T11421] syzkaller0: entered promiscuous mode [ 519.357283][T11421] syzkaller0: entered allmulticast mode [ 521.310137][T11198] veth0_vlan: entered promiscuous mode [ 521.355241][T11198] veth1_vlan: entered promiscuous mode [ 521.697125][T11198] veth0_macvtap: entered promiscuous mode [ 521.724066][T11198] veth1_macvtap: entered promiscuous mode [ 521.772733][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.836848][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.846922][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.857577][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.869527][T11198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.926105][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.937600][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.947546][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.958434][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.983656][T11198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.013727][T11198] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.033603][T11198] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.043980][T11198] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.055209][T11198] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.284460][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.307244][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.352462][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.360343][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.521408][T11462] bond_slave_1: mtu less than device minimum [ 522.676258][T11461] wg2: left promiscuous mode [ 522.693382][T11461] wg2: left allmulticast mode [ 525.995669][ T5795] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 526.003378][ T5795] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 526.956205][T11531] veth0_vlan: left promiscuous mode [ 526.976069][T11531] veth0_vlan: entered promiscuous mode [ 527.188945][ T5795] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 527.197923][ T5795] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 528.127442][ T5795] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 528.135099][ T5795] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 528.190313][T11557] syzkaller0: entered promiscuous mode [ 528.201630][T11557] syzkaller0: entered allmulticast mode [ 532.679306][T11608] veth0_vlan: entered allmulticast mode [ 532.913671][T11612] veth0_vlan: left promiscuous mode [ 532.921347][T11612] veth0_vlan: entered promiscuous mode [ 534.568184][T11629] syzkaller0: entered promiscuous mode [ 534.574890][T11629] syzkaller0: entered allmulticast mode [ 536.859725][T11647] veth0_vlan: left promiscuous mode [ 536.882414][T11647] veth0_vlan: entered promiscuous mode [ 538.345504][T11671] syzkaller0: entered promiscuous mode [ 538.351034][T11671] syzkaller0: entered allmulticast mode [ 541.223509][T11695] syzkaller0: entered promiscuous mode [ 541.229132][T11695] syzkaller0: entered allmulticast mode [ 543.954052][T11715] bridge0: port 3(gretap0) entered disabled state [ 543.960702][T11715] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.968303][T11715] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.982763][T11715] bridge0: entered allmulticast mode [ 544.010850][T11716] bridge0: port 3(gretap0) entered blocking state [ 544.017451][T11716] bridge0: port 3(gretap0) entered forwarding state [ 544.024404][T11716] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.031613][T11716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.039064][T11716] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.046433][T11716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.072250][T11716] bridge0: entered promiscuous mode [ 544.457471][T11723] syzkaller0: entered promiscuous mode [ 544.465530][T11723] syzkaller0: entered allmulticast mode [ 544.892873][T11730] syz.8.2057[11730] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 544.893107][T11730] syz.8.2057[11730] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 547.111096][T11737] erspan0: entered promiscuous mode [ 547.128742][T11737] erspan0: entered allmulticast mode [ 547.135002][T11739] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 552.838223][T11816] pim6reg1: entered promiscuous mode [ 552.904114][T11816] pim6reg1: entered allmulticast mode [ 554.221134][T11837] syz.8.2096[11837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.632500][T11856] syz.4.2099[11856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.748010][T11856] syz.4.2099[11856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 559.676978][ T5795] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 560.605128][T11907] pim6reg1: entered promiscuous mode [ 560.610602][T11907] pim6reg1: entered allmulticast mode [ 561.110008][T11920] sit0: entered promiscuous mode [ 563.239113][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.245594][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.483843][T11929] pim6reg1: entered promiscuous mode [ 563.489158][T11929] pim6reg1: entered allmulticast mode [ 565.321536][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 565.758827][T11956] bond_slave_1: mtu less than device minimum [ 570.612090][T11998] veth0_vlan: entered allmulticast mode [ 572.155771][T12016] syzkaller0: entered promiscuous mode [ 572.161293][T12016] syzkaller0: entered allmulticast mode [ 579.500901][T12036] wg2: entered promiscuous mode [ 579.521327][T12036] wg2: entered allmulticast mode [ 581.462646][T12063] syz.8.2170[12063] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 581.462784][T12063] syz.8.2170[12063] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 582.732635][T12072] pim6reg1: entered promiscuous mode [ 582.752815][T12072] pim6reg1: entered allmulticast mode [ 583.309546][T12094] syzkaller0: entered promiscuous mode [ 583.317707][T12094] syzkaller0: entered allmulticast mode [ 585.899610][T12126] pim6reg1: entered promiscuous mode [ 585.905266][T12126] pim6reg1: entered allmulticast mode [ 587.481895][T12154] pim6reg1: entered allmulticast mode [ 587.523727][T12158] pim6reg1: left allmulticast mode [ 593.226134][T12244] wg2: left promiscuous mode [ 593.252213][T12244] wg2: left allmulticast mode [ 593.388321][T12245] wg2: entered promiscuous mode [ 593.398008][T12245] wg2: entered allmulticast mode [ 594.462440][T12269] syzkaller0: entered promiscuous mode [ 594.476864][T12269] syzkaller0: entered allmulticast mode [ 596.803322][ T5795] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 598.139983][ T5795] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6 [ 600.664302][T12404] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2290'. [ 600.692198][T12404] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2290'. [ 600.712359][T12404] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2290'. [ 600.733059][T12404] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2290'. [ 600.957476][T12410] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 601.526804][T12423] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2307'. [ 602.015398][ T5795] Bluetooth: hci4: unexpected event 0x04 length: 151 > 10 [ 604.038849][ T5795] Bluetooth: hci4: command 0x0406 tx timeout [ 605.457655][T12476] syzkaller0: entered promiscuous mode [ 605.463212][T12476] syzkaller0: entered allmulticast mode [ 607.780808][T12486] netlink: 'syz.7.2327': attribute type 3 has an invalid length. [ 607.798209][T12486] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.2327'. [ 609.947006][T12502] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2333'. [ 610.063528][T12506] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2334'. [ 611.411197][T12522] syzkaller0: entered promiscuous mode [ 611.417007][T12522] syzkaller0: entered allmulticast mode [ 611.491314][T12532] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2343'. [ 611.552573][T12532] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2343'. [ 611.563341][T12532] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2343'. [ 611.870343][ T5795] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 611.879752][ T5795] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 615.017744][T12559] netlink: 'syz.1.2353': attribute type 29 has an invalid length. [ 615.048876][T12559] netlink: 'syz.1.2353': attribute type 29 has an invalid length. [ 615.060056][T12559] netlink: 'syz.1.2353': attribute type 29 has an invalid length. [ 615.076280][T12559] netlink: 'syz.1.2353': attribute type 29 has an invalid length. [ 615.084962][T12559] netlink: 'syz.1.2353': attribute type 29 has an invalid length. [ 615.171216][T12564] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2354'. [ 615.182868][T12564] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2354'. [ 615.193658][T12564] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2354'. [ 615.296865][ T5795] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 615.304627][ T5795] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 615.911720][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 615.925380][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 615.933489][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 615.944433][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 615.953479][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 615.960960][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 616.177716][T12568] chnl_net:caif_netlink_parms(): no params data found [ 616.454322][T12568] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.488302][T12568] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.520954][T12568] bridge_slave_0: entered allmulticast mode [ 616.540558][T12568] bridge_slave_0: entered promiscuous mode [ 616.615545][T12568] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.631613][T12568] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.639089][T12568] bridge_slave_1: entered allmulticast mode [ 616.647262][T12568] bridge_slave_1: entered promiscuous mode [ 617.066917][T12568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.117416][T12568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.340225][ T999] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.369400][T12568] team0: Port device team_slave_0 added [ 617.389756][T12581] delete_channel: no stack [ 617.398173][T12568] team0: Port device team_slave_1 added [ 617.447165][ T999] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.519438][T12568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.534590][T12568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.564377][T12568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.586844][T12568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.596968][T12568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.635401][T12568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.669918][ T999] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.774648][ T999] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.794485][T12568] hsr_slave_0: entered promiscuous mode [ 617.801294][T12568] hsr_slave_1: entered promiscuous mode [ 618.044657][ T5790] Bluetooth: hci2: command tx timeout [ 618.070226][T12601] netlink: 'syz.4.2373': attribute type 3 has an invalid length. [ 618.094470][T12601] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2373'. [ 618.338436][ T5790] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 618.346915][ T5790] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 619.351041][ T999] hsr_slave_0: left promiscuous mode [ 619.357600][ T999] hsr_slave_1: left promiscuous mode [ 619.385802][ T999] veth0_macvtap: left promiscuous mode [ 619.391866][ T999] veth1_vlan: left promiscuous mode [ 619.406891][ T5790] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 619.414532][ T5790] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 619.703936][T12623] delete_channel: no stack [ 619.710928][T12637] netlink: 'syz.7.2380': attribute type 29 has an invalid length. [ 620.112877][ T5795] Bluetooth: hci2: command tx timeout [ 620.162395][ T999] team0 (unregistering): Port device team_slave_1 removed [ 620.180434][ T5795] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 620.188261][ T5795] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 620.224931][ T999] team0 (unregistering): Port device team_slave_0 removed [ 620.278207][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.346106][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.838238][ T999] bond0 (unregistering): Released all slaves [ 620.878135][T12637] netlink: 'syz.7.2380': attribute type 29 has an invalid length. [ 620.996970][T12568] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 621.046503][T12568] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 621.088662][T12568] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 621.122259][T12568] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 621.346541][T12568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.384951][T12568] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.400984][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.408175][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.426983][ T5795] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 621.434972][ T5795] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 621.448410][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.455584][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.545739][T12681] netlink: 'syz.8.2395': attribute type 10 has an invalid length. [ 621.558046][T12681] netlink: 55 bytes leftover after parsing attributes in process `syz.8.2395'. [ 621.634426][ T5795] Bluetooth: hci0: command 0x0406 tx timeout [ 621.852974][T12666] delete_channel: no stack [ 622.019444][T12568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.090313][T12568] veth0_vlan: entered promiscuous mode [ 622.117314][T12568] veth1_vlan: entered promiscuous mode [ 622.165858][T12568] veth0_macvtap: entered promiscuous mode [ 622.177173][T12568] veth1_macvtap: entered promiscuous mode [ 622.191734][ T5790] Bluetooth: hci2: command tx timeout [ 622.213472][T12568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.227486][T12568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.240401][T12568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.255634][T12568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.265899][T12568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.276900][T12568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.289446][T12568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.306967][T12568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.317716][T12568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.329283][T12568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.345371][T12568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.357217][T12568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.374974][T12568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.390011][T12568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.453613][T12568] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.465017][T12568] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.474851][T12568] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.483983][T12568] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.551340][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.566842][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.594963][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.603268][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.690039][T12701] delete_channel: no stack [ 622.699333][T12701] delete_channel: no stack [ 622.861910][ T5790] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 622.869538][ T5790] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 623.584587][ T5790] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 623.592303][ T5790] Bluetooth: hci3: Unable to find connection with handle 0x0020 [ 623.870201][T12713] delete_channel: no stack [ 624.130543][ T5790] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 624.138397][ T5790] Bluetooth: hci4: Unable to find connection with handle 0x0020 [ 624.281675][ T5790] Bluetooth: hci2: command tx timeout [ 624.582818][T12741] delete_channel: no stack [ 624.597875][ T5790] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 624.677133][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.683592][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.832539][ T5795] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 624.840194][ T5795] Bluetooth: hci4: Unable to find connection with handle 0x0020 [ 625.077576][T12785] netlink: 'syz.7.2438': attribute type 10 has an invalid length. [ 625.103666][T12785] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 625.125527][T12785] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 625.139143][T12785] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 625.159249][T12785] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 626.527752][T12829] netlink: 'syz.7.2460': attribute type 10 has an invalid length. [ 626.542623][T12829] netlink: 55 bytes leftover after parsing attributes in process `syz.7.2460'. [ 627.376872][T12830] delete_channel: no stack [ 628.498215][T12872] delete_channel: no stack [ 628.664513][T12852] delete_channel: no stack [ 630.171538][ T5795] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 630.179038][ T5795] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 630.246331][T12910] delete_channel: no stack [ 631.700431][T12975] delete_channel: no stack [ 633.107619][T13020] delete_channel: no stack [ 634.954952][T13060] delete_channel: no stack [ 635.359839][ T5795] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 636.745141][T13093] delete_channel: no stack [ 638.631014][T13139] delete_channel: no stack [ 639.930336][T13222] netlink: 'syz.8.2637': attribute type 7 has an invalid length. [ 647.667942][T13399] delete_channel: no stack [ 647.839602][T13413] netlink: 'syz.7.2722': attribute type 1 has an invalid length. [ 647.848790][T13413] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.2722'. [ 648.158744][T13427] netlink: 'syz.1.2726': attribute type 13 has an invalid length. [ 648.181656][T13427] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2726'. [ 648.202112][T13427] : renamed from syz_tun (while UP) [ 648.313039][T13427] : refused to change device tx_queue_len [ 648.318940][T13427] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 652.944394][T13617] netlink: 10 bytes leftover after parsing attributes in process `syz.8.2815'. [ 653.861354][T13655] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2833'. [ 655.605218][T13724] netlink: 'syz.8.2865': attribute type 10 has an invalid length. [ 655.621195][T13724] netlink: 2 bytes leftover after parsing attributes in process `syz.8.2865'. [ 655.636237][T13724] bond0: entered promiscuous mode [ 655.641310][T13724] bond_slave_0: entered promiscuous mode [ 655.661739][T13724] bond_slave_1: entered promiscuous mode [ 655.668654][T13724] bridge0: port 3(bond0) entered blocking state [ 655.684011][T13724] bridge0: port 3(bond0) entered disabled state [ 655.690526][T13724] bond0: entered allmulticast mode [ 655.699444][T13724] bond_slave_0: entered allmulticast mode [ 655.712064][T13724] bond_slave_1: entered allmulticast mode [ 655.747806][T13724] bridge0: port 3(bond0) entered blocking state [ 655.754292][T13724] bridge0: port 3(bond0) entered forwarding state [ 656.391865][T13762] netlink: 'syz.1.2882': attribute type 10 has an invalid length. [ 656.399893][T13762] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2882'. [ 656.409591][T13762] bond0: entered promiscuous mode [ 656.419730][T13762] bond_slave_0: entered promiscuous mode [ 656.430263][T13762] bond_slave_1: entered promiscuous mode [ 656.448280][T13762] bridge0: port 3(bond0) entered blocking state [ 656.466860][T13762] bridge0: port 3(bond0) entered disabled state [ 656.480436][T13762] bond0: entered allmulticast mode [ 656.495998][T13762] bond_slave_0: entered allmulticast mode [ 656.507538][T13762] bond_slave_1: entered allmulticast mode [ 656.533166][T13762] bridge0: port 3(bond0) entered blocking state [ 656.539679][T13762] bridge0: port 3(bond0) entered forwarding state [ 657.420104][T13795] delete_channel: no stack [ 657.523461][T13806] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.2902'. [ 658.818518][T13840] delete_channel: no stack [ 659.257958][T13868] netlink: 'syz.7.2926': attribute type 21 has an invalid length. [ 659.276393][T13868] IPv6: NLM_F_CREATE should be specified when creating new route [ 659.869547][T13884] delete_channel: no stack [ 660.152477][T13906] netlink: 'syz.8.2941': attribute type 13 has an invalid length. [ 660.161767][T13906] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2941'. [ 660.170997][T13906] : renamed from syz_tun (while UP) [ 660.204877][T13906] : refused to change device tx_queue_len [ 660.226047][T13906] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 660.238618][T13911] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2943'. [ 660.852893][T13934] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2950'. [ 660.860340][T13927] delete_channel: no stack [ 661.079799][T13948] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.2955'. [ 661.437111][T13944] delete_channel: no stack [ 661.832778][T13977] netlink: 'syz.1.2967': attribute type 49 has an invalid length. [ 661.841268][T13977] netlink: 'syz.1.2967': attribute type 49 has an invalid length. [ 661.972527][T13984] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2970'. [ 662.503114][T14001] delete_channel: no stack [ 662.638418][T14014] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2982'. [ 662.686426][T14016] netlink: 'syz.7.2983': attribute type 10 has an invalid length. [ 662.698550][T14016] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2983'. [ 662.708292][T14016] bond0: entered promiscuous mode [ 662.720865][T14016] bond_slave_0: entered promiscuous mode [ 662.750394][T14016] bond_slave_1: entered promiscuous mode [ 662.767922][T14016] bridge0: port 4(bond0) entered blocking state [ 662.786843][T14016] bridge0: port 4(bond0) entered disabled state [ 662.800263][T14016] bond0: entered allmulticast mode [ 662.806060][T14016] bond_slave_0: entered allmulticast mode [ 662.812592][T14016] bond_slave_1: entered allmulticast mode [ 662.846965][T14016] bridge0: port 4(bond0) entered blocking state [ 662.854196][T14016] bridge0: port 4(bond0) entered forwarding state [ 663.556234][T14036] delete_channel: no stack [ 664.563382][T14076] delete_channel: no stack [ 664.792702][T14092] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3011'. [ 665.327212][T14116] netlink: 'syz.1.3021': attribute type 10 has an invalid length. [ 665.362160][T14116] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3021'. [ 665.419034][T14120] netlink: 'syz.8.3023': attribute type 13 has an invalid length. [ 665.437311][T14120] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3023'. [ 665.451838][T14120] : refused to change device tx_queue_len [ 665.459733][T14120] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 665.476938][T14108] delete_channel: no stack [ 665.667616][T14131] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3028'. [ 665.954459][T14141] netlink: 'syz.4.3032': attribute type 10 has an invalid length. [ 665.968867][T14141] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3032'. [ 665.978998][T14141] bond0: entered promiscuous mode [ 665.989840][T14141] bond_slave_0: entered promiscuous mode [ 665.998317][T14141] bond_slave_1: entered promiscuous mode [ 666.611264][T14159] delete_channel: no stack [ 666.906348][T14181] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.3046'. [ 667.580540][T14201] delete_channel: no stack [ 667.826510][T14217] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3062'. [ 668.339462][T14232] delete_channel: no stack [ 668.429433][T14242] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.3072'. [ 668.795986][T14261] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3082'. [ 669.296471][T14266] delete_channel: no stack [ 670.204023][T14302] sctp: [Deprecated]: syz.7.3099 (pid 14302) Use of struct sctp_assoc_value in delayed_ack socket option. [ 670.204023][T14302] Use struct sctp_sack_info instead [ 670.246604][T14299] delete_channel: no stack [ 671.187998][T14336] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.3112'. [ 671.200384][T14338] netlink: 'syz.8.3115': attribute type 29 has an invalid length. [ 671.202528][T14336] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.3112'. [ 671.218005][T14338] netlink: 'syz.8.3115': attribute type 29 has an invalid length. [ 671.226290][T14336] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.3112'. [ 671.236925][T14338] netlink: 'syz.8.3115': attribute type 29 has an invalid length. [ 671.251462][T14331] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.3112'. [ 671.303162][T14328] delete_channel: no stack [ 672.599228][T14354] delete_channel: no stack [ 673.864958][T14395] delete_channel: no stack [ 674.435160][T14438] bridge0: port 3(bond0) entered disabled state [ 674.441776][T14438] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.449407][T14438] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.463165][T14438] bridge0: entered allmulticast mode [ 674.523025][T14438] bond0: left allmulticast mode [ 674.536564][T14438] bond_slave_0: left allmulticast mode [ 674.551242][T14438] bond_slave_1: left allmulticast mode [ 674.567251][T14438] bridge0: port 3(bond0) entered disabled state [ 674.592909][T14438] bridge_slave_1: left allmulticast mode [ 674.603181][T14438] bridge_slave_1: left promiscuous mode [ 674.616465][T14438] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.638520][T14438] bridge_slave_0: left allmulticast mode [ 674.649398][T14438] bridge_slave_0: left promiscuous mode [ 674.663670][T14438] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.007791][T14497] delete_channel: no stack [ 676.900936][T14537] syz.4.3207[14537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 676.901062][T14537] syz.4.3207[14537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 676.932436][T14529] delete_channel: no stack [ 678.078895][T14564] netlink: 184 bytes leftover after parsing attributes in process `syz.7.3220'. [ 680.939655][T14638] netlink: 184 bytes leftover after parsing attributes in process `syz.8.3253'. [ 681.614088][T14670] netlink: 'syz.1.3266': attribute type 13 has an invalid length. [ 681.629966][T14670] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3266'. [ 683.307039][T14703] netlink: 'syz.4.3280': attribute type 13 has an invalid length. [ 683.351624][T14703] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3280'. [ 684.410247][T14740] netlink: 'syz.8.3295': attribute type 13 has an invalid length. [ 684.472023][T14740] netlink: 164 bytes leftover after parsing attributes in process `syz.8.3295'. [ 686.131962][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.148606][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.021045][T14807] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3323'. [ 688.245901][T14807] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3323'. [ 688.267452][T14808] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3323'. [ 690.617440][T14836] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3335'. [ 690.650612][T14836] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3335'. [ 690.660442][T14836] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3335'. [ 691.385046][T14857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3345'. [ 691.387039][T14856] netlink: 'syz.4.3344': attribute type 13 has an invalid length. [ 691.451619][T14856] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3344'. [ 691.477544][T14856] syz_tun: refused to change device tx_queue_len [ 691.491842][T14857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3345'. [ 691.516757][T14860] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3345'. [ 692.808389][T14889] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3359'. [ 693.196774][T14889] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3359'. [ 693.529805][T14891] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3359'. [ 693.550526][T14894] netlink: 'syz.4.3360': attribute type 13 has an invalid length. [ 693.561051][T14894] syz_tun: refused to change device tx_queue_len [ 695.211507][T14918] netlink: 'syz.4.3370': attribute type 13 has an invalid length. [ 695.219702][T14918] syz_tun: refused to change device tx_queue_len [ 695.657350][T14926] bond_slave_1: mtu less than device minimum [ 695.779672][T14937] __nla_validate_parse: 6 callbacks suppressed [ 695.779687][T14937] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3379'. [ 696.028909][T14937] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3379'. [ 696.043942][T14939] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3379'. [ 696.337268][T14941] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3379'. [ 696.474050][T14948] netlink: 'syz.1.3382': attribute type 13 has an invalid length. [ 696.501750][T14948] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3382'. [ 696.530094][T14948] : refused to change device tx_queue_len [ 697.356379][T14968] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3391'. [ 697.391587][T14968] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3391'. [ 697.417980][T14972] netlink: 'syz.1.3393': attribute type 13 has an invalid length. [ 697.434895][T14972] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3393'. [ 697.454792][T14972] : refused to change device tx_queue_len [ 697.465266][T14968] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3391'. [ 697.493546][T14973] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3391'. [ 697.933504][T14984] wg2: entered promiscuous mode [ 697.940190][T14984] wg2: entered allmulticast mode [ 701.283662][T15090] __nla_validate_parse: 16 callbacks suppressed [ 701.283679][T15090] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3445'. [ 701.336069][T15090] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3445'. [ 701.357756][T15090] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3445'. [ 701.378796][T15090] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3445'. [ 702.324363][T15106] sit0: entered allmulticast mode [ 702.595378][T15102] sit0: entered promiscuous mode [ 702.796115][T15124] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3459'. [ 705.825126][T15124] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3459'. [ 705.852449][T15132] bond_slave_1: mtu less than device minimum [ 707.202198][T15162] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3472'. [ 707.212477][T15162] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3472'. [ 707.225258][T15162] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3472'. [ 707.241309][T15162] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3472'. [ 707.409535][T15171] sit0: entered promiscuous mode [ 707.570615][T15164] wg2: left promiscuous mode [ 707.592662][T15164] wg2: left allmulticast mode [ 708.132766][T15174] wg2: entered promiscuous mode [ 708.139496][T15174] wg2: entered allmulticast mode [ 710.199969][T15215] wg2: entered promiscuous mode [ 710.209658][T15215] wg2: entered allmulticast mode [ 710.288547][T15232] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3500'. [ 710.303703][T15232] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3500'. [ 710.313692][T15232] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3500'. [ 710.325768][T15232] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3500'. [ 710.969152][T15254] syzkaller0: entered promiscuous mode [ 710.975052][T15254] syzkaller0: entered allmulticast mode [ 716.624534][T15359] bond_slave_1: mtu less than device minimum [ 721.188512][T15411] syzkaller0: entered promiscuous mode [ 721.202907][T15411] syzkaller0: entered allmulticast mode [ 721.346206][T15460] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3581'. [ 722.880897][T15450] sit0: left promiscuous mode [ 722.950263][T15451] sit0: entered promiscuous mode [ 723.003966][T15460] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3581'. [ 728.725647][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 728.735653][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 728.743950][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 728.765805][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 728.778952][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 728.838421][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 730.286187][T15543] chnl_net:caif_netlink_parms(): no params data found [ 730.963179][ T5795] Bluetooth: hci1: command tx timeout [ 731.015660][T15543] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.031237][T15543] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.039583][T15543] bridge_slave_0: entered allmulticast mode [ 731.047946][T15543] bridge_slave_0: entered promiscuous mode [ 731.305182][T15543] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.312582][T15543] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.319785][T15543] bridge_slave_1: entered allmulticast mode [ 731.327528][T15543] bridge_slave_1: entered promiscuous mode [ 731.830929][T15543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.849816][T15543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.488622][T15543] team0: Port device team_slave_0 added [ 732.526766][T15543] team0: Port device team_slave_1 added [ 732.789002][T15543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.800317][T15543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.837006][T15543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.850925][T15543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.861315][T15543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.891124][T15543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.998373][ T5795] Bluetooth: hci1: command tx timeout [ 733.476785][T15543] hsr_slave_0: entered promiscuous mode [ 733.583394][T15543] hsr_slave_1: entered promiscuous mode [ 733.592383][T15543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 733.606761][T15543] Cannot create hsr debugfs directory [ 735.072729][ T5795] Bluetooth: hci1: command tx timeout [ 735.278090][T15543] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.536540][T15543] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.844078][T15543] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.118014][T15543] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.181959][ T5795] Bluetooth: hci1: command tx timeout [ 737.310356][T15543] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 737.358866][T15543] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 737.383533][T15543] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 737.472374][T15543] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 737.929359][T15543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.977230][T15543] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.017228][T10990] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.024454][T10990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.051158][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.058355][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.188174][T15543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.392119][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 739.845833][T15543] veth0_vlan: entered promiscuous mode [ 739.859591][T15543] veth1_vlan: entered promiscuous mode [ 739.905102][T15543] veth0_macvtap: entered promiscuous mode [ 739.927117][T15543] veth1_macvtap: entered promiscuous mode [ 739.963433][T15543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.978921][T15543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.989981][T15543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.005870][T15543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.017680][T15543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.032503][T15543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.046921][T15543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.057799][T15543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.076079][T15543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.108738][T15543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.130476][T15543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.150329][T15543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.162166][T15543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.177640][T15543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.188548][T15543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.205148][T15543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.217077][T15543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.233757][T15543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.268299][T15543] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.280977][T15543] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.297604][T15543] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.306618][T15543] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.407147][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.415761][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.454596][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.462553][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.916675][T15714] syz.8.3669[15714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 742.917421][T15714] syz.8.3669[15714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 743.258472][T15725] ±ÿ: renamed from team_slave_1 (while UP) [ 746.558127][T15784] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 746.575875][T15784] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 746.585105][T15784] veth0_to_bridge: entered allmulticast mode [ 746.594129][T15784] veth0_to_bridge: entered promiscuous mode [ 746.912646][T15798] sit0: entered allmulticast mode [ 747.016926][T15798] sit0: entered promiscuous mode [ 747.946475][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.953075][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.142949][T15823] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3711'. [ 749.159407][T15823] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3711'. [ 749.163167][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 749.179446][T15823] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3711'. [ 749.186416][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 749.196918][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 749.205438][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 749.213571][ T5790] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 749.221306][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 749.229050][T15823] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3711'. [ 750.048969][T15821] chnl_net:caif_netlink_parms(): no params data found [ 750.848024][T15852] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3720'. [ 750.902654][T15852] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3720'. [ 751.184517][T15852] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3720'. [ 751.314131][ T5790] Bluetooth: hci4: command tx timeout [ 751.353962][T15854] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3720'. [ 751.364214][T15821] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.371941][T15821] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.379729][T15821] bridge_slave_0: entered allmulticast mode [ 751.393285][T15821] bridge_slave_0: entered promiscuous mode [ 751.664664][T15821] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.672240][T15821] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.679499][T15821] bridge_slave_1: entered allmulticast mode [ 751.687110][T15821] bridge_slave_1: entered promiscuous mode [ 752.025278][T15821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.039799][T15821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.305686][T15821] team0: Port device team_slave_0 added [ 752.315251][T15821] team0: Port device team_slave_1 added [ 752.610591][T15821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.617796][T15821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.645985][T15821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.663968][T15821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.672257][T15821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.708686][T15821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.402292][ T5790] Bluetooth: hci4: command tx timeout [ 753.713616][T15821] hsr_slave_0: entered promiscuous mode [ 753.721218][T15821] hsr_slave_1: entered promiscuous mode [ 753.739821][T15821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 753.755213][T15821] Cannot create hsr debugfs directory [ 754.009150][T15873] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3728'. [ 754.080139][T15873] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3728'. [ 754.395605][T15821] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 754.419593][T15821] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 754.462029][T15821] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 754.478840][T15821] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 754.623625][T15821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.659859][T15821] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.678868][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.686067][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.742630][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.749915][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.481616][ T5790] Bluetooth: hci4: command tx timeout [ 755.591578][T15902] __nla_validate_parse: 2 callbacks suppressed [ 755.591593][T15902] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3736'. [ 756.350034][T15902] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3736'. [ 756.413929][T15821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.518302][T15910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3744'. [ 756.541553][T15910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3744'. [ 756.568678][T15910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3744'. [ 756.616355][T15910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3744'. [ 757.132115][T15821] veth0_vlan: entered promiscuous mode [ 757.274286][T15821] veth1_vlan: entered promiscuous mode [ 757.414397][ T5790] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 757.449521][T15821] veth0_macvtap: entered promiscuous mode [ 757.500728][T15821] veth1_macvtap: entered promiscuous mode [ 757.552230][ T5790] Bluetooth: hci4: command tx timeout [ 757.580279][T15821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.601265][T15821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.631519][T15821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.651440][T15821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.678194][T15821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.701809][T15821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.738236][T15821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.763713][T15821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.809293][T15821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.838234][T15821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.885630][T15821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.932769][T15821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.946974][T15821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.973798][T15821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.991507][T15821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.014520][T15821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.038628][T15821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.129016][T15821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.200656][T15821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.252357][T15821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.303312][T15821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.347043][ T5790] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 758.362526][T15821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.425277][T15821] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.493832][T15821] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.551533][T15821] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.588603][T15821] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.686622][T15946] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3747'. [ 759.261207][T15946] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3747'. [ 759.282747][T15947] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3747'. [ 759.311798][T15948] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3747'. [ 759.525623][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.553905][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.601613][T15950] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 759.631691][T15950] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 759.638676][T15950] veth0_to_bridge: entered allmulticast mode [ 759.752384][T15950] veth0_to_bridge: entered promiscuous mode [ 759.816622][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.825319][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.182217][ T5790] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 760.921584][T15976] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3759'. [ 760.933638][T15976] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3759'. [ 760.952410][T15976] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3759'. [ 760.980905][T15976] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3759'. [ 761.268323][T15988] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3772'. [ 761.309384][T15988] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3772'. [ 761.362554][T15995] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3772'. [ 761.402301][T15988] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3772'. [ 761.683452][ T5790] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 762.010303][T16003] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3777'. [ 762.360606][T16003] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3777'. [ 762.450743][T16006] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 762.471694][T16006] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 762.479459][T16006] veth0_to_bridge: entered allmulticast mode [ 762.489156][T16006] veth0_to_bridge: entered promiscuous mode [ 763.327055][ T5790] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 764.089162][T16036] netlink: 'syz.1.3781': attribute type 29 has an invalid length. [ 764.163680][T16036] netlink: 'syz.1.3781': attribute type 29 has an invalid length. [ 764.727623][T16041] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 764.790235][T16041] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 764.892841][T16041] veth0_to_bridge: entered allmulticast mode [ 764.952820][T16041] veth0_to_bridge: entered promiscuous mode [ 765.081185][ T5790] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 765.981086][T16066] netlink: 'syz.9.3793': attribute type 29 has an invalid length. [ 766.016229][T16066] netlink: 'syz.9.3793': attribute type 29 has an invalid length. [ 768.269303][T16090] __nla_validate_parse: 10 callbacks suppressed [ 768.269324][T16090] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3801'. [ 768.761170][T16090] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3801'. [ 769.190479][T16102] netlink: 'syz.9.3805': attribute type 29 has an invalid length. [ 769.199429][T16091] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3801'. [ 769.221055][T16102] netlink: 'syz.9.3805': attribute type 29 has an invalid length. [ 770.422059][T16120] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3814'. [ 770.915809][T16120] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3814'. [ 770.964374][T16123] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3814'. [ 771.461467][T16124] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3814'. [ 771.834461][T16133] netlink: 'syz.9.3817': attribute type 29 has an invalid length. [ 772.329455][T16128] veth1_macvtap: left promiscuous mode [ 772.345430][T16133] netlink: 'syz.9.3817': attribute type 29 has an invalid length. [ 772.375780][T16134] netlink: 'syz.9.3817': attribute type 29 has an invalid length. [ 774.689722][T16160] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3826'. [ 774.721264][T16160] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3826'. [ 774.849842][T16160] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3826'. [ 774.865926][T16161] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3826'. [ 775.827464][T16170] netlink: 'syz.8.3830': attribute type 29 has an invalid length. [ 775.862205][T16170] netlink: 'syz.8.3830': attribute type 29 has an invalid length. [ 775.903399][T16170] netlink: 'syz.8.3830': attribute type 29 has an invalid length. [ 776.314418][T16183] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3836'. [ 776.345470][T16183] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3836'. [ 776.633962][T16183] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3836'. [ 776.643527][T16189] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3836'. [ 777.213039][T16208] netlink: 'syz.4.3846': attribute type 29 has an invalid length. [ 777.251983][T16208] netlink: 'syz.4.3846': attribute type 29 has an invalid length. [ 777.278201][T16208] netlink: 'syz.4.3846': attribute type 29 has an invalid length. [ 777.463575][T16215] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3849'. [ 777.490489][T16215] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3849'. [ 777.819391][T16230] [ 777.822549][T16230] ============================= [ 777.827500][T16230] WARNING: suspicious RCU usage [ 777.833289][T16230] syzkaller #0 Not tainted [ 777.837730][T16230] ----------------------------- [ 777.842741][T16230] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 777.851269][T16230] [ 777.851269][T16230] other info that might help us debug this: [ 777.851269][T16230] [ 777.861907][T16230] [ 777.861907][T16230] rcu_scheduler_active = 2, debug_locks = 1 [ 777.870084][T16230] 1 lock held by syz.4.3856/16230: [ 777.875636][T16230] #0: ffffffff8cd30000 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 777.886320][T16230] [ 777.886320][T16230] stack backtrace: [ 777.892279][T16230] CPU: 1 PID: 16230 Comm: syz.4.3856 Not tainted syzkaller #0 [ 777.899869][T16230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 777.909935][T16230] Call Trace: [ 777.913221][T16230] [ 777.916158][T16230] dump_stack_lvl+0x16c/0x230 [ 777.920865][T16230] ? show_regs_print_info+0x20/0x20 [ 777.926075][T16230] ? load_image+0x3b0/0x3b0 [ 777.930599][T16230] lockdep_rcu_suspicious+0x1e1/0x300 [ 777.935985][T16230] get_callchain_entry+0x2a9/0x3c0 [ 777.941115][T16230] get_perf_callchain+0xa3/0x4b0 [ 777.946059][T16230] ? put_callchain_entry+0xb0/0xb0 [ 777.951175][T16230] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 777.956752][T16230] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 777.963442][T16230] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 777.970043][T16230] __bpf_get_stack+0x2d7/0x510 [ 777.974824][T16230] ? stack_map_get_build_id_offset+0x720/0x720 [ 777.980988][T16230] ? __cant_sleep+0x210/0x210 [ 777.985672][T16230] ? bpf_prog_0f38b8827da495ce+0x42/0x46 [ 777.991319][T16230] bpf_get_stack_raw_tp+0x1a9/0x210 [ 777.996528][T16230] bpf_prog_0f38b8827da495ce+0x42/0x46 [ 778.001994][T16230] bpf_prog_run_pin_on_cpu+0xa8/0x140 [ 778.007373][T16230] bpf_prog_test_run_syscall+0x311/0x490 [ 778.013055][T16230] ? sock_gen_cookie+0x60/0x60 [ 778.017840][T16230] ? sock_gen_cookie+0x60/0x60 [ 778.022613][T16230] bpf_prog_test_run+0x321/0x390 [ 778.027559][T16230] __sys_bpf+0x440/0x800 [ 778.031814][T16230] ? bpf_link_show_fdinfo+0x350/0x350 [ 778.037209][T16230] ? lock_chain_count+0x20/0x20 [ 778.042074][T16230] __x64_sys_bpf+0x7c/0x90 [ 778.046497][T16230] do_syscall_64+0x55/0xb0 [ 778.050921][T16230] ? clear_bhb_loop+0x40/0x90 [ 778.055612][T16230] ? clear_bhb_loop+0x40/0x90 [ 778.060297][T16230] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 778.066205][T16230] RIP: 0033:0x7fe52918eec9 [ 778.070624][T16230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.090318][T16230] RSP: 002b:00007fe52a11b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 778.098737][T16230] RAX: ffffffffffffffda RBX: 00007fe5293e5fa0 RCX: 00007fe52918eec9 [ 778.106713][T16230] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 778.114697][T16230] RBP: 00007fe529211f91 R08: 0000000000000000 R09: 0000000000000000 [ 778.122682][T16230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.130657][T16230] R13: 00007fe5293e6038 R14: 00007fe5293e5fa0 R15: 00007ffd59c4e738 [ 778.138646][T16230] [ 778.218356][T16235] netlink: 'syz.9.3858': attribute type 29 has an invalid length. [ 778.238075][T16235] netlink: 'syz.9.3858': attribute type 29 has an invalid length. [ 778.249555][T16235] netlink: 'syz.9.3858': attribute type 29 has an invalid length.